Red Team Operator

Capgemini; Lisboa; Hybrid; EUR 35,000 - 55,000; Full time

Benefits offered by this job

Hybrid work model

Health and life insurance

Referral program with bonuses

Great office location in Lisbon

Job summary

Capgemini Engineering in Lisbon is seeking a Red Team Operator / Penetration Tester to join our Cybersecurity team, performing offensive security engagements and assessing client security posture through advanced testing. You will use Burp Suite, SQLMap, Python and Bash to identify vulnerabilities, exploit issues, and produce remediation-focused reports, collaborating with clients and internal teams.

Certifications such as CEH/PNPT are required; OSCP, eJPT, or CRTO are a plus.

Qualifications

• Minimum of 2 years of experience in Penetration Testing, preferably Web Application Security.
• Hands-on experience identifying and exploiting web vulnerabilities (XSS, SQLi, CSRF, Clickjacking, CRLF Injection, LFI, IDOR).
• Strong scripting and automation skills in Python and Bash.

Responsibilities

• Perform Web Application Penetration Tests across environments and technologies.
• Conduct vulnerability assessments and exploitation to demonstrate business impact.
• Document vulnerabilities with remediation guidance and risk assessments.
• Produce high-quality technical reports for clients and internal teams.
• Collaborate with cybersecurity teams to support remediation and security maturity.]
• Relevant knowledge of OWASP Testing Methodology and MITRE ATT&CK is advantageous.

Education

CEH or PNPT certifications

Tools

Burp Suite

SQLMap

Job description

CAPGEMINI ENGINEERINGAt Capgemini Engineering , the world leader in engineering services, we bring together a global team of engineers, scientists, and architects to help the world's most innovative companies unleash their potential. From autonomous cars to lifesaving robots, our digital and software technology experts think outside the box as they provide unique R&D and engineering services across all industries.Join us for a career full of opportunities. Where you can make a difference. Where no two days are the same.YOUR ROLEJoining Capgemini Engineering as a Red Team Operator / Penetration Tester , you will be part of our Cybersecurity team, contributing to offensive security engagements and helping clients assess and strengthen their security posture through advanced penetration testing and vulnerability exploitation activities.In this role you will play a key role in:Performing Web Application Penetration Tests, identifying and validating security vulnerabilities across different environments and technologies.Conducting vulnerability assessments and exploitation activities to demonstrate business impact and security risks.Identifying, exploiting, and documenting vulnerabilities such as XSS, SQL Injection, CSRF, Clickjacking, CRLF Injection, LFI, and IDOR.Using industry-standard tools such as Burp Suite and SQLMap to support security testing activities.Developing and maintaining scripts and automations in Python and Bash to improve testing efficiency and support offensive security operations.Producing high-quality technical reports with clear remediation recommendations and risk assessments.Collaborating with internal cybersecurity teams and clients to support remediation efforts and improve overall security maturity.YOUR PROFILEWe are looking for a motivated cybersecurity professional with a passion for offensive security, vulnerability research, and ethical hacking.Minimum of 2 years of experience in Penetration Testing, preferably focused on Web Application Security.Proven hands-on experience in identifying and exploiting Web vulnerabilities, including XSS, SQL Injection, CSRF, Clickjacking, CRLF Injection, LFI, and IDOR.Practical experience using Burp Suite and SQLMap .Good scripting and automation skills in Python and Bash .CEH or PNPT certification is mandatory.Strong analytical thinking, problem-solving abilities, and attention to detail.Good communication skills and ability to present technical findings clearly.Nice to HaveOSCP , eJPT , or CRTO certifications.Experience participating in Red Team operations and adversary simulation exercises.Knowledge of OWASP Testing Methodology and MITRE ATT&CK Framework.Experience with cloud security assessments.WHAT YOU'LL LOVE ABOUT WORKING HEREJoin a multicultural and inclusive team environment.Enjoy a supportive atmosphere promoting work-life balance.Hybrid work model.Your career growth is central to our mission, with continuous learning opportunities and specialized cybersecurity training.Access valuable training and certifications in cutting-edge technologies.Engage in exciting national and international cybersecurity projects.Health and life insurance.Referral program with bonuses for talent recommendations.Great office location in Lisbon.About CapgeminiCapgemini is the business transformation partner for enterprises in the age of AI. We help organizations imagine and build an intelligent, sustainable future, combining AI, technology, and human ingenuity to transform how they operate, innovate, and grow. With unique end-to-end capabilities spanning strategy, technology, engineering, and intelligent operations, we bring together deep industry expertise and market-leading capabilities in AI, cloud, and data to turn ambition into measurable business outcomes at scale. Supported by a robust ecosystem of partners and nearly 60 years of expertise, Capgemini is a responsible and diverse global organization operating in more than 50 countries.