Offensive Security Specialist — AI-Driven Pen Tests

Claranet Portugal; Porto; Híbrido; EUR 65 000 - 95 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Professional development resources

Certification paths resources

Regular teambuilding programs

Friendly workplace

Resumo da oferta

Claranet Portugal is seeking an Offensive Security Specialist to join our Porto-based hybrid team. You will perform penetration tests across web apps, APIs, cloud environments, and internal/external infrastructure, including AD/Entra ID.

Responsibilities include manual validation beyond automated scans, creating custom tooling, and delivering clear remediation guidance. English communication is essential for collaboration with stakeholders.

Qualificações

• Solid practical experience in penetration testing and security assessments.
• Hands-on proficiency with offensive security tooling (Burp Suite, Nmap, Metasploit).
• Strong knowledge of OWASP Top 10, WSTG, API security, and AD/Entra ID environments.
• AI fluency: using AI tools as workflow accelerators with sound judgment.
• Scripting or programming ability to adapt tools and automate tasks.

Responsabilidades

• Perform penetration testing and security assessments across web apps, APIs, cloud, and infrastructure.
• Go beyond automated scanning with manual validation and attack-path chaining.
• Integrate AI-assisted tools into offensive workflows to accelerate research and reporting.
• Develop or adapt custom scripts and tooling for assessment scenarios.
• Produce clear, actionable documentation detailing findings and remediation.

Conhecimentos

Penetration testing

Burp Suite

Nmap

Metasploit

Web app security

API security

AD/Entra ID

AI tooling

Scripting

English communication

Formação académica

Security certifications (OSCP/OSWE/OSWA/CRTO/eWPT)

Ferramentas

AI tools integration

Descrição da oferta de emprego

Claranet Portugal is seeking an Offensive Security Specialist to join our Porto-based hybrid team. You will perform penetration tests across web apps, APIs, cloud environments, and internal/external infrastructure, including AD/Entra ID.

Responsibilities include manual validation beyond automated scans, creating custom tooling, and delivering clear remediation guidance. English communication is essential for collaboration with stakeholders.