Porto-Based Offensive Security Specialist (Hybrid)

Claranet limited; Porto; Hybrid; EUR 55,000 - 75,000; Full time

Benefits offered by this job

Certification resources

Team building programs

Friendly workplace

Job summary

Claranet Limited in Porto (hybrid) is seeking an Offensive Security Specialist to join our internal team. You will perform penetration testing across web apps, APIs, cloud environments, and internal infrastructure, including Entra ID, and report findings with remediation guidance.

You will go beyond automated scanning, integrate AI-assisted tools, develop custom scripts, and collaborate with development and security teams to mature our offensive capabilities.

Qualifications

• Solid practical experience in penetration testing and technical security assessments.
• Hands-on proficiency with offensive security tooling such as Burp Suite, Nmap, Metasploit.
• Strong working knowledge of web application security, API security, network infrastructure, and Active Directory / Entra ID environments.
• Demonstrated AI fluency: ability to use AI tools as workflow accelerators while maintaining independent technical judgment and validation.
• Scripting or programming capabilities to automate tasks and develop custom payloads.
• High autonomy, proactivity, critical thinking, and problem-solving skills in complex assessment scenarios.
• Proficiency in English to communicate technical concepts effectively with technical and non-technical stakeholders.

Responsibilities

• Perform penetration testing and security assessments across web applications, APIs, cloud environments, and internal/external infrastructure (including Active Directory / Entra ID).
• Go beyond automated scanning through manual investigation, vulnerability validation, and attack-path chaining.
• Integrate AI-assisted tools (LLMs, coding assistants, agent-based tooling) into offensive workflows to accelerate research, scripting, payload development, and reporting.
• Develop or adapt custom scripts and offensive security tooling to support specific assessment scenarios.
• Produce clear, technically sound, and actionable documentation detailing security findings, business impact, and remediation guidance.
• Collaborate closely with development, infrastructure, and security teams to communicate technical security issues and support remediation efforts.
• Contribute to the continuous improvement of internal methodologies, knowledge sharing, research, and offensive capabilities.

Skills

Penetration testing

Offensive security tooling

Web application security

API security

Active Directory / Entra ID

Scripting / automation

AI fluency

English proficiency

Tools

Burp Suite

Nmap

Metasploit

Job description

Claranet Limited in Porto (hybrid) is seeking an Offensive Security Specialist to join our internal team. You will perform penetration testing across web apps, APIs, cloud environments, and internal infrastructure, including Entra ID, and report findings with remediation guidance.

You will go beyond automated scanning, integrate AI-assisted tools, develop custom scripts, and collaborate with development and security teams to mature our offensive capabilities.