About the company
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Security Consultant, Red Team based in Brazil.
Responsibilities
- Participate in and lead Red Team and Purple Team campaigns for clients, working both remotely and on-site across complex enterprise environments.
- Conduct adversarial emulation, assumed-breach scenarios, post-exploitation, social engineering, and physical security assessments to simulate realistic attack paths and identify critical weaknesses.
- Perform reconnaissance and identify critical assets, vulnerabilities, attack paths, and opportunities for exploitation across people, processes, applications, networks, and infrastructure.
- Execute sophisticated penetration testing across network, web application, wireless, physical security, and social engineering environments.
- Develop and use custom tools, scripts, proof-of-concept exploits, and offensive techniques to support engagement objectives.
- Manage project activities, priorities, deliverables, and deadlines while collaborating with geographically distributed teams across multiple time zones.
- Clearly communicate complex technical vulnerabilities and business risks to both technical specialists and non-technical client stakeholders.
- Produce comprehensive technical reports documenting findings, attack paths, business impact, evidence, and actionable recommendations for improving security posture.
- Lead technical presentations for clients and participate in project meetings, conference calls, and business development activities when required.
- Provide technical leadership, coaching, and mentorship to consulting teams and clients on offensive security and broader cybersecurity topics.
- Contribute to the security community through technical presentations, whitepapers, research, and other thought-leadership initiatives.
Requirements
- Significant experience performing and leading covert Red Team operations, including adversarial emulation, assumed-breach scenarios, post-exploitation, social engineering, and physical security testing.
- Strong penetration testing experience across network infrastructure, web applications, wireless environments, physical security, and social engineering.
- Hands-on experience with Command and Control (C2) and post-exploitation frameworks such as Cobalt Strike, Empire, Metasploit, Throwback, or comparable tools.
- Strong scripting or programming capabilities in several relevant languages, such as Python, Ruby, PowerShell, Java, or Shell.
- Strong understanding of enterprise network, system, and application architecture, including complex environments built around Microsoft Windows, Active Directory, and Linux.
- Deep knowledge of Windows and Linux system administration and post-exploitation techniques across both platforms.
- Highly capable of identifying vulnerabilities, developing proof-of-concept exploits, and translating technical findings into meaningful security outcomes.
- Strong knowledge of operating system, service, and application hardening practices.
- Excellent communication and presentation skills, with the ability to make complex technical topics accessible to audiences at different levels of an organization.
- Comfortable working in client-facing environments and providing technical leadership during security engagements.
- Willing and able to travel at least 50% of the time, including both domestic and international travel.
- Curiosity, creativity, integrity, and a strong passion for offensive security and continuous technical learning.
Conditions
- Competitive compensation ranging from $75,000 to $150,000 USD, depending on location and experience level.
- Performance-based incentives.
- Remote work flexibility with the option to work from an office when appropriate.
- Opportunity to work with an established leader in the cybersecurity industry.
- Access to highly experienced technical teams and advanced security research.
- Exposure to sophisticated Red Team, Purple Team, penetration testing, and adversarial security engagements.
- Opportunities to work with international clients and travel globally.
- A collaborative, high-energy environment that encourages technical innovation and creativity.
- Opportunities to contribute to cybersecurity research, presentations, whitepapers, and industry thought leadership.
- Meaningful work focused on improving the security posture and resilience of organizations facing evolving cyber threats.