Senior Security Systems Analyst

Job not on LinkedIn

🔥 1 minute ago

🇧🇷 Brazil – Remote

⏰ Full Time

🟠 Senior

⚙️ Systems Engineer

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Domo Inovação

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2021

💼 Consulting

🏥 Healthcare

📣 Marketing

Consulting • Healthcare • Marketing

<Domo Inovação> is a hub of innovation and technology within Grupo Mercantil (Banco Mercantil), focused on developing connected, future-oriented solutions and digital products for the bank and its customers. It positions itself as an innovation nucleus that creates technology-driven solutions, attracts talent, and leverages the stability of a long-established banking group to deliver practical, customer-facing experiences and internal capabilities.

📋 Description

• Continuously and adversarially test the effectiveness of specific security controls, such as WAF, EDR, SIEM rules, and DLP, against recent attack techniques; • Create and maintain an internal arsenal of specialized scripts, tools, and methodologies, including custom payloads, controlled phishing tools, implants, and evasion techniques; • Act as the strategic Purple Team liaison, sharing findings, insights, and knowledge of the attacker mindset with the Blue Team (SOC), Security Architecture, and Security Engineering teams; • Lead debriefing sessions and workshops; • Develop detailed attack simulation plans, define Rules of Engagement (RoE), and coordinate exercises with risk committees and strategic leadership; • Mimic intrusion tactics across the bank’s technology value chain by testing interfaces with IT vendors, partner integrators, DevOps pipelines (GitHub/GitLab, Kubernetes), and multi-cloud corporate environments.

🎯 Requirements

• Bachelor’s degree in Computer Science, Engineering, Information Security, Networking, or related technology fields; • Proven 5 years of experience in Offensive Security (Red Team and/or advanced penetration testing); • Practical experience with adversary emulation, threat simulation campaigns, or business objective-driven intrusion operations; • Knowledge of the architecture and in-depth exploitation of Active Directory and hybrid cloud environments (Entra ID, Azure, AWS); • Expertise in defense evasion, process injection, AMSI bypass, and bypassing modern EDR solutions; • Proficiency in deploying and operating C2 infrastructure (Cobalt Strike, Mythic, Sliver, Havoc, or custom solutions), using obfuscation techniques and redirectors; • Knowledge of network protocols and services, Kerberos abuse, constrained/unconstrained delegation, and lateral movement; • Postgraduate qualification in Offensive Security/Cybersecurity; • Experience in financial services, payment companies, or highly regulated critical infrastructure organizations; • Preferred certifications: CRTO, CRTE/CRTP, OSEP, CPTS, CARTP, CRTL, OSCP, OSWE, CWEE, GPEN, or GXPN.

🏖️ Benefits

• Health and dental insurance • Wellhub (Gympass) • Transportation allowance • Meal and food allowances • Academia Mercantil (learning platform) and partnerships with educational institutions • Private pension plan • Life insurance • Day off • Extended maternity and paternity leave

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume