Offensive Security Specialist (Mobile Security)

Description

Job Summary: We are seeking an Offensive Security Specialist to conduct penetration tests and Red Teaming activities, identifying vulnerabilities and protecting applications against sophisticated adversaries. Key Highlights: 1. Conduct ethical hacking, mobile security, and high-impact projects 2. Lead Red Team exercises and adversarial simulations 3. Develop PoCs for risk validation and support DevSecOps Unico is the world's largest identity verification network and a cornerstone of trust in the digital society. With solutions based on facial biometrics, machine learning, and reinforced security layers, we authenticate with 100% certainty who is performing a transaction and assess associated identity risks. Thus, our solutions combat fraud, protect data, and foster trust among individuals, businesses, and governments—contributing to building a safer, less bureaucratic world. To achieve this, we invest above all in our people, who form an incredible team committed to this great mission. So, are you ready to join us? **Our Culture** Our values form the foundation of everything we do! At Unico, we act without boundaries; we impact directly and without detours; we remain transparent even in difficult situations; we are resilient and adaptable to evolve; we do the right thing the right way; and we are bold in leading the construction of the future. Our work environment is relaxed and collaborative, full of learning opportunities and possibilities for you to develop your career with autonomy and support from leaders and colleagues. At Unico, we believe challenging our own solutions is essential to ensure the security of digital identities. We seek an expert in **Offensive Security**, focused on **penetration testing and Red Teaming**. Your mission will be **to break in order to protect**: identify critical vulnerabilities, simulate real-world attacks, and ensure our applications, APIs, and environments are prepared against sophisticated adversaries. If you are passionate about ethical hacking, mobile security, and want to work on projects impacting millions of people, this role is for you. ### **Responsibilities and Duties:** * + Conduct **internal and external penetration tests** on web and mobile (iOS/Android) applications, SDKs, APIs, and cloud environments. + Lead and execute **Red Team** exercises and adversarial simulations based on the MITRE ATT\&CK framework. + Perform vulnerability assessments and support squads with **DevSecOps** practices (SAST/DAST, secure CI/CD pipelines, RASP). + Produce clear, actionable reports communicating technical risks and mitigation recommendations. + Explore new attack techniques and develop **PoCs (proof of concept)** for risk validation. + Support **Purple Team** initiatives by integrating offensive insights into defensive strengthening. ### **Requirements and Qualifications:** * + Practical experience in **advanced penetration testing** (web, mobile, SDKs, APIs, cloud). Knowledge of methodologies including **PTES, OSSTMM, OWASP Top 10, SANS Top 25**. + Proficiency with tools such as **Burp Suite, Metasploit, Nmap, Ghidra, Frida, Objection**. + Experience with **DevSecOps and secure CI/CD**. + Hands-on experience in **adversary simulation and Red Teaming**. + Technical English for documentation and collaboration. + Solid understanding of risk management, using tools and expertise to make sound decisions. ### **Desirable (Nice to Have):** * + Certifications such as **OSCP, CEH, CRTA, eCPPT, CMAPT (Mobile), GPEN**. + Experience in **mobile fraud and biometrics**. + Experience in **training and building offensive security teams**. **Discover the benefits of becoming a Ser Unico** **Flexible Benefit:** BRL 1,500.00 per month, distributable across VA/VR, Culture, Mobility, and Flex Vacation options;**Remote Work Allowance:** Monthly amount of BRL 120.00 for utility bills and personal consumption;**Profit Sharing (PLR):** Eligible for Profit and Results Sharing per collective bargaining agreement;**Education Benefit:** Unico fully funds 100% of studies for 100% of employees via courses available on the Unico Skill platform. You may choose from undergraduate, graduate, MBA, language, specialized, and mentoring programs;**Well-being:** Access to platforms such as Gympass and Totalpass;**Extended Parental Leave:** 180 days for pregnant individuals and primary caregivers in adoption processes, and 60 days for non-pregnant individuals and secondary caregivers in adoption processes, with full salary and benefits paid throughout the entire period. **Work Location** We adopt a remote-first work model, our \#tetounico. This means team members may optionally visit our offices based on individual or area needs. We have offices in São Paulo and Londrina. **And more…** We offer a structured career path aligned with your skills and interests, with growth opportunities either as a specialist or leader, encouraging your personal and professional development through semiannual performance reviews (with structured feedback and individual development plans); To complete your experience, we host talks, meetups, workshops, trainings, birthday day-offs, “reunioff” every Wednesday, internal/external parties and celebrations, biweekly in-person happy hours, affinity groups, and workplace gymnastics. **Diversity & Inclusion** At Unico, we are committed to building an inclusive culture and welcoming candidates of all backgrounds—regardless of ethnicity, gender, sexual orientation, political views, religion, disability, origin, or any other characteristic. We are building an inclusive workplace and, to support best practices, we created the Diversity & Inclusion form. We invite you to complete it to help us in this process—but please note that participation is entirely optional and will not affect your evaluation. Sharing this information will not impact your performance during the selection process and will be used solely for developing inclusion strategies. **Want to learn more about Unico?** Watch our manifesto; Follow our social media: LinkedIn and Instagram I acknowledge that, prior to applying, I have read the Candidate Privacy Notice, available at: Unico Candidate Privacy Notice \| Privacy \- Internal Use We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.