Offensive Security Sr. Analyst (mwd)

Evonik; São Paulo; Presencial; BRL 90 000 - 150 000; Tempo integral

Resumo da oferta

Evonik Brasil Ltda. is seeking a security-focused professional to support penetration testing across web applications, enterprise systems, and cloud environments in São Paulo.

You will work under senior guidance to validate vulnerabilities, analyze attack surfaces, and contribute to technical reports. The role requires an IT-related degree with initial cybersecurity exposure, knowledge of OWASP Top 10, and fluency in English.

Qualificações

• A university degree in (Business) Informatics, Computer Science, Cyber Security, or a comparable IT-related field — or equivalent practical experience.
• Initial experience in cyber security, basic understanding of web application security testing, network and infrastructure security concepts, and vulnerability assessment methodologies.

Responsabilidades

• Support penetration tests across web apps, enterprise infra, cloud environments, and industrial systems under senior guidance.
• Assist in vulnerability validation, attack surface analysis, and security testing activities.
• Document findings and contribute to technical reports, including vulnerability descriptions, risk assessments, and remediation recommendations.
• Support the presentation of assessment results to stakeholders.
• Assist in research activities related to emerging threats, attack techniques, and security tools.

Conhecimentos

Windows & Linux basics

Networking fundamentals

Cloud platforms basics

Offensive security tools exposure

OWASP Top 10 knowledge

Offensive security interest

OT/ICS security concepts

Fluent English

Formação académica

Bachelor's degree in (Business) Informatics / Computer Science / Cyber Security or related IT field

Descrição da oferta de emprego

What We Offer

At Evonik, you’re part of a global chemical company working in many sectors that go beyond chemistry. From lipids for tomorrow’s medicines, biosurfactants for green detergents, additives for plastics recycling or membranes to help drive forward the energy transition, you’ll play an essential part in helping the world’s most essential industries succeed.

What We Offer

At Evonik, you’re part of a global chemical company working in many sectors that go beyond chemistry. From lipids for tomorrow’s medicines, biosurfactants for green detergents, additives for plastics recycling or membranes to help drive forward the energy transition, you’ll play an essential part in helping the world’s most essential industries succeed.

Our success hinges on a diversity of ideas powered by people, not egos. Whether you’re a scientist or engineer, new to the team or established, in business, production, or anything in between – we cheer each other on. Because we believe we can do anything. Explore everything. And Be Part of Something Special!

Find out more about the many benefits we offer

https://www.evonik.com/en/careers/why.html

Meet the team and get to know the people behind Evonik

https://www.evonik.com/en/news/meet-the-team.html

Expected Responsibilities

• Support the execution of penetration tests across web applications, enterprise infrastructure, cloud environments, and industrial systems under the guidance of senior team members.
• Assist in conducting security assessments of:
• Custom and third-party web applications.
• Enterprise applications and business‑critical systems.
• Cloud‑based and hybrid environments.
• Participate in vulnerability validation, attack surface analysis, and security testing activities.
• Document findings and contribute to technical reports, including:
• Vulnerability descriptions, Risk assessments. and Remediation recommendations.
• Support the presentation of assessment results to stakeholders.
• Assist in research activities related to emerging threats, attack techniques, and security tools.

Professional Experience & Background

• Successfully completed a university degree in (Business) Informatics, Computer Science, Cyber Security, or a comparable IT‑related field — or equivalent practical experience.
• Initial experience in cyber security, basic understanding of:
• Web application security testing.
• Network and infrastructure security concepts.
• Vulnerability assessment methodologies.

Technical Skills & Knowledge

• Basic understanding of Windows and Linux operating systems.
• Familiarity with networking fundamentals, including TCP/IP, DNS, HTTP/HTTPS, and Active Directory concepts.
• Basic knowledge of cloud platforms and cloud security concepts.
• Exposure to common offensive security tools
• Understanding of common web application vulnerabilities (OWASP Top 10).
• Interest in offensive security, threat emulation, and penetration testing methodologies.
• Knowledge of OT/ICS security concepts is beneficial but not required.
• Curiosity and willingness to continuously learn new technologies and attack techniques.
• Ability to work effectively both independently and as part of a team.
• Fluent English communication skills

Your Talent Acquisition Manager

Andreia Uehara

Company

Evonik Brasil Ltda.