Senior Offensive Security Engineer
New
G
Grupo QuintoAndarCybersecurity
Based in Brazil; flexibility to work from anywhere in BrazilFull-TimeSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Required Skills
- KubernetesJiraSoftware Engineering
Requirements
- Extensive experience as a Senior or Staff Offensive Security Engineer, Red Team Specialist, or Principal Penetration Tester.
- Expertise conducting complex assessments across web applications, APIs, distributed cloud environments, and internal networks.
- Hands-on experience developing or architecting LLM-powered applications, autonomous AI agents, agentic workflows, tool calling, and AI sandboxing environments.
- Knowledge of adversarial AI evaluation and the security implications of autonomous systems.
- Practical expertise in cloud-native technologies, container runtimes, Kubernetes architecture, and major cloud platforms.
- Experience securing Kubernetes environments, including RBAC, admission controllers, pod security standards, network policies, and service mesh architectures.
- Software engineering and programming skills to develop production-grade security tools, microservices, integrations, and AI agent capabilities.
- Experience integrating offensive security findings into vulnerability management platforms such as Jira, DefectDojo, or custom risk aggregation systems.
- Familiarity with SIEM platforms, security telemetry, and detection engineering workflows.
- Ability to lead complex initiatives across engineering, product, and infrastructure teams and communicate technical strategies and risks to senior and non-technical stakeholders.
- Experience writing and reviewing RFCs, establishing technical standards, conducting architecture reviews, and mentoring engineers.
Responsibilities
- Design, develop, and pilot an AI-powered offensive security platform using autonomous agents, LLMs, agentic frameworks, and orchestration pipelines.
- Plan and execute security assessments across infrastructure, microservices, containerized workloads, and Kubernetes clusters.
- Integrate offensive security findings with vulnerability management systems, SIEM/SOAR platforms, threat intelligence feeds, and defensive security workflows.
- Develop architecture documents, RFCs, agent protocols, automation standards, sandboxing mechanisms, and containment boundaries.
- Lead cross-functional engineering initiatives from scoping and architecture through implementation and operational deployment.
- Translate attack paths, proof-of-concept exploits, vulnerability data, and technical findings into business risks and actionable recommendations.
- Develop AI-powered processes to validate exploitability, prioritize remediation, and retest vulnerabilities after fixes.
- Provide offensive security expertise during critical incidents and participate in red team and purple team reviews.
- Lead architecture reviews and threat modeling sessions, establish engineering standards, and mentor security professionals.
View Full Description & ApplyYou'll be redirected to the employer's site
