Offensive Security and Detection

Job not on LinkedIn

🔥 3 hours ago

🇧🇷 Brazil – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 25%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

ROIT

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2016

💼 Consulting

⚖️ Legal

☁️ SaaS

Consulting • Legal • SaaS

ROIT is a Brazilian tax-technology company that provides an integrated ecosystem of SaaS solutions and AI-powered tools to help medium and large companies prepare for and manage the 2026 tax reform. Its offerings include an official tax-reform calculator that reprocesses SPED files and invoices, an Invoice-to-Pay automation suite (with ERP/SAP integrations), Tax Discovery for reclaiming taxes, regulatory consulting and education programs, and ongoing support for compliance and scenario planning.

📋 Description

• Conduct adversary simulations and offensive security exercises using MITRE ATT&CK • Plan and execute controlled attack scenarios • Validate the effectiveness of prevention, protection, and monitoring controls • Identify security gaps based on offensive exercises • Perform detection engineering by creating use cases, rules, alerts, and monitoring mechanisms • Validate the detection of the techniques used and generate evidence of control coverage • Collaborate with Cyber Defense, Application Security, and other technical teams • Prioritize remediation recommendations based on identified attack paths and risks • Document scenarios, techniques, results, gaps, and recommendations • Support security incident investigations • Support the automation of routines, tests, validations, and detection and response processes • Contribute to the advancement of ROIT’s Cybersecurity maturity

🎯 Requirements

• Hands-on experience in offensive security, Purple Team, or Red Team operations • Applied knowledge of the MITRE ATT&CK framework • Experience simulating adversary techniques and behaviors • Knowledge of detection engineering, including the creation of rules, use cases, and alerts • Ability to assess whether an attack technique is effectively detected by existing controls • Knowledge of SOC, SIEM, EDR/XDR, and security monitoring concepts • Ability to interpret technical evidence and translate it into improvement recommendations • Knowledge of operating systems, networks, applications, and security fundamentals • Familiarity with automation and scripting for security routines • Strong technical documentation and communication skills • Analytical, investigative, and evidence-driven mindset • Experience in environments with Purple Team operations • Experience developing and tuning detection rules • Knowledge of SIEM, EDR/XDR, and security platforms • Experience with automation using Python, PowerShell, Bash, or similar technologies • Knowledge of Cybersecurity frameworks and best practices • Experience with incident investigation and response • Certifications related to offensive security, defense, or detection