LUZA PT/HITO Solutions | Contract OR B2B Offensive Cyber Security EngineerMatosinhos, Portugal | Posted on 03/19/2026 Step into a dynamic ecosystem where the future of business is created and lived every day. Be part of it!At LUZA Group, passion, perseverance, and the drive to excel define our path to success.Founded in 2006, we are a Portuguese multinational with over 1,200 talented professionals and a turnover surpassing 30M. With a strong presence in key markets (Portugal, Spain, Morocco, Brazil, Mexico, the United States, and China) we deliver innovative solutions in engineering, IT, design, consulting, Industry 4.0, training, and recruitment. Our people and their talent power everything we do.This is a moment of growth and opportunity. The future belongs to visionary minds. Will you join us?Tasks and ResponsabilitiesJob Description – Offensive Cyber Security EngineerLocation Porto, Portugal (Hybrid)As an Offensive Cyber Security Engineer, you will act as an ethical attacker, continuously identifying, validating, and helping remediate critical security risks across cloud-native infrastructure, applications, APIs, and corporate environments. This is a highly technical, hands-on role combining advanced threat modeling with real-world breach and attack simulation.Key Responsibilities Lead structured threat modeling activities (STRIDE, attack trees, MITRE ATT&CK) for new features and architectural changesDesign and execute advanced red team engagements and breach & attack simulation (BAS) campaignsConduct persistent and stealthy operations simulating advanced threat actorsPerform assume-breach scenarios across endpoints, cloud, identities, and external attack surfacesExecute physical, social engineering, and hybrid attack scenarios when requiredRun automated and manual adversary emulation campaigns using industry tools (e.g., Cobalt Strike, Sliver, Caldera, Atomic Red Team)Develop custom tooling, payloads, and infrastructure to bypass modern security controls (EDR/XDR, SIEM)Perform post-exploitation activities and lateral movement across Azure, Kubernetes, Active Directory, and SaaS environmentsProvide actionable remediation guidance and collaborate with blue teams and engineeringContribute to detection engineering through threat intelligence, playbooks, and detection logicTrack and report on attack surface and critical risk exposureMentor junior team members and promote offensive security awarenessRequirementsBachelor's degree in Computer Science, Information Security, or related fieldMaster's degree is a plusExperience 5+ years of hands-on experience in offensive security (red teaming, penetration testing, or similar)Proven experience executing full-scope red team operations, especially in Azure environmentsTechnical Skills Deep expertise in threat modeling methodologies and practical applicationStrong knowledge of MITRE ATT&CK, Cyber Kill Chain, and adversary TTPsAdvanced scripting/development skills (Python, Go, PowerShell, Bash)Experience with C2 frameworks (Cobalt Strike, Sliver, Covenant, etc.)Strong understanding of cloud (Azure), Kubernetes, IAM, CI/CD, and modern architecturesExperience with post-exploitation, lateral movement, and evasion techniquesCertifications (Strongly Preferred) OSCP, OSCE, OSEP, CARTPCRTO, PNPT, GREM or equivalentNice to Have Experience with BAS platforms (e.g., SafeBreach, XM Cyber, AttackIQ)Contributions to security research, bug bounty, or open-source projectsExperience in social engineering, physical security, and OSINTSoft Skills Strong communication and stakeholder engagement skillsAbility to collaborate across technical and non-technical teamsAnalytical mindset with strong problem-solving capabilities#J-18808-Ljbffr