Want to know if this job is worth applying to?
Brasil
Remote only
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Security Consultant, Red Team based in Brazil.
This role is an opportunity to conduct sophisticated offensive security engagements designed to help organizations prepare for real-world cyber threats. You will work as part of Red and Purple Team engagements, combining technical exploitation, adversarial emulation, social engineering, and physical security testing. Your work will span the full attack lifecycle, from reconnaissance and initial access through post-exploitation and objective execution. You will collaborate with highly technical security professionals across multiple time zones and communicate findings directly to both technical and executive audiences. The role also provides opportunities to develop custom offensive security tooling, mentor consultants, and contribute to industry research. With significant client interaction and frequent international travel, this is a high-impact position for an experienced red team professional who thrives on complex challenges.
Participate in and lead Red Team and Purple Team campaigns for clients, working both remotely and on-site across complex enterprise environments.
Conduct adversarial emulation, assumed-breach scenarios, post-exploitation, social engineering, and physical security assessments to simulate realistic attack paths and identify critical weaknesses.
Perform reconnaissance and identify critical assets, vulnerabilities, attack paths, and opportunities for exploitation across people, processes, applications, networks, and infrastructure.
Execute sophisticated penetration testing across network, web application, wireless, physical security, and social engineering environments.
Develop and use custom tools, scripts, proof-of-concept exploits, and offensive techniques to support engagement objectives.
Manage project activities, priorities, deliverables, and deadlines while collaborating with geographically distributed teams across multiple time zones.
Clearly communicate complex technical vulnerabilities and business risks to both technical specialists and non-technical client stakeholders.
Produce comprehensive technical reports documenting findings, attack paths, business impact, evidence, and actionable recommendations for improving security posture.
Lead technical presentations for clients and participate in project meetings, conference calls, and business development activities when required.
Provide technical leadership, coaching, and mentorship to consulting teams and clients on offensive security and broader cybersecurity topics.
Contribute to the security community through technical presentations, whitepapers, research, and other thought-leadership initiatives.
Bring significant experience performing and leading covert Red Team operations, including adversarial emulation, assumed-breach scenarios, post-exploitation, social engineering, and physical security testing.
Demonstrate strong penetration testing experience across network infrastructure, web applications, wireless environments, physical security, and social engineering.
Have hands-on experience with Command and Control (C2) and post-exploitation frameworks such as Cobalt Strike, Empire, Metasploit, Throwback, or comparable tools.
Possess strong scripting or programming capabilities in several relevant languages, such as Python, Ruby, PowerShell, Java, or Shell.
Have a strong understanding of enterprise network, system, and application architecture, including complex environments built around Microsoft Windows, Active Directory, and Linux.
Demonstrate deep knowledge of Windows and Linux system administration and post-exploitation techniques across both platforms.
Be highly capable of identifying vulnerabilities, developing proof-of-concept exploits, and translating technical findings into meaningful security outcomes.
Bring strong knowledge of operating system, service, and application hardening practices.
Have excellent communication and presentation skills, with the ability to make complex technical topics accessible to audiences at different levels of an organization.
Be comfortable working in client-facing environments and providing technical leadership during security engagements.
Be willing and able to travel at least 50% of the time, including both domestic and international travel.
Demonstrate curiosity, creativity, integrity, and a strong passion for offensive security and continuous technical learning.
Competitive compensation ranging from $75,000 to $150,000 USD, depending on location and experience level.
Performance-based incentives.
Remote work flexibility with the option to work from an office when appropriate.
Opportunity to work with an established leader in the cybersecurity industry.
Access to highly experienced technical teams and advanced security research.
Exposure to sophisticated Red Team, Purple Team, penetration testing, and adversarial security engagements.
Opportunities to work with international clients and travel globally.
A collaborative, high-energy environment that encourages technical innovation and creativity.
Opportunities to contribute to cybersecurity research, presentations, whitepapers, and industry thought leadership.
Meaningful work focused on improving the security posture and resilience of organizations facing evolving cyber threats.
