Senior Audit Penetration Tester Lisboa

Senior Audit Penetration Tester
Lisboa
Lisboa, Lisboa, Portugal

Ready to make an impact? Tahles S21sec is looking for a Penetration Tester to join our Offensive Security team, reporting to our offices in Porto or Lisboa (remote work is applicable).

You will join the Thales S21sec's Penetration Testing Team, performing security testing according to your skills and specialization level. Within the team, we have expertise in nearly every discipline of offensive security from application and infrastructure testing, to red and purple team exercises.

We're looking for expertise in the following areas (you don't need to be a master of all trades, but we expect you to be able to show
- life experience and skills in one or more of these areas):

• Conduct Security Tests on Networks and Applications
• Security tests on networks, cloud infrastructure,
  - based applications, APIs or mobile applications. Design the test approach and select the tools to try to break into
  - protected applications and networks to probe for vulnerabilities. You are expected to keep up with the latest methods for ethical hacking and testing and to always be evaluating new penetration testing tools.
• Write Security Assessment Reports
• After conducting your research and testing, you have to be able to document your findings, write a report, and discuss solutions with the customer's IT teams and management. You are also expected to provide feedback and verification after security fixes are issued.
• Perform Incident Response and Forensic Analysis

Your routine (if we can ever say there's routine while working in Information Security) will be to receive tasking for a project, identify the requirements from the bidding documents, prepare the engagement and interact with the customer from beginning to end of project, ensuring you do your best to deliver the outcomes that the customer expects, withing the agreed time and cost.

You will not be alone, even on projects where you're the only tester. Whenever necessary, you will have a team of amazing talent to work with you and support you in any areas where you can't, on your own, achieve a solution. Having said that, you're expected to also contribute to this teamwork approach to our way of working and be actively part of solutions.

Even though most of our work can be done remotely, some projects require
- site work at our customer's premises (mostly Lisboa & Porto). This is expected to be under 15% of your work time.

We need:

• Our professionals must have the ability to handle complex situations and multiple responsibilities simultaneously in order to balance
  - term projects while maintaining urgency on operational demands.
• They must also have an innate curiosity that drives offensive tradecraft development and execution in order to simulate
  - world attack scenarios.
• You know you don't need a formal education in Computer Science to become a pentester. While a strong education will be evaluated and valued, it is by no means a hard requirement to work in our team.
• Practical experience will be considered: you should have at least 3 years of experience.
• Security certifications are important for some of our customers, so don't forget to list what you've got.

We offer:

At Thales S21sec we consider ourselves disruptive in talent management, where we are continuously innovating our policies to allow our employees a real
- life balance that adapts to their needs. In S21sec, you´ll find whatever you want or need:

- Do you want 100% flexible remoteworking, and come to the office whenever you want? At Thales S21sec you have it!

- Do you want to enjoy one Friday off per month to extend your free time? At S21sec you´ll have 12 Fridays off per year.

- Do you want to maximize your net salary? At Thales S21sec you can decide which Flexible Remuneration package (Restaurant Card, Transport Card, Childcare Vouchers and Training Vouchers) suits best your needs.

- Do you want to continue your training and expand your certifications? At Thales S21sec you have an Annual Training Plan (based on Technical Certifications, Languages, Soft Skills training. . . ).

- Do you like to share what you learn? At S21sec we have a Speakers programme.

- Do you want to work with clear and transparent objectives? At Thales S21sec we have an annual Bonus Policy, based on KPIS.