Offensive Security Specialist

Claranet limited; Porto; Hybride; EUR 55 000 - 75 000; Plein temps

Avantages offerts par ce poste

Certification resources

Team building programs

Friendly workplace

Résumé du poste

Claranet Limited in Porto (hybrid) is seeking an Offensive Security Specialist to join our internal team. You will perform penetration testing across web apps, APIs, cloud environments, and internal infrastructure, including Entra ID, and report findings with remediation guidance.

You will go beyond automated scanning, integrate AI-assisted tools, develop custom scripts, and collaborate with development and security teams to mature our offensive capabilities.

Qualifications

• Solid practical experience in penetration testing and technical security assessments.
• Hands-on proficiency with offensive security tooling such as Burp Suite, Nmap, Metasploit.
• Strong working knowledge of web application security, API security, network infrastructure, and Active Directory / Entra ID environments.
• Demonstrated AI fluency: ability to use AI tools as workflow accelerators while maintaining independent technical judgment and validation.
• Scripting or programming capabilities to automate tasks and develop custom payloads.
• High autonomy, proactivity, critical thinking, and problem-solving skills in complex assessment scenarios.
• Proficiency in English to communicate technical concepts effectively with technical and non-technical stakeholders.

Responsabilités

• Perform penetration testing and security assessments across web applications, APIs, cloud environments, and internal/external infrastructure (including Active Directory / Entra ID).
• Go beyond automated scanning through manual investigation, vulnerability validation, and attack-path chaining.
• Integrate AI-assisted tools (LLMs, coding assistants, agent-based tooling) into offensive workflows to accelerate research, scripting, payload development, and reporting.
• Develop or adapt custom scripts and offensive security tooling to support specific assessment scenarios.
• Produce clear, technically sound, and actionable documentation detailing security findings, business impact, and remediation guidance.
• Collaborate closely with development, infrastructure, and security teams to communicate technical security issues and support remediation efforts.
• Contribute to the continuous improvement of internal methodologies, knowledge sharing, research, and offensive capabilities.

Connaissances

Penetration testing

Offensive security tooling

Web application security

API security

Active Directory / Entra ID

Scripting / automation

AI fluency

English proficiency

Outils

Burp Suite

Nmap

Metasploit

Description du poste

We're fast learners, hard workers, natural collaborators... and we Make Modern Happen !

Our ambition is to unlock the potential of our digital world so that organisations everywhere can innovate and thrive securely.

We aim to achieve this goal by bringing together the world’s most talented people and the most powerful technologies, combining them to address our customers' challenges and to build something stronger together.

Right now, we are looking for aOffensive Security Specialistto integrate our internal team, based in Porto.

Yourresponsibilities include:

• Perform penetration testing and technical security assessments across web applications, APIs, cloud environments, and internal/external infrastructure (including Active Directory / Entra ID).
  
• Go beyond automated scanning through manual investigation, vulnerability validation, and attack-path chaining.
  
• Integrate AI-assisted tools (LLMs, coding assistants, agent-based tooling) into offensive workflows to accelerate research, scripting, payload development, and reporting.
  
• Develop or adapt custom scripts and offensive security tooling to support specific assessment scenarios.
  
• Produce clear, technically sound, and actionable documentation detailing security findings, business impact, and remediation guidance.
  
• Collaborate closely with development, infrastructure, and security teams to communicate technical security issues and support remediation efforts.
  
• Contribute to the continuous improvement of internal methodologies, knowledge sharing, research, and offensive capabilities.
  

You musthave:

• Solid practical experience in penetration testing and technical security assessments.
  
• Hands-on proficiency with offensive security tooling (such as Burp Suite, Nmap, Metasploit, or equivalent frameworks).
  
• Strong working knowledge of web application security (OWASP Top 10, WSTG), API security, network infrastructure, and Active Directory / Entra ID environments.
  
• Demonstrated AI fluency: ability to use AI tools as workflow accelerators while maintaining independent technical judgment and critical validation.
  
• Scripting or programming capabilities to adapt tools, automate repetitive tasks, and develop custom payloads.
  
• High autonomy, proactivity, critical thinking, and problem-solving skills in complex assessment scenarios.
  
• Proficiency in English to communicate technical concepts effectively with technical and non-technical stakeholders.
  

Wevalue:

• Relevant offensive security certifications such as OSCP, OSWA, OSWE, CRTO, eWPT, or equivalent.
  
• Active engagement in CTFs, Bug Bounty programs, security research, or open-source offensive tool development.
  
• Strong collaborative mindset with an interest in team-based investigations, pair testing, and knowledge sharing.
  

We offer:

• Certification paths resources;
  
• Regular teambuilding programs;
  
• Friendly workplace.
  

Workplace: Porto - Hybrid ( 3 days at office)