Redbelt Security

DevOps Engineer

• Provide technical guidance to the development team on implementing security practices throughout the software development lifecycle.
• Conduct risk assessments, identifying potential vulnerabilities in systems and applications under development, and perform advanced security testing such as penetration testing, code analysis, and architecture reviews.
• Develop and implement comprehensive security strategies, ensuring security requirements are met at all project stages.
• Configure and maintain security tools, such as vulnerability scanners, identity and access management solutions, and security monitoring systems.
• Implement processes and automation to ensure compliance with security practices, regulations, and industry standards.
• Participate in security reviews and provide technical guidance to the development team.
• Develop and deliver training for the development team on secure coding best practices and threat awareness.
• Monitor trends and developments in security best practices and recommend adoption of new technologies and approaches.
• Contribute to the continuous improvement of DevSecOps processes by identifying opportunities and implementing effective solutions.

DevSecOps Consultant, Mid-level

QA Engineer

• Execute Red Team projects and penetration tests for clients across API, Web, and Mobile modalities to identify vulnerabilities in the environment.
• Log vulnerabilities in the RIS tool to contribute to identification and to track and support actions that secure the environment.
• Prepare technical presentations for clients to report performed activities and support decision-making.
• Conduct simulated attack tests on networks using specialized tools to identify vulnerabilities in the environment.
• Perform medium-complexity penetration tests remotely and on-site at client locations using specialized tools, consulting with colleagues when needed.

Mid-level Penetration Tester Consultant

Analyst

• Map and review internal processes across all areas of Redbelt Security using structured modeling techniques (such as BPMN), creating flowcharts and proposing redesigns based on interviews, workshops and data collected from process owners, aiming for continuous optimization, elimination of bottlenecks and delivery of value to the company.
• Lead meetings with internal area owners at Redbelt Security to understand existing processes and their priorities, in order to structure and/or propose process improvements.
• Map the customer journey, identify improvement opportunities, present suggestions and discuss feasibility with the area owner to design process improvements appropriate to the company’s reality.
• Develop proposals for process improvements by mapping the current state and identifying deviations so that processes are cohesive and improve the speed of information and communication within the company.
• Contribute to the documentation of all processes, describing and detailing components such as inputs, outputs, procedures, controls, interactions, owners and other items, with the support of the immediate supervisor, for future reference.
• Keep documented processes up to date for each area and monitor the adoption of procedures with involved stakeholders to ensure better execution of activities/processes within the company.
• Support internal teams by conducting user training on processes and company systems, clarifying questions about the implemented tool and/or process so that knowledge is aligned in process execution.
• Define and monitor process efficiency indicators, involving the immediate supervisor when necessary, in order to compare and track improvements across all internal processes of the company.

Senior Process Analyst

• Executar a coleta de informações existentes do cliente em camadas(surface, deep web e dark net)da Internet, utilizando softwares ou configurações específicas, acessando fóruns, páginas e comunidades, visando mapear possíveis vulnerabilidades do cliente nesse meio.
• Elaborar a documentação técnica e gerencial relacionada ao Threat Intelligence, como detalhamento das informações buscadas, possíveis ações a serem feitas, visando subsidiar a tomada de decisão.
• Realizar a solicitação de retirada da empresa cliente em domínios falsos(take down), efetuando a intermediação e monitorando até a total retirada, visando evitar possíveis ataques cibernéticos.
• Elaborar e apresentar relatórios aos clientes, contendo o detalhamento da busca feita, trazendo as possíveis ameaças e ações que podem ser feitas, de forma a evitar ataques cibernéticos.
• Realizar o cadastro de novos finds na ferramenta Chronos, bem como monitorar os cadastros feitos, para fins de controle e posteriores consultas.

Analista de Threat Intelligence, Pleno

Compliance

• Apoiar a equipe na condução de projetos, processos e monitoramento de KPI’s e KRI´s da área de GRC, para fins de melhor percepção de valor por parte de investidores, clientes e parceiros comerciais da Redbelt Security.
• Implementar projetos de GRC, junto aos clientes da Redbelt Security, realizando uma avaliação abrangente dos processos, políticas e controles existentes relacionados à governança, riscos e conformidade para segurança cibernética, provendo recomendações de melhorias estratégicas, abordando os controles de tecnologia e de processos, bem como programa de capacitação e treinamento de recursos humanos, visando à maximizar a eficácia dos controles na estrutura corporativa de segurança cibernética junto ao cliente.
• Atuar em projetos internos da Redbelt Security, realizando uma avaliação abrangente dos processos, políticas e controles existentes relacionados à governança, riscos e conformidade para segurança cibernética, propondo recomendações de melhorias estratégicas, abordando os controles de tecnologia e de processos, bem como programa de capacitação e treinamento de recursos humanos, visando à maximizar a eficácia dos controles na estrutura corporativa de segurança cibernética junto à Redbelt Security.
• Apoiar as áreas internas da Redbelt Security nas demandas relacionadas aos temas de GRC, participando de reuniões, avaliando documentações, sugerindo pareceres técnicos de GRC, visando ao alinhamento a boas práticas de mercado, normativos legais/regulatórios, bem como a frameworks internacionalmente reconhecidos.
• Avaliar continuamente publicação de novos normativos, frameworks, leis, regulamentos bem como melhores práticas de mercado que tratam de temas correlacionados aos serviços prestados de GRC com o objetivo de sugerir atualizações do portfólio de produtos da área, mantendo-o sempre atualizado.
• Elaborar políticas e normativos da Redbelt Security de temas voltados a Segurança da Informação, visando à padronização de processos e mitigação de riscos que os referidos processos expõem a empresa.

Consultor GRC, Pleno

• Perform vulnerability retests using specific tools to identify vulnerabilities in the environment.
• Execute vulnerability scanning projects for clients using specific tools, contributing to the identification of vulnerabilities and implementing actions to secure the environment.
• Prepare weekly Red Team-related market news reports for clients to alert them to potential cybercriminal activity.
• Perform lower-complexity penetration tests, following defined procedures, using specific tools, and consulting with other consultants when needed.

Junior Penetration Tester

• Execute Red Team and penetration testing projects for clients across API, Web, and Mobile modalities, aiming to identify vulnerabilities in the environment.
• Register vulnerabilities in the RIS tool to support identification and carry out actions to secure the environment.
• Prepare technical presentations for clients to report on conducted activities and support decision-making.
• Perform network attack simulation tests using specialized tools to identify vulnerabilities in the environment.
• Conduct medium-complexity penetration tests remotely and on-site at the client, using specialized tools and consulting with other consultants when necessary.

Pentester Consultant, Mid-level

Sales Development Rep

• Receive and organize leads captured by marketing, identifying new business opportunities and contacting prospects by phone and/or email to understand their needs and refer qualified opportunities to the Account Manager for development of the commercial relationship.
• Prospect new clients through social media, networking, outreach emails and cold calls, briefly presenting the company, identifying potential opportunities, and passing prospects to Account Managers for further commercial development aimed at closing sales.
• Create a script for the first contact with potential clients that briefly presents the company and portfolio, captures needs and other relevant information to support subsequent follow-up by the Account Manager.
• Research leads, analyze and classify contacts in a specific tool according to fit and likelihood to purchase, generating reports for Account Managers to consult.
• Conduct online meetings to qualify prospects, present the portfolio and collect contacts of decision-makers to be handed over to the Account Manager.

Sales Development Representative

Consultant

• Plan, execute, and monitor implementation and enhancement initiatives for the One Identity Manager (IGA) solution, and maintain knowledge of market-leading identity protection solutions.
• Define policies, processes, and controls for identity lifecycle management, including provisioning, deprovisioning, and periodic access reviews.
• Ensure integration of the IGA solution with corporate systems (ERP, CRM, Active Directory, critical applications).
• Identify opportunities to automate and optimize identity and access processes.
• Manage relationships with One Identity and implementation partners.