Senior Security Systems Analyst

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Continuously and adversarially evaluate the efficiency of various security controls, including WAF, EDR, SIEM rules, and DLP, against current attack methodologies;

• Develop and sustain an internal collection of specialized scripts, tools, and techniques, encompassing custom payloads, controlled phishing tools, implants, and evasion strategies;

• Serve as the strategic Purple Team representative, disseminating findings, insights, and an understanding of the attacker mindset to the Blue Team (SOC), Security Architecture, and Security Engineering teams;

• Facilitate debriefing sessions and workshops;

• Formulate comprehensive attack simulation plans, establish Rules of Engagement (RoE), and coordinate exercises with risk committees and executive leadership;

• Replicate intrusion methodologies throughout the bank’s technology value chain by assessing interfaces with IT vendors, partner integrators, DevOps pipelines (GitHub/GitLab, Kubernetes), and multi-cloud corporate environments.

⛳️ Requirements

• Bachelor’s degree in Computer Science, Engineering, Information Security, Networking, or related technology disciplines;

• A minimum of 5 years of demonstrable experience in Offensive Security (Red Team and/or advanced penetration testing);

• Hands-on experience with adversary emulation, threat simulation campaigns, or intrusion operations driven by business objectives;

• Proficient understanding of the architecture and deep exploitation of Active Directory and hybrid cloud environments (Entra ID, Azure, AWS);

• Advanced skills in defense evasion, process injection, AMSI bypassing, and evading modern EDR solutions;

• Expertise in deploying and managing C2 infrastructure (Cobalt Strike, Mythic, Sliver, Havoc, or custom solutions), utilizing obfuscation techniques and redirectors;

• Familiarity with network protocols and services, Kerberos abuse, constrained/unconstrained delegation, and lateral movement;

• Postgraduate qualification in Offensive Security/Cybersecurity;

• Background in financial services, payment companies, or highly regulated critical infrastructure organizations;

• Preferred certifications: CRTO, CRTE/CRTP, OSEP, CPTS, CARTP, CRTL, OSCP, OSWE, CWEE, GPEN, or GXPN.

🏝️ Benefits

• Health and dental insurance

• Wellhub (Gympass)

• Transportation allowance

• Meal and food allowances

• Academia Mercantil (learning platform) and partnerships with educational institutions

• Private pension plan

• Life insurance

• Day off

• Extended maternity and paternity leave