Pentester/ Red Team Specialist

We're fast learners, hard workers, natural collaborators... and we Make Modern Happen!

Our ambition is to unlock the potential of our digital world so that organisations everywhere can innovate and thrive securely.

We aim to achieve this goal by bringing together the world’s most talented people and the most powerful technologies, combining them to address our customers' challenges and to build something stronger together.

If you share our vision, join us!

Right now, we are looking for a Pentester/ Red Team Specialist to integrate our internal team, based in Lisbon/Porto.

Your responsibilities include:

• Conducting penetration tests on internal and external infrastructures;
  
• Performing web application testing across different types of applications and environments;
  
• Identifying, validating, and safely exploiting vulnerabilities;
  
• Technical analysis of attack surfaces and identification of potential compromise vectors;
  
• Producing clear, structured, and actionable technical reports, including evidence and mitigation recommendations;
  
• Supporting risk prioritization based on impact and exploitability;
  
• Using recognized methodologies for planning, executing, and reporting offensive security exercises;
  
• Collaborating with the broader technical team to continuously improve approaches, playbooks, and best practices;
  
• Participating, when applicable, in Red Team–aligned initiatives, detection validation, and adversarial technique simulation;
  
• Debriefing: Technical discussion of results with clients’ IT and security teams.
  

 You must have:

• 2 to 4 years of experience in pentesting, offensive security, red teaming, or equivalent roles,
  or practical experience that clearly demonstrates technical maturity and execution capability.
• Proven experience in:
  Penetration testing of internal and external infrastructures;
  Security testing of web applications;
  Validation and controlled exploitation of vulnerabilities;
  Production of technical reports;
  
• Practical knowledge of methodologies, standards, or frameworks such as:
  OWASP;
  PTES;
  NIST;
  MITRE ATT&CK;
• Familiarity with pentesting, enumeration, exploitation, and technical validation tools;
  
• Ability to critically interpret results, distinguish false positives, and justify technical conclusions;
  
• Experience with Windows, Linux, and Networking environments, with a solid understanding of services, authentication, segmentation, and asset exposure.
  

We value:

• Active Directory (on‑prem / cloud);
  
• APIs;
  
• Mobile pentesting;
  
• Wi‑Fi assessment;
  
• Scripting skills for automation, exploitation support, or development of internal tools;
  
• Exposure to exercises oriented toward adversary simulation or detection control validation;
  
• Relevant offensive security certifications;
  
• Experience in technical communication with clients or internal teams;
  
• Ability to contextualize vulnerabilities within the real business environment and the evaluated architecture.
  

 We offer:

• Salary package according to the function to be performed and with demonstrated experience;
  
• Integration into a young, solid, ambitious and motivated team;
  
• Participation in technologically challenging environments;
  
• Training.
  

Workplace: Lisbon/Porto - Hybrid