Offensive Security Specialist

Luza is an all-inclusive consulting company focused on talent tech and innovation. We exist to elevate companies and humans all around the world making change from the inside to the outside.

We believe that technology human kindness positively impacts every community around the world. Our approach is simple we see a world without borders and believe in equal opportunities. We are guided by our core principles of spreading positivity good energy and promote equality and care for others.

Our hiring process is unique! People are selected by their value education talent and personality. We dont present ethnicity religion national origin age gender sexual orientation or identity.

Its time to burst the bubble and we will do it together!

What Youll do:

- Conduct penetration testing (pentesting) and technical security assessments across web applications APIs cloud environments and internal/external infrastructures (including Active Directory / Entra ID);

-Go beyond the use of automated analysis tools through manual investigation vulnerability validation and attack vector chaining (attack-path chaining);

-Integrate AI-assisted tools (LLMs coding assistants and agent-based tools) into offensive security processes accelerating investigation script development payload creation and report writing;

-Develop or adapt custom scripts and offensive security tools to support specific assessment scenarios;

-Produce clear technically rigorous and actionable documentation detailing identified vulnerabilities business impact and mitigation recommendations;

-Collaborate closely with development infrastructure and security teams to communicate technical security issues and support remediation efforts;

-Contribute to the continuous improvement of internal methodologies knowledge sharing research and offensive security capabilities;

- Hybrid work model;

Who You Are:

- Solid hands-on experience in penetration testing and technical security assessments;

-Practical knowledge of offensive security tools such as Burp Suite Nmap Metasploit or equivalent frameworks;

-In-depth knowledge of web application security (OWASP Top 10 WSTG) API security network infrastructure and Active Directory / Entra ID environments;

-Demonstrated fluency in the use of AI tools using them as productivity accelerators without compromising critical thinking independent technical judgment and result validation;

-Scripting or programming skills to adapt tools automate repetitive tasks and develop custom payloads;

-High level of autonomy proactivity critical thinking and problem-solving skills in complex security assessment scenarios;

-Fluency in English to communicate technical concepts effectively with both technical and non-technical stakeholders;

Nice to have:

-Relevant offensive security certifications such as OSCP OSWA OSWE CRTO eWPT or equivalent;

-Active participation in CTFs (Capture The Flag) Bug Bounty programs cybersecurity research or open-source offensive security tool development;

What youll get:

- Wage according to candidates professional experience;

- Remote Work whenever possible;

- Delivery of work equipment adjusted to the performance of functions;

- Benefits plan;

- And others.

Work together with expert teams on projects of large magnitude and intensity long term together with our clients all leaders in their industries.

Are you ready to step into a diverse and inclusive world with us

Together we will promote uniquess!