Offensive Security Engineer / Red Team Operator We are looking for a highly skilled

Offensive Security Engineer / Red Team Operator

to join our security team. This is a hands-on technical role for someone with strong experience in penetration testing, adversary simulation, vulnerability research, and offensive security tooling. You will work exclusively within authorized environments to identify weaknesses and help strengthen the security of our applications, infrastructure, APIs, and payment systems. Responsibilities Conduct authorized penetration tests across web applications, APIs, networks, cloud environments, and internal infrastructure Perform Red Team exercises and adversary simulations Identify, validate, and document security vulnerabilities Assess Active Directory and Windows-based environments Develop custom offensive security tools and proof-of-concept code for controlled testing environments Perform vulnerability research and exploit analysis Analyze malicious techniques, malware behavior, and attack chains for defensive research Perform reverse engineering and debugging when required Evaluate security controls, including endpoint protection and detection mechanisms Work closely with engineering teams to reproduce vulnerabilities and implement effective remediation Produce clear technical reports detailing findings, impact, evidence, and remediation recommendations Technical Skills We are particularly interested in candidates with experience in:



Penetration Testing Red Team Operations Adversary Simulation Web Application & API Security Network Security Active Directory Security Vulnerability Research Exploit Development Reverse Engineering Malware Analysis Windows Internals C2 infrastructure and frameworks Security automation and custom tooling Strong programming/scripting skills in one or more of: C / C++ C# Python PowerShell Bash Assembly / x86-64 knowledge is a strong plus Certifications The following certifications are highly desirable: OSCP — Offensive Security Certified Professional OSEP — Offensive Security Experienced Penetration Tester OSWE — Offensive Security Web Expert CRTO / CRTO II — Certified Red Team Operator eCPPT / eCPTX GPEN GWAPT Equivalent hands-on experience will also be considered. Nice to Have Experience in fintech, banking, or payment infrastructure Knowledge of

Pix and Brazilian payment systems Experience securing high-volume APIs and financial applications Cloud security experience (AWS, Azure, or GCP) Bug bounty or vulnerability research background Experience building offensive security tooling in controlled environments What We Value We are looking for someone who understands how contemporary attacks work at a deep technical level — not simply someone who knows how to run automated security tools. The ideal candidate can think like an attacker, develop their own tooling when necessary, understand complex attack chains, and translate offensive findings into meaningful security improvements. All offensive security activities are conducted exclusively within

authorized systems and controlled environments .

📌 Penetration Tester (Mumbai)
🏢 Kore Pagamentos
📍 Mumbai