Offensive Security Engineer (Penetration… at Thales · Leca do…

About the Role

We are looking for a skilled Penetration Tester to support offensive security assessments and incident response activities across enterprise environments.

In this role, you will identify vulnerabilities, simulate real-world attack scenarios, and collaborate closely with DFIR, SOC, and security operations teams. The position combines advanced penetration testing with hands-on support during cyber incidents, threat investigations, and continuous security improvement initiatives.

Key Responsibilities

• Conduct web, network, cloud, and Active Directory penetration tests using modern offensive security techniques and tools.

• Support incident response engagements, including forensic analysis, threat hunting, containment validation, and attacker activity reconstruction.

• Prepare detailed technical reports and executive summaries with clear, actionable remediation recommendations.

• Collaborate with blue team, DFIR, SOC, and security engineering teams to improve detection capabilities and validate security controls.

• Contribute to strengthening the organization’s cyber resilience through proactive testing and technical analysis.

Requirements

• Minimum 3 years of experience in penetration testing or offensive security roles.

• Strong hands-on experience in:

  • Web and API security testing

  • Network and infrastructure assessments

  • Cloud security testing

  • Active Directory security

• Experience supporting or collaborating with incident response (DFIR) teams.

• Ability to communicate technical findings clearly to both technical and non-technical stakeholders.

• Portuguese (C1) and English (C1) proficiency.

• Availability for medium travel.

Preferred Qualifications

• Offensive Security certifications:

  • OSCP, OSEP, OSWE

• SANS certifications:

  • GPEN, GCFA

• Experience in:

  • Threat hunting and forensic analysis

  • Security validation and purple teaming

  • Attack simulation and adversary techniques

What We Offer

• Competitive compensation package and benefits.

• Opportunity to work on advanced offensive security and incident response projects.

• Continuous training and access to certifications and learning programs.

• Collaborative environment with SOC, DFIR, and Threat Intelligence teams.

• Hybrid/office flexibility (depending on local policy) and international exposure.