Hybrid Red Team Operator & Web Pentest Pro

Ocupacao; United States; Hybrid; USD 61,000 - 100,000; Full time

Benefits offered by this job

Hybrid work model

Health and life insurance

Referral program with bonuses

Great Lisbon office location

Job summary

Capgemini Engineering is seeking a Red Team Operator / Penetration Tester to join our Cybersecurity team in a hybrid role based in Lisbon, Portugal. You will perform offensive security engagements, conducting web application pentests and vulnerability exploitation to assess client security Posture.

Applicants should have at least 2 years in pentesting, hands-on Web vulnerabilities (XSS, SQLi, CSRF, IDOR, etc.), and experience with Burp Suite and SQLMap.

Qualifications

• Minimum of 2 years of experience in Penetration Testing, preferably focused on Web Application Security.
• Proven hands-on experience identifying and exploiting web vulnerabilities (XSS, SQL Injection, CSRF, Clickjacking, CRLF Injection, LFI, IDOR).
• Practical experience using Burp Suite and SQLMap.
• Scripting and automation with Python and Bash.
• CEH or PNPT certification is mandatory.
• Strong analytical thinking, problem-solving abilities, and attention to detail.
• Good communication skills to present technical findings clearly.

Responsibilities

• Performing Web Application Penetration Tests, identifying and validating security vulnerabilities across environments.
• Conducting vulnerability assessments and exploitation activities to demonstrate risk.
• Identifying, exploiting, and documenting vulnerabilities such as XSS, SQLi, CSRF, and IDOR.
• Using Burp Suite and SQLMap to support testing activities.
• Developing and maintaining scripts in Python and Bash to improve testing efficiency.
• Producing high-quality technical reports with remediation recommendations and risk assessments.
• Collaborating with internal cybersecurity teams and clients to support remediation efforts.

Skills

Penetration Testing

Web Application Security

Burp Suite

SQLMap

Python

Bash

Strong communication

Analytical thinking

Education

CEH or PNPT certification

Tools

Burp Suite

SQLMap

Job description

Capgemini Engineering is seeking a Red Team Operator / Penetration Tester to join our Cybersecurity team in a hybrid role based in Lisbon, Portugal. You will perform offensive security engagements, conducting web application pentests and vulnerability exploitation to assess client security Posture.

Applicants should have at least 2 years in pentesting, hands-on Web vulnerabilities (XSS, SQLi, CSRF, IDOR, etc.), and experience with Burp Suite and SQLMap.