Offensive Security Specialist (m/f/d)

Evonik; São Paulo; On-site; BRL 180,000 - 240,000; Full time

Benefits offered by this job

Hybrid work model

Flexible working environments

Job summary

Evonik Brasil Ltda. is seeking an Offensive Security Specialist to perform penetration testing and Red Team operations across web applications, cloud environments, and industrial systems.

The role requires hands-on pentesting experience and a solid background in secure design practices. You will plan and lead advanced tests for complex, enterprise-grade applications and ERP systems, document results with actionable remediation, and present findings to both technical and non-technical

Qualifications

• Hands-on experience in web application pentesting and infrastructure/Network pentesting.
• Experience testing complex, business-critical applications.
• Familiarity with OT/ICS security is a plus.
• Strong knowledge of SSDLC and common vulnerability classes (OWASP Top 10).

Responsibilities

• Conduct offensive security activities including penetration testing and Red Team operations across web apps, infrastructure, cloud, and industrial systems.
• Plan, execute, and lead advanced pentests for hybrid environments and ERP/legacy systems.
• Document findings with risk ratings, business impact, and remediation recommendations.
• Present results to technical and non-technical stakeholders including management and customers.
• Advise on risk mitigation, secure design principles, and defensive improvements.

Skills

Web app pentesting

Infrastructure pentesting

Industrial/OT security

Red Team / adversary simulation

SSDLC & OWASP Top 10

Education

University degree in IT-related field

Tools

Offensive security tools

Job description

## Offensive Security Specialist (m/f/d)Applylocations: São Paulo: Americanatime type: Full timeposted on: Posted Todayjob requisition id: R50273**What we offer**Explore a world of opportunities with us. Look ahead with us and help shape innovative solutions to make our world more sustainable and life healthier, more vibrant and more comfortable. At Evonik, you have the chance to explore, thrive, and grow alongside 33,000 colleagues. Among attractive career paths and high-quality development programs, we not only offer performance-based remuneration and occupational health benefits but also hybrid and flexible working environments with #SmartWork. Bring your fresh perspective, develop your strengths, break out your mold, and find a career that fits your dreams with us.**Click on the link below to learn what our employees have to say about Evonik:** https://careers.evonik.com/en/about/meet-the-team/**Expected Responsibilities:**Conducting offensive security activities, including penetration testing and Red Team operations, across web applications, enterprise infrastructure, cloud environments, and industrial systems.Planning, executing, and leading advanced penetration tests for:* Custom and third-party web applications* Complex enterprise applications (e.g., ERP, legacy systems, industrial platforms).* Cloud-native and hybrid architecture.Documenting findings in high-quality technical reports, including:* Clear risk ratings* Business impact analysis* Actionable remediation recommendationsPresenting results to technical and non-technical stakeholders, including engineering teams, management, and customers.Advising on risk mitigation strategies, secure design principles, and defensive improvements.**Professional Experience & Background*** Successfully completed university degree in (Business) Informatics, Computer Science, or a comparable IT-related field — or equivalent professional experience.* Hands-on experience in:* Web application penetration testing* Infrastructure and network penetration testing* Security testing of complex, business-critical applications* Experience working in industrial or chemical company environments is a plus.**Technical Skills & Knowledge*** Strong understanding of Windows and Linux client/server environments.* Practical experience with cloud platforms, including identity, networking, and cloud-native services.* In-depth knowledge and hands-on usage of offensive security tools.* Knowledge of secure software development lifecycle (SSDLC) and common vulnerability classes (e.g., OWASP Top 10).* Programming and scripting skills are a plus.* Experience with Red Teaming, adversary simulation, and attack-chain methodology.* Familiarity with source code review and static/dynamic application security testing.* Knowledge of OT / ICS security is desirable.**Your Application**To ensure that your application is proceeded as quickly as possible and to protect the environment, please apply online via our careers portal. Further information about Evonik as Employer can be found at www.evonik.com/en/careers.html.Please address your application to the Talent Acquisition Manager, stating your earliest possible starting date and your salary expectations.**Your Talent Acquisition Manager:**Andreia UeharaCompany isEvonik Brasil Ltda.