Senior Digital Security Specialist – Offensive and Defensive Security
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Especialista sênior em segurança digital na Evertec, empresa de tecnologia financeira. Executando testes de intrusão e orientando remediações em aplicações, infraestrutura e nuvem.
Responsibilities:
- Plan and execute black-box, gray-box, and white-box penetration tests on web applications, APIs, networks, servers, and cloud environments, with formal scope and authorization
- Simulate real-world attacks, including vulnerability exploitation, privilege escalation, lateral movement, and vulnerability chaining
- Conduct vulnerability assessments and review insecure configurations, manually validating automated findings
- Perform security-focused code reviews when necessary
- Stay up to date on attack techniques, CVEs, and threat trends
- Propose technical fixes and identify root causes
- Recommend improvements to architecture, hardening, configuration best practices, and compensating controls
- Prioritize risks based on severity and impact using CVSS, OWASP, and MITRE ATT&CK
- Support development, infrastructure, and cloud teams in implementing fixes and revalidate the results
- Contribute to secure development processes and vulnerability management
- Prepare technical reports and executive summaries with evidence, reproduction steps, risk ratings, and remediation plans
- Present findings and recommendations to technical and non-technical audiences
- Read and produce technical documentation in English
Requirements:
- Proven experience in penetration testing and offensive security across multiple domains (web/API, infrastructure, networks, and cloud)
- Experience securing AWS environments
- Strong knowledge of OWASP Top 10, OWASP ASVS, PTES, MITRE ATT&CK, and CVSS
- Solid knowledge of networking, Linux and Windows operating systems, Active Directory, authentication, and cryptography
- Experience with Burp Suite, Nmap, Metasploit, and enumeration and post-exploitation tools
- Ability to automate tasks and develop custom tools or scripts using Python or Bash
- Experience proposing and guiding the implementation of fixes and hardening measures
- Strong technical writing and excellent communication skills
- Technical proficiency in English
- Preferred: experience with Azure, GCP, and/or OCI
- Preferred: certifications such as OSCP, OSEP, OSWE, GPEN, GWAPT, CISSP, AWS Certified Security – Specialty, Microsoft AZ-500, Google Professional Cloud Security Engineer, Oracle Cloud Infrastructure Security Professional, or CCSP
- Preferred: participation in Bug Bounty programs, CTFs, or responsible vulnerability disclosure (published CVEs)
- Preferred: experience with Threat Modeling and security in CI/CD pipelines (DevSecOps)
Benefits:
- Remote work
- Individual contributor role
Similar Jobs
Senior Security Engineer, Product Security
Senior Security Engineer securing Komodo Health’s healthcare data platform, software supply chain, and AI features. Automating product-security testing and remediation across US-based engineering teams.
Senior Instructor, Training – Cloud Security
Cloud security instructor delivering hands-on CNAPP and Falcon Cloud Security training. Developing courses, certification exams, and labs for CrowdStrike customers.
Cloud Azure Security Engineer
Cloud Azure Security Engineer securing Microsoft Azure environments for Monks, a global AI-powered transformation consultancy. Managing Entra ID, compliance controls, vulnerabilities, and cloud security automation.
Staff Product Security Engineer
Staff Product Security Engineer embedding with ServiceTitan engineering portfolios to secure SaaS applications, cloud infrastructure, and AI-enabled features. Driving threat modeling, remediation, paved-road adoption, and portfolio risk reduction.
Senior Information Security Coordinator
Coordenador sênior de segurança da informação no Bernoulli Educação, grupo educacional brasileiro. Gestão de riscos, LGPD, incidentes, vulnerabilidades e equipes.
Incident Response Product Security Engineer II
Incident response engineer securing Esri’s ArcGIS geographic-information software. Investigating vulnerabilities, facilitating red-team exercises, and advancing product security practices.
Security Assessor
Security Assessor evaluating federal information systems against NIST RMF and FedRAMP requirements. Conducting control assessments, risk analysis, ATO support, and compliance documentation remotely.
Staff Engineer, Security
Staff Security Engineer strengthening NextGen Healthcare’s cloud security posture. Automating threat detection, vulnerability mitigation, and AI-enabled security operations across cloud systems.
Security Architect – Zero Trust, Application Access
Security Architect designing Zscaler Zero Trust access for internal business applications. Assessing application exposure, establishing security standards, and guiding cross-functional implementation.
Security Engineer
Security Engineer protecting Allium’s canonical onchain finance data infrastructure, cloud systems, and AI agents. Building detection, response, access, and compliance controls.
Manager, Cloud Security Engineering
Cloud security engineering manager leading AWS, Azure, and GCP security teams for Workstreet’s compliance-focused client engagements. Building hardened infrastructure, automation, and audit-ready controls.
Security Engineer
Security Engineer owning vulnerability management, SIEM, and incident investigations. Securing cloud-native AWS environments for Arionkoder’s AI consulting clients.
IT Systems and Security Specialist I
IT systems and security specialist supporting Aspire Living & Learning’s service operations remotely. Maintaining IT systems and security while traveling periodically across the service area.
Associate, Cybersecurity – Data Privacy Incident Response
Associate attorney advising clients through cybersecurity incidents, data breaches, and breach notification requirements. Supporting Constangy's national Cybersecurity & Data Privacy practice.
Associate, Cybersecurity – Data Privacy Litigation
Associate attorney defending privacy, cybersecurity, and complex commercial litigation for Constangy, Brooks, Smith & Prophete, LLP. Conducting research, drafting litigation documents, and supporting cases through trial preparation.
Associate Security Researcher
Associate Security Researcher supporting Cobalt’s penetration-testing research through systems administration, threat simulation, vulnerability triage, and technical report quality control.
Cyber Security Engineer
Cyber Security Engineer leading incident response, threat hunting, and forensics for NVIDIA’s corporate, cloud, and product environments. Building automated defenses against advanced threats.
Senior Security Research Architect, Confidential Computing
Senior Security Research Architect designing Trusted Execution Environment architectures for NVIDIA NICs and DPUs. Driving confidential-computing security across hardware, software, research, and product teams.
IT and Security Manager
IT and Security Manager securing Microsoft 365, Azure, vendors, and cybersecurity operations for Furnished Quarters’ furnished apartment business. Managing infrastructure, incident response, access, compliance, and technology partnerships.
Senior Security Engineer
Senior Security Engineer protecting Cisco’s network-device portfolio through threat modeling, code review, and reproducible security testing. Improving embedded and IoT security across hardware, firmware, and device lifecycles.