Offensive Security Specialist (m/f/d)

4135 Evonik Brasil Ltda._4135; São Paulo; Híbrido; BRL 180 000 - 300 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Hybrid work environment

Flexible working hours

Resumo da oferta

Evonik is seeking a security-focused professional to perform offensive security testing across web apps, cloud, and industrial systems. You will plan and lead complex penetration tests, document findings, and provide remediation guidance to stakeholders.

Successful candidates will have university training in IT or related fields, hands-on pentesting experience, and familiarity with OT/ICS security. Evonik offers hybrid work and opportunities for growth within a global specialty chemicals leader.

Qualificações

• Experience in web and infrastructure penetration testing.
• Security testing of complex business-critical apps.
• Industrial or chemical industry experience is a plus.

Responsabilidades

• Conduct offensive security activities across web apps, infra, cloud, and industrial systems.
• Plan, execute, and lead advanced penetration tests for ERP and legacy systems.
• Document findings with risk ratings and remediation recommendations.
• Present results to technical and non-technical stakeholders and advise on mitigations.

Conhecimentos

Web app pentest

Infra pentest

Security testing

Industrial/chemical experience

Programming/scripting

OT/ICS security

Formação académica

Bachelor's degree in CS/IT

Ferramentas

Offensive security tools

Descrição da oferta de emprego

What we offer Explore a world of opportunities with us. Look ahead with us and help shape innovative solutions to make our world more sustainable and life healthier, more vibrant and more comfortable. At Evonik, you have the chance to explore, thrive, and grow alongside 33,000 colleagues. Among attractive career paths and high-quality development programs, we not only offer performance-based remuneration and occupational health benefits but also hybrid and flexible working environments with #SmartWork. Bring your fresh perspective, develop your strengths, break out your mold, and find a career that fits your dreams with us.

Expected Responsibilities

• Conducting offensive security activities, including penetration testing and Red Team operations, across web applications, enterprise infrastructure, cloud environments, and industrial systems.
• Planning, executing, and leading advanced penetration tests for: Custom and third-party web applications Complex enterprise applications (e.g., ERP, legacy systems, industrial platforms). Cloud-native and hybrid architecture.
• Documenting findings in high-quality technical reports, including: Clear risk ratings Business impact analysis Actionable remediation recommendations.
• Presenting results to technical and non-technical stakeholders, including engineering teams, management, and customers.
• Advising on risk mitigation strategies, secure design principles, and defensive improvements.

Professional Experience & Background

Successfully completed university degree in (Business) Informatics, Computer Science, or a comparable IT-related field - or equivalent professional experience.

• Web application penetration testing
• Infrastructure and network penetration testing
• Security testing of complex, business-critical applications
• Experience working in industrial or chemical company environments is a plus.

Technical Skills & Knowledge

Strong understanding of Windows and Linux client/server environments. Practical experience with cloud platforms, including identity, networking, and cloud-native services. In-depth knowledge and hands-on usage of offensive security tools. Knowledge of secure software development lifecycle (SSDLC) and common vulnerability classes (e.g., OWASP Top 10). Programming and scripting skills are a plus. Experience with Red Teaming, adversary simulation, and attack-chain methodology. Familiarity with source code review and static/dynamic application security testing. Knowledge of OT / ICs security is desirable.

This is your opportunity to join a thriving global organization that combines cutting-edge science, technology and engineering with world-class business services to create solutions that answer real-world problems. If you join us, we’ll expect you to take ownership of your work, team up with other great minds, and add your name to creations that make a positive difference for generations.

As one of the world leaders in specialty chemicals operating in more than 100 countries with over 32,000 employees, we need your diversity of thought to make us better. In return for your passion, initiative and creativity, you’ll enjoy opportunities to improve and to be respected for your contribution.