Senior Offensive Security Analyst – Red Team

Keeggo

. Lead penetration testing, Red Team Assessment, and security assessment projects for clients across various industries .

Posted 9/29/2026full-timeSão Paulo • BrazilSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in penetration testing, Red Team Assessment, and security assessments, with strong capabilities in vulnerability exploitation, technical reporting, and project leadership. Proficient in scripting and automation to enhance security testing methodologies and practices.

Highest-signal resume keywords

Penetration TestingRed Team AssessmentVulnerability ExploitationTechnical LeadershipOffensive Security Certifications

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Penetration TestingVulnerability ExploitationScripting in PythonScripting in BashScripting in PowerShellSecurity Testing MethodologiesCloud SecurityNetworking KnowledgeMobile Application TestingTechnical Report Preparation

Soft Skills

Strong Communication SkillsMentoring

Tools & Technologies

Burp SuiteNmapMetasploitAWSAzureGCP

Certifications & Qualifications

OSCPOSWEOSEP

Industry Keywords

OWASP Top 10MITRE ATT&CKPTESOWASP WSTGOWASP MASTG

Tech Stack

Tools & technologies

AWSAzureGoogle Cloud PlatformLinuxPython

About the role

Key responsibilities & impact

Lead penetration testing, Red Team Assessment, and security assessment projects for clients across various industries
Provide technical leadership throughout project execution, ensuring adherence to agreed scopes and timelines
Plan and conduct penetration tests across web applications, APIs, mobile applications, infrastructure, and internal and external networks
Execute Red Team Assessment projects to evaluate clients’ ability to prevent, detect, and respond to simulated attacks
Plan attack scenarios, objectives, and rules of engagement
Identify, manually exploit, and validate vulnerabilities
Conduct security assessments using industry-standard methodologies
Analyze evidence and validate the technical impact of vulnerabilities
Develop and adapt scripts and automation to support testing activities
Prepare technical and executive reports covering vulnerabilities, evidence, risks, impact, and recommendations
Present findings to clients’ technical teams, managers, and stakeholders
Participate in kickoff meetings, technical alignment sessions, and results presentations
Conduct retesting to validate vulnerability remediation
Translate technical findings into business risks and practical recommendations
Support the commercial team in defining scopes and estimating effort for new projects
Mentor less experienced professionals and review their deliverables
Research new techniques, vulnerabilities, tools, and offensive security trends
Contribute to improvements in the department’s methodologies, processes, and automation

Requirements

What you’ll need

Proven experience in offensive security and penetration testing
Hands-on experience testing web applications and APIs
Hands-on experience testing infrastructure and internal and external networks
Strong knowledge of networking, Windows, Linux, Active Directory, and enterprise environments
Experience with manual vulnerability exploitation
Proficiency with Burp Suite, Nmap, Metasploit, or equivalent tools
Proficiency in the OWASP Top 10 and security testing methodologies
Experience preparing technical and executive reports
Scripting or programming knowledge, particularly Python, Bash, or PowerShell
Experience providing technical leadership on projects, with the autonomy to organize activities and deliverables
Strong communication skills with clients and technical teams, including presenting results to technical and executive audiences
Bachelor’s degree in Computer Science, Information Systems, Engineering, Information Security, Computer Networks, or a related field
Technical English proficiency for reading documentation, advisories, CVEs, and technical materials
Offensive security certifications such as OSCP, OSWE, OSEP, or equivalent
Experience with Red Team Assessment projects or adversary simulations
Experience with cloud security in AWS, Azure, or GCP
Experience testing mobile applications
Knowledge of advanced vulnerability exploitation
Knowledge of evasion and post-exploitation techniques
Experience automating offensive security activities
Participation in CTFs, bug bounty programs, or security research
Knowledge of PTES, MITRE ATT&CK, OWASP WSTG, and OWASP MASTG

Benefits

Comp & perks

Flex meal card
Comprehensive medical and dental coverage
Wellhub membership for gyms, studios, and physical activities
Childcare assistance
Extended parental leave
Remote work allowance
Transportation allowance