Red Team Penetration Tester — Web App Security Expert

Capgemini

Lisboa

Hybrid

EUR 35,000 - 55,000

Full time

6 hours ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Benefits offered by this job

Hybrid work model

Health and life insurance

Referral program with bonuses

Great office location in Lisbon

Job summary

Capgemini Engineering in Lisbon is seeking a Red Team Operator / Penetration Tester to join our Cybersecurity team, performing offensive security engagements and assessing client security posture through advanced testing. You will use Burp Suite, SQLMap, Python and Bash to identify vulnerabilities, exploit issues, and produce remediation-focused reports, collaborating with clients and internal teams.

Certifications such as CEH/PNPT are required; OSCP, eJPT, or CRTO are a plus.

Qualifications

Minimum of 2 years of experience in Penetration Testing, preferably Web Application Security.
Hands-on experience identifying and exploiting web vulnerabilities (XSS, SQLi, CSRF, Clickjacking, CRLF Injection, LFI, IDOR).
Strong scripting and automation skills in Python and Bash.

Responsibilities

Perform Web Application Penetration Tests across environments and technologies.
Conduct vulnerability assessments and exploitation to demonstrate business impact.
Document vulnerabilities with remediation guidance and risk assessments.
Produce high-quality technical reports for clients and internal teams.
Collaborate with cybersecurity teams to support remediation and security maturity.]
Relevant knowledge of OWASP Testing Methodology and MITRE ATT&CK is advantageous.