Pentester

Match Profiler; Lisboa; Híbrido; EUR 50 000 - 80 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Onboarding & support

Continuous feedback

Collaborative team

Health & lifestyle discounts

Team events

Resumo da oferta

Match Profiler is seeking a Pentester / Offensive Security Consultant to join our client’s Security by Design team in Lisbon, on an outsourcing basis. You will evaluate security requirements, assess compliance, and analyze risks for products and services following cybersecurity standards.

The ideal candidate has 2–6 years in offensive security, with hands-on testing across Web, Mobile, and APIs, plus strong reporting and communication skills to stakeholders.

Qualificações

• 2–6 years of professional offensive security experience.
• Experience conducting pentests on Web apps, Mobile apps, and APIs (REST/GraphQL).
• Ability to produce clear technical pentest reports with PoCs and remediation recommendations.

Responsabilidades

• Conduct penetration testing across Web, Mobile, and API surfaces.
• Identify, exploit, and validate security vulnerabilities (OWASP Top 10, API Top 10).
• Analyze authentication, authorization, and session management controls.
• Assess integrations and security of systems/services.
• Deliver clear pentest reports with impact, PoC, and remediation steps.
• Communicate findings to development teams and stakeholders.
• Support retests to verify fixes and improvements.

Conhecimentos

Penetration testing

Web/mobile/API testing

OWASP knowledge

Reports & remediation

Communication skills

Autonomy

Formação académica

Bachelor’s or Master’s in CS/EE/InfoSec

Practical experience in Offensive Security

Ferramentas

Burp Suite

OWASP ZAP

Postman

MobSF

Fuzzing tools

Descrição da oferta de emprego

Match Profiler is an Information Systems consultancy with over 25 years of experience in the national and international technology market.

We believe in challenging and motivating projects, driven by multidisciplinary and agile teams - and we are looking for those who want to grow with us.

With a close-knit approach, we develop solutions that drive business growth with innovation, trust and security.

If you aspire to a career that challenges you daily and allows you to make a real impact - this opportunity is for you.

We are currently strengthening the team of one of our clients with the following profile:

Pentester / Offensive Security Consultant | Hybrid (Lisbon)

We are seeking a Pentester / Offensive Security Consultant to work on an outsourcing basis with one of the largest telecommunications companies in Portugal.

Integrated within the client's Security by Design team, you will support technical projects by evaluating security requirements, assessing compliance, and analyzing technological risks for products and services in accordance with cybersecurity standards.

Education: Bachelor’s or Master’s degree in Computer Science, Electrical Engineering, Information Security, or similar areas; OR proven practical experience in Offensive Security / Pentesting without a formal degree.

Experience: 2 to 6 years of professional experience in offensive security activities, including:

• Conducting penetration testing on Web applications, Mobile apps (Android/iOS), and APIs (REST/GraphQL).
• Identifying, exploiting, and validating security vulnerabilities (e.g., OWASP Top 10, OWASP API Top 10, OWASP Mobile Top 10).
• Analyzing authentication, authorization, session management, and access control mechanisms.
• Performing security assessments on system and service integrations.
• Authoring clear, technical pentest reports detailing vulnerabilities, impact, Proof of Concept (PoC), and remediation recommendations.
• Communicating technical findings to development teams and technical stakeholders.
• Supporting retests to validate security fixes.

Technical Skills

• Solid experience in Web, Mobile, and API penetration testing.
• Expertise in offensive security standards and methodologies (OWASP, PTES, etc.).
• Strong proficiency in:
• Protocols & Web Technologies: HTTP/HTTPS, REST, JSON, OAuth2, JWT.
• Modern Architecture: Microservices, Cloud environments.
• Hands-on experience with pentesting tools (e.g., Burp Suite, OWASP ZAP, Postman, MobSF, fuzzing tools).

Certifications (Nice to Have)

• OSCP, OSWE, OSEP, eJPT, PNPT, or equivalent certifications.
• Other relevant offensive security/pentesting certifications.

Soft Skills

• Strong analytical mindset, autonomy, and organizational skills.
• Team player with a collaborative attitude.
• Clear communication and interpersonal skills.
• High commitment to quality, rigor, objectivity, and persistence.
• Proactive attitude with a passion for staying updated on the latest cybersecurity threats and trends.

What we have to offer

• Careful onboarding and close support from day one
• Continuous feedback aligned with your professional goals
• An accessible and collaborative team ready to support each individual's journey
• A close-knit environment where idea sharing and personal development are valued
• Access to a network of partnerships offering exclusive discounts on health, wellness, travel, culture, gastronomy, leisure and much more
• Social events and initiatives that strengthen team spirit