Grupo QuintoAndar | Senior Offensive Security Engineer

Jobgether; Brasil; Remote; BRL 350,000 - 650,000; Full time

Benefits offered by this job

Profit sharing

Meal allowance

Health insurance

Dental coverage

Life insurance

Childcare subsidies

Home office allowance

Employee assistance

Job summary

Jobgether partners with a leading tech company to hire a Senior Offensive Security Engineer in Brazil. You will design an AI-powered offensive security program, develop autonomous agents, and lead cross-functional security initiatives across global cloud-native environments.

You will mentor engineers, influence technical standards, and translate complex findings into actionable risk mitigations for executive stakeholders.

Qualifications

• Extensive experience as a Senior or Staff Offensive Security Engineer, Red Team Specialist, or Principal Penetration Tester.
• Proven expertise conducting security assessments across web apps, APIs, distributed cloud environments, and internal networks.
• Hands-on experience developing or architecting LLM-powered applications, autonomous AI agents, agentic workflows, tool calling, and AI sandboxing environments.
• Strong knowledge of adversarial AI evaluation and the security implications of autonomous systems.
• Deep practical expertise in cloud-native technologies, container runtimes, Kubernetes architecture, and major cloud platforms.
• Experience securing Kubernetes environments, including RBAC, admission controllers, pod security standards, network policies, and service mesh architectures.
• Solid software engineering and programming skills to develop production-grade security tools and integrations.
• Experience integrating offensive security findings into vulnerability management tools like Jira/DefectDojo.
• Familiarity with SIEM platforms and detection engineering workflows.
• Proven ability to lead complex cross-functional initiatives.
• Strong business-oriented mindset for assessing vulnerabilities based on impact.

Responsibilities

• AI-Driven Security Architecture: Design, develop, and pilot an AI-powered offensive security platform using autonomous agents, LLMs, agentic frameworks, and orchestration pipelines to identify attack paths and assess applications, APIs, and cloud environments.
• Continuous Security Testing: Plan and execute offensive security assessments across global infrastructure, microservices, containers, and Kubernetes.
• Security Ecosystem Integration: Integrate findings with vulnerability management, SIEM/SOAR, threat intel feeds, and defensive workflows for automated remediation.
• Technical Documentation and Governance: Develop architecture docs, RFCs, agent protocols, automation standards, sandboxing, and containment boundaries.
• End-to-End Project Delivery: Lead cross-functional initiatives from scoping through deployment.
• Risk Assessment and Communication: Translate findings into business risks for leadership.
• Vulnerability Prioritization: Develop AI-powered prioritization and automated retesting after fixes.
• Incident Response: Provide offensive security expertise during incidents and lead post-incident reforms.
• Security Leadership and Mentorship: Lead architecture reviews and mentor security professionals.
• Cross-Functional Collaboration: Work with product, infra, engineering, and threat intel teams to improve resilience.

Skills

Offensive security

Red team

Security testing

Cloud security

Education

Bachelor's degree in a relevant field

Security certifications (OSCP/OSEP/OSWE)

Tools

Kubernetes

DefectDojo

Jira

OpenAI API

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Offensive Security Engineer based in Brazil.

We are seeking a highly experienced Senior Offensive Security Engineer to lead the development of an innovative, AI-driven offensive security program. In this strategic role, you will combine advanced penetration testing expertise, AI engineering, and security architecture to strengthen the organization's global security posture. You will design and build autonomous AI agents capable of continuously identifying vulnerabilities, mapping attack surfaces, and validating potential threats across complex cloud-native environments. Working closely with defensive security, threat intelligence, vulnerability management, and engineering teams, you will transform security findings into actionable risk mitigation strategies. You will also influence technical standards, lead cross-functional initiatives, and mentor other security professionals. This is an opportunity to shape the future of automated offensive security within a fast-growing, technology-driven environment.

Accountabilities:

• AI-Driven Security Architecture: Design, develop, and pilot an AI-powered offensive security platform using autonomous agents, LLMs, agentic frameworks, and orchestration pipelines to identify attack paths and assess applications, APIs, and cloud environments.
• Continuous Security Testing: Plan and execute systematic offensive security assessments across global infrastructure, microservices architectures, containerized workloads, and Kubernetes clusters.
• Security Ecosystem Integration: Integrate offensive security findings with vulnerability management systems, SIEM/SOAR platforms, cyber threat intelligence feeds, and defensive security workflows to enable continuous remediation and automated retesting.
• Technical Documentation and Governance: Develop technical architecture documents, RFCs, agent protocols, security automation standards, sandboxing mechanisms, and containment boundaries to ensure safe and reliable autonomous testing.
• End-to-End Project Delivery: Lead complex, cross-functional engineering initiatives from initial scoping and architecture through implementation and operational deployment.
• Risk Assessment and Communication: Translate attack paths, exploitation proof-of-concepts, vulnerability data, and technical findings into clear business risks and actionable recommendations for engineering leadership and executive stakeholders.
• Vulnerability Prioritization: Develop AI-powered processes to validate exploitability, assess compensating controls, prioritize remediation based on business exposure, and automatically retest vulnerabilities after fixes are deployed.
• Incident Response: Provide advanced offensive security expertise during critical incidents, participate in red team and purple team reviews, and lead corrective engineering initiatives following post-incident assessments.
• Security Leadership and Mentorship: Lead architecture reviews and threat modeling sessions, establish engineering standards, and mentor senior and mid-level security professionals.
• Cross-Functional Collaboration: Work closely with product, infrastructure, engineering, defensive security, and threat intelligence teams to improve organizational resilience and security practices.

Requirements:

• Extensive experience as a Senior or Staff Offensive Security Engineer, Red Team Specialist, or Principal Penetration Tester.
• Proven expertise conducting complex security assessments across web applications, APIs, distributed cloud environments, and internal networks.
• Hands-on experience developing or architecting LLM-powered applications, autonomous AI agents, agentic workflows, tool calling, and AI sandboxing environments.
• Strong knowledge of adversarial AI evaluation and the security implications of autonomous systems.
• Deep practical expertise in cloud-native technologies, container runtimes, Kubernetes architecture, and major cloud platforms.
• Experience assessing and securing Kubernetes environments, including RBAC, admission controllers, pod security standards, network policies, and service mesh architectures.
• Solid software engineering and programming skills, with the ability to develop production-grade security tools, microservices, integrations, and custom AI agent capabilities.
• Experience integrating offensive security findings into vulnerability management platforms such as Jira, DefectDojo, or custom risk aggregation systems.
• Familiarity with SIEM platforms, security telemetry, and detection engineering workflows.
• Demonstrated ability to lead complex initiatives across engineering, product, and infrastructure teams.
• Strong business-oriented mindset, with the ability to assess technical vulnerabilities based on their potential impact on customer data, platform trust, revenue, and business operations.
• Excellent written and verbal communication skills, including the ability to present technical strategies and security risks to senior leadership and non-technical stakeholders.
• Experience writing and reviewing RFCs, establishing technical standards, conducting architecture reviews, and mentoring other engineers.
• Strong analytical thinking, problem-solving abilities, technical ownership, and cross-functional leadership skills.

Preferred Qualifications:

• Experience leading red team or purple team operations in high-growth technology companies, fintech organizations, or large-scale marketplaces.
• Open-source contributions or security research involving automated exploitation, autonomous AI systems, or cloud security tools.
• Relevant industry certifications, such as OSCP, OSEP, OSWE, CKS, or AWS Certified Security – Specialty, or equivalent demonstrated expertise.

Benefits:

• Competitive salary.
• Profit-sharing opportunities.
• Meal allowance.
• Health insurance.
• Dental coverage.
• Life insurance.
• Childcare and atypical parenthood subsidies.
• Wellhub membership.
• Home office allowance.
• Employee assistance program covering mental health, social, legal, and financial support.
• Extended parental leave.
• Additional days off for birthdays, Mother's Day, and Father's Day.
• Benefits club offering discounts on everyday services.
• Discounts at educational institutions.
• Children's reading kit through PlayKids.
• Remote-first working model, with the flexibility to work from anywhere in Brazil.
• Option to work from São Paulo offices or partner coworking spaces up to twice a week.
• Collaborative and informal work environment with a horizontal organizational structure.
• Opportunities for continuous learning, professional development, and collaboration with highly skilled technology professionals.
• Opportunity to contribute to high-impact projects that improve the experience of thousands of people.