Offensive Security Sr. Analyst (mwd)

4135 Evonik Brasil Ltda._4135; São Paulo; Presencial; BRL 45 000 - 78 000; Tempo integral

Resumo da oferta

Evonik Brasil Ltda. is seeking a junior cybersecurity professional to join our security team in São Paulo. You will support penetration testing across web applications, enterprise infrastructure, cloud environments, and industrial systems.

The role emphasizes learning attack techniques, documenting findings, and presenting results to stakeholders. A university degree in IT-related fields and basic knowledge of OWASP Top 10 are expected, with fluent English.

Qualificações

• University degree in Informatics, Computer Science, Cyber Security, or equivalent.
• Initial experience in cyber security with basics of web app and network security.

Responsabilidades

• Support penetration testing across web apps, enterprise infra, cloud, and industrial systems.
• Assist in vulnerability validation, risk analysis, and security testing.
• Document findings and contribute to technical reports with remediation guidance.
• Assist in presenting assessment results to stakeholders.
• Support research on emerging threats and testing tools.

Conhecimentos

Web application security testing

Vulnerability assessment

Threat emulation

Security testing methodologies

Fluent English communication

Formação académica

Bachelor's degree in Computer Science / Cyber Security / Informatics

Ferramentas

Offensive security tools

OWASP Top 10

Descrição da oferta de emprego

What we offer At Evonik, you’re part of a global chemical company working in many sectors that go beyond chemistry. From lipids for tomorrow’s medicines, biosurfactants for green detergents, additives for plastics recycling or membranes to help drive forward the energy transition, you’ll play an essential part in helping the world’s most essential industries succeed. Our success hinges on a diversity of ideas powered by people, not egos. Whether you’re a scientist or engineer, new to the team or established, in business, production, or anything in between – we cheer each other on. Because we believe we can do anything. Explore everything. And Be Part of Something Special! Find out more about the many benefits we offer: https://www.evonik.com/en/careers/why.html Meet the team and get to know the people behind Evonik: https://www.evonik.com/en/news/meet-the-team.html

Expected Responsibilities

• Support the execution of penetration tests across web applications, enterprise infrastructure, cloud environments, and industrial systems under the guidance of senior team members.
• Assist in conducting security assessments of:
  • Custom and third-party web applications.
  • Enterprise applications and business-critical systems.
  • Cloud-based and hybrid environments.
• Participate in vulnerability validation, attack surface analysis, and security testing activities.
• Document findings and contribute to technical reports, including:
  • Vulnerability descriptions, Risk assessments.
  • Remediation recommendations.
• Support the presentation of assessment results to stakeholders.
• Assist in research activities related to emerging threats, attack techniques, and security tools.

Professional Experience & Background

• Successfully completed a university degree in (Business) Informatics, Computer Science, Cyber Security, or a comparable IT-related field — or equivalent practical experience.
• Initial experience in cyber security, basic understanding of:
  • Web application security testing.
  • Network and infrastructure security concepts.
  • Vulnerability assessment methodologies.

Technical Skills & Knowledge

• Basic understanding of Windows and Linux operating systems.
• Familiarity with networking fundamentals, including TCP/IP, DNS, HTTP/HTTPS, and Active Directory concepts.
• Basic knowledge of cloud platforms and cloud security concepts.
• Exposure to common offensive security tools.
• Understanding of common web application vulnerabilities (OWASP Top 10).
• Interest in offensive security, threat emulation, and penetration testing methodologies.
• Knowledge of OT/ICS security concepts is beneficial but not required.
• Curiosity and willingness to continuously learn new technologies and attack techniques.
• Ability to work effectively both independently and as part of a team.
• Fluent English communication skills.

Your Talent Acquisition Manager: Andreia Uehara Company is Evonik Brasil Ltda.

This is your opportunity to join a thriving global organization that combines cutting‑edge science, technology and engineering with world‑class business services to create solutions that answer real‑world problems. If you join us, we’ll expect you to take ownership of your work, team up with other great minds, and add your name to creations that make a positive difference for generations. As one of the world leaders in specialty chemicals operating in more than 100 countries with over 32,000 employees, we need your diversity of thought to make us better. In return for your passion, initiative and creativity, you’ll enjoy opportunities to improve and to be respected for your contribution.