About the Position

Offensive Security Specialist M/F – Hybrid (Porto)

At Sysmatch, we are looking for an Offensive Security Specialist to join our team in Porto. With over 25 years of experience, Sysmatch is a well-established name in IT Consultancy and Outsourcing, involved in both national and international projects that promote excellence in technology and services.

Responsibilities

Conduct penetration testing (pentesting) and technical security assessments of web applications, APIs, cloud environments, and internal/external infrastructures (including Active Directory / Entra ID).
Perform manual testing, vulnerability validation, and attack-path chaining beyond automated scanning tools.
Integrate AI-assisted tools (LLMs, coding assistants, and agent-based tools) into offensive security processes.
Develop or customize scripts and offensive security tools to support specific assessment scenarios.
Produce clear, technically accurate, and actionable documentation detailing identified vulnerabilities, business impact, and remediation recommendations.
Collaborate closely with development, infrastructure, and security teams to communicate technical security issues and support remediation efforts.
Contribute to the continuous improvement of internal methodologies, knowledge sharing, research, and offensive security capabilities.

Requirements

Strong hands-on experience in penetration testing and technical security assessments.
Practical knowledge of offensive security tools such as Burp Suite, Nmap, Metasploit, or equivalent frameworks.
In-depth understanding of web application security (OWASP Top 10, WSTG), API security, network infrastructure security, and Active Directory / Entra ID environments.
Demonstrated proficiency in the use of AI tools, leveraging them as productivity accelerators while maintaining critical thinking, independent technical judgment, and proper validation of results.
Scripting and/or programming skills to customize tools, automate repetitive tasks, and develop tailored payloads.
High degree of autonomy, proactivity, critical thinking, and problem-solving ability in complex security assessment scenarios.
Fluent English proficiency, with the ability to communicate technical concepts effectively to both technical and non-technical stakeholders.

Nice to Have

Relevant offensive security certifications such as OSCP, OSWA, OSWE, CRTO, eWPT, or equivalent.
Active participation in CTFs (Capture The Flag), Bug Bounty programs, cybersecurity research, or the development of open-source offensive security tools.

We Offer

A personalized onboarding experience that welcomes and supports you throughout your journey.
Regular and constructive feedback to boost your growth and development.
A dynamic project with a prestigious client.
A competitive salary package, aligned with your experience and skills.
Career development opportunities through ambitious and innovative tech projects.
A collaborative culture that values creativity and individual progress.
Access to exclusive discounts in a wide network of partners, including health, wellness, travel, culture, gastronomy, leisure, and much more.
Team-building events and initiatives that create memorable shared experiences.

Salary Range

40.000€ - 50.000€ Gross Annual + Benefits

About the Company

Sysmatch invests in people to achieve our clients' goals, which also become our goals when they trust their technological future to our teams. Our investment in technological specialization has over 20 years of existence on the national and international scene, with information technology solutions developed for each client, for each industry. We live in different times and it is unquestionable how indispensable technology has become in our daily lives. We are looking for experts to join our teams in each of the technology fields, who want to make a difference and build a solid career in IT.

To apply, just send your updated CV with the reference RS/OSS/C to: [email protected]

Offensive Security Specialist M/F – Hybrid (Porto)

Job description