Grupo QuintoAndar | Senior Offensive Security Engineer
Grupo QuintoAndar5 days ago
Remote, BrazilSenior
Responsibilities
- Design, build, and pilot an AI-agent-powered offensive security platform with agent protocols, tool orchestration, sandboxing, and containment controls.
- Conduct continuous offensive testing across global attack surfaces, web applications, APIs, microservices, cloud environments, containerized workloads, Kubernetes clusters, and internal networks.
- Integrate offensive findings with vulnerability management, SIEM/SOAR, CTI, detection engineering, automated remediation, and retesting workflows.
- Lead complex multi-team engineering deliveries from scoping through operational deployment while maintaining platform resilience and uptime.
- Translate attack graphs, exploit proofs of concept, and vulnerability telemetry into business risk assessments for technical and executive stakeholders.
- Support severe security incidents, lead red/purple-team debriefs, and own corrective post-mortem engineering initiatives.
- Lead offensive architecture reviews and threat-modeling sessions, establish engineering standards, and mentor security engineers.
- Develop interview standards and help hire and develop offensive security and AI engineering talent.
Requirements
- Proven experience as a Senior or Staff Offensive Security Engineer, senior red teamer, or principal penetration tester conducting complex assessments.
- Hands-on experience developing or architecting LLM-driven applications, agentic workflows, tool calling, autonomous-agent sandboxing, and adversarial AI evaluation.
- Deep practical knowledge of container runtimes, Kubernetes architecture, RBAC, admission controllers, pod security standards, network policies, service mesh, and major cloud platforms.
- Demonstrated ability to exploit and harden containerized infrastructure.
- Solid programming proficiency for building production-grade tooling, microservices, pipeline integrations, and custom agent skills.
- Experience integrating offensive discoveries with enterprise vulnerability management engines such as Jira, DefectDojo, or custom risk aggregators, as well as SIEM telemetry tools.
- Experience leading cross-department initiatives, negotiating technical roadmaps, resolving cross-system dependencies, communicating with senior leadership, reviewing RFCs, and mentoring peers.
- Preferred experience includes red/purple-team operations in high-velocity technology, fintech, or marketplace environments; open-source contributions or research in automated exploitation, agentic systems, or cloud-security tooling; and certifications such as OSCP, OSEP, OSWE, CKS, or AWS Certified Security - Specialty, or equivalent expertise.
Benefits
- Remote-first work from anywhere in Brazil, with optional work from São Paulo offices or partner coworking spaces up to twice weekly.
- Competitive salary and profit sharing.
- Meal allowance, home-office allowance, health insurance, dental plan, life insurance, and Wellhub.
- Childcare and Atypical Parenthood subsidies, extended parental leave, and employee assistance support covering mental, social, legal, and financial needs.
- Birthday, Mother’s Day, and Father’s Day days off, plus a benefits club, education discounts, and a children’s reading kit.
Tech Stack
Categories
About Grupo QuintoAndar
Grupo QuintoAndar builds a digital real estate ecosystem across Latin America, spanning rental and sales marketplaces, brokerage, property management, classifieds portals, SaaS for brokers, and housing-related financial services. It serves renters, owners, and agents with brands including QuintoAndar, Casa Mineira, Benvi, Imovelweb, Zonaprop, VivaAnuncios, and Inmuebles24, generating revenue from brokerage/marketplace fees, subscriptions, and financial products. Founded in 2013 and headquartered in São Paulo, Brazil, the company is privately held and active in multiple Latin American markets.