Senior Cybersecurity Analyst – Pentest
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Cyber Security Analyst responsible for executing offensive security tasks in Red Team at Telefônica/Vivo. Collaborating on security measures for digital infrastructure and applications.
Responsibilities:
- The professional will be responsible for collaborating with the Red Team and performing offensive security tasks to ensure the protection of the company's applications and infrastructure.
- Plan and execute penetration tests on internal and external systems, including infrastructure, cloud, containers, web applications, mobile apps and APIs/web services;
- Assist with hardening servers, operating systems and services together with the infrastructure teams;
- Participate in incident response with the CSIRT, investigating threats and collaborating on vulnerability remediation;
- Assist in interactions with Threat Intelligence teams;
- Plan and execute Red Team exercises involving the Blue Team and supported by Threat Intelligence teams;
- Propose new security solutions based on market trends;
- Conduct proofs of concept (PoC) and deploy new tools to improve offensive security processes;
- Prepare technical reports and presentations (documentation and evidence of executed tests) for internal and management teams.
Requirements:
- Experience planning and executing Red Team exercises using MITRE ATT&CK, Cyber Kill Chain and Unified Kill Chain frameworks;
- Experience in penetration testing (pentests) of networks, web applications, mobile apps, APIs/web services using methodologies such as the OWASP Testing Guide;
- Experience in cloud security and penetration testing (AWS, Azure, GCP);
- Knowledge of security solutions such as WAF, firewalls, IDS/IPS, SIEM, antivirus, EDR, DLP, and password vaults;
- Knowledge of SSO authentication and protocols such as ADFS, Azure AD, SAML, OAuth2;
- Familiarity with microservices architecture, containers and Kubernetes;
- Knowledge of programming and scripting languages such as Python, Shell script, PowerShell, C/C++, Go, Java, JavaScript, etc.;
- Certifications such as OSCP, OSEP, OSED, OSWE, EWPTX, DCPT, EMAPT, CWSS, BSCP, CRTO, among others, are a plus;
- Experience with agile methodologies and strong written and verbal communication skills.
Benefits:
- Choose the ideal benefits for you and your dependents via a digital platform with various categories including Gym, Meal Allowance (VR), Food Voucher (VA), Pharmacy Assistance, Health Insurance, Dental Insurance and Life Insurance;
- Corporate mobile phone. Yes, a brand-new smartphone for you!
- Unlimited voice and data plan! Yes, unlimited! On the best mobile network, even faster with Vivo's 5G!
- An exclusive Vivo offer with special discounts on landline, broadband, TV and apps;
- Eligible to receive an annual Bonus or PPR;
- Plan your future through a Private Pension plan;
- Have children? You will be eligible for a subsidy to help with school, daycare or nanny expenses;
- Work in an environment that respects your personality, dress style and individuality—be authentic. #JoinVivo
- Work remotely up to 2 days per week. #Mobility
- Flexible working hours;
- Enjoy a day off (Day Off) to celebrate your birthday;
- Participate in one of the largest corporate volunteering programs to help you make a difference in the world;
- Take advantage of our Educational Development Program offering partnerships with educational institutions at a discount; certifications and online courses.
- Accelerate your career through our Internal Recruitment Program, in Brazil or abroad—we operate in more than 17 countries! #VivoMyCareer
- Benefit from a range of initiatives to improve your physical, emotional and social health! We have #VivoWellbeing, which encourages our team to adopt healthy habits and improve quality of life! Our offerings include consultations with nutritionists, psychologists, social workers, telemedicine and much more!
- All our vacancies are open to people with disabilities and/or rehabilitated individuals. We have a culture that values diversity, differences and people's potential! #VivoDiversity #JoinVivo
Similar Jobs
Lead Technical Consultant, Cybersecurity Defense
Lead Technical Consultant managing Cyber Defense projects across Germany, Austria, and Switzerland. Responsible for technical implementation and innovation in Cyber Defense architectures.
Staff Security Product Engineer
Security Engineer building AI-driven security products for application security and operations. Collaborating with product teams to design systems that act on security signals and workflows.
Cybersecurity Risk Engineer
Designing and maintaining secure cloud infrastructures as a Cybersecurity Engineer at Ensemble Health Partners. Focused on enhancing security controls and analyzing potential vulnerabilities in cloud structures.
Engineer, Cybersecurity Risk
Engineer II, Cybersecurity designing and maintaining secure infrastructures for Ensemble Health Partners, while analyzing cloud structures for enhanced security methods.
Senior AI Cybersecurity Engineer
AI Cybersecurity Engineer designing and executing cybersecurity-focused AI governance programs. Collaborating with cross-functional teams on secure AI solutions and policies while ensuring compliance and risk management.
Technical Writer, Cybersecurity
Technical Writer ensuring clarity and consistency in federal cybersecurity documentation. Edit and format various technical documents while collaborating with analysts and SMEs.
Cybersecurity Program Manager
Cybersecurity Program Manager overseeing contract performance and managing cybersecurity teams for federal clients in a remote capacity. Ensuring quality, audit-ready security assessment services are delivered.
Information Security Engineer
Information Security Engineer assessing web technologies and coordinating remediation at G-P. Collaborating with teams to enhance application security and develop automation tools.
Cybersecurity Compliance Lead
Cybersecurity Compliance Lead at Fresche Solutions responsible for leading the cybersecurity compliance program and mentoring team members. Overseeing audits, developing strategies, and fostering a security culture.
Senior Security Architect
XAAS Consultant advising clients on IT Security, focusing on infrastructure, cloud, and application security. Involves hands-on security assessments and developing security architectures.
Security Specialist – Cryptography
Security Specialist focusing on Cryptography for remote projects at The Whiteam Consulting. Collaborating with technology consultants to optimize business profitability.
Protection and Security Specialist
Sicherheitskraft plant und setzt Maßnahmen zur Gefahrenabwehr für Veranstaltungen um. Zusammenarbeit mit Kunden und Behörden in einem der größten Messeunternehmen der Welt.
Information System Security Officer
Information System Security Officer managing security authorization for federal information systems. Overseeing RMF lifecycle activities and ensuring compliance with federal directives.
KMS Security Engineer – Security
KMS Security Engineer ensuring security in crypto wallets for a leading money app company. Responsible for mitigating security risks and collaborating with development teams to maintain security integrity.
Staff Security Engineer
Staff Security Engineer role at a Managed Service Provider overseeing security solutions across diverse clients. Focus on technical leadership, architecture, mentoring, and compliance.
Bug Bounty Security Researcher
Bug Bounty Security Researcher identifying and reporting vulnerabilities in software applications and systems for Inspectiv. Contributing to improving security and participating in bug bounty programs.
IT Security Compliance Assurance Manager – CAM
Information Security Compliance Assurance Manager at Gainwell, managing audits and compliance with HIPAA and NIST frameworks for the organization. Leading security controls and compliance efforts with executive stakeholders and IT.
Social Security Disability Case Manager
Social Security Disability Claims Case Manager at Mindset assisting clients with claims application processes. Responsible for gathering documentation and advocating for clients' claims.
Analyst – Cyber Security Compliance
Cyber Security Analyst conducting PCI Compliance assessments at global live entertainment company Live Nation. Assuring effective implementation of security controls aligned with organizational standards.
Cloud Security Engineer
Cloud Security Engineer ensuring cloud infrastructure security at Camping World. Bridging strategic security requirements with technical implementation in a fast-paced environment.