Senior Security Systems Analyst

Domo Inovação

. Continuously and adversarially test the effectiveness of specific security controls, such as WAF, EDR, SIEM rules, and DLP, against recent attack techniques; .

Posted 11/7/2026full-timeRemote • BrazilSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Offensive Security, including adversary emulation and penetration testing, while effectively collaborating with cross-functional teams to enhance security posture. Proficient in developing attack simulation plans and utilizing advanced tools and methodologies to test security controls.

Highest-signal resume keywords

Offensive Security ExperienceAdversary EmulationC2 Infrastructure DeploymentActive Directory ExploitationFinancial Services Experience

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Penetration TestingThreat SimulationDefense EvasionProcess InjectionAMSI BypassEDR BypassingNetwork Protocols KnowledgeLateral MovementCloud Environment ExploitationCustom Payload Development

Soft Skills

LeadershipCollaborationCommunicationStrategic ThinkingWorkshop Facilitation

Tools & Technologies

Cobalt StrikeMythicSliverHavocGitHubGitLabKubernetesSIEMWAFEDR

Certifications & Qualifications

CRTOCRTECRTPOSEPCPTSCARTPCRTLOSCPOSWEGPEN

Industry Keywords

CybersecurityFinancial ServicesPayment CompaniesCritical InfrastructureRegulatory Compliance

Tech Stack

Tools & technologies

AWSAzureCloudKubernetes

About the role

Key responsibilities & impact

Continuously and adversarially test the effectiveness of specific security controls, such as WAF, EDR, SIEM rules, and DLP, against recent attack techniques;
Create and maintain an internal arsenal of specialized scripts, tools, and methodologies, including custom payloads, controlled phishing tools, implants, and evasion techniques;
Act as the strategic Purple Team liaison, sharing findings, insights, and knowledge of the attacker mindset with the Blue Team (SOC), Security Architecture, and Security Engineering teams;
Lead debriefing sessions and workshops;
Develop detailed attack simulation plans, define Rules of Engagement (RoE), and coordinate exercises with risk committees and strategic leadership;
Mimic intrusion tactics across the bank’s technology value chain by testing interfaces with IT vendors, partner integrators, DevOps pipelines (GitHub/GitLab, Kubernetes), and multi-cloud corporate environments.

Requirements

What you’ll need

Bachelor’s degree in Computer Science, Engineering, Information Security, Networking, or related technology fields;
Proven 5 years of experience in Offensive Security (Red Team and/or advanced penetration testing);
Practical experience with adversary emulation, threat simulation campaigns, or business objective-driven intrusion operations;
Knowledge of the architecture and in-depth exploitation of Active Directory and hybrid cloud environments (Entra ID, Azure, AWS);
Expertise in defense evasion, process injection, AMSI bypass, and bypassing modern EDR solutions;
Proficiency in deploying and operating C2 infrastructure (Cobalt Strike, Mythic, Sliver, Havoc, or custom solutions), using obfuscation techniques and redirectors;
Knowledge of network protocols and services, Kerberos abuse, constrained/unconstrained delegation, and lateral movement;
Postgraduate qualification in Offensive Security/Cybersecurity;
Experience in financial services, payment companies, or highly regulated critical infrastructure organizations;
Preferred certifications: CRTO, CRTE/CRTP, OSEP, CPTS, CARTP, CRTL, OSCP, OSWE, CWEE, GPEN, or GXPN.

Benefits

Comp & perks

Health and dental insurance
Wellhub (Gympass)
Transportation allowance
Meal and food allowances
Academia Mercantil (learning platform) and partnerships with educational institutions
Private pension plan
Life insurance
Day off
Extended maternity and paternity leave