Senior Security Systems Analyst

We are DOMO

The innovation and technology hub of one of Brazil's largest and most established banks: Banco Mercantil. Created to act as a development center for solutions connected with what is new and with the demands of the future.

We are intensely committed to seeking solutions, and we believe that, to be innovative, we need to work in a deep sphere of ideas without restrictions.

Here, good ideas always have room. We believe in the strength of diversity and the power of inclusion to transform realities. That is why our opportunities extend to people with disabilities, Black and Indigenous people, LGBTQIAPN+ people, people over 50, women registered in social assistance programs for confronting domestic violence, among other minoritized groups. We remain firm in building a fair, representative environment with real opportunities for all. Come with us!

If you identify with this, come be part of it.

#VEMSERDOMO

For your information:On this page, all positions will be identified as mixed or internal. Themixed positions are open to both market professionals and DOMO employees, while the internal positions are intended exclusively for employees who are already part of DOMO.

Your main challenges will be:

• Continuously and adversarially testing the effectiveness of specific security controls (e.g., WAF, EDR, SIEM rules, DLP, etc.) against the most recent attack techniques;
• Creating and maintaining an internal arsenal of specialized scripts, tools and methodologies (e.g., custom payloads, controlled phishing tools, implants or evasion techniques) to optimize Red Team operations and reflect the bank's unique threat landscape;
• Acting as a strategic "Purple Team" link by sharing findings, insights and knowledge about the attacker's mindset with the Blue Team (SOC), Security Architecture and Security Engineering. Leading debriefing sessions and workshops;
• Structuring detailed attack simulation plans, defining Rules of Engagement (RoE) and coordinating exercises in alignment with risk committees and strategic leadership;
• Mimicking intrusion tactics by exploring the bank's technology value chain, testing the security of interfaces with IT vendors, partner integrators, DevOps pipelines (GitHub/GitLab, Kubernetes) and multi-cloud corporate environments.

We are looking for a person with:

• Completed higher education in Computer Science, Engineering, Information Security, Networks or related Technology fields;
• Proven 5 years of experience in Offensive Security (Red Team and/or advanced Pentest);

• Practical experience in adversary emulation, threat simulation campaigns or intrusions oriented to corporate objectives;
• Knowledge of in-depth architecture and exploitation of Active Directory and hybrid cloud environments (Entra ID, Azure, AWS);
• Defense evasion techniques, process injection, AMSI bypass and circumvention of modern EDRs;
• Proficiency in assembling and operating C2 infrastructure (Cobalt Strike, Mythic, Sliver, Havoc or custom) using obfuscation techniques and redirectors;
• Knowledge of network protocols and services, Kerberos abuse, constrained/unconstrained delegations and lateral movement.

You will stand out if you have:

• Postgraduate education in offensive security/cybersecurity;
• Experience in financial sector companies, payment means or highly regulated critical infrastructure.
• Desirable Certifications (with Red Team focus): CRTO (Certified Red Team Operator), CRTE/CRTP (Certified Red Team Expert/Professional), OSEP (OffSec Defense Analyst/Penetration Tester), CPTS (HTB Certified Penetration Testing Specialist), CARTP or CRTL, OSCP, OSWE, CWEE, GPEN, GXPN.

Additional information

What we offer our employees:

•Health Insurance and Dental Plan

•Wellhub (Gympass)

•Transportation Voucher

•Food and Meal Voucher

•Academia Mercantil (learning platform) and partnerships with educational institutions

•Private Pension Plan

•Life Insurance

•Day Off

•Extended Maternity and Paternity Leave.