Offensive Security Specialist

Evonik

Offensive Security Specialist conducting penetration testing and Red Team operations in Brazil. Working with cloud environments, web applications, and enterprise infrastructure.

Posted 7/22/2026full-timeSão Paulo • 🇧🇷 BrazilMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in offensive security activities, including penetration testing and Red Team operations across various environments. Proficient in documenting findings and presenting results to diverse stakeholders while advising on risk mitigation and secure design principles.

Highest-signal resume keywords

Penetration TestingRed Team OperationsCloud PlatformsOffensive Security ToolsSecure Software Development Lifecycle

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Web Application Penetration TestingInfrastructure Penetration TestingNetwork Penetration TestingProgramming SkillsScripting Skills

Soft Skills

Communication SkillsPresentation Skills

Tools & Technologies

Cloud-Native ServicesWindows Client/Server EnvironmentsLinux Client/Server Environments

Industry Keywords

Industrial SecurityOT/ICS SecurityBusiness-Critical ApplicationsAdversary SimulationVulnerability Classes

Tech Stack

Tools & technologies

CloudERPLinux

About the role

Key responsibilities & impact

Conduct offensive security activities, including penetration testing and Red Team operations, across web applications, enterprise infrastructure, cloud environments, and industrial systems
Plan, execute, and lead advanced penetration tests for custom and third-party web applications, complex enterprise applications (e.g., ERP, legacy systems, industrial platforms), and cloud-native and hybrid architectures
Document findings in high-quality technical reports, including clear risk ratings, business impact analysis, and actionable remediation recommendations
Present results to technical and non-technical stakeholders, including engineering teams, management, and customers
Advise on risk mitigation strategies, secure design principles, and defensive improvements.

Requirements

What you’ll need

Successfully completed a university degree in (Business) Informatics, Computer Science, or a comparable IT-related field — or equivalent professional experience
Hands-on experience in web application penetration testing
Experience in infrastructure and network penetration testing
Experience testing complex, business-critical applications
Experience working in industrial or chemical company environments is a plus
Strong understanding of Windows and Linux client/server environments
Practical experience with cloud platforms, including identity, networking, and cloud-native services
In-depth knowledge of and hands-on experience with offensive security tools
Knowledge of secure software development lifecycle (SSDLC) and common vulnerability classes (e.g., OWASP Top 10)
Programming and scripting skills are a plus
Experience with Red Teaming, adversary simulation, and attack-chain methodology
Familiarity with source code review and static/dynamic application security testing
Knowledge of OT/ICS security is desirable.

Benefits

Comp & perks

Performance-based remuneration
Occupational health benefits
Hybrid and flexible working arrangements
High-quality professional development programs