Penetration Tester / Red Team Analyst

About the role

We are seeking a Penetration Tester / Red Team Analyst to join Inetum’s offensive security team in Lisbon. The role involves conducting full‑cycle penetration tests, simulating realistic attacks, and collaborating with internal and client teams to improve the organisation’s security posture.

Key responsibilities

• Plan and execute end‑to‑end penetration tests, from reconnaissance to post‑exploitation and reporting.
• Participate in Red Team exercises and realistic attack simulations.
• Identify, exploit and validate vulnerabilities across systems, applications, infrastructure and networks.
• Utilise offensive security frameworks such as OWASP and MITRE ATT&CK.
• Produce clear technical and executive reports with remediation recommendations.
• Communicate findings and clarifications to SOC, Blue Team, infrastructure, development teams and clients.
• Contribute to the evolution of Red Team methodologies, techniques and tooling.

Required profile

• Minimum 2 years of experience in penetration testing, ethical hacking or Red Team operations.
• Proven ability to independently conduct reconnaissance, vulnerability scanning, exploitation and post‑exploitation.
• Strong knowledge of networks, operating systems (Windows/Linux), web applications and protocols.
• Ability to interpret and explain CVEs, CWEs and CVSS scores.
• Excellent communication skills for both technical and non‑technical audiences.
• Self‑motivated, able to prioritise tasks without constant supervision.

Required skills

• Metasploit
• Burp Suite
• Nmap
• OWASP framework
• MITRE ATT&CK framework
• Windows operating system
• Linux operating system
• Network protocols and security

What we offer

• Hybrid work model (up to three days per week on‑site in the Picoas office).
• Opportunity to work with a European leader in digital services and a diverse team of 28 000 consultants.
• Continuous learning environment focused on emerging threats and advanced offensive techniques.