Analista de Sistema de Segurança Sênior

Jobgether; Brasil; Remote; BRL 180,000 - 320,000; Full time

Benefits offered by this job

Health insurance

Dental coverage

Wellhub (Gympass) fitness and welbeing

Transportation allowance

Meal and food allowances

Access to corporate learning platform

Private pension plan

Life insurance

Day off

Parental leave (maternity/paternity)

Inclusive workplace

Learning platform access

Job summary

A Jobgether, em parceria com empresa líder, busca Analista de Sistema de Segurança Sênior para atuar remotamente no Brasil. O profissional liderará simulações de adversários, avaliará controles de segurança e desenvolverá ferramentas para fortalecer defesas em ambientes de fintech.

Requisitos incluem experiência avançada em segurança ofensiva, AD/Entra ID, Azure/AWS e técnicas de evitação, com disponibilidade para atuação remota e benefício de inclusão para PwD.

Qualifications

• Mínimo de cinco anos de experiência em segurança ofensiva, especialmente Red Team/pentest.
• Experiência prática com emulação de adversários, campanhas de simulação de ameaças ou exercícios corporativos.
• Conhecimento avançado de AD/Entra ID, Azure e AWS em ambientes híbridos.
• Conhecimento de técnicas de evitação, injeção de processos, AMSI bypass e testes de EDR modernos.
• Experiência com infraestrutura C2 (Cobalt Strike/Mythic/Sliver/Havoc ou frameworks próprios).
• Experiência com técnicas de ofuscação, redirecionadores e simulações adversárias realistas.
• Compreensão de redes, Kerberos, delegação e movimento lateral.
• Habilidade de documentar resultados técnicos e comunicar cenários de ataque a equipes de segurança e engenharia.
• Dica: pós-graduação em segurança ofensiva e experiência em serviços financeiros são diferenciais.
• Certificações relevantes (CRTO, CRTE, CRTP, OSCP etc.) são bem-vindas.

Responsibilities

• Testar continuamente a eficácia de controles de segurança em ambientes financeiros.
• Construir ferramentas e scripts para operações Red Team.
• Atuar como liaison entre Red Team e Blue Team/SOC/Arquitetura de Segurança.
• Conduzir debriefings técnicos e workshops para traduzir achados em melhorias defensivas.
• Projetar planos de simulação de ataque, RoE e coordenar exercícios com liderança de risco.
• Representar táticas de adversário em todo o ecossistema tecnológico da organização.
• Avaliar segurança em desenvolvimento e infração, incluindo GitHub/GitLab, Kubernetes e multi-cloud.
• Avaliar capacidades de detecção e resposta e recomendar melhorias com base em cenários reais.

Skills

Red Team operations

Threat emulation

Penetration testing

Adversary simulation

C2 infrastructure

Active Directory

Cloud security

DevOps security

Team communication

Education

Bachelor's degree in Computer Science, Engineering, Information Security, Networks, or related

Postgraduate qualification in offensive security or cybersecurity

Tools

Cobalt Strike

Mythic

Sliver

Havoc

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for aAnalista de Sistema de Segurança Sênior based in Brazil.

We are seeking an experienced cybersecurity professional to strengthen the security posture of critical financial technology environments through advanced offensive security practices. In this senior role, you will lead adversary simulations, assess the effectiveness of security controls, and identify vulnerabilities across complex enterprise systems. You will develop specialized tools and methodologies to replicate real-world attack techniques and test organizational resilience. Working closely with Blue Team, SOC, Security Architecture, and Engineering teams, you will help turn offensive findings into stronger defensive capabilities. You will also coordinate strategic attack simulations and collaborate with stakeholders to improve security maturity. This is a fully remote, full-time opportunity, also open to professionals with disabilities (PwD).

Accountabilities

• Continuously and adversarially test the effectiveness of security controls, including Web Application Firewalls (WAF), Endpoint Detection and Response (EDR), Security Information and Event Management (SIEM) rules, and Data Loss Prevention (DLP) solutions, against emerging attack techniques.
• Build and maintain an internal arsenal of specialized scripts, tools, and methodologies to support Red Team operations, including custom payloads, controlled phishing simulations, implants, and defense-evasion techniques.
• Act as a strategic Purple Team liaison, sharing findings, attack insights, and adversarial techniques with Blue Team/SOC, Security Architecture, and Security Engineering teams.
• Lead technical debriefings, knowledge-sharing sessions, and workshops to translate offensive security findings into actionable defensive improvements.
• Design detailed attack simulation plans, define Rules of Engagement (RoE), and coordinate exercises in alignment with risk committees and strategic leadership.
• Emulate adversary tactics across the organization's technology ecosystem, identifying weaknesses in supplier interfaces, technology partners, DevOps pipelines, and corporate infrastructure.
• Assess security across development and infrastructure environments, including GitHub/GitLab platforms, Kubernetes, and multi-cloud environments.
• Evaluate the effectiveness of existing detection and response capabilities and recommend improvements based on realistic attack scenarios.

Requirements

• Bachelor's degree in Computer Science, Engineering, Information Security, Networks, or a related technology field.
• At least five years of proven experience in offensive security, particularly Red Team operations and/or advanced penetration testing.
• Hands-on experience with adversary emulation, threat simulation campaigns, or objective-driven corporate attack exercises.
• Strong knowledge of Active Directory architecture and exploitation, as well as hybrid cloud environments involving Entra ID, Azure, and AWS.
• Practical expertise in defense-evasion techniques, process injection, AMSI bypass, and methods for testing modern EDR solutions.
• Advanced knowledge of Command and Control (C2) infrastructure setup and operation, using platforms such as Cobalt Strike, Mythic, Sliver, Havoc, or custom frameworks.
• Experience with obfuscation techniques, redirectors, and other methods used in realistic adversary simulations.
• Strong understanding of network protocols and services, Kerberos abuse, constrained and unconstrained delegation, and lateral movement techniques.
• Ability to document technical findings, communicate attack scenarios, and collaborate effectively with security and engineering teams.
• Nice to have: Postgraduate qualification in offensive security or cybersecurity.
• Nice to have: Experience in financial services, payment processing, or highly regulated critical infrastructure environments.
• Nice to have: Relevant offensive security certifications, such as CRTO, CRTE, CRTP, OSEP, CPTS, CARTP, CRTL, OSCP, OSWE, CWEE, GPEN, or GXPN.

Benefits

• Fully remote work arrangement within Brazil.
• Full-time employment.
• Health insurance and dental coverage.
• Wellhub (Gympass) fitness and wellbeing benefits.
• Transportation allowance.
• Meal and food allowances.
• Access to a corporate learning platform and partnerships with educational institutions.
• Private pension plan.
• Life insurance.
• Day off benefit.
• Extended maternity and paternity leave.
• Opportunity to work on advanced cybersecurity challenges in a technology and financial services environment.
• Inclusive workplace open to professionals with disabilities and committed to diversity and equal opportunities.
• Salary and specific compensation details are not disclosed in the original listing.