Grupo QuintoAndar | Senior Offensive Security Engineer

BrazilRemoteFull-timesenior

Offensive Security EngineerCybersecurity

0 views0 saves0 applied

Apply Now

Quick Summary

Requirements Summary

Extensive experience as a Senior or Staff Offensive Security Engineer, Red Team Specialist, or Principal Penetration Tester.

Technical Tools

Offensive Security EngineerCybersecurity

We are seeking a highly experienced Senior Offensive Security Engineer to lead the development of an innovative, AI-driven offensive security program. In this strategic role, you will combine advanced penetration testing expertise, AI engineering, and security architecture to strengthen the organization's global security posture. You will design and build autonomous AI agents capable of continuously identifying vulnerabilities, mapping attack surfaces, and validating potential threats across complex cloud-native environments. Working closely with defensive security, threat intelligence, vulnerability management, and engineering teams, you will transform security findings into actionable risk mitigation strategies. You will also influence technical standards, lead cross-functional initiatives, and mentor other security professionals. This is an opportunity to shape the future of automated offensive security within a fast-growing, technology-driven environment.

AI-Driven Security Architecture: Design, develop, and pilot an AI-powered offensive security platform using autonomous agents, LLMs, agentic frameworks, and orchestration pipelines to identify attack paths and assess applications, APIs, and cloud environments.
Continuous Security Testing: Plan and execute systematic offensive security assessments across global infrastructure, microservices architectures, containerized workloads, and Kubernetes clusters.
Security Ecosystem Integration: Integrate offensive security findings with vulnerability management systems, SIEM/SOAR platforms, cyber threat intelligence feeds, and defensive security workflows to enable continuous remediation and automated retesting.
Technical Documentation and Governance: Develop technical architecture documents, RFCs, agent protocols, security automation standards, sandboxing mechanisms, and containment boundaries to ensure safe and reliable autonomous testing.
End-to-End Project Delivery: Lead complex, cross-functional engineering initiatives from initial scoping and architecture through implementation and operational deployment.
Risk Assessment and Communication: Translate attack paths, exploitation proof-of-concepts, vulnerability data, and technical findings into clear business risks and actionable recommendations for engineering leadership and executive stakeholders.
Vulnerability Prioritization: Develop AI-powered processes to validate exploitability, assess compensating controls, prioritize remediation based on business exposure, and automatically retest vulnerabilities after fixes are deployed.
Incident Response: Provide advanced offensive security expertise during critical incidents, participate in red team and purple team reviews, and lead corrective engineering initiatives following post-incident assessments.
Security Leadership and Mentorship: Lead architecture reviews and threat modeling sessions, establish engineering standards, and mentor senior and mid-level security professionals.
Cross-Functional Collaboration: Work closely with product, infrastructure, engineering, defensive security, and threat intelligence teams to improve organizational resilience and security practices.

Requirements

~2 min read

Extensive experience as a Senior or Staff Offensive Security Engineer, Red Team Specialist, or Principal Penetration Tester.
Proven expertise conducting complex security assessments across web applications, APIs, distributed cloud environments, and internal networks.
Hands-on experience developing or architecting LLM-powered applications, autonomous AI agents, agentic workflows, tool calling, and AI sandboxing environments.
Strong knowledge of adversarial AI evaluation and the security implications of autonomous systems.
Deep practical expertise in cloud-native technologies, container runtimes, Kubernetes architecture, and major cloud platforms.
Experience assessing and securing Kubernetes environments, including RBAC, admission controllers, pod security standards, network policies, and service mesh architectures.
Solid software engineering and programming skills, with the ability to develop production-grade security tools, microservices, integrations, and custom AI agent capabilities.
Experience integrating offensive security findings into vulnerability management platforms such as Jira, DefectDojo, or custom risk aggregation systems.
Familiarity with SIEM platforms, security telemetry, and detection engineering workflows.
Demonstrated ability to lead complex initiatives across engineering, product, and infrastructure teams.
Strong business-oriented mindset, with the ability to assess technical vulnerabilities based on their potential impact on customer data, platform trust, revenue, and business operations.
Excellent written and verbal communication skills, including the ability to present technical strategies and security risks to senior leadership and non-technical stakeholders.
Experience writing and reviewing RFCs, establishing technical standards, conducting architecture reviews, and mentoring other engineers.
Strong analytical thinking, problem-solving abilities, technical ownership, and cross-functional leadership skills.

Preferred Qualifications:

Experience leading red team or purple team operations in high-growth technology companies, fintech organizations, or large-scale marketplaces.
Open-source contributions or security research involving automated exploitation, autonomous AI systems, or cloud security tools.
Relevant industry certifications, such as OSCP, OSEP, OSWE, CKS, or AWS Certified Security – Specialty, or equivalent demonstrated expertise.