Senior Red Team and Offensive Security Analyst

Job not on LinkedIn

🔥 6 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Mindworks

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 1999

🤝 B2B

🔒 Cybersecurity

🏢 Enterprise

B2B • Cybersecurity • Enterprise

Mindworks is a Brazilian IT services and solutions provider offering end-to-end technology services and managed solutions for businesses and public organizations. The company delivers infrastructure and storage, data and voice connectivity, DBA outsourcing, hybrid and multicloud deployments, cybersecurity, and 24x7 support, plus training and customized consulting. With over 25 years in the market and operations across several Brazilian states, Mindworks focuses on secure, efficient, and tailored IT strategies for clients including municipalities and utilities.

📋 Description

• Perform tests on web applications, APIs, internal and external infrastructure, cloud environments, and Active Directory. • Conduct manual vulnerability validations, controlled exploitation, authorized post-exploitation, and impact analysis. • Review technical findings, evidence, severity assessments, recommendations, and reports produced by the team. • Serve as an operational second opinion for defining processes and work instructions. • Support sensitive technical decisions related to significant findings, false positives, critical risks, and operational validations. • Review and standardize methodologies, playbooks, checklists, templates, and internal procedures. • Support phishing, smishing, and vishing campaigns, including planning, technical validation, result analysis, and recommendations. • Support OSINT activities, password analysis, credential exposure reviews, and monitoring of the Deep and Dark Web. • Contribute to the design of future services, including adversary simulations, tabletop exercises, ransomware simulations, and full Red Team exercises. • Support the definition of technical scope, effort estimates, and consultative discussions with clients.

🎯 Requirements

• Bachelor's degree (or higher) in Information Security, Computer Science, Computer Engineering, or related fields. • Strong experience in offensive security, penetration testing, Red Teaming, or related areas. • Hands-on experience testing web applications, APIs, infrastructure, networks, Active Directory, and cloud environments. • Ability to perform manual exploitation and validate vulnerabilities beyond automated tooling. • Knowledge of reconnaissance, enumeration, exploitation, lateral movement, and post-exploitation techniques in authorized environments. • Familiarity with tools such as Burp Suite, Nmap, Metasploit, BloodHound, Impacket, NetExec/CrackMapExec, OWASP ZAP, nuclei, ffuf, Hashcat, OSINT tools, and cloud security solutions. • Knowledge of frameworks and references such as MITRE ATT&CK, OWASP Top 10, OWASP WSTG, and penetration testing methodologies. • Strong technical writing skills and the ability to produce clear, concise, and actionable reports. • Conversational English.