search Browse Jobs
Offensive Security Engineer (Penetration Testing | Red Team | Adversary Simulation)Thales · Matosinhos, Porto, Leca do Balio, Portugal
Thales logo

Thales

company page ↗ Visa Sponsoring Company

Offensive Security Engineer (Penetration Testing | Red Team | Adversary Simulation)

✓ This company has sponsored visas before. The posting doesn't say so, but it's still worth applying.

🗓️ Posted 2026-10-06 Matosinhos, Porto, Leca do Balio, Portugal Full-time Hybrid ICT
💰 Salary Not shared 📊 Market 3,200 EUR–5,500 EUR/mo

About the Company

Thales (Euronext Paris: HO) is a global leader in advanced technologies for the Defence, Aerospace, and Cyber & Digital sectors. Its portfolio of innovative products and services addresses several major challenges: sovereignty, security, sustainability and inclusion. The Group invests more than 4 billion per year in Research & Development in key areas, particularly for critical environments, such as Artificial Intelligence, cybersecurity, quantum and cloud technologies. Thales has more than 83,000 employees in 68 countries. In 2024, the Group generated sales of 20.6 billion. Defense and Space Manufacturing Specialties: Aerospace, Defence, Security, Space, Cybersecurity, Big Data, IoT, Connectivity, Artificial Intelligence, Digital, Systems, Software

Responsibilities

  • ● In this role, you will identify vulnerabilities, simulate real-world attack scenarios, and collaborate closely with DFIR, SOC, and security operations teams. The position combines advanced penetration testing with hands-on support during cyber incidents, threat investigations, and continuous security improvement initiatives.
  • ● Conduct web, network, cloud, and Active Directory penetration tests using modern offensive security techniques and tools.
  • ● Support incident response engagements, including forensic analysis, threat hunting, containment validation, and attacker activity reconstruction.
  • ● Prepare detailed technical reports and executive summaries with clear, actionable remediation recommendations.
  • ● Collaborate with blue team, DFIR, SOC, and security engineering teams to improve detection capabilities and validate security controls.
  • ● Contribute to strengthening the organization's cyber resilience through proactive testing and technical analysis.
  • ● Minimum 3 years of experience in penetration testing or offensive security roles.
  • ● Strong hands-on experience in:
  • ● Web and API security testing
  • ● Network and infrastructure assessments
  • ● Cloud security testing
  • ● Active Directory security
  • ● Ability to communicate technical findings clearly to both technical and non-technical stakeholders.
  • ● Portuguese (C1) and English (C1) proficiency.
  • ● Availability for medium travel.
  • ● Offensive Security certifications:
  • ● OSCP, OSEP, OSWE
  • ● SANS certifications: