Senior Security Consultant, Red Team

Lever, Inc.; Brasil; Remote; BRL 375,000 - 750,000; Full time

Benefits offered by this job

Remote work flexibility

Office option available

Travel opportunities

Competitive compensation

Access to experienced teams

International client engagements

Job summary

Lever, Inc. in Brazil is seeking aSenior Security Consultant, Red Team to lead and perform advanced offensive security engagements for international clients.

You will own the full attack lifecycle, from recon to post‑exploitation, mentor teams, and deliver actionable reports. Travel up to 50% and collaborate with remote teams across time zones. Remote work options with occasional on-site when required; tooling development and industry research are encouraged.

Qualifications

• Significant experience performing and leading covert Red Team operations, including adversarial emulation, assumed-breach scenarios, post-exploitation, social engineering, and physical security testing.
• Strong penetration testing experience across network infrastructure, web applications, wireless environments, physical security, and social engineering.

Responsibilities

• Lead Red Team and Purple Team campaigns for clients, working remotely and on-site across complex enterprise environments.
• Conduct adversarial emulation, assumed-breach scenarios, post-exploitation, social engineering, and physical security assessments to simulate attack paths and identify weaknesses.
• Perform reconnaissance and identify assets, vulnerabilities, attack paths, and exploitation opportunities across people, processes, applications, networks, and infrastructure.
• Execute penetration testing across network, web, wireless, physical security, and social engineering environments.
• Develop and use custom tools, scripts, exploits, and offensive techniques to support engagements.
• Manage project activities, priorities, deliverables, and deadlines with distributed teams across time zones.
• Communicate complex vulnerabilities and business risks to technical and executive audiences clearly.
• Produce comprehensive technical reports documenting findings, attack paths, business impact, evidence, and recommendations.
• Lead technical presentations for clients and participate in meetings and business development as needed.
• Provide technical leadership, coaching, and mentorship to consulting teams on offensive security topics.
• Contribute to security community through technical presentations, whitepapers, and research.

Skills

Red Team operations

Adversarial emulation

Post-exploitation

Social engineering

Physical security testing

Cobalt Strike

Empire

Metasploit

Python

PowerShell

Java

Shell

Windows

Linux

Active Directory

C2 frameworks

Tools

Cobalt Strike

Empire

Metasploit

Throwback

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Security Consultant, Red Team based in Brazil.

This role is an opportunity to conduct sophisticated offensive security engagements designed to help organizations prepare for real‑world cyber threats. You will work as part of Red and Purple Team engagements, combining technical exploitation, adversarial emulation, social engineering, and physical security testing. Your work will span the full attack lifecycle, from reconnaissance and initial access through post‑exploitation and objective execution. You will collaborate with highly technical security professionals across multiple time zones and communicate findings directly to both technical and executive audiences. The role also provides opportunities to develop custom offensive security tooling, mentor consultants, and contribute to industry research. With significant client interaction and frequent international travel, this is a high‑impact position for an experienced red team professional who thrives on complex challenges.

Accountabilities

• Participate in and lead Red Team and Purple Team campaigns for clients, working both remotely and on‑site across complex enterprise environments.
• Conduct adversarial emulation, assumed‑breach scenarios, post‑exploitation, social engineering, and physical security assessments to simulate realistic attack paths and identify critical weaknesses.
• Perform reconnaissance and identify critical assets, vulnerabilities, attack paths, and opportunities for exploitation across people, processes, applications, networks, and infrastructure.
• Execute sophisticated penetration testing across network, web application, wireless, physical security, and social engineering environments.
• Develop and use custom tools, scripts, proof‑of‑concept exploits, and offensive techniques to support engagement objectives.
• Manage project activities, priorities, deliverables, and deadlines while collaborating with geographically distributed teams across multiple time zones.
• Clearly communicate complex technical vulnerabilities and business risks to both technical specialists and non‑technical client stakeholders.
• Produce comprehensive technical reports documenting findings, attack paths, business impact, evidence, and actionable recommendations for improving security posture.
• Lead technical presentations for clients and participate in project meetings, conference calls, and business development activities when required.
• Provide technical leadership, coaching, and mentorship to consulting teams and clients on offensive security and broader cybersecurity topics.
• Contribute to the security community through technical presentations, whitepapers, research, and other thought‑leadership initiatives.

Requirements:

• Bring significant experience performing and leading covert Red Team operations, including adversarial emulation, assumed‑breach scenarios, post‑exploitation, social engineering, and physical security testing.
• Demonstrate strong penetration testing experience across network infrastructure, web applications, wireless environments, physical security, and social engineering.
• Have hands‑on experience with Command and Control (C2) and post‑exploitation frameworks such as Cobalt Strike, Empire, Metasploit, Throwback, or comparable tools.
• Possess strong scripting or programming capabilities in several relevant languages, such as Python, Ruby, PowerShell, Java, or Shell.
• Have a strong understanding of enterprise network, system, and application architecture, including complex environments built around Microsoft Windows, Active Directory, and Linux.
• Demonstrate deep knowledge of Windows and Linux system administration and post‑exploitation techniques across both platforms.
• Be highly capable of identifying vulnerabilities, developing proof‑of‑concept exploits, and translating technical findings into meaningful security outcomes.
• Bring strong knowledge of operating system, service, and application hardening practices.
• Have excellent communication and presentation skills, with the ability to make complex technical topics accessible to audiences at different levels of an organization.
• Be comfortable working in client‑facing environments and providing technical leadership during security engagements.
• Be willing and able to travel at least 50% of the time, including both domestic and international travel.
• Demonstrate curiosity, creativity, integrity, and a strong passion for offensive security and continuous technical learning.

Benefits:

• Competitive compensation ranging from $75,000 to $150,000 USD, depending on location and experience level.
• Performance‑based incentives.
• Remote work flexibility with the option to work from an office when appropriate.
• Opportunity to work with an established leader in the cybersecurity industry.
• Access to highly experienced technical teams and advanced security research.
• Exposure to sophisticated Red Team, Purple Team, penetration testing, and adversarial security engagements.
• Opportunities to work with international clients and travel globally.
• A collaborative, high‑energy environment that encourages technical innovation and creativity.
• Opportunities to contribute to cybersecurity research, presentations, whitepapers, and industry thought leadership.
• Meaningful work focused on improving the security posture and resilience of organizations facing evolving cyber threats.