Evonik

Offensive Security Specialist (m/f/d)

Brazil · Work style not stated · Full time

Apply on the employer’s site ↗See how well you match this job

You apply directly with the employer. ROLIVA does not submit applications from this page and is not the employer.

About the role

Description from the employer’s posting. Check the employer’s page for the current version.

EmployerEvonik
LocationBrazil
Work styleWork style not stated
Employment typeFull time
Employer posted24 Jul 2026

What we offer

Explore a world of opportunities with us. Look ahead with us and help shape innovative solutions to make our world more sustainable and life healthier, more vibrant and more comfortable. At Evonik, you have the chance to explore, thrive, and grow alongside 33,000 colleagues. Among attractive career paths and high-quality development programs, we not only offer performance-based remuneration and occupational health benefits but also hybrid and flexible working environments with #SmartWork. Bring your fresh perspective, develop your strengths, break out your mold, and find a career that fits your dreams with us.

Click on the link below to learn what our employees have to say about Evonik:

https://careers.evonik.com/en/about/meet-the-team/

Expected Responsibilities:

Conducting offensive security activities, including penetration testing and Red Team operations, across web applications, enterprise infrastructure, cloud environments, and industrial systems.

Show full description

Planning, executing, and leading advanced penetration tests for:

Custom and third-party web applications

Complex enterprise applications (e.g., ERP, legacy systems, industrial platforms).

Cloud-native and hybrid architecture.

Documenting findings in high-quality technical reports, including:

Clear risk ratings

Business impactanalysis

Actionableremediationrecommendations

Presenting results to technical and non-technical stakeholders, including engineering teams, management, and customers.

Advising on risk mitigation strategies, secure design principles, and defensive improvements.

Professional Experience & Background

Successfully completed university degree in (Business) Informatics, Computer Science, or a comparable IT-related field — or equivalent professional experience.

Hands-on experience in:

Web applicationpenetrationtesting

Infrastructure and network penetrationtesting

Security testing of complex, business-critical applications

Experience working in industrial or chemical company environments is a plus.

Technical Skills & Knowledge

Strong understanding of Windows and Linux client/server environments.

Practical experience with cloud platforms, including identity, networking, and cloud-native services.

In-depth knowledge and hands-on usage of offensive security tools.

Knowledge of secure software development lifecycle (SSDLC) and common vulnerability classes (e.g., OWASP Top 10).

Programming and scripting skills are a plus.

Experience with Red Teaming, adversary simulation, and attack-chain methodology.

Familiarity with source code review and static/dynamic application security testing.

Knowledge of OT / ICS security is desirable.

Your Application

To ensure that your application is proceeded as quickly as possible and to protect the environment, please apply online via our careers portal. Further information about Evonik as Employer can be found at www.evonik.com/en/careers.html.

Please address your application to the Talent Acquisition Manager, stating your earliest possible starting date and your salary expectations.

Your Talent Acquisition Manager:

Andreia Uehara

Company is

Evonik Brasil Ltda.

See how well you match this job Apply on the employer’s site ↗

Check your resume against this job Free, no sign-up. Nothing you paste is stored.

Staying safe while you apply

Never pay to apply, interview or accept an offer. ROLIVA never asks you for payment to apply to a job.
Apply only through the official “Apply on the employer’s site” button, on the employer’s own site, and check that a recruiter’s email uses that employer’s own domain rather than a free email address.
Be cautious of an offer made with no real interview, or pressure to decide quickly or share financial details early.

Does something look wrong with this listing? Use “Report broken link” in the role details, or read ROLIVA’s full job-safety guidance ↗.

Preparing for this role with ROLIVA

Check the fit.
Compare the requirements with the experience you have confirmed, including gaps.
Prepare honestly.
Build interview stories and application drafts from your own evidence.
Keep track.
Save the role and record your own application status and follow-ups.

Create a free workspace or log in.