Penetration Tester

Planck Technologies; Lisboa; Presencial; EUR 40 000 - 60 000; Tempo integral

Resumo da oferta

A technology company in Lisbon is seeking a Mid-Senior level Penetration Tester to conduct comprehensive security assessments and prepare detailed reports. Ideal candidates should have at least 3 years of experience in web application and infrastructure penetration testing, along with proficiency in relevant tools and scripting languages. This full-time position involves collaborating with stakeholders and staying updated on cybersecurity trends.

Qualificações

• Minimum 3 years of hands-on experience in web application and IT infrastructure penetration testing.
• Strong command of penetration testing methodologies and tools.
• Proficiency in scripting in at least one language.

Responsabilidades

• Conduct web, infrastructure, and application-level penetration testing.
• Prepare structured technical reports in fluent English.
• Engage in responsible disclosure processes for found vulnerabilities.

Conhecimentos

Web application penetration testing

IT infrastructure penetration testing

Network security architecture

Vulnerability assessments

Scripting in Python

Strong command of penetration testing tools

Formação académica

Bachelor's degree in a technical field

Ferramentas

OWASP

PTES

MITRE ATT&CK

Descrição da oferta de emprego

Planck Technologies is a company specialized in Software Development, dedicated to shaping futures and creating value through innovative IT solutions. By expanding teams and offering a comprehensive range of services—from Software Development and Infrastructure Management to Cybersecurity—we empower clients with all the expertise they need in one place. Inspired by the principles of quantum physics, we push beyond traditional boundaries to deliver customized solutions that redefine the IT landscape and drive shared success.

About the job

What are we looking for?

Job Description:

• Conduct web, infrastructure, and application-level penetration testing, including assessments of COTS and custom government software.
• Participate in project kickoff meetings to define testing requirements with stakeholders and technical contacts.
• Execute assessments using established methodologies, procedures, and workflows.
• Prepare structured technical reports in fluent English, using predefined templates and reporting tools.
• Present findings and recommendations at both executive and technical levels, including high-level leadership briefings.
• Engage in responsible disclosure processes for newly discovered vulnerabilities in COTS products.
• Perform security design reviews to ensure alignment with organizational policies and standards.
• Collaborate closely with internal and external stakeholders, under the guidance of the Technical Lead.
• Stay updated on emerging technologies and trends in cybersecurity and offensive security.
• Support related efforts such as red teaming, software development assurance, cyber exercises, and incident response.
• Deliver work in weekly sprint cycles.
• Undertake other related duties as required.

Requirements:

Education & Experience

• Bachelor’s degree in a technical field from a recognized institution, with substantial IT content and at least 3 years of related experience.
• Alternatively, at least 10 years of relevant and progressive IT/cybersecurity experience may be accepted in lieu of a formal degree.

Technical Expertise

• Minimum 3 years of hands-on experience in: Web application penetration testing, IT infrastructure penetration testing, network security architecture, vulnerability assessments across OS software, protocols, and networks, research and evaluation of security tools and technologies, proficiency in system/network administration (UNIX and Windows environments).
• Strong command of penetration testing tools and methodologies (e.g., OWASP, PTES, MITRE ATT&CK).
• Scripting ability in at least one of the following: Python, Go, PowerShell, Bash, Ksh, or Csh.
• Deep technical understanding of: System and network security, authentication and encryption protocols, application security, malware behavior and countermeasures, hability to assess risks and develop mitigation strategies.
• Demonstrated capability to brief both technical and non-technical audiences.
• Proven skills in drafting structured technical reports, including executive summaries and remediation recommendations.

We're waiting for you!

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Full-time

Job function

• Job function

  Consulting

• Industries

  IT Services and IT Consulting

Referrals increase your chances of interviewing at Planck Technologies by 2x

Get notified about new Penetration Tester jobs in Lisbon, Portugal.

Associate / Pentester (Red Team) (m/f/d) - Cybersecurity Audit

Junior/Middle Application Security Engineer

Network and Security (Fortinet) Engineer

Cybersecurity Engineer - PDMFC - Lisbon, Portugal

Mid Cybersecurity Enginer( Security Testing And Regulation) (M/F) - Lisbon

Devoteam Cyber Trust | Vulnerability Analyst | Banking Sector

Devoteam Cyber Trust | Vulnerability Analyst | Banking Sector

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.