Role & seniority
- Cybersecurity Penetration Testing / Offensive Security role (level not explicitly stated; performs security testing and reporting)
- Part of EnBW Cyber Defense (security testing, vulnerability management, SOC support)
Stack/tools
- Security scanning & attack surface monitoring solutions (company tools)
- Common pentesting tools and frameworks (not specified)
- Environments: web, Windows, cloud, AI; also automation/automated scanning
Top 3 responsibilities
- Conduct penetration tests and real-world attack simulations across internal/external systems
- Identify, analyze, and exploit vulnerabilities and assess existing security controls
- Document findings with actionable remediation recommendations; collaborate with IT/dev to improve security posture
Must-have skills
- Proven penetration testing / offensive security experience, especially for web applications
- Solid understanding of common attack vectors
- Hands-on experience with pentesting tools/frameworks
- Ability to write clear, structured security reports
- Strong analytical and problem-solving skills
Nice-to-haves
- Experience with red teaming / advanced persistent threat (APT) simulations
- Knowledge of cloud security
- Knowledge of Windows Active Directory / Entra ID and network security
- Knowledge of AI/ML security; OT/embedded security

Full Description

About The Company

We believe in the positive power of energy – and in people who are ready to shape the future with their ideas and dedication. That’s why we established the EnBW Tech Hub in Portugal to drive innovation and develop digital solutions that support the energy transition and improve the way we work.

As a key pillar of EnBW’s technological transformation, the Tech Hub plays a vital role in our journey. EnBW is one of the largest energy companies, headquartered in Karlsruhe, Germany, employing approximately 30,000 people. ENBW IT SOLUTIONS, UNIPESSOAL LDA, a wholly owned subsidiary of EnBW, operates as an integral part of EnBW's IT division. In Lisbon, we bring together experts in IT, administration, project management and HR to collaborate in an agile, international environment and create smart, scalable solutions.

Our Benefits

Private supplementary health insurance including coverage for your immediate family, offering peace of mind beyond the public system. Meal allowance to support your daily work routines. Additional paid days off (24 December & Carnival Day) on top of statutory annual leave - giving you more time for what matters. Hybrid working model with a mix of remote and office days to support flexibility and modern ways of working. Intercultural collaboration & cross border projects - grow your international experience by working with colleagues in Germany. Modern technology and continuous development opportunities to support your growth and keep you up to date in your field. Bright, appealing offices in a trendy Lisbon area, designed for productive and enjoyable workdays.

Your tasks

Conduct penetration tests in web, Windows, cloud or AI environments Use and maintain our security scanning and attack surface monitoring solutions Identify, analyze, and exploit security vulnerabilities across internal and external systems Simulate real-world attack scenarios to assess the effectiveness of existing security measures Document findings and provide clear, actionable remediation recommendations Collaborate with IT and development teams to improve overall security posture Stay up to date with the latest threats, vulnerabilities, and attack techniques, including emerging trends in AI-driven security Automated scanning and other topics related to security testing

Your profile

Must-haves

Proven experience in penetration testing or offensive security as well as web applications Solid understanding of common attack vectors Hands-on experience with common pentesting tools and frameworks Ability to write clear and structured security reports Strong analytical thinking and problem-solving skills

Nice-to-haves

Experience with red teaming or advanced persistent threat simulations

Knowledge of

Cloud security
Windows Active Directory / Entra ID and Network security
AI/ML security
OT/Embedded Security
Relevant certifications are a plus

About The Department

The EnBW Cyber Defense department delivers centralized cybersecurity services across the organization, including enterprise-wide Vulnerability Management, Security Testing, and the operation of a Security Operations Center (SOC) for EnBW and connected business units. The EnBW-CERT, as part of the department coordinates the response to major or cross-organizational cyber incidents and manages mandatory reporting to authorities. In addition, the Cyber Defense Center provides consolidated cyber threat and status reporting, ensuring transparency on the current cyber risk landscape and the effectiveness of EnBW’s cybersecurity capabilities.

Note: The position you are applying for is related to the area of security-critical infrastructure. For this reason, our application process includes a so-called pre-employment screening. We will carry this out in the final step of the application process, provided we have received your consent for it. Details will be given during the recruitment process.

Contact

Are you interested? Apply online now! A cover letter is not required; we may ask a few job-specific questions in our application form.

In addition to EnBW, our recruiting team also recruits for other Group companies. If you have any questions, please contact Boulay, Andrea | a.boulay@enbw.com.

Everyone is embraced here, irrespective of gender, age, sexual orientation, heritage, faith, beliefs, or physical ability.

Our information on data protection for applicants (f/m/d).

Cyber Security Engineer – Penetration Tester (f/m/d)

Full Description

Knowledge of