Analista de Sistema de Segurança Sênior

Accountabilities: Continuously and adversarially test the effectiveness of security controls, including Web Application Firewalls (WAF), Endpoint Detection and Response (EDR), Security Information and Event Management (SIEM) rules, and Data Loss Prevention (DLP) solutions, against emerging attack techniques. Build and maintain an internal arsenal of specialized scripts, tools, and methodologies to support Red Team operations, including custom payloads, controlled phishing simulations, implants, and defense-evasion techniques. Act as a strategic Purple Team liaison, sharing findings, attack insights, and adversarial techniques with Blue Team/SOC, Security Architecture, and Security Engineering teams. Lead technical debriefings, knowledge-sharing sessions, and workshops to translate offensive security findings into actionable defensive improvements. Design detailed attack simulation plans, define Rules of Engagement (RoE), and coordinate exercises in alignment with risk committees and strategic leadership. Emulate adversary tactics across the organization's technology ecosystem, identifying weaknesses in supplier interfaces, technology partners, DevOps pipelines, and corporate infrastructure. Assess security across development and infrastructure environments, including GitHub/GitLab platforms, Kubernetes, and multi-cloud environments. Evaluate the effectiveness of existing detection and response capabilities and recommend improvements based on realistic attack scenarios. Requirements: Bachelor's degree in Computer Science, Engineering, Information Security, Networks, or a related technology field. At least five years of proven experience in offensive security, particularly Red Team operations and/or advanced penetration testing. Hands-on experience with adversary emulation, threat simulation campaigns, or objective-driven corporate attack exercises. Strong knowledge of Active Directory architecture and exploitation, as well as hybrid cloud environments involving Entra ID, Azure, and AWS. Practical expertise in defense-evasion techniques, process injection, AMSI bypass, and methods for testing modern EDR solutions. Advanced knowledge of Command and Control (C2) infrastructure setup and operation, using platforms such as Cobalt Strike, Mythic, Sliver, Havoc, or custom frameworks. Experience with obfuscation techniques, redirectors, and other methods used in realistic adversary simulations. Strong understanding of network protocols and services, Kerberos abuse, constrained and unconstrained delegation, and lateral movement techniques. Ability to document technical findings, communicate attack scenarios, and collaborate effectively with security and engineering teams. Nice to have: Postgraduate qualification in offensive security or cybersecurity. Nice to have: Experience in financial services, payment processing, or highly regulated critical infrastructure environments. Nice to have: Relevant offensive security certifications, such as CRTO, CRTE, CRTP, OSEP, CPTS, CARTP, CRTL, OSCP, OSWE, CWEE, GPEN, or GXPN. Benefits: Fully remote work arrangement within Brazil. Full-time employment. Health insurance and dental coverage. Wellhub (Gympass) fitness and wellbeing benefits. Transportation allowance. Meal and food allowances. Access to a corporate learning platform and partnerships with educational institutions. Private pension plan. Life insurance. Day off benefit. Extended maternity and paternity leave. Opportunity to work on advanced cybersecurity challenges in a technology and financial services environment. Inclusive workplace open to professionals with disabilities and committed to diversity and equal opportunities. Salary and specific compensation details are not disclosed in the original listing.