Penetration Testing & Security Engineer

Jobbex IT; Porto; On-site; EUR 55,000 - 85,000; Full time

Job summary

Jobbex Portugal is seeking an Offensive Security Specialist to join our client-focused team. You will perform penetration testing and security assessments across web applications, APIs, cloud and network infrastructure, using manual techniques and AI-assisted tools to drive research, payload development, and reporting.

Responsibilities include developing custom scripts and offensive security tools, producing actionable remediation recommendations, and collaborating with development,

Qualifications

• Hands-on experience in penetration testing and offensive security.
• Knowledge of common security assessment tools and practices.
• Experience with automation scripting and tool customization.

Responsibilities

• Perform penetration testing and security assessments across web apps, APIs, cloud, network infra and identity.services.
• Conduct manual testing, vulnerability validation and attack-path analysis beyond automated tools.
• Use AI-assisted tools to support security research, scripting, payload development and reporting.
• Develop and customise scripts and offensive security tools.
• Produce clear reports covering vulnerabilities, business impact and remediation recommendations.
• Collaborate with development, infrastructure and security teams to support remediation and security improvements.

Skills

Penetration testing

Offensive security

Burp Suite

Nmap

Metasploit

OWASP Top 10

WSTG

API security

Active Directory

Entra ID

Scripting

Automation

AI tools

Problem solving

Autonomy

Critical thinking

Tools

Burp Suite

Nmap

Metasploit

Job description

Jobbex Portugal is seeking an Offensive Security Specialist to join our client-focused team. You will perform penetration testing and security assessments across web applications, APIs, cloud and network infrastructure, using manual techniques and AI-assisted tools to drive research, payload development, and reporting.

Responsibilities include developing custom scripts and offensive security tools, producing actionable remediation recommendations, and collaborating with development,