Description
Nice to meet you — we are the people of **Develcode**!
We are a technology company with over a decade of history, recognized as a Great Place to Work (GPTW), driven by a purpose: delivering innovative software solutions that transform businesses and people.
Here, we value innovation, collaboration, and commitment, cultivating a safe, challenging, and human-centered work environment that encourages continuous growth for our employees and honors the authenticity of every individual.
Our team consists of highly qualified professionals distributed across Brazil, and our headquarters is located in Caxias do Sul \- RS.
We believe technology and people walk hand in hand — that’s why we invest in learning, well-being, and purpose.
Come build the future with us!
**Responsibilities and Duties**
Serve as a Staff Offensive Security Engineer within the Adversary Emulation Purple Engineering team, conducting adversary emulation exercises and scheduled offensive tests to continuously measure, improve, and sustain the effectiveness of prevention, detection, and response capabilities.
**Mandatory Requirements:**
* Solid experience in Offensive Security: red teaming, penetration testing, War Games, adversary emulation, and/or purple teaming.
* Proven hands-on experience conducting Purple Team exercises with effective collaboration between offensive and defensive teams, transforming findings into verifiable improvements.
* Mastery of MITRE ATT&CK (tactics/techniques/TTPs) and ability to design emulation plans and scenarios based on reports and evidence.
* Practical knowledge of emulation and post-exploitation tools and techniques in corporate environments (conducted securely and with proper authorization), plus strong fundamentals in networking, Windows/Linux, and identity.
* Experience in detection engineering (rules/queries, correlation, telemetry, and logging) and integration with SIEM/EDR/XDR and automation/SOAR.
* Ability to operate under governance: engagement rules, operational risk management for testing, documentation, evidence handling, and reporting.
* Experience managing technical vendors and service delivery (scope definition, deliverable validation, and acceptance).
**Preferred Qualifications:**
* Certifications: OSCP/OSCE, GXPN/GPEN, GCIH/GCIA, CRTO, and/or MITRE ATT&CK Defender / Purple Teaming.
* Experience with emulation platforms (e.g., MITRE Caldera), Atomic Red Team, and developing automations/scripts (Python/PowerShell).
* Knowledge of cloud offensive security (Azure/AWS/GCP) and identity attacks (AD/Azure AD/Entra).
* Experience building programs (templates, cadence, metrics, governance) and delivering executive presentations.
**Working Hours:**
08:00 to 12:00 and 13:12 to 18:00
Hybrid position (3 days onsite per week) \- São Paulo/SP
**What We Offer \| Benefits That Make a Difference:**
At Develcode, we believe caring for people is essential. Therefore, we offer a comprehensive benefits package designed to provide greater flexibility and practicality in your daily life:
* Meal/food allowance — with full freedom of choice via the Swile card.
* National Unimed Health Plan or Health Incentive Program — because your health comes first.
* Remote Work Allowance — work equipment provided by the company \+ financial benefit.
* Daycare Assistance — support for those with young children.
* In-Company English — develop your language skills without leaving the office.
* Education Benefit — access to e-learning platforms, financial support, and certification incentives: continuous learning for your career.
* TotalPass — access to gyms and physical well-being services.
* Mental Health Program — psychological support and access to the Vittude platform.
* Swile Shop — exclusive discounts on products and services.
* Birthday Day Off — enjoy your special day however you like!
* SESC Partnership — a wide range of benefits covering culture, sports, leisure, health, and education.
* Flexible Benefits — choose what matters most to you!
If you’re looking for a place to grow and innovate, your next step is right here!