Offensive Security Engineer (Penetration Testing | Red Team | Adversary Simulation)

Description

The company is hiring a penetration tester to help with offensive security assessments and incident response across enterprise environments.

The role pairs advanced penetration testing with hands-on work during live cyber incidents, threat investigations and ongoing security improvement, alongside DFIR, SOC and security operations staff.

Responsibilities

• Run penetration tests across web, network, cloud and Active Directory environments using current offensive techniques and tools.
• Support incident response work, including forensic analysis, threat hunting, checking that containment holds and rebuilding attacker activity.
• Write detailed technical reports and executive summaries with remediation advice you can act on.
• Work with blue team, DFIR, SOC and security engineering colleagues to sharpen detection and test security controls.
• Strengthen the organization's resilience through proactive testing and technical analysis.

Requirements

• You have at least 3 years of experience in penetration testing or offensive security roles.
• You have hands-on experience in web and API security testing, network and infrastructure assessments, cloud security testing and Active Directory security.
• You have supported or worked with incident response (DFIR) teams.
• You can explain technical findings clearly to both technical and non-technical stakeholders.
• You are proficient in Portuguese (C1) and English (C1).
• You are available for medium levels of travel.
• Preferred: OSCP, OSEP or OSWE certifications.
• Preferred: SANS GPEN or GCFA certifications.
• Preferred: experience in threat hunting and forensic analysis.
• Preferred: experience in security validation and purple teaming.
• Preferred: experience in attack simulation and adversary techniques.

Conditions

Hybrid or office working, depending on local policy.

Benefits

• Competitive compensation package and benefits.
• Work on advanced offensive security and incident response projects.
• Continuous training, with access to certifications and learning programs.
• Collaborate with SOC, DFIR and Threat Intelligence teams.
• International exposure.
• Room for personal development, with the option to move into other domains, new products, customers or countries, or into more complex solutions.
• Choose between a technical expertise track or a leadership path.
• Build an international career within an engineering group.