You and the process

With a person
Anna, in-house recruiter
9 years hiring engineers
30 minutes with a real recruiter
They read your CV with you, on a call, and say where the offers are being lost.
Didn’t find what you were looking for? Tell us what to build
Thales

Offensive Security Engineer (Penetration Testing | Red Team | Adversary Simulation)

  • Hybrid
  • 3-6 years
  • English (C1)
  • Portuguese (C1)

Salary

Not stated

Similar roles pay €65K - 95K a year · our estimate

AI summary

For members

The whole posting in a few lines. Sign up to read it here and on every role you open.

Sign Up to Read

Description

The team runs offensive security assessments and supports incident response in enterprise environments.

You will test defences by acting out realistic attacks, and you will also help during live cyber incidents, threat investigations and ongoing security work.

Responsibilities

  • Run penetration tests against web applications, networks, cloud platforms and Active Directory using current offensive methods and tooling.
  • Help incident responders with forensic work, threat hunting, checking that containment holds and rebuilding how attackers moved.
  • Produce reports for technical and executive readers, with remediation steps clear enough to act on.
  • Share work with the defenders in DFIR, SOC and engineering to sharpen detection and confirm that controls hold.
  • Strengthen the organisation's resilience through regular testing and technical analysis.

Requirements

  • At least 3 years in penetration testing or offensive security.
  • Hands-on skill in web and API testing, network and infrastructure assessments, cloud testing and Active Directory security.
  • Experience supporting or working alongside incident response (DFIR) teams.
  • Ability to explain technical findings to both technical and non-technical audiences.
  • Portuguese C1 and English C1 proficiency.
  • Available for medium levels of travel.
  • Preferred: certifications OSCP, OSEP or OSWE.
  • Preferred: SANS certifications GPEN or GCFA.
  • Preferred: experience in threat hunting and forensic analysis.
  • Preferred: experience in security validation and purple teaming.
  • Preferred: experience in attack simulation and adversary techniques.

Conditions

Hybrid or office working, depending on local policy.

Benefits

  • Competitive compensation and benefits package.
  • Work on advanced offensive security and incident response projects.
  • Ongoing training, plus access to certifications and learning programmes.
  • Work alongside SOC, DFIR and Threat Intelligence teams.
  • International exposure.
  • Room and support for personal development.
  • Possibility to move into another domain, site or product area within the wider group, including new products, customers and countries, or into more complex solutions.
  • Choice between a technical expert path and a leadership path.
  • Grow an international career inside a large engineering group.

Where you’d work

Part of the week in the office

About the company

Thales

Office in Portugal

Also hiring in Melbourne, Australia, Australia, Bucharest, Romania and 23 more places

13 of their 131 open roles are remote

Your chances

Worth a look before you spend an evening tailoring a CV for it.

  • 20 checks run
  • 2 red flags

Still hiring?

13 checks

1 red flag

How crowded?

7 checks

1 red flag

Fits Me

How well does this role fit you?

Answer a few questions or drop your CV, and every role gets a fit score with the reasons, this one first.

  • Your field
  • Level
  • Stack
  • Work model
  • Salary floor
  • Must-haves
Details10 facts · Role, Location, Compensation, Employment, Requirements
Type
Full-time
Specialty
Security
Region
Europe
Pay period
Annual
Show 6 more factsShow less

Role

Category
DevOps & Infrastructure
Specialty
Security
Experience
3+ years

Location

Work model
Hybrid
Region
Europe
Office
  • Portugal

Compensation

Salary
Salary by agreement
Pay period
Annual

Employment

Type
Full-time

Requirements

Languages
  • English (C1)
  • Portuguese (C1)

Something wrong with this vacancy?

Similar vacancies

Share this vacancy

What's wrong with it?

The employer never sees who reported.

Reason