Job Summary: Junior Red Team / Penetration Testing Analyst to perform technical security assessments, penetration testing, and advanced attack simulations. Key Highlights: 1. Conduct penetration testing and advanced attack simulations (Red Team) 2. Collaborate with Blue Team, SOC, and DevSecOps teams 3. Develop scripts to support offensive operations **Mais.Mobi** is an urban mobility company dedicated to reimagining the transportation and technology sectors to anticipate the future desired by cities and people. The organization manages various products and electronic ticketing systems, such as Riocard Mais and Cartão Macaé. We deliver tailored solutions for the market, supporting operations in customer service, management, loyalty programs, and payment methods—transforming mobility with security, transparency, and continuous technical support. **Job Objective:** We seek a Junior Red Team / Penetration Testing Analyst to join our Offensive Security team, conducting technical security assessments, penetration testing, and advanced attack simulations. You will contribute to vulnerability identification, controlled exploitation, and continuous improvement of corporate environment security controls. This position is ideal for candidates with initial experience and foundational proficiency in key offensive security tools and methodologies, along with sustained interest in evolving cyberattack and defense techniques. **Responsibilities and Duties** **Responsibilities:** * Perform penetration testing on web applications, APIs, internal and external networks. * Conduct vulnerability assessments, technical risk analysis, and controlled exploitation of flaws. * Support and conduct attack simulation activities (Red Team Assessments) using frameworks such as MITRE ATT\&CK. * Prepare technical and executive reports, including evidence, impact analysis, and mitigation recommendations. * Automate processes and develop scripts to support offensive operations. * Monitor threat trends, exploits, emerging attack techniques, and security tool updates. * Collaborate with Blue Team, SOC, Architecture, and DevSecOps teams for vulnerability validation and remediation. * Participate in developing internal pentest and Red Team playbooks, methodologies, and standards. **Requirements and Qualifications** **Required:** * Bachelor’s degree completed in Information Security, Information Systems, Computer Science, Software Engineering, or related fields. * Experience in penetration testing, Red Team, ethical hacking, or equivalent roles. * Practical knowledge of major tools: Nmap, Burp Suite, Metasploit, SQLmap, Wireshark, OWASP ZAP. * Knowledge of Windows and Linux environments, permissions, services, and common attack vectors. * Familiarity with methodologies: OWASP Top 10, MITRE ATT\&CK, PTES, NIST SP. * Basic understanding of secure development practices and DevSecOps pipelines (CI/CD, Git, integration of automated scanners). * Ability to produce clear, concise, and impact-oriented documentation. * Strong communication skills, analytical thinking, teamwork capability, and commitment to excellence. * CompTIA Security\+ certification. **Desirable:** * Participation in CTFs or hands-on labs (HTB, TryHackMe, PortSwigger Academy). * Certifications such as eJPT, eCPPT, OSCP, PenTest\+, or ISO/IEC 27001\. * Scripting knowledge (Python, Bash, PowerShell) or offensive automation expertise. * Intermediate English proficiency. **Additional Information** **Employment Type:** CLT. **Benefits:** Transportation allowance \+ Meal voucher \+ Food allowance \+ Health and dental insurance \+ Reimbursement for online courses \+ Life insurance \+ Emotional well-being program, etc. **Work Format:** Hybrid. **Location:** Centro \- Rio de Janeiro. The **Mais.Mobi** is an urban mobility company dedicated to reimagining the transportation and technology sectors to anticipate the future desired by cities and people. We deliver tailored solutions for the market, supporting operations in customer service, management, loyalty programs, and payment methods—transforming mobility with security, transparency, and continuous technical support.