We are looking for an experienced Senior Offensive Security Auditor to join our Offensive Security team in Portugal.
This is a hands-on senior role for an offensive security professional with strong experience in penetration testing, red teaming and security assessments, who will act as a technical reference for our Offensive Security activities in Portugal.
You will lead complex security assessments from planning through delivery, working closely with our SOC, DFIR, Threat Hunting, Threat Intelligence and Security Engineering teams to identify vulnerabilities, validate security controls and strengthen our customers' cyber resilience.
This role offers the opportunity to combine deep technical expertise, client interaction and technical leadership.
What you'll do
- Lead and deliver complex penetration testing, red team, adversary simulation and security assessment engagements.
- Define scope, testing approaches and methodologies for offensive security engagements.
- Perform hands-on security testing across web applications, APIs, infrastructure and cloud environments.
- Conduct vulnerability assessments, exploitation and security validation activities.
- Develop and execute adversary emulation and red team scenarios based on real-world attack techniques.
- Work closely with SOC, DFIR, Threat Hunting and Threat Intelligence teams to provide offensive security expertise and support security investigations when required.
- Identify, assess and communicate security risks, translating technical findings into clear and actionable remediation recommendations.
- Prepare high-quality technical reports and present findings to both technical and non-technical stakeholders.
- Act as a technical reference for Offensive Security activities in Portugal, supporting the quality and continuous improvement of local engagements.
- Contribute to the development and improvement of methodologies, playbooks, testing procedures and reporting standards.
- Support and share knowledge with other members of the offensive security team.
What you bring
Required
- 5+ years of professional experience in offensive security, penetration testing, red teaming or security auditing.
- Strong hands-on experience in:Web application and API security testing.Infrastructure and network penetration testing.Cloud security assessments.Vulnerability assessment and exploitation.Red Team / adversary simulation activities.
- Strong understanding of attack techniques, vulnerabilities and security controls.
- Ability to independently plan and deliver complex security assessments.
- Excellent analytical, reporting and communication skills.
- Ability to communicate technical risks and recommendations clearly to both technical and business stakeholders.
- Ability to work effectively with SOC, DFIR, Threat Intelligence and Security Engineering teams.
- English level C1.
- Professional working proficiency in Portuguese.
Nice to have
- Experience with Purple Team exercises and security control validation.
- Experience with cloud offensive security, mobile security, OT/ICS, IoT or social engineering.
- Experience supporting incident response or post-incident investigations from an offensive security perspective.
- Knowledge of frameworks such as MITRE ATT&CK and experience applying them to adversary simulation.
- Experience working directly with customers and presenting technical findings.
Relevant certifications will be highly valued, including:
- Offensive Security: OSEP, OSCP, OSCE3
- SANS: GXPN, GPEN, GWAPT, etc.
- CREST: CCT, CCSAM, CCTIM or equivalent
- Altered Security: CRTE, CARTP
- Other recognised offensive security certifications
- A senior technical role within a leading cybersecurity organisation.
- The opportunity to become a technical reference for Offensive Security in Portugal.
- Exposure to complex and diverse cybersecurity projects and customers.
- Continuous learning and professional development through training and certifications.
- Collaboration with highly experienced cybersecurity professionals across different areas and countries.
- Flexible working model according to local policy.
- Medium travel depending on project requirements.
- Competitive compensation package and benefits.
Your career at Thales
At Thales, your career can evolve in different directions. You will have the opportunity to develop your expertise, explore new technologies and work with international teams and customers.
You can continue developing as a technical cybersecurity expert, move towards technical leadership, or explore new areas and opportunities across the Thales Group.
Join Thales and help us build a safer digital world.
Skills Required
- 5+ years of professional experience in offensive security, penetration testing, red teaming, or security auditing
- Hands-on web application and API security testing experience
- Infrastructure and network penetration testing experience
- Cloud security assessment experience
- Vulnerability assessment and exploitation experience
- Red team and adversary simulation experience
- Strong understanding of attack techniques, vulnerabilities, and security controls
- Ability to independently plan and deliver complex security assessments
- Excellent analytical, reporting, and communication skills
- Ability to communicate technical risks and recommendations to technical and business stakeholders
- Ability to collaborate with SOC, DFIR, threat intelligence, and security engineering teams
- English proficiency at C1 level
- Professional working proficiency in Portuguese
- Purple Team exercise and security control validation experience
- Experience in cloud offensive security, mobile security, OT/ICS, IoT, or social engineering
- Experience supporting incident response or post-incident investigations from an offensive security perspective
- Knowledge of MITRE ATT&CK and experience applying it to adversary simulation
- Experience working directly with customers and presenting technical findings
- Relevant offensive security certifications such as OSEP, OSCP, OSCE3, GXPN, GPEN, GWAPT, CREST, CRTE, or CARTP
Thales Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Thales and has not been reviewed or approved by Thales.
-
Retirement Support — Retirement plans with employer contributions and matches, profit sharing, and share purchase opportunities are emphasized across multiple regions. These elements are positioned as competitive components of total rewards.
-
Leave & Time Off Breadth — Generous PTO that increases with tenure, paid holidays, and paid military, maternity, and paternity leave are described. This breadth supports work–life balance across locations.
-
Flexible Benefits — Hybrid work options, flexible schedules, and parental supports such as childcare benefits and leave for sick children are available in several markets. Flexibility is presented as a core part of the employee experience.
Thales Insights
What We Do
Thales is a global high technology leader investing in digital and “deep tech” innovations – connectivity, big data, artificial intelligence, cybersecurity and quantum technology – to build a future we can all trust, which is vital to the development of our societies. The company provides solutions, services and products that help its customers – businesses, organisations and states – in the defence, aeronautics, space, transportation and digital identity and security markets to fulfil their critical missions, by placing humans at the heart of the decision-making process.
