Offensive Security Specialist M/F – Hybrid (Porto)

SysMatch; Porto; Hybrid; EUR 40,000 - 50,000; Full time

Benefits offered by this job

Competitive salary

Hybrid work model

Career development opportunities

Team-building activities

Job summary

Sysmatch, an IT consultancy with 25+ years of experience, invites you to join as Offensive Security Specialist in a hybrid Porto role. You’ll perform pentesting of web apps, APIs, cloud environments, and internal infrastructures, combining manual testing with automated tools.

You’ll create or tailor scripts, leverage AI-assisted tooling, report vulnerabilities with business impact, and collaborate with engineering and security teams.

Qualifications

• Hands-on pentesting experience across web apps, APIs, cloud and internal infrastructures.
• Ability to validate vulnerabilities manually beyond automated scanners.
• Experience integrating AI-assisted tools into security workflows.
• Ability to tailor and develop tools or payloads for assessments.
• Strong problem-solving and independent technical judgment.

Responsibilities

• Conduct pentesting and technical security assessments of web apps, APIs, cloud environments, and infrastructures.
• Go beyond automated scanning with manual testing, vulnerability validation, and attack-path chaining.
• Develop or customize scripts/tools to support assessment scenarios.
• Produce clear, actionable documentation detailing vulnerabilities, impact, and remediation.
• Collaborate with development, infrastructure, and security teams to communicate issues and drive remediation.
• Contribute to improvement of internal methodologies, knowledge sharing, and security capabilities.

Skills

Penetration testing

Security assessments

AI tools usage

Scripting

English proficiency

Problem solving

Education

OSCP

OSWE

CRTO

OSCP / OSWE / OSWA certifications

Tools

Burp Suite

Nmap

Metasploit

Job description

Who we are:

With over 25 years of experience, Sysmatch is a well-established name in IT Consultancy and Outsourcing, involved in both national and international projects that promote excellence in technology and services. Our secret? A team that blends talent, creativity, and experience to deliver robust, scalable, and tailored solutions. We’re not just tech experts - we’re partners who support our clients’ transformation, anticipate trends, and drive their evolution. Flexibility, innovation, and a forward-thinking mindset are part of our DNA.

We’re hiring:

Offensive Security Specialist M/F - Hybrid (3x Porto)

Your responsibilities include:

• Conduct penetration testing (pentesting) and technical security assessments of web applications, APIs, cloud environments, and internal/external infrastructures (including Active Directory / Entra ID).
• Go beyond the use of automated scanning tools by performing manual testing, vulnerability validation, and attack-path chaining.
• Integrate AI-assisted tools (LLMs, coding assistants, and agent-based tools) into offensive security processes, accelerating research, script development, payload creation, and reporting activities.
• Develop or customize scripts and offensive security tools to support specific assessment scenarios.
• Produce clear, technically accurate, and actionable documentation detailing identified vulnerabilities, business impact, and remediation recommendations.
• Collaborate closely with development, infrastructure, and security teams to communicate technical security issues and support remediation efforts.
• Contribute to the continuous improvement of internal methodologies, knowledge sharing, research, and offensive security capabilities.

Requirements:

• Strong hands-on experience in penetration testing and technical security assessments.
• Practical knowledge of offensive security tools such as Burp Suite, Nmap, Metasploit, or equivalent frameworks.
• In-depth understanding of web application security (OWASP Top 10, WSTG), API security, network infrastructure security, and Active Directory / Entra ID environments.
• Demonstrated proficiency in the use of AI tools, leveraging them as productivity accelerators while maintaining critical thinking, independent technical judgment, and proper validation of results.
• Scripting and/or programming skills to customize tools, automate repetitive tasks, and develop tailored payloads.
• High degree of autonomy, proactivity, critical thinking, and problem-solving ability in complex security assessment scenarios.
• Fluent English proficiency, with the ability to communicate technical concepts effectively to both technical and non-technical stakeholders.

Nice to Have:

• Relevant offensive security certifications such as OSCP, OSWA, OSWE, CRTO, eWPT, or equivalent.
• Active participation in CTFs (Capture The Flag), Bug - Bounty programs, cybersecurity research, or the development of open-source offensive security tools.

What we offer:

• A personalized onboarding experience that welcomes and supports you throughout your journey.
• Regular and constructive feedback to boost your growth and development.
• A dynamic project with a prestigious client.
• A competitive salary package, aligned with your experience and skills.
• Career development opportunities through ambitious and innovative tech projects.
• A collaborative culture that values creativity and individual progress.
• Access to exclusive discounts in a wide network of partners, including health, wellness, travel, culture, gastronomy, leisure and much more.
• Team-building events and initiatives that create memorable shared experiences.

Salary Range:

40.000€ - 50.000€ Gross Annual + Benefits