Senior Red Team and Offensive Security Analyst

Mindworks

Red Team Analyst for offensive security at Mindworks focusing on web application testing and vulnerability analysis. Engaging in strategic security projects to strengthen security measures for large organizations.

Posted 7/8/2026full-timeRemote • 🇧🇷 BrazilSeniorWebsite

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Perform tests on web applications, APIs, internal and external infrastructure, cloud environments, and Active Directory.
Conduct manual vulnerability validations, controlled exploitation, authorized post-exploitation, and impact analysis.
Review technical findings, evidence, severity assessments, recommendations, and reports produced by the team.
Serve as an operational second opinion for defining processes and work instructions.
Support sensitive technical decisions related to significant findings, false positives, critical risks, and operational validations.
Review and standardize methodologies, playbooks, checklists, templates, and internal procedures.
Support phishing, smishing, and vishing campaigns, including planning, technical validation, result analysis, and recommendations.
Support OSINT activities, password analysis, credential exposure reviews, and monitoring of the Deep and Dark Web.
Contribute to the design of future services, including adversary simulations, tabletop exercises, ransomware simulations, and full Red Team exercises.
Support the definition of technical scope, effort estimates, and consultative discussions with clients.

Requirements

What you’ll need

Bachelor's degree (or higher) in Information Security, Computer Science, Computer Engineering, or related fields.
Strong experience in offensive security, penetration testing, Red Teaming, or related areas.
Hands-on experience testing web applications, APIs, infrastructure, networks, Active Directory, and cloud environments.
Ability to perform manual exploitation and validate vulnerabilities beyond automated tooling.
Knowledge of reconnaissance, enumeration, exploitation, lateral movement, and post-exploitation techniques in authorized environments.
Familiarity with tools such as Burp Suite, Nmap, Metasploit, BloodHound, Impacket, NetExec/CrackMapExec, OWASP ZAP, nuclei, ffuf, Hashcat, OSINT tools, and cloud security solutions.
Knowledge of frameworks and references such as MITRE ATT&CK, OWASP Top 10, OWASP WSTG, and penetration testing methodologies.
Strong technical writing skills and the ability to produce clear, concise, and actionable reports.
Conversational English.

Benefits

Comp & perks

🌐 Worldwide ❌ Jobs You've Hidden ⭐️ Saved Jobs ✅ Applied Jobs ✉️ Email Alerts 👤 Account Mindworks Website LinkedIn All Job Openings 51 - 200 employees Founded 1999 🤝 B2B 🔒 Cybersecurity 🏢 Enterprise B2B
Cybersecurity
Enterprise Mindworks is a Brazilian IT services and solutions provider offering end-to-end technology services and managed solutions for businesses and public organizations. The company delivers infrastructure and storage, data and voice connectivity, DBA outsourcing, hybrid and multicloud deployments, cybersecurity, and 24x7 support, plus training and customized consulting. With over 25 years in the market and operations across several Brazilian states, Mindworks focuses on secure, efficient, and tailored IT strategies for clients including municipalities and utilities. Senior Red Team and Offensive Security Analyst Job not on LinkedIn 🔥 13 minutes ago 🇧🇷 Brazil – Remote ⏰ Full Time 🟠 Senior 🔐 Security Analyst 🗣️🇧🇷🇵🇹 Portuguese Required Apply Now Find Hiring Managers Customize resume + cover letter Report problem ☆ Save ☑️ Mark as applied ❌ Hide 📋 Description
Perform tests on web applications, APIs, internal and external infrastructure, cloud environments, and Active Directory.
Conduct manual vulnerability validations, controlled exploitation, authorized post-exploitation, and impact analysis.
Review technical findings, evidence, severity assessments, recommendations, and reports produced by the team.
Serve as an operational second opinion for defining processes and work instructions.
Support sensitive technical decisions related to significant findings, false positives, critical risks, and operational validations.
Review and standardize methodologies, playbooks, checklists, templates, and internal procedures.
Support phishing, smishing, and vishing campaigns, including planning, technical validation, result analysis, and recommendations.
Support OSINT activities, password analysis, credential exposure reviews, and monitoring of the Deep and Dark Web.
Contribute to the design of future services, including adversary simulations, tabletop exercises, ransomware simulations, and full Red Team exercises.
Support the definition of technical scope, effort estimates, and consultative discussions with clients. 🎯 Requirements
Bachelor's degree (or higher) in Information Security, Computer Science, Computer Engineering, or related fields.
Strong experience in offensive security, penetration testing, Red Teaming, or related areas.
Hands-on experience testing web applications, APIs, infrastructure, networks, Active Directory, and cloud environments.
Ability to perform manual exploitation and validate vulnerabilities beyond automated tooling.
Knowledge of reconnaissance, enumeration, exploitation, lateral movement, and post-exploitation techniques in authorized environments.
Familiarity with tools such as Burp Suite, Nmap, Metasploit, BloodHound, Impacket, NetExec/CrackMapExec, OWASP ZAP, nuclei, ffuf, Hashcat, OSINT tools, and cloud security solutions.
Knowledge of frameworks and references such as MITRE ATT&CK, OWASP Top 10, OWASP WSTG, and penetration testing methodologies.
Strong technical writing skills and the ability to produce clear, concise, and actionable reports.
Conversational English. Apply Now 📊 Check your resume score for this job Improve your chances of getting an interview by checking your resume score before you apply. Check Resume Score Similar Jobs Information Security Analyst III – Cyber Risk Management 🔥 14 hours ago Cooperativa Central Ailos 1001 - 5000 💸 Finance 👥 B2C Website LinkedIn All Job Openings Information Security Analyst III focusing on Cyber Risk Management. Engage in risk identification, tracking, and regulatory compliance for Central Ailos. 🇧🇷 Brazil – Remote ⏰ Full Time 🟡 Mid-level 🟠 Senior 🔐 Security Analyst 🗣️🇧🇷🇵🇹 Portuguese Required Information Security Analyst III – AppSec 🔥 14 hours ago Cooperativa Central Ailos 1001 - 5000 💸 Finance 👥 B2C Website LinkedIn All Job Openings Information Security Analyst evaluating vulnerabilities in applications and APIs. Supporting squads in secure development and continuous improvement of security practices. 🇧🇷 Brazil – Remote ⏰ Full Time 🟡 Mid-level 🟠 Senior 🔐 Security Analyst 🗣️🇧🇷🇵🇹 Portuguese Required Analista de Segurança da Informação Júnior 🕒 5 days ago Spread Tecnologia 1001 - 5000 🤝 B2B 📱 Media 🛍️ eCommerce Website LinkedIn All Job Openings Júnior Analyst supporting implementation of information security controls at Spread Tecnologia. Focus on monitoring security events and assisting with incident response and access management. 🇧🇷 Brazil – Remote ⏰ Full Time 🟡 Mid-level 🟠 Senior 🔐 Security Analyst 🗣️🇧🇷🇵🇹 Portuguese Required Information Security Analyst 🕒 6 days ago Capgemini 10,000+ employees 🏢 Enterprise 🤖 Artificial Intelligence 🔒 Cybersecurity Website LinkedIn All Job Openings Information Security Analyst tasked with protecting organization's networks and data from cyber threats. Managing security policies, user access and incident response. 🇧🇷 Brazil – Remote ⏰ Full Time 🟠 Senior 🔴 Lead 🔐 Security Analyst Mid-level Information Security Analyst – Detection, SIEM, Perimeter, NGFW 🕒 6 days ago Portobello 1 - 10 Website LinkedIn All Job Openings Security Analyst focusing on SIEM operations and perimeter asset management for Brazilian ceramic leader. Monitoring, log handling, and security incident response. 🇧🇷 Brazil – Remote ⏰ Full Time 🟡 Mid-level 🟠 Senior 🔐 Security Analyst 🗣️🇧🇷🇵🇹 Portuguese Required View More Security Analyst Jobs 🌐 Worldwide Built by Lior Neu-ner. I'd love to hear your feedback — Get in touch via DM or support@remoterocketship.com Search Search Jobs by country Search jobs by city Search jobs by job title Search entry-level jobs Search junior-level jobs Search senior-level jobs Search jobs by tech stack Search jobs by contract type Search remote internships Search remote part-time jobs Remote jobs Anywhere in the World Companies Hiring Anywhere in the World Companies Hiring Sales People Anywhere in the World Companies Hiring Software Engineers Anywhere in the World Resources Advice Tips for finding remote jobs Interview questions and answers Resume examples Cover letter examples Post a job Affiliates Privacy policy Terms of service Job board SEO course AI Apply Copilot OpenClaw job finder Find jobs using your resume Jobs by Country Remote jobs anywhere in the world (Worldwide remote jobs) Remote jobs United States Remote jobs Australia Remote jobs Brazil Remote jobs Canada Remote jobs France Remote jobs Ireland Remote jobs Germany Remote jobs Netherlands Remote jobs Spain Remote jobs UK Popular Jobs Remote data analyst jobs Remote customer support jobs Remote executive assistant jobs Remote marketing jobs Remote product designer jobs Remote product manager jobs Remote project manager jobs Remote recruiter jobs Remote sales jobs Remote software engineer jobs Jobs by Type Remote full-time jobs Remote part-time jobs Remote contract jobs Remote internship jobs Remote entry-level jobs Remote jobs with no experience required Remote junior jobs (1-3 years of experience) Digital nomad jobs Remote jobs with no degree required Freelance remote jobs Temporary remote jobs Remote jobs hiring now Stay at home mom jobs

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Web Application TestingAPI TestingInfrastructure TestingManual ExploitationVulnerability ValidationReconnaissance TechniquesExploitation TechniquesPost-Exploitation TechniquesCloud SecurityActive Directory Testing

Soft Skills

Clear CommunicationAnalytical Thinking