Pentester/ Red Team Specialist

We're fast
learners, hard workers, natural collaborators... and we Make Modern Happen!

Our
ambition is to unlock the potential of our digital world so that organisations
everywhere can innovate and thrive securely.

We aim to
achieve this goal by bringing together the world’s most talented people and the
most powerful technologies, combining them to address our customers' challenges
and to build something stronger together.

If you
share our vision, join us!

Right now,
we are looking for a Pentester/ Red Team Specialist to
integrate our internal team, based in Lisbon/Porto.

Your
responsibilities include:

• Conducting
  penetration tests on internal and external infrastructures;
  
• Performing web application testing across different types of applications and
  environments;
  
• Identifying, validating, and safely exploiting vulnerabilities;
  
• Technical analysis of attack surfaces and identification of potential
  compromise vectors;
  
• Producing clear, structured, and actionable technical reports, including
  evidence and mitigation recommendations;
  
• Supporting risk prioritization based on impact and exploitability;
  
• Using recognized methodologies for planning, executing, and reporting offensive
  security exercises;
  
• Collaborating with the broader technical team to continuously improve
  approaches, playbooks, and best practices;
  
• Participating, when applicable, in Red Team–aligned initiatives, detection
  validation, and adversarial technique simulation;
  
• Debriefing: Technical discussion of results with clients’ IT and security teams.
  

 You must
have:

• 2 to 4
  years of experience in pentesting, offensive security, red teaming, or equivalent roles,
  or practical experience that clearly demonstrates technical maturity and
  execution capability.
• Proven experience in:
  Penetration testing of internal and external infrastructures;
  Security testing of web applications;
  Validation and controlled exploitation of vulnerabilities;
  Production of technical reports;
  
• Practical knowledge of methodologies, standards, or frameworks such as:
  OWASP;
  PTES;
  NIST;
  MITRE ATT&CK;
• Familiarity with pentesting, enumeration, exploitation, and technical
  validation tools;
  
• Ability to critically interpret results, distinguish false positives,
  and justify technical conclusions;
  
• Experience with Windows, Linux, and Networking environments, with a
  solid understanding of services, authentication, segmentation, and asset
  exposure.
  

We value:

• Active
  Directory (on‑prem / cloud);
  
• APIs;
  
• Mobile pentesting;
  
• Wi‑Fi assessment;
  
• Scripting skills for automation, exploitation support, or development
  of internal tools;
  
• Exposure to exercises oriented toward adversary simulation or
  detection control validation;
  
• Relevant offensive security certifications;
  
• Experience in technical communication with clients or internal teams;
  
• Ability to contextualize vulnerabilities within the real business
  environment and the evaluated architecture.
  

 We offer:

• Salary
  package according to the function to be performed and with demonstrated
  experience;
  
• Integration
  into a young, solid, ambitious and motivated team;
  
• Participation
  in technologically challenging environments;
  
• Training.
  

Workplace: Lisbon/Porto - Hybrid