Offensive Cyber Security Engineer

Job description

Job Description – Offensive Cyber Security Engineer Location: Porto, Portugal (Hybrid): As an Offensive Cyber Security Engineer, you will act as an ethical attacker, continuously identifying, validating, and helping remediate critical security risks across cloud-native infrastructure, applications, APIs, and corporate environments. This is a highly technical, hands-on role combining advanced threat modeling with real-world breach and attack simulation. Key Responsibilities: - Lead structured threat modeling activities (STRIDE, attack trees, MITRE ATT&CK) for new features and architectural changes - Design and execute advanced red team engagements and breach & attack simulation (BAS) campaigns - Conduct persistent and stealthy operations simulating advanced threat actors - Perform assume-breach scenarios across endpoints, cloud, identities, and external attack surfaces - Execute physical, social engineering, and hybrid attack scenarios when required - Run automated and manual adversary emulation campaigns using industry tools (e.g., Cobalt Strike, Sliver, Caldera, Atomic Red Team) - Develop custom tooling, payloads, and infrastructure to bypass modern security controls (EDR/XDR, SIE...