Offensive Security Specialist (m/f/d)

Evonik; São Paulo; Sur place; BRL 180 000 - 230 000; Plein temps

Résumé du poste

Evonik Brasil Ltda. is seeking an Offensive Security Specialist to lead penetration testing across web apps, cloud, and industrial systems in a hybrid work setting on São Paulo.

You will document risks, impact, and actionable remediation, and present findings to engineering teams and management. The role requires a university degree in IT or equivalent experience, hands-on security testing in web and infrastructure, and familiarity with OT/ICS where possible.

Qualifications

• University degree in Informatics / Computer Science or equivalent IT field or comparable experience.
• Hands-on experience in Web application penetration testing and infrastructure/network testing.
• Experience testing security of complex, business-critical applications; industrial/chemical sector exposure is a plus.

Responsabilités

• Conduct offensive security activities including penetration testing across web apps, enterprise infra, cloud and industrial systems.
• Plan, execute and lead advanced penetration tests for web and enterprise applications.
• Document findings with risk ratings, business impact analysis and remediation recommendations.
• Present results to technical and non-technical stakeholders and advise on risk mitigation strategies.

Connaissances

Web application penetration testing

Infrastructure and network testing

Security testing of complex apps

Red Teaming / adversary simulation

OT / ICS security knowledge

Formation

University degree in Informatics / Computer Science or equivalent IT field

Outils

Offensive security tools

Description du poste

## Offensive Security Specialist (m/f/d)Applylocations: São Paulo: Americanatime type: Full timeposted on: Posted Todayjob requisition id: R50273**What we offer**Explore a world of opportunities with us. Look ahead with us and help shape innovative solutions to make our world more sustainable and life healthier, more vibrant and more comfortable. At Evonik, you have the chance to explore, thrive, and grow alongside 33,000 colleagues. Among attractive career paths and high-quality development programs, we not only offer performance-based remuneration and occupational health benefits but also hybrid and flexible working environments with #SmartWork. Bring your fresh perspective, develop your strengths, break out your mold, and find a career that fits your dreams with us.**Click on the link below to learn what our employees have to say about Evonik:** https://careers.evonik.com/en/about/meet-the-team/**Expected Responsibilities:**Conducting offensive security activities, including penetration testing and Red Team operations, across web applications, enterprise infrastructure, cloud environments, and industrial systems.Planning, executing, and leading advanced penetration tests for:* Custom and third-party web applications* Complex enterprise applications (e.g., ERP, legacy systems, industrial platforms).* Cloud-native and hybrid architecture.Documenting findings in high-quality technical reports, including:* Clear risk ratings* Business impact analysis* Actionable remediation recommendationsPresenting results to technical and non-technical stakeholders, including engineering teams, management, and customers.Advising on risk mitigation strategies, secure design principles, and defensive improvements.**Professional Experience & Background*** Successfully completed university degree in (Business) Informatics, Computer Science, or a comparable IT-related field — or equivalent professional experience.* Hands-on experience in:* Web application penetration testing* Infrastructure and network penetration testing* Security testing of complex, business-critical applications* Experience working in industrial or chemical company environments is a plus.**Technical Skills & Knowledge*** Strong understanding of Windows and Linux client/server environments.* Practical experience with cloud platforms, including identity, networking, and cloud-native services.* In-depth knowledge and hands-on usage of offensive security tools.* Knowledge of secure software development lifecycle (SSDLC) and common vulnerability classes (e.g., OWASP Top 10).* Programming and scripting skills are a plus.* Experience with Red Teaming, adversary simulation, and attack-chain methodology.* Familiarity with source code review and static/dynamic application security testing.* Knowledge of OT / ICS security is desirable.**Your Application**To ensure that your application is proceeded as quickly as possible and to protect the environment, please apply online via our careers portal. Further information about Evonik as Employer can be found at www.evonik.com/en/careers.html.Please address your application to the Talent Acquisition Manager, stating your earliest possible starting date and your salary expectations.**Your Talent Acquisition Manager:**Andreia UeharaCompany isEvonik Brasil Ltda.