Penetration Tester / Red Team Analyst

About the role

Inetum is seeking a Penetration Tester / Red Team Analyst to join its offensive security team in Lisbon. You will lead end‑to‑end penetration tests, take part in realistic Red Team exercises, and work closely with internal security teams and clients to strengthen the organisation’s defensive posture.

Key responsibilities

• Plan and execute full‑cycle penetration tests, from reconnaissance to post‑exploitation and reporting.
• Participate in Red Team simulations, delivering realistic attack scenarios.
• Identify, exploit and validate vulnerabilities across networks, systems, applications and cloud environments.
• Utilise offensive security frameworks such as OWASP and MITRE ATT&CK.
• Produce clear technical and executive reports with remediation recommendations.
• Collaborate with SOC, Blue Team, infrastructure and development teams, as well as client stakeholders.
• Contribute to the evolution of Red Team methodologies, tools and techniques.

Required profile

• Minimum 2 years of experience in penetration testing, ethical hacking or Red Team operations.
• Proven ability to conduct independent pentests covering reconnaissance, vulnerability scanning, exploitation and post‑exploitation.
• Strong knowledge of networking, Windows and Linux operating systems, web applications and common protocols.
• Excellent communication skills for interacting with technical teams and clients.
• Self‑motivated, detail‑oriented and able to prioritise tasks without constant supervision.

Required skills

• Metasploit
• Burp Suite
• Nmap
• OWASP methodology
• MITRE ATT&CK framework
• Windows and Linux environments
• Network protocols
• Web application testing
• CVE, CWE and CVSS interpretation

What we offer

• Hybrid work model (up to three days per week on‑site in the Picoas office).