Information Security Specialist, Red Team

Riachuelo

Security Information Specialist in Red Team at Riachuelo. Leading offensive security tests and collaborating with Blue Team for incident responses.

Posted 7/15/2026full-timeSão Paulo • 🇧🇷 BrazilSeniorLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in leading Cyber Threat Intelligence initiatives and executing offensive security tests across various environments, including cloud and on-premises. Proficient in translating technical findings into actionable business risks and developing automated offensive testing tools within DevSecOps pipelines.

Highest-signal resume keywords

Offensive SecurityRed Team ExperienceCloud SecurityAPI ExploitationTechnical Report Writing

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cyber Threat IntelligencePenetration TestingAdversary EmulationIncident ResponseVulnerability Assessment

Soft Skills

CommunicationCollaborationProblem-Solving

Tools & Technologies

Cobalt StrikeBurp SuiteMetasploitEnumeration ToolsDevSecOps

Industry Keywords

Information SecurityMITRE ATT&CKCloud EnvironmentsOn-Premises InfrastructureRegulated Environments

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Lead the company's Cyber Threat Intelligence (CTI) initiative
Execute offensive tests (Red Team, Pentest and Adversary Emulation) on:
web and mobile applications
on-premises infrastructure
cloud environments
Simulate realistic attacks based on TTPs from real adversaries (MITRE ATT&CK)
Translate technical findings into clear, actionable business risks
Produce technical and executive reports that highlight control, detection, and response gaps
Work closely with the Blue Team to validate the effectiveness of controls and support the technical development of the team
Provide technical support for investigations and incident response (CSIRT), applying an offensive perspective for emergency hardening
Contribute to the design and evolution of the company's Red Team program
Develop and automate offensive testing tools and integrate them into DevSecOps pipelines

Requirements

What you’ll need

Bachelor's degree in Information Security, Computer Science, Engineering, Information Systems, or a related field
Minimum of 8 years of experience in Information Security, with at least 6 years in offensive security / Red Team
Experience in complex, dynamic, and preferably regulated environments
Advanced English for technical reading and interaction with external materials
Mandatory technical knowledge:
Offensive security in on-premises and cloud environments
API exploitation, modern architectures, and microservices
Cloud security (IAM abuse, privilege escalation, lateral movement)
Scenario-based simulations informed by real CTI
Familiarity with tools such as:
Cobalt Strike or Sliver
Burp Suite
Metasploit
Enumeration and privilege escalation tools

Benefits

Comp & perks

Health insurance
Dental insurance
Meal voucher
Food voucher
Gympass
Childcare allowance
Culture voucher
Home office allowance
PPR – Profit Sharing Program
Private pension
Group life insurance
Educational partnerships
Discounts at Riachuelo