Senior Consultant, Offensive Security, Proactive Security (Unit 42)
Palo Alto Networks · São Paulo +1 · 18d ago
Our Mission
At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place.
Who We Are
In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us!
This role is remote, but distance is no barrier to impact. Our hybrid teams collaborate across geographies to solve big problems, stay close to our customers, and grow together. You will be part of a culture that values trust, accountability, and shared success where your work truly matters.Job Summary
The Team
Unit 42 - Unit 42 is the global threat intelligence and security consulting team at Palo Alto Networks and is dedicated to providing customers with the knowledge, expertise, and resources to protect their organizations from the ever-evolving threat landscape. Our team of world-class security researchers, consultants, and incident responders is at the forefront of cyber security, delivering actionable insights and tailored solutions to the world's most complex security challenges.
Job Summary
The Senior Consultant on the Offensive Security team is focused on assessing and challenging the security posture across a comprehensive portfolio of clients. The individual will utilize a variety of tools and act as a key team member in client engagements. They will be the client’s advocate for cybersecurity best practices, providing strong recommendations and ensuring alignment with their security goals, demonstrating accountability for the outcomes.
Key Responsibilities
Conduct comprehensive penetration tests (network, web application, cloud, mobile) to identify and exploit vulnerabilities, providing practical solutions to mitigate risks.
Develop and maintain custom scripts, tools, and methodologies to automate and streamline offensive security engagements, focusing on simplifying complex processes.
Create and deliver detailed engagement reports that clearly communicate testing methodologies, findings, and actionable remediation recommendations for both technical and executive audiences.
Proactively collaborate with clients to scope engagements, clearly articulating various penetration testing approaches and ensuring alignment on objectives and deliverables.
Perform threat hunting and compromise assessments to identify active or dormant indicators of compromise (IoCs) using advanced security tooling.
Conduct cyber risk assessments using industry frameworks such as NIST CSF, ISO 27001, and CIS Top 20 to provide clients with a clear view of their security posture.
Challenge security standards curiously and positively by providing clients with specific, forward-looking recommendations to protect sensitive data and enhance their incident response capabilities.
Qualifications
Required Qualifications
Bachelor’s Degree in Information Security, Computer Science, Cyber Security, or equivalent professional experience.
4+ years of professional experience in information security, with a focus on penetration testing, vulnerability assessments, or red teaming.
Hands-on experience with security assessment tools such as Metasploit, Burp Suite Pro, Nessus, or Cobalt Strike.
Proficiency in scripting or programming with at least one language (e.g., Python, PowerShell, Bash, Ruby).
Strong knowledge of network protocols, modern operating systems (Windows, Linux), and cloud environments (AWS, Azure, GCP).
Preferred Qualifications
Industry-recognized certifications such as OSCP, OSCE, GPEN, GWAPT, or GXPN.
Experience developing custom exploits and tools, demonstrating an ability to move beyond reliance on automated frameworks.
Knowledge of open security standards and projects, including OWASP and the MITRE ATT&CK framework.
Experience with public speaking, conference presentations, or publications within the cybersecurity community.
Our Commitment
We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together.
We are committed to providing required accommodations for all Persons with Disabilities.
Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.
This job opening is part of a pipeline initiative designed to build interest of Persons with Disabilities (PwD) for employment opportunities at Palo Alto Networks. Therefore, only candidates who identify as Persons with Disabilities (PwD) will be considered for this position.
Please submit your resumé in English, as we are only able to consider applications received in this language.
----------------
O Palo Alto Networks tem orgulho de ser um empregador que promove a igualdade de oportunidades e um ambiente de trabalho inclusivo.
Esta vaga de emprego faz parte de uma iniciativa de captação de talentos destinada a despertar o interesse de Pessoas com Deficiência (PcD) por oportunidades de emprego na Palo Alto Networks. Portanto, somente candidaturas de Pessoas com Deficiência (PcD) serão consideradas para esta vaga.
Pedimos, por gentileza, que a pessoa candidata envie o currículo em inglês, pois somente candidaturas submetidas nesse idioma poderão ser avaliadas.
Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position.