Offensive Security Manager (Penetration Testing | Red Team | Adversary Simulation)

Thales; Maia; Presencial; EUR 70 000 - 90 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Competitive compensation package

Continuous learning environment

Flexible working model

Resumo da oferta

Thales is looking for an experienced Offensive Security Manager in Maia, Portugal, to lead and coordinate penetration testing and red teaming efforts. This role involves collaborating with various security teams to enhance the organization's cyber resilience and deliver impactful security solutions.

The ideal candidate will possess over 7 years of experience in offensive security, demonstrating strong leadership and hands-on skills in threat emulation and security validation. The position offers competitive compensation and a flexible working model.

Qualificações

• 7+ years in offensive security (pentesting/red teaming/adversary emulation) with demonstrable leadership experience.
• Strong hands-on background in web/API, infrastructure & cloud testing.
• English level C1.

Responsabilidades

• Lead and manage offensive security engagements.
• Coordinate during cyber incidents with various teams.
• Mentor and develop offensive security professionals.

Conhecimentos

Offensive security leadership

Penetration testing

Red teaming

Threat emulation

Security validation

Reporting and communication skills

Formação académica

Offensive Security Certifications (OSEP, OSCE3)

SANS Certifications (GXPN, GMON, GCFA)

ISACA CISM, ISC2 CISSP

Descrição da oferta de emprego

Location: Leca do Balio, Portugal

About The Role

We are seeking an experienced Offensive Security Manager to lead and coordinate penetration testing, red teaming, and adversary simulation activities across the organization. You will manage offensive security operations end-to-end while collaborating closely with Incident Response (DFIR), Threat Hunting, SOC, Threat Intelligence, and Security Leadership to strengthen cyber resilience.

What You’ll Do

• Lead and manage offensive security engagements: pentests, red team operations, purple team exercises, and security validation.
• Coordinate with DFIR/SOC/Threat Intel/Security Engineering during cyber incidents to provide adversary-focused technical guidance.
• Define and improve methodologies, playbooks, reporting standards, testing procedures, and risk prioritization aligned with enterprise security objectives.
• Translate technical findings into clear, actionable recommendations for engineering teams and executive-level reporting.
• Mentor and develop offensive security professionals; ensure quality delivery, stakeholder alignment, and continuous improvement.
• Own planning and governance: scope definition, timelines, communication, and delivery assurance for complex assessments.

Required

What you bring

• 7+ years in offensive security (pentesting/red teaming/adversary emulation) with demonstrable leadership experience.
• Strong hands-on background in:
  • Web/API, infrastructure & cloud testing
  • Threat emulation / adversary simulation
  • Security validation and control testing
• Ability to collaborate effectively with IR/DFIR, SOC, Threat Hunting, TI and senior stakeholders.
• Strong reporting & communication skills: able to explain risk, impact, and remediation to technical and non-technical audiences.
• English level C1.

Nice to have

• Experience running purple team programs and security control validation frameworks.
• Experience supporting high-profile investigations and post-incident technical analysis.
• Exposure to cloud offensive security, mobile, OT/IoT, or social engineering (as applicable).

Certifications (preferred)

• Offensive Security: OSEP, OSCE3
• SANS: GXPN, GMON, GCFA
• CREST: CCSAM / CCTIM
• Governance/Leadership: ISACA CISM, ISC2 CISSP
• Microsoft: SC-100
• Altered Security: CRTE / CARTP

What We Offer

• Competitive compensation package (base + variable) and benefits.
• A role with real impact on enterprise security posture and cyber resilience.
• Continuous learning environment (certifications, trainings, knowledge sharing).
• Collaboration with senior security stakeholders and cross-functional teams.
• Flexible working model (depending on local policy) + medium travel.