Mid-Level Analyst – Offensive Security and Detection

Job not on LinkedIn

🔥 12 hours ago

🇧🇷 Brazil – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 25%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

ROIT

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2016

💼 Consulting

⚖️ Legal

☁️ SaaS

Consulting • Legal • SaaS

ROIT is a Brazilian tax-technology company that provides an integrated ecosystem of SaaS solutions and AI-powered tools to help medium and large companies prepare for and manage the 2026 tax reform. Its offerings include an official tax-reform calculator that reprocesses SPED files and invoices, an Invoice-to-Pay automation suite (with ERP/SAP integrations), Tax Discovery for reclaiming taxes, regulatory consulting and education programs, and ongoing support for compliance and scenario planning.

📋 Description

• Conduct adversary simulations and offensive security exercises using MITRE ATT&CK as a reference • Plan and execute controlled attack scenarios, considering techniques, tactics, and attack paths relevant to the environment • Validate the effectiveness of existing prevention, protection, and monitoring controls • Identify security gaps based on the results of offensive exercises • Perform detection engineering by translating exercised techniques into use cases, rules, alerts, and monitoring mechanisms • Validate whether the techniques used during exercises are effectively detected and generate evidence of control coverage • Work closely with Cyber Defense, Application Security, and other technical teams to enhance security controls • Prioritize remediation recommendations based on demonstrated attack paths and identified risk • Document scenarios, techniques used, test results, identified gaps, and recommendations • Provide occasional support for security incident investigations • Support the automation of security routines, tests, validations, and processes related to detection and response • Contribute to the continuous advancement of ROIT’s Cybersecurity maturity

🎯 Requirements

• Practical experience in offensive security, Purple Team, or Red Team operations • Applied knowledge of the MITRE ATT&CK framework • Experience simulating adversary techniques and behaviors • Knowledge of detection engineering, including the creation of rules, use cases, and alerts • Ability to assess whether an attack technique is effectively detected by existing controls • Knowledge of SOC, SIEM, EDR/XDR, and security monitoring concepts • Ability to interpret technical evidence and turn it into improvement recommendations • Knowledge of operating systems, networks, applications, and security fundamentals • Familiarity with automation and scripting for security routines • Strong documentation and technical communication skills • Analytical, investigative, and evidence-driven mindset • Experience working in Purple Team environments • Experience developing and tuning detection rules • Knowledge of SIEM, EDR/XDR, and security platforms • Experience with automation using Python, PowerShell, Bash, or similar technologies • Knowledge of Cybersecurity frameworks and best practices • Experience with incident investigation and response • Certifications related to offensive security, defense, or detection