Red Team Operator

Capgemini Engineering; United States; Hybrid; USD 61,000 - 100,000; Full time

Benefits offered by this job

Hybrid work model

Health and life insurance

Referral program with bonuses

Great Lisbon office location

Job summary

Capgemini Engineering is seeking a Red Team Operator / Penetration Tester to join our Cybersecurity team in a hybrid role based in Lisbon, Portugal. You will perform offensive security engagements, conducting web application pentests and vulnerability exploitation to assess client security Posture.

Applicants should have at least 2 years in pentesting, hands-on Web vulnerabilities (XSS, SQLi, CSRF, IDOR, etc.), and experience with Burp Suite and SQLMap.

Qualifications

• Minimum of 2 years of experience in Penetration Testing, preferably focused on Web Application Security.
• Proven hands-on experience identifying and exploiting web vulnerabilities (XSS, SQL Injection, CSRF, Clickjacking, CRLF Injection, LFI, IDOR).
• Practical experience using Burp Suite and SQLMap.
• Scripting and automation with Python and Bash.
• CEH or PNPT certification is mandatory.
• Strong analytical thinking, problem-solving abilities, and attention to detail.
• Good communication skills to present technical findings clearly.

Responsibilities

• Performing Web Application Penetration Tests, identifying and validating security vulnerabilities across environments.
• Conducting vulnerability assessments and exploitation activities to demonstrate risk.
• Identifying, exploiting, and documenting vulnerabilities such as XSS, SQLi, CSRF, and IDOR.
• Using Burp Suite and SQLMap to support testing activities.
• Developing and maintaining scripts in Python and Bash to improve testing efficiency.
• Producing high-quality technical reports with remediation recommendations and risk assessments.
• Collaborating with internal cybersecurity teams and clients to support remediation efforts.

Skills

Penetration Testing

Web Application Security

Burp Suite

SQLMap

Python

Bash

Strong communication

Analytical thinking

Education

CEH or PNPT certification

Tools

Burp Suite

SQLMap

Job description

CAPGEMINI ENGINEERING

At Capgemini Engineering, the world leader in engineering services, we bring together a global team of engineers, scientists, and architects to help the world's most innovative companies unleash their potential. From autonomous cars to lifesaving robots, our digital and software technology experts think outside the box as they provide unique R&D and engineering services across all industries.

Join us for a career full of opportunities. Where you can make a difference. Where no two days are the same.

YOUR ROLE

Joining Capgemini Engineering as a Red Team Operator / Penetration Tester, you will be part of our Cybersecurity team, contributing to offensive security engagements and helping clients assess and strengthen their security posture through advanced penetration testing and vulnerability exploitation activities.

• Performing Web Application Penetration Tests, identifying and validating security vulnerabilities across different environments and technologies.
• Conducting vulnerability assessments and exploitation activities to demonstrate business impact and security risks.
• Identifying, exploiting, and documenting vulnerabilities such as XSS, SQL Injection, CSRF, Clickjacking, CRLF Injection, LFI, and IDOR.
• Using industry-standard tools such as Burp Suite and SQLMap to support security testing activities.
• Developing and maintaining scripts and automations in Python and Bash to improve testing efficiency and support offensive security operations.
• Producing high-quality technical reports with clear remediation recommendations and risk assessments.
• Collaborating with internal cybersecurity teams and clients to support remediation efforts and improve overall security maturity.

YOUR PROFILE

We are looking for a motivated cybersecurity professional with a passion for offensive security, vulnerability research, and ethical hacking.

• Minimum of 2 years of experience in Penetration Testing, preferably focused on Web Application Security.
• Proven hands-on experience in identifying and exploiting Web vulnerabilities, including XSS, SQL Injection, CSRF, Clickjacking, CRLF Injection, LFI, and IDOR.
• Practical experience using Burp Suite and SQLMap.
• Good scripting and automation skills in Python and Bash.
• CEH or PNPT certification is mandatory.
• Strong analytical thinking, problem-solving abilities, and attention to detail.
• Good communication skills and ability to present technical findings clearly.

Nice to Have

• OSCP, eJPT, or CRTO certifications.
• Experience participating in Red Team operations and adversary simulation exercises.
• Knowledge of OWASP Testing Methodology and MITRE ATT&CK Framework.
• Experience with cloud security assessments.

What You'll Love About Working Here

• Join a multicultural and inclusive team environment.
• Enjoy a supportive atmosphere promoting work-life balance.
• Hybrid work model.
• Your career growth is central to our mission, with continuous learning opportunities and specialized cybersecurity training.
• Access valuable training and certifications in cutting-edge technologies.
• Engage in exciting national and international cybersecurity projects.
• Health and life insurance.
• Referral program with bonuses for talent recommendations.
• Great office location in Lisbon.

About Capgemini

Capgemini is the business transformation partner for enterprises in the age of AI. We help organizations imagine and build an intelligent, sustainable future, combining AI, technology, and human ingenuity to transform how they operate, innovate, and grow. With unique end-to-end capabilities spanning strategy, technology, engineering, and intelligent operations, we bring together deep industry expertise and market-leading capabilities in AI, cloud, and data to turn ambition into measurable business outcomes at scale. Supported by a robust ecosystem of partners and nearly 60 years of expertise, Capgemini is a responsible and diverse global organization operating in more than 50 countries.