Evonik logo
EvonikPosted 1 month ago

Offensive Security Specialist (m/f/d)

HybridSão Paulo, São Paulo, Brazil or Americana, São Paulo, Brazil

Full TimeEnterprise

Job Summary

Conduct offensive security activities, including penetration testing and Red Team operations, across web applications, enterprise infrastructure, cloud environments, and industrial systems. Plan and execute advanced penetration tests for custom web applications, complex enterprise systems, and cloud-native architectures. Document findings in technical reports with clear risk ratings and actionable remediation recommendations. Present results to engineering teams, management, and customers while advising on risk mitigation strategies and secure design principles. Requires a degree in Informatics or Computer Science and hands-on experience with offensive security tools, Windows/Linux environments, and cloud platforms. Apply online via the careers portal to Andreia Uehara, stating your earliest starting date and salary expectations.

Required Qualifications

  • Successfully completed university degree in (Business) Informatics, Computer Science, or a comparable IT-related field
  • Hands-on experience in: Web application penetration testing
  • Hands-on experience in: Infrastructure and network penetration testing
  • Hands-on experience in: Security testing of complex, business-critical applications
  • Experience working in industrial or chemical company environments
  • Strong understanding of Windows and Linux client/server environments
  • Practical experience with cloud platforms, including identity, networking, and cloud-native services
  • In-depth knowledge and hands-on usage of offensive security tools
  • Knowledge of secure software development lifecycle (SSDLC) and common vulnerability classes (e.g., OWASP Top 10)
  • Experience with Red Teaming, adversary simulation, and attack-chain methodology
  • Familiarity with source code review and static/dynamic application security testing

Desired Qualifications

  • Programming and scripting skills are a plus
  • Knowledge of OT / ICS security is desirable

Hiring someone like this?

Get your role in front of qualified candidates on Sorce.

Get started

Apply to this job in one click with Sorce

Apply on Sorce