Senior Red Team Analyst

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Execute penetration tests and security evaluations

• Carry out security assessments for APIs, web applications, and cloud environments

• Detect vulnerabilities and oversee security risks

• Assess the security of microservices and distributed architectures

• Work in collaboration with engineering and cybersecurity teams

• Document security findings and offer remediation recommendations

• Perform AI-driven security analysis and research

• Create security automation solutions and tools

• Keep security documentation and procedures up to date

• Assist with PCI DSS, ISO 27001, and various compliance mandates

• Engage in threat research and utilize offensive security strategies

• Interact with stakeholders and promote security awareness

• Continuously enhance Red Team methodologies and processes

⛳️ Requirements

• Minimum of 5 years of relevant experience with a Bachelor's Degree, or at least 2 years of relevant experience with an advanced degree (e.g., Masters/MBA/JD/MD), or no experience with a PhD

• B1 English proficiency for conversational purposes

• Over 3 years of experience in offensive security, penetration testing, or vulnerability assessment roles

• Experience in collaborating with development teams and cybersecurity units to identify, communicate, and resolve security issues

• Fundamental understanding of application security vulnerabilities across APIs, microservices, and distributed systems

• Proficient in automation and scripting, with experience in developing tools, workflows, or processes that minimize manual tasks and enhance the scalability of security operations

• Familiarity with OWASP Top 10 and NIST SP 800-115 security testing guidelines

• Basic understanding of PCI DSS requirements and experience in regulated settings

• Fundamental knowledge of AWS services and cloud infrastructures

• Preferred: strong verbal and written communication skills for articulating technical findings and influencing remediation actions

• Preferred: experience supporting critical systems in the financial services sector

• Preferred: excellent documentation skills for security reports, procedures, and technical documentation

• Preferred: knowledge of ISO 27001 security controls and audit requirements

🏝️ Benefits

• Remote work opportunity

• Chance to make a significant impact and tackle meaningful challenges

• Opportunities for skills enhancement and professional growth through impactful assignments

• Equal employment opportunity protections