Hybrid Senior Security Analyst, Red Team – Pentester

at Keeggo

• Job title: Senior Security Analyst, Red Team – Pentester
• Job type: Full Time
• Experience level: Senior
• Salary: Not specified
• Degree requirement: No Education Requirement
• Tech skills: AWS, Azure, Cloud, DNS, Google Cloud Platform, IoT, Linux, TCP/IP
• Location requirements: Hybrid, Sao Paulo, Brazil

About the role

• Senior Red Team Analyst at Keeggo performing advanced offensive security projects and vulnerability assessments for large organizations. Involves technical scopes including penetration testing and social engineering.

Responsibilities

• Plan, execute and document penetration tests (Pentest) across different scopes, including:
• Internal and external infrastructure
• Web applications and APIs
• Cloud environments (AWS, Azure and/or GCP)
• Mobile, Wireless, IoT / OT
• Corporate environments (Active Directory, endpoints, desktops)
• Conduct Red Team Assessments, with focus on:
• Simulation of persistent, realistic attacks
• Exploitation of technical, human and procedural weaknesses
• Lateral movement, post-exploitation and privilege escalation
• Operations across logical and physical layers, as contracted
• Execute Social Engineering activities, including:
• Phishing campaigns (email, SMS and other vectors)
• Pretexting and customized simulations
• Integration with Red Team and Purple Team exercises
• Participate in BAS / CTEM initiatives, focusing on:
• Validation of security controls
• Assessment of detection and response capabilities
• Identification of technical and operational gaps
• Prepare technical and executive reports, containing:
• Clear, reproducible technical evidence
• Risk and business impact analysis
• Prioritized technical recommendations
• Support Purple Team activities, collaborating with defensive teams (Blue Team / SOC)
• Serve as a technical reference, mentoring less experienced analysts and reviewing deliverables

Requirements

• Strong, proven experience in Pentesting and Offensive Security
• Advanced knowledge of:
• Networks (TCP/IP, DNS, HTTP/HTTPS)
• Linux and Windows operating systems
• Active Directory, authentication and access control
• Scripting and automation development
• Programming and scripting languages
• Practical experience in:
• Web application and API pentesting (OWASP Top 10 and OWASP API Top 10)
• Internal and external infrastructure pentesting
• Post-exploitation techniques, pivoting and lateral movement
• Cloud environments (AWS, Azure or GCP)

Benefits

• Flexible Meal Card: Use the Flex Card for meals wherever you prefer, hassle-free.
• Comprehensive Health and Dental Coverage: Full medical and dental coverage.
• Wellbeing with Wellhub: Access gyms, studios and fitness activities to maintain physical and mental balance.
• Childcare Assistance: Support to help with your child care expenses.
• Extended Parental Leave: More time to enjoy and care for your family during important moments.
• Home Office Allowance: Receive support for extra remote work expenses.
• Birthday Gift Voucher: Receive a gift voucher on your birthday to celebrate as you wish.
• Transportation Voucher: Commute support to get you to and from work easily.
• Career Growth with Top Partnerships: Take advantage of partnerships with major companies like Google, Microsoft, BSTQ, Amazon and more to boost your career with high-value certifications.