Remote Offensive Security Specialist

LUZA Group; Porto; Híbrido; EUR 45 000 - 65 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Remote work when possible

Equipment provided

Benefits plan

Resumo da oferta

LUZA Group is seeking a hands-on penetration tester to conduct security assessments across web apps, APIs, cloud environments, and internal/external infrastructures. You will go beyond automated tools with manual testing and attack-path chaining, while integrating AI-assisted tools to accelerate investigations and report writing.

Ideal candidates have practical experience with Burp Suite, Nmap, Metasploit, and OWASP Top 10 knowledge. Remote-friendly hybrid work is offered with equipment provided.

Qualificações

• Hands-on penetration testing and security assessments experience.
• Knowledge of OWASP Top 10, WSTG, API security and AD/Entra ID.
• Fluent English and ability to validate results critically.
• Scripting or programming to automate tasks and payloads.

Responsabilidades

• Conduct pentesting and security assessments across web apps, APIs, cloud, and infrastructure.
• Go beyond automated tools with manual testing, validation, and attack-path chaining.
• Integrate AI-assisted tools into security workflows and tooling.
• Develop or adapt custom scripts to support assessment scenarios.
• Produce clear, actionable vulnerability reports with business impact.
• Collaborate with development, infrastructure, and security teams to remediate issues.
• Contribute to ongoing improvements of methodologies and knowledge sharing.
• Hybrid work model.

Conhecimentos

Penetration testing

Security assessments

Burp Suite

Nmap

Metasploit

Web security

API security

Entra ID

AI tooling

Scripting

English fluency

Ferramentas

Burp Suite

Nmap

Metasploit

Descrição da oferta de emprego

LUZA Group is seeking a hands-on penetration tester to conduct security assessments across web apps, APIs, cloud environments, and internal/external infrastructures. You will go beyond automated tools with manual testing and attack-path chaining, while integrating AI-assisted tools to accelerate investigations and report writing.

Ideal candidates have practical experience with Burp Suite, Nmap, Metasploit, and OWASP Top 10 knowledge. Remote-friendly hybrid work is offered with equipment provided.