Cyber Security Engineer – Penetration Tester (f/m/d)

Über das Unternehmen

We believe in the positive power of energy – and in people who are ready to shape the future with their ideas and dedication. Thats why we established the EnBW Tech Hub in Portugal to drive innovation and develop digital solutions that support the energy transition and improve the way we work.

As a key pillar of EnBWs technological transformation, the Tech Hub plays a vital role in our journey. EnBW is one of the largest energy companies, headquartered in Karlsruhe, Germany, employing approximately 30,000 people. ENBW IT SOLUTIONS, UNIPESSOAL LDA, a wholly owned subsidiary of EnBW, operates as an integral part of EnBWs IT division. In Lisbon, we bring together experts in IT, administration, project management and HR to collaborate in an agile, international environment and create smart, scalable solutions.

Unser Angebot

Private supplementary health insurance including coverage for your immediate family, offering peace of mind beyond the public system.

Meal allowance to support your daily work routines.

Additional paid days off (24 December & Carnival Day) on top of statutory annual leave - giving you more time for what matters.

Hybrid working model with a mix of remote and office days to support flexibility and modern ways of working.

Intercultural collaboration & cross border projects - grow your international experience by working with colleagues in Germany.

Modern technology and continuous development opportunities to support your growth and keep you up to date in your field.

Bright, appealing offices in a trendy Lisbon area, designed for productive and enjoyable workdays.

Vielfältige Aufgaben

Conduct penetration tests in web, Windows, cloud or AI environments

Use and maintain our security scanning and attack surface monitoring solutions

Identify, analyze, and exploit security vulnerabilities across internal and external systems

Simulate real-world attack scenarios to assess the effectiveness of existing security measures

Document findings and provide clear, actionable remediation recommendations

Collaborate with IT and development teams to improve overall security posture

Stay up to date with the latest threats, vulnerabilities, and attack techniques, including emerging trends in AI-driven security

Automated scanning and other topics related to security testing

Überzeugendes Profil

Must-haves:

Proven experience in penetration testing or offensive security as well as web applications

Solid understanding of common attack vectors

Hands-on experience with common pentesting tools and frameworks

Ability to write clear and structured security reports

Strong analytical thinking and problem-solving skills

Nice-to-haves:

Experience with red teaming or advanced persistent threat simulations

Knowledge of:

Cloud security

Windows Active Directory / Entra ID and Network security

AI/ML security

OT/Embedded Security

Relevant certifications are a plus

Über den Bereich

The EnBW Cyber Defense department delivers centralized cybersecurity services across the organization, including enterprise-wide Vulnerability Management, Security Testing, and the operation of a Security Operations Center (SOC) for EnBW and connected business units. The EnBW-CERT, as part of the department coordinates the response to major or cross-organizational cyber incidents and manages mandatory reporting to authorities. In addition, the Cyber Defense Center provides consolidated cyber threat and status reporting, ensuring transparency on the current cyber risk landscape and the effectiveness of EnBWs cybersecurity capabilities.