Senior Offensive Security Engineer

Our technology team operates under a "remote-first" model, which means we work from home and can live anywhere in Brazil.Full-TimeSenior

Salary not disclosed

Apply NowOpens the employer's application page

Job Details

Languages: English is needed for communications with coworkers and suppliers.
Required Skills: Kubernetes

Have a proven background as a Senior/Staff Offensive Security Engineer, Senior Red Teamer, or Principal Penetration Tester.
Have conducted complex assessments of web applications, APIs, distributed cloud environments, and internal networks.
Have hands-on experience developing or architecting LLM-driven applications and agentic workflows.
Understand tool calling, autonomous agent sandboxing, and adversarial AI evaluation.
Have deep practical knowledge of container runtimes, Kubernetes architecture, and major cloud platforms.
Be able to exploit and harden containerized infrastructure.
Have programming proficiency sufficient to build production-grade tooling, microservices, pipeline integrations, and custom agent skills.
Have experience integrating offensive findings into vulnerability management engines such as Jira, DefectDojo, or custom risk aggregators, and telemetry tools such as SIEM.
Demonstrate experience leading initiatives across engineering, product, and infrastructure teams.
Be able to assess technical risk in terms of business value and revenue impact.
Have verbal and written communication skills for presenting strategies to senior leadership and explaining security topics to non-technical stakeholders.
Have experience contributing to and reviewing RFCs, establishing best practices, and mentoring peers.

Architect, build, and pilot an AI-agent-powered offensive security platform, including agent protocols, tool orchestration, containment boundaries, and sandboxing.
Plan and conduct continuous testing across the global attack surface, microservices, containerized workloads, and Kubernetes clusters.
Connect automated findings with vulnerability management pipelines, SIEM/SOAR platforms, CTI feeds, and Blue Team detection workflows.
Write RFCs and technical design documents for offensive automation and safe autonomous testing.
Drive multi-team engineering deliverables from scoping through operational deployment.
Translate attack graphs, proof-of-concept exploits, and vulnerability telemetry into business risk for product, engineering, and executive stakeholders.
Automate vulnerability triage, exploitability validation, remediation prioritization, and retesting after patches.
Contribute adversary expertise during severe security incidents, lead red/purple team debriefs, and own corrective post-mortem engineering initiatives.
Lead offensive architecture reviews and threat modeling sessions, and mentor security engineers.

View Full Description & ApplyYou'll be redirected to the employer's site