Red Team Operator

CAPGEMINI ENGINEERING

At Capgemini Engineering, the world leader in engineering services, we bring together a global team of engineers, scientists, and architects to help the world's most innovative companies unleash their potential. From autonomous cars to lifesaving robots, our digital and software technology experts think outside the box as they provide unique R&D and engineering services across all industries.

Join us for a career full of opportunities. Where you can make a difference. Where no two days are the same.

YOUR ROLE

Joining Capgemini Engineering as a Red Team Operator / Penetration Tester, you will be part of our Cybersecurity team, contributing to offensive security engagements and helping clients assess and strengthen their security posture through advanced penetration testing and vulnerability exploitation activities.

In this role you will play a key role in:

• Performing Web Application Penetration Tests, identifying and validating security vulnerabilities across different environments and technologies.
• Conducting vulnerability assessments and exploitation activities to demonstrate business impact and security risks.
• Identifying, exploiting, and documenting vulnerabilities such as XSS, SQL Injection, CSRF, Clickjacking, CRLF Injection, LFI, and IDOR.
• Using industry-standard tools such as Burp Suite and SQLMap to support security testing activities.
• Developing and maintaining scripts and automations in Python and Bash to improve testing efficiency and support offensive security operations.
• Producing high-quality technical reports with clear remediation recommendations and risk assessments.
• Collaborating with internal cybersecurity teams and clients to support remediation efforts and improve overall security maturity.

YOUR PROFILE

We are looking for a motivated cybersecurity professional with a passion for offensive security, vulnerability research, and ethical hacking.

• Minimum of 2 years of experience in Penetration Testing, preferably focused on Web Application Security.
• Proven hands-on experience in identifying and exploiting Web vulnerabilities, including XSS, SQL Injection, CSRF, Clickjacking, CRLF Injection, LFI, and IDOR.
• Practical experience using Burp Suite and SQLMap.
• Good scripting and automation skills in Python and Bash.
• CEH or PNPT certification is mandatory.
• Strong analytical thinking, problem-solving abilities, and attention to detail.
• Good communication skills and ability to present technical findings clearly.

Nice to Have

• OSCP, eJPT, or CRTO certifications.
• Experience participating in Red Team operations and adversary simulation exercises.
• Knowledge of OWASP Testing Methodology and MITRE ATT&CK Framework.
• Experience with cloud security assessments.

WHAT YOU'LL LOVE ABOUT WORKING HERE

• Join a multicultural and inclusive team environment.
• Enjoy a supportive atmosphere promoting work-life balance.
• Hybrid work model.
• Your career growth is central to our mission, with continuous learning opportunities and specialized cybersecurity training.
• Access valuable training and certifications in cutting-edge technologies.
• Engage in exciting national and international cybersecurity projects.
• Health and life insurance.
• Referral program with bonuses for talent recommendations.
• Great office location in Lisbon.

About Capgemini

Capgemini is the business transformation partner for enterprises in the age of AI. We help organizations imagine and build an intelligent, sustainable future, combining AI, technology, and human ingenuity to transform how they operate, innovate, and grow. With unique end-to-end capabilities spanning strategy, technology, engineering, and intelligent operations, we bring together deep industry expertise and market-leading capabilities in AI, cloud, and data to turn ambition into measurable business outcomes at scale. Supported by a robust ecosystem of partners and nearly 60 years of expertise, Capgemini is a responsible and diverse global organization operating in more than 50 countries.