Penetration Tester

Dellent; Porto; Híbrido; EUR 32 000 - 52 000; Tempo integral

Resumo da oferta

Dellent is seeking a Pentester to join our Porto hybrid team. You will perform penetration tests across web apps, APIs, cloud, and identity environments for European stock market projects.

The role requires at least 2 years of hands-on testing, with strong knowledge of OWASP Top 10, WSTG, Linux/Windows, AD/Entra ID, and scripting. You will contribute to tooling and provide actionable remediation guidance.

Qualificações

• Minimum of 2 years of professional experience as a Pentester/Offensive Security Specialist.
• Experience in Web Application Security and API Security with vulnerability assessment.
• Solid knowledge of authentication/authorization testing, HTTP, network and infrastructure security.
• Experience with Linux and Windows environments; AD/Entra ID; cloud security concepts.

Responsabilidades

• Perform penetration tests and security assessments across web apps, APIs, infrastructure, cloud, and identity environments.
• Identify, validate, and exploit vulnerabilities with manual investigation and attack-path analysis.
• Conduct reconnaissance and authentication/authorization testing, and develop scripts/tools as needed.
• Produce clear security findings with evidence, impact, remediation recommendations, and support validation.
• Contribute to improving offensive security methodologies, tooling, and knowledge sharing, including AI awareness.

Conhecimentos

Penetration testing

Web application security

API security

OWASP Top 10

OWASP WSTG

Linux

Windows

Active Directory/Entra ID

Cloud security

Scripting/Programming

Analytical thinking

Descrição da oferta de emprego

Dellent is a consulting company focused in System Information and Telecommunications. Our goal is to help our candidates and consultants to take a step forward in their careers through projects that meet their needs and expectations.

In this project you’ll contact with the European stock market area. Despite its development center being located in Porto and all administrative support in Lisbon, you will be part of a multicultural team that is spread across several European cities.

We are seeking a Pentester to join our team in Porto (hybrid).

Requirements:

• Minimum of 2 years of professional experience as a Pentester / Offensive Security Specialist, performing penetration tests and technical security assessments.
• Proven practical experience in Web Application Security, API Security, and vulnerability assessment, with strong knowledge of the OWASP Top 10 and OWASP Web Security Testing Guide.
• Solid knowledge of authentication and authorization testing, HTTP, network and infrastructure security, and security assessment methodologies.
• Experience working with Linux and Windows environments, Active Directory / Entra ID, and cloud security concepts and technologies.
• Proficiency in scripting or programming and experience with vulnerability research, manual exploitation, attack-path analysis, and the development or adaptation of offensive security tooling. Strong analytical, communication, and critical-thinking skills are required.

Responsibilities:

• Perform penetration tests and technical security assessments across web applications, APIs, infrastructure, cloud, and identity environments.
• Identify, validate, and exploit vulnerabilities through manual investigation, attack-path analysis, and vulnerability chaining, assessing their realistic technical and business impact.
• Conduct reconnaissance, authentication and authorization testing, source code or configuration analysis, and develop or adapt scripts and offensive security tools when required.
• Produce clear and technically accurate security findings, including evidence, impact, exploitability, and actionable remediation recommendations, and support remediation validation activities.
• Contribute to the continuous improvement of offensive security methodologies, tooling, automation, vulnerability research, and knowledge sharing, leveraging AI and modern offensive security techniques while independently validating all AI-generated outputs.