About the Role
We are looking for a skilled Penetration Tester to support offensive security assessments and incident response activities across enterprise environments.
In this role, you will identify vulnerabilities, simulate real-world attack scenarios, and collaborate closely with DFIR, SOC, and security operations teams. The position combines advanced penetration testing with hands-on support during cyber incidents, threat investigations, and continuous security improvement initiatives.
Key Responsibilities
Conduct web, network, cloud, and Active Directory penetration tests using modern offensive security techniques and tools.
Support incident response engagements, including forensic analysis, threat hunting, containment validation, and attacker activity reconstruction.
Prepare detailed technical reports and executive summaries with clear, actionable remediation recommendations.
Collaborate with blue team, DFIR, SOC, and security engineering teams to improve detection capabilities and validate security controls.
Contribute to strengthening the organization’s cyber resilience through proactive testing and technical analysis.
Requirements
Minimum 3 years of experience in penetration testing or offensive security roles.
Strong hands-on experience in:
Web and API security testing
Network and infrastructure assessments
Cloud security testing
Active Directory security
Experience supporting or collaborating with incident response (DFIR) teams.
Ability to communicate technical findings clearly to both technical and non-technical stakeholders.
Portuguese (C1) and English (C1) proficiency.
Availability for medium travel.
Preferred Qualifications
Offensive Security certifications:
OSCP, OSEP, OSWE
SANS certifications:
GPEN, GCFA
Experience in:
Threat hunting and forensic analysis
Security validation and purple teaming
Attack simulation and adversary techniques
What We Offer
Competitive compensation package and benefits.
Opportunity to work on advanced offensive security and incident response projects.
Continuous training and access to certifications and learning programs.
Collaborative environment with SOC, DFIR, and Threat Intelligence teams.
Hybrid/office flexibility (depending on local policy) and international exposure.
YOUR CAREER AT THALES
Future opportunities will allow you to discover other domains or sites. You will be able to evolve and grow your competences in different areas:
Room and attention to personal development
Build your talents in another domain of Thales Group, discovering new products, new customers, new country or go to a more complex Solution
Choose between a technical expertise or a leadership path
Build an international career within a leading Engineering Group
Skills Required
- At least 3 years of experience in penetration testing or offensive security
- Hands-on experience with web and API security testing
- Hands-on experience with network and infrastructure assessments
- Hands-on experience with cloud security testing
- Hands-on experience with Active Directory security
- Experience supporting or collaborating with incident response or DFIR teams
- Ability to communicate technical findings to technical and non-technical stakeholders
- Portuguese proficiency at C1 level
- English proficiency at C1 level
- Availability for medium travel
- OSCP, OSEP, or OSWE certification
- GPEN or GCFA certification
- Experience with threat hunting and forensic analysis
- Experience with security validation and purple teaming
- Experience with attack simulation and adversary techniques
Thales Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Thales and has not been reviewed or approved by Thales.
-
Retirement Support — Retirement plans with employer contributions and matches, profit sharing, and share purchase opportunities are emphasized across multiple regions. These elements are positioned as competitive components of total rewards.
-
Leave & Time Off Breadth — Generous PTO that increases with tenure, paid holidays, and paid military, maternity, and paternity leave are described. This breadth supports work–life balance across locations.
-
Flexible Benefits — Hybrid work options, flexible schedules, and parental supports such as childcare benefits and leave for sick children are available in several markets. Flexibility is presented as a core part of the employee experience.
Thales Insights
What We Do
Thales is a global high technology leader investing in digital and “deep tech” innovations – connectivity, big data, artificial intelligence, cybersecurity and quantum technology – to build a future we can all trust, which is vital to the development of our societies. The company provides solutions, services and products that help its customers – businesses, organisations and states – in the defence, aeronautics, space, transportation and digital identity and security markets to fulfil their critical missions, by placing humans at the heart of the decision-making process.
