Offensive Security Engineer / Red Team OperatorWe are looking for a highly skilled Offensive Security Engineer / Red Team Operator to join our security team.This is a hands-on technical role for someone with strong experience in penetration testing, adversary simulation, vulnerability research, and offensive security tooling. You will work exclusively within authorized environments to identify weaknesses and help strengthen the security of our applications, infrastructure, APIs, and payment systems.ResponsibilitiesConduct authorized penetration tests across web applications, APIs, networks, cloud environments, and internal infrastructurePerform Red Team exercises and adversary simulationsIdentify, validate, and document security vulnerabilitiesAssess Active Directory and Windows-based environmentsDevelop custom offensive security tools and proof-of-concept code for controlled testing environmentsPerform vulnerability research and exploit analysisAnalyze malicious techniques, malware behavior, and attack chains for defensive researchPerform reverse engineering and debugging when requiredEvaluate security controls, including endpoint protection and detection mechanismsWork closely with engineering teams to reproduce vulnerabilities and implement effective remediationProduce clear technical reports detailing findings, impact, evidence,



and remediation recommendationsTechnical SkillsWe are particularly interested in candidates with experience in:Penetration TestingRed Team OperationsAdversary SimulationWeb Application & API SecurityNetwork SecurityActive Directory SecurityVulnerability ResearchExploit DevelopmentReverse EngineeringMalware AnalysisWindows InternalsC2 infrastructure and frameworksSecurity automation and custom toolingStrong programming/scripting skills in one or more of:C / C++C#PythonPowerShellBashAssembly / x86-64 knowledge is a strong plusCertificationsThe following certifications are highly desirable:OSCP — Offensive Security Certified ProfessionalOSEP — Offensive Security Experienced Penetration TesterOSWE — Offensive Security Web ExpertCRTO / CRTO II — Certified Red Team OperatoreCPPT / eCPTXGPENGWAPTEquivalent hands-on experience will also be considered.Nice to HaveExperience in fintech, banking, or payment infrastructureKnowledge of Pix and Brazilian payment systemsExperience securing high-volume APIs and financial applicationsCloud security experience (AWS, Azure, or GCP)Bug bounty or vulnerability research backgroundExperience building offensive security tooling in controlled environmentsWhat We ValueWe are looking for someone who understands how contemporary attacks work at a deep technical level — not simply someone who knows how to run automated security tools.The ideal candidate can think like an attacker, develop their own tooling when necessary, understand complex attack chains, and translate offensive findings into meaningful security improvements.All offensive security activities are conducted exclusively within authorized systems and controlled environments.

📌 Penetration Tester (New Delhi)
🏢 Kore Pagamentos
📍 New Delhi