Penetration Tester & Offensive Security Consultant (Hybrid)

Match Profiler; Lisboa; Híbrido; EUR 50 000 - 80 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Onboarding & support

Continuous feedback

Collaborative team

Health & lifestyle discounts

Team events

Resumo da oferta

Match Profiler is seeking a Pentester / Offensive Security Consultant to join our client’s Security by Design team in Lisbon, on an outsourcing basis. You will evaluate security requirements, assess compliance, and analyze risks for products and services following cybersecurity standards.

The ideal candidate has 2–6 years in offensive security, with hands-on testing across Web, Mobile, and APIs, plus strong reporting and communication skills to stakeholders.

Qualificações

• 2–6 years of professional offensive security experience.
• Experience conducting pentests on Web apps, Mobile apps, and APIs (REST/GraphQL).
• Ability to produce clear technical pentest reports with PoCs and remediation recommendations.

Responsabilidades

• Conduct penetration testing across Web, Mobile, and API surfaces.
• Identify, exploit, and validate security vulnerabilities (OWASP Top 10, API Top 10).
• Analyze authentication, authorization, and session management controls.
• Assess integrations and security of systems/services.
• Deliver clear pentest reports with impact, PoC, and remediation steps.
• Communicate findings to development teams and stakeholders.
• Support retests to verify fixes and improvements.

Conhecimentos

Penetration testing

Web/mobile/API testing

OWASP knowledge

Reports & remediation

Communication skills

Autonomy

Formação académica

Bachelor’s or Master’s in CS/EE/InfoSec

Practical experience in Offensive Security

Ferramentas

Burp Suite

OWASP ZAP

Postman

MobSF

Fuzzing tools

Descrição da oferta de emprego

Match Profiler is seeking a Pentester / Offensive Security Consultant to join our client’s Security by Design team in Lisbon, on an outsourcing basis. You will evaluate security requirements, assess compliance, and analyze risks for products and services following cybersecurity standards.

The ideal candidate has 2–6 years in offensive security, with hands-on testing across Web, Mobile, and APIs, plus strong reporting and communication skills to stakeholders.