Randstad Digital is specialized in the recruitment of middle and senior positions.
Our client is a multinational company and he is looking for a Pentester for Lisbon.
pentester.
- lisbon
- publicado há 2 dias
- data limite 8 junho 2025
responsabilidades chave
- Execute penetration testing on web applications and services to find weaknesses.
- Carry out both manual and automated code reviews to pinpoint significant security flaws.
- Assist technical teams in fixing identified security problems and vulnerabilities.
- Define key indicators to measure how security measures are improving.
- Develop and maintain security testing approaches that follow established industry guidelines (like OWASP and NIST).
- Build security testing into the continuous integration and continuous delivery process to catch vulnerabilities early on.
- Design test cases that can be reused to ensure consistent security checks across all applications.
- Apply well-known security benchmarks (such as OWASP Top 10, NIST, and CIS Controls) when evaluating vulnerabilities.
- Make sure testing complies with relevant legal and industry regulations (like PCI DSS, GDPR, HIPAA, and SOC 2).
- Utilize standardized assessment frameworks (PTES, MITRE ATT&CK) and scoring systems (CVSS) for consistent evaluation.
- Incorporate security testing throughout the development lifecycle following secure SDLC principles.
- Be able to suggest secure design architecture, including aspects related to cryptography and infrastructure.
- Conduct knowledge-sharing sessions to educate teams on common security pitfalls and best practices.
- Work closely with developers to identify test cases for automation.
- Collaborate with the QA team to design comprehensive test strategies.
- Analyze test results and identify root causes of issues.
- Provide detailed reports on test progress, failures, and improvements.
competências
- At least four years of professional experience in software security testing.
- Demonstrated expertise in security testing tools such as Burp Suite and OWASP ZAP, along with proficiency in scripting languages like Python, Bash, and PowerShell, and security frameworks/tools like Metasploit and static analysis tools such as Checkmarx.
- Familiarity with Continuous Integration (CI) tools, including Gitlab, Jenkins, and GitHub Actions.
- Excellent problem-solving abilities and a keen eye for detail.
- Strong interpersonal and teamwork skills.
- Fluency in English is a must (equivalent to B2 level).
- CREST Registered certification is a requirement.
principais benefícios
- The chance to contribute within a stimulating setting alongside agile teams and cutting-edge initiatives.
- Joining a well-established and stable organization.
- Continuous development and upskilling opportunities provided.
partilhar vaga de emprego.
o processo de candidatura.
Saiba o que acontece depois da sua candidatura e o que fazemos para o ajudar a conseguir aquele emprego.
entre em contacto.
estamos aqui para ajudar com as suas questões.
JP
joana paulo
