Senior Cybersecurity Analyst

Description

Job Summary: The Systems Department seeks a professional to join the DITI Offensive Security Management team, conducting penetration tests, participating in Red/Purple team activities, and adversary simulations. Key Highlights: 1. Offensive security operations with penetration testing (pentests) 2. Participation in Red and Purple team exercises 3. Identification of technological innovation opportunities **About Bradesco** Bradesco is one of Brazil's largest financial groups, with a history marked by pioneering spirit and innovation. Through our broadly diversified portfolio of financial products, banking services, and insurance offerings, we contribute to individuals' aspirations and the sustainable growth of businesses and society. Join our financial ecosystem and impact the experience of millions of people! Learn more at https://banco.bradesco/html/classic/sobre/index.shtm **Responsibilities and Duties:** What is our DS team? The Systems Department is responsible for requirements gathering, functional design, application development, coding, testing, implementation, maintenance, and evolution of all organizational processes. In this role, the team will develop support solutions for the entire branch network, ensuring operational efficiency and continuous service improvement. Additionally, the team will identify technological innovation opportunities aimed at optimizing processes and enhancing customer segment experiences. Work model: Hybrid – 3 days per week Locations: Osasco – SP, Curitiba – PR, Uberlândia – MG, or Recife – PE. **Your Day-to-Day Responsibilities:** You will work within the DITI Offensive Security Management team, with primary responsibilities including: Conducting penetration tests (pentests) on applications (Web/mobile), infrastructure, and Cloud environments; Participating in Red and Purple team exercises; Participating in adversary simulations. **Requirements and Qualifications:** What do you need to have or know? Experience working in offensive security teams performing and leading pentests and red team exercises in critical and complex environments; Pentest tools (Burp Suite, nmap, Metasploit, sqlmap, brute-force tools, vulnerability scanners, etc.); Linux distributions focused on pentesting (Kali, Parrot, etc.); Scripting languages (Shell script, PowerShell, Python, etc.); Web programming (JavaScript, HTML, etc.); TCP/IP, Ethernet, and Wi-Fi networking; Microsoft and Active Directory (AD) networking; Advanced user-level knowledge of Windows and Linux operating systems; Vulnerabilities in web applications and infrastructure (on-premises and Cloud); OWASP methodology; AWS and Azure Cloud platforms; Security methodologies/frameworks such as MITRE ATT&CK and Cyber Kill Chain. **Desirable:** CEH, Pentest+, OSCP, OSCE, or similar certifications; Mobile application vulnerabilities (Android and iOS); Postgraduate degree in IT or Information Security; At Bradesco, we value health and well-being, offering an extensive portfolio of benefits to all our employees: PLR or Bonus: Based on position eligibility* Medical Plan Dental Plan Life Insurance Food Allowance Meal Voucher 13th Food Basket Total Pass Transportation Voucher (optional enrollment) Discounts on products and services from partner companies Private Pension Plan (optional enrollment, with financial contribution from Bradesco Organization) Viva Bem Bradesco: Health, Well-being, and Quality of Life Program Unibrad: Bradesco Corporate University Fee Waiver: Special conditions on various products and services Childcare or Babysitter Assistance Extended Paternity Leave (20 days) Maternity Leave (180 days), with gestational support from pregnancy through postpartum