Junior/Mid Pentest

Descrizione del lavoro:

act digital is a global digital transformation consulting group. We have more than 5.000 employees worldwide, with offices in Brazil, the United States, Canada, France, Portugal, Germany, Poland, Spain, Belgium, Luxembourg, Morocco and Serbia. We support the world's largest groups across the entire digital product development lifecycle: from digital design to growth and scaling strategies, through software engineering, architecture definition, data engineering and data science solutions. We focus on accelerating the digital transformation of global leaders in their industry. Our group has experienced annual growth of more than 30% for 10 years.
We are looking for an Application Security Engineer with a strong focus on penetration testing and vulnerability assessment to join a central cybersecurity team. About the Role You will be responsible for identifying and assessing security vulnerabilities in applications, supporting development teams in mitigating risks and improving secure coding practices. This role combines pentesting activities, vulnerability management, and AppSec integration within the SDLC in a large-scale enterprise environment. Key Responsibilities 1. Pentesting & Vulnerability Assessment Perform application security testing (SAST, DAST, SCA) Identify, analyze, and qualify vulnerabilities Validate and prioritize security findings Support remediation and re-testing 2. Security in the SDLC Contribute to the integration of security into the development lifecycle Support deployment of code analysis and dependency scanning tools 3. Collaboration with Development Teams Work closely with developers to: Explain vulnerabilities Recommend secure solutions Promote secure coding practices 4. Security Monitoring & Reporting Track remediation progress and ensure compliance with deadlines Contribute to reporting and security metrics 5. AppSec Community & Awareness Promote: Security awareness Best practices Secure development guidelines Profile & Requirements 2+ years of experience in Cybersecurity / Pentesting / Application Security Strong understanding of: OWASP Top 10 Web application vulnerabilities Experience with: SAST / DAST / SCA tools (Fortify, Qualys, Nexus IQ or similar) Vulnerability assessment and validation Basic knowledge of development: Java, Angular, REST APIs Experience with: Python scripting / automation Modern environments (e.g. Kubernetes) Hybrid Work 2/3x in the office in Porto

Requisiti del candidato:

We are looking for a junior/Mid Pentest