Senior Consultant, Offensive Security, Proactive Security

This is a fully remote position, open to applicants in Brazil, +1 more country.

📋 Description

• Execute thorough penetration tests across networks, web applications, cloud infrastructures, and mobile platforms.

• Detect and exploit vulnerabilities, offering actionable remediation strategies.

• Create and sustain custom scripts, tools, and methodologies to streamline offensive security operations.

• Generate and present comprehensive engagement reports tailored for both technical and executive stakeholders.

• Partner with clients to define engagement scopes and synchronize testing methodologies, objectives, and deliverables.

• Conduct threat hunting and compromise evaluations to detect active or latent indicators of compromise.

• Perform cyber risk assessments utilizing NIST CSF, ISO 27001, and CIS Top 20 frameworks.

• Offer proactive recommendations to safeguard sensitive information and improve incident response capabilities.

• Serve as a client advocate for best practices in cybersecurity and alignment of security objectives.

⛳️ Requirements

• Bachelor’s Degree in Information Security, Computer Science, Cyber Security, or comparable professional experience.

• Over 4 years of professional experience in information security, particularly in penetration testing, vulnerability assessments, or red teaming.

• Practical experience with tools such as Metasploit, Burp Suite Pro, Nessus, or Cobalt Strike.

• Proficient in at least one scripting or programming language, including Python, PowerShell, Bash, or Ruby.

• Strong understanding of network protocols, as well as Windows, Linux, and cloud environments like AWS, Azure, and GCP.

• Candidates must identify as Persons with Disabilities (PwD).

• Resume must be submitted in English.

• Applicants must not require immigration sponsorship or work visa sponsorship for this role.

• Preferred: OSCP, OSCE, GPEN, GWAPT, or GXPN certification.

• Preferred: Experience in developing custom exploits and tools.

• Preferred: Familiarity with OWASP and MITRE ATT&CK frameworks.

• Preferred: Experience in public speaking, conference presentations, or contributions to cybersecurity publications.

🏝️ Benefits

• Required accommodations for all Persons with Disabilities.

• Commitment to an equal opportunity and inclusive workplace.

• Arrangement for remote work.

• No immigration sponsorship is provided.