Cyber Security Engineer – Penetration Tester (f/m/d)

About the company

We believe in the positive power of energy – and in people who are ready to shape the future with their ideas and dedication. That’s why we established the EnBW Tech Hub in Portugal to drive innovation and develop digital solutions that support the energy transition and improve the way we work.

As a key pillar of EnBW’s technological transformation, the Tech Hub plays a vital role in our journey. EnBW is one of the largest energy companies, headquartered in Karlsruhe, Germany, employing approximately 30,000 people. ENBW IT SOLUTIONS, UNIPESSOAL LDA, a wholly owned subsidiary of EnBW, operates as an integral part of EnBW's IT division. In Lisbon, we bring together experts in IT, administration, project management and HR to collaborate in an agile, international environment and create smart, scalable solutions.

Your tasks

• Conduct penetration tests in web, Windows, cloud or AI environments
• Use and maintain our security scanning and attack surface monitoring solutions
• Identify, analyze, and exploit security vulnerabilities across internal and external systems
• Simulate real-world attack scenarios to assess the effectiveness of existing security measures
• Document findings and provide clear, actionable remediation recommendations
• Collaborate with IT and development teams to improve overall security posture
• Stay up to date with the latest threats, vulnerabilities, and attack techniques, including emerging trends in AI-driven security
• Automated scanning and other topics related to security testing

Your profile

Must-haves: - Proven experience in penetration testing or offensive security as well as web applications - Solid understanding of common attack vectors - Hands-on experience with common pentesting tools and frameworks - Ability to write clear and structured security reports - Strong analytical thinking and problem-solving skills

Nice-to-haves: - Experience with red teaming or advanced persistent threat simulations - Knowledge of: - Cloud security - Windows Active Directory / Entra ID and Network security - AI/ML security - OT/Embedded Security - Relevant certifications are a plus

About the department

The EnBW Cyber Defense department delivers centralized cybersecurity services across the organization, including enterprise-wide Vulnerability Management, Security Testing, and the operation of a Security Operations Center (SOC) for EnBW and connected business units. The EnBW-CERT, as part of the department coordinates the response to major or cross-organizational cyber incidents and manages mandatory reporting to authorities. In addition, the Cyber Defense Center provides consolidated cyber threat and status reporting, ensuring transparency on the current cyber risk landscape and the effectiveness of EnBW’s cybersecurity capabilities.

Note:

The position you are applying for is related to the area of security-critical infrastructure. For this reason, our application process includes a so-called pre-employment screening. We will carry this out in the final step of the application process, provided we have received your consent for it. Details will be given during the recruitment process.

Contact

Are you interested? Apply online now! A cover letter is not required; we may ask a few job-specific questions in our application form.

In addition to EnBW, our recruiting team also recruits for other Group companies. If you have any questions, please contact Boulay, Andrea | a.boulay@enbw.com.

Everyone is embraced here, irrespective of gender, age, sexual orientation, heritage, faith, beliefs, or physical ability.

Our information on data protection for applicants (f/m/d).