AI-Driven Offensive Security Specialist (Hybrid)

SysMatch; Porto; Hybrid; EUR 40,000 - 50,000; Full time

Benefits offered by this job

Competitive salary

Hybrid work model

Career development opportunities

Team-building activities

Job summary

Sysmatch, an IT consultancy with 25+ years of experience, invites you to join as Offensive Security Specialist in a hybrid Porto role. You’ll perform pentesting of web apps, APIs, cloud environments, and internal infrastructures, combining manual testing with automated tools.

You’ll create or tailor scripts, leverage AI-assisted tooling, report vulnerabilities with business impact, and collaborate with engineering and security teams.

Qualifications

• Hands-on pentesting experience across web apps, APIs, cloud and internal infrastructures.
• Ability to validate vulnerabilities manually beyond automated scanners.
• Experience integrating AI-assisted tools into security workflows.
• Ability to tailor and develop tools or payloads for assessments.
• Strong problem-solving and independent technical judgment.

Responsibilities

• Conduct pentesting and technical security assessments of web apps, APIs, cloud environments, and infrastructures.
• Go beyond automated scanning with manual testing, vulnerability validation, and attack-path chaining.
• Develop or customize scripts/tools to support assessment scenarios.
• Produce clear, actionable documentation detailing vulnerabilities, impact, and remediation.
• Collaborate with development, infrastructure, and security teams to communicate issues and drive remediation.
• Contribute to improvement of internal methodologies, knowledge sharing, and security capabilities.

Skills

Penetration testing

Security assessments

AI tools usage

Scripting

English proficiency

Problem solving

Education

OSCP

OSWE

CRTO

OSCP / OSWE / OSWA certifications

Tools

Burp Suite

Nmap

Metasploit

Job description

Sysmatch, an IT consultancy with 25+ years of experience, invites you to join as Offensive Security Specialist in a hybrid Porto role. You’ll perform pentesting of web apps, APIs, cloud environments, and internal infrastructures, combining manual testing with automated tools.

You’ll create or tailor scripts, leverage AI-assisted tooling, report vulnerabilities with business impact, and collaborate with engineering and security teams.