Penetration Tester / Red Team Analyst

Inetum; Lisboa; Presencial; EUR 40 000 - 60 000; Tempo integral

Resumo da oferta

Inetum is seeking a Penetration Tester / Red Team Analyst to join its offensive security team in Portugal. You will lead end‑to‑end pentests, simulate realistic attack scenarios, and identify vulnerabilities across networks, systems, and applications.

You will use frameworks like OWASP and MITRE ATT&CK and produce clear remediation guidance for clients and internal teams. Minimum 2 years in pentesting or red team work is required.

Qualificações

• 2+ years of experience in Pen Testing / Ethical Hacking / Red Team.
• Ability to independently execute pentests including recon, vulnerability scanning, exploitation & reporting.
• Solid knowledge of networks, operating systems (Windows/Linux), web apps, and protocols.
• Experience with pentesting tools (e.g., Metasploit, Burp Suite, Nmap).
• Mastery of offensive methodologies and frameworks (OWASP, MITRE ATT&CK).
• Ability to interpret and explain vulnerabilities (CVEs, CWE, CVSS).
• Clear and effective communication with technical teams and clients.
• Autonomy and ability to prioritise tasks without constant supervision.
• Collaborative spirit to work with multidisciplinary security teams.
• Proactivity and willingness to keep up with new threats.

Responsabilidades

• Execute end‑to‑end penetration tests across recon, exploitation, post‑exploitation and reporting.
• Participate in Red Team exercises and realistic attack simulations.
• Identify, exploit, and validate vulnerabilities across systems, apps, infra, and networks.
• Use offensive security tools and frameworks (OWASP, MITRE ATT&CK).
• Produce clear technical and executive reports with remediation recommendations.
• Communicate findings with internal teams (SOC, Blue Team) and clients.
• Contribute to evolution of methodologies, techniques, and tools used by the Red Team.

Conhecimentos

Penetration testing

Red Team

Vulnerability assessment

OWASP

MITRE ATT&CK

Network security

Reporting & communication

Exploit workflows

Ferramentas

Metasploit

Burp Suite

Nmap

OWASP ZAP

Descrição da oferta de emprego

Company Description

Inetum is a European leader in digital services. Inetum’s team of 28,000 consultants and specialists strive everyday to make a digital impact for businesses, public sector entities and society. Inetum’s solutions aim at contributing to its clients’ performance and innovation as well as the common good.

Present in 19 countries with a dense network of sites, Inetum partners with major software publishers to meet the challenges of digital transformation with proximity and flexibility.

Driven by its ambition for growth and scale, Inetum generated sales of 2.5 billion euros in 2023.

Job Description

We are looking for a Penetration Tester / Red Team Analyst to join our offensive security team, with direct responsibility for executing penetration tests, conducting attack simulations, and supporting Red Team activities. The professional will be responsible for identifying vulnerabilities, exploiting security weaknesses, and contributing to the continuous strengthening of the organization’s defensive posture, ensuring effective communication with internal teams and clients.

Key Responsibilities

• Execute end‑to‑end penetration tests, covering reconnaissance, exploitation, post‑exploitation, and reporting.
• Participate in Red Team exercises, contributing to realistic attack simulations.
• Identify, exploit, and validate vulnerabilities across systems, applications, infrastructures, and networks.
• Use offensive security tools and analysis frameworks (e.g., OWASP, MITRE ATT&CK).
• Produce clear technical and executive reports with remediation recommendations.
• Interact with internal teams (SOC, Blue Team, Infrastructure, Development) and with clients to communicate findings and clarifications.
• Contribute to the evolution of the methodologies, techniques, and tools used by the Red Team.

Qualifications

• Minimum 2 years of experience in Pen Testing / Ethical Hacking / Red Team.
• Proven ability to independently execute pentests, including: Reconnaissance, Vulnerability Scanning, Exploitation & Post‑Exploitation e Reporting.
• Solid knowledge of networks, operating systems (Windows/Linux), web applications, and protocols.
• Experience with pentesting tools (e.g., Metasploit, Burp Suite, Nmap, etc.).
• Mastery of offensive methodologies and frameworks (e.g., OWASP, MITRE ATT&CK).
• Ability to interpret and explain vulnerabilities (CVEs, CWE, CVSS).
• Clear and effective communication with both technical teams and clients.
• Autonomy and ability to prioritize tasks without constant supervision.
• Critical thinking, attention to detail, and an analytical mindset.
• Collaborative spirit to work with multidisciplinary teams (Red/Blue/SOC).
• Proactivity, curiosity, and willingness to keep up with new techniques and emerging threats.