iFood

Online food delivery platform charging commissions

Senior Red Team Specialist

Offensive Security & TestingConfirmed live in the last 24 hours

Full-timeOsasco - State of São Paulo, BrazilNo salary listedIn-person

About the Job

Requirements

Experience in Red Team operations and penetration testing in corporate environments.
Strong expertise testing web application and API security, including vulnerabilities beyond the OWASP Top 10, such as broken authentication, mass assignment, BOLA/IDOR, race conditions, and business logic flaws in financial workflows.
Experience with mobile security on Android and iOS, including APK/IPA reverse engineering, Frida hooking, certificate pinning bypass, and local storage analysis.
Practical knowledge of cloud-native security, including Kubernetes RBAC, pod escape, service-account abuse, Docker container breakout, and AWS/GCP privilege escalation and misconfiguration exploitation.
Experience with Red Team infrastructure, including C2 frameworks such as Cobalt Strike, Sliver, or custom C2; redirectors; OPSEC; evasion; and persistence.
Programming and scripting skills in Python, Go, and Bash for offensive tooling and automation.
Knowledge of the MITRE ATT&CK Framework and ability to map operations to relevant TTPs.
Ability to translate technical findings into business risk for different audiences.

Responsibilities

Plan and execute offensive operations, including Red Team engagements and adversary simulation/emulation, against iFood Pago infrastructure, applications, and processes, simulating real adversaries with a focus on financial impact.
Conduct security testing of web applications, REST/GraphQL/gRPC APIs, and Android/iOS mobile applications, including static, dynamic, and runtime analysis.
Test and assess the security of cloud-native environments, including Kubernetes, containers, and service meshes.
Conduct security testing of AI-powered systems to identify vulnerabilities such as prompt injection, model manipulation, data poisoning, and guardrail bypasses.
Develop offensive automations, tools, and integrations using AI/LLMs to scale processes and improve vulnerability identification and exploitation.
Document findings clearly, demonstrate their real business impact, and propose remediation plans.
Collaborate with the Blue Team and CSIRT on Purple Team exercises to continuously improve detection and response.
Stay current on emerging TTPs, especially those targeting the financial and payments sector in Latin America.

Desired Qualifications

Familiarity with financial protocols and systems.
Experience testing LLM- or AI-based systems, including prompt injection, jailbreaking, tool-use abuse, and data exfiltration via AI agents.
Use of AI/LLMs to automate offensive tasks such as vulnerability triage, payload generation, code analysis, and automated reconnaissance.
Participation in bug bounty programs with a relevant track record.
Publication of security research, CVEs, write-ups, or conference talks.
Relevant certifications such as OSCP, OSEP, OSWE, CRTO, CARTE, CRT, or eMAPT.
Previous experience in fintechs, banks, or payments companies.

Nosso Modo de Fazer no Time:

Transforme sua carreira com o iFood! Somos uma empresa brasileira de tecnologia referência na América Latina. Por meio de soluções inovadoras, conectamos milhares de restaurantes a milhões de consumidores diariamente com uma média de 100 milhões de pedidos mensais. Além do delivery de comida, também somos Mercado, Farmácia e Pet. Temos também o iFood Pago, nossa Fintech, que engloba o iFood Benefícios, o vale alimentação e refeição do iFood e o próprio iFood Pago, o banco do restaurante. Junte-se a nós e faça parte de uma equipe que está sempre à frente com tecnologia de ponta e inovação constante.

Seu Cardápio Diário:

Planejar e executar operações ofensivas (Red Team engagements, Adversary Simulation/Emulation) contra a infraestrutura, aplicações e processos do iFood Pago, simulando adversários reais com foco em impacto financeiro.
Realizar testes de segurança em aplicações web, APIs (REST/GraphQL/gRPC) e aplicações mobile (Android e iOS), incluindo análise estática, dinâmica e de runtime.
Realizar testes e avaliar a segurança de ambientes cloud-native, incluindo Kubernetes, containers, service meshes.
Conduzir testes de segurança em sistemas AI-powered, identificando vulnerabilidades como prompt injection, model manipulation, data poisoning, bypass de guardrails, entre outras.
Desenvolver automações, ferramentas ofensivas e integrações utilizando AI/LLMs para escalar processos e aprimorar a identificação e exploração de vulnerabilidades.
Documentar findings com clareza, demonstrando impacto real ao negócio e propondo planos de ações para correção.
Colaborar com Blue Team e CSIRT em exercícios de Purple Team, contribuindo para melhoria contínua de detecção e resposta.
Manter-se atualizado sobre TTPs emergentes, especialmente aquelas direcionadas ao setor financeiro e de pagamentos na América Latina.

Ingredientes Que Buscamos:

Experiência em Red Team operations e Penetration Testing em ambientes corporativos.
Domínio em testes de segurança de aplicações web e APIs, incluindo vulnerabilidades além do OWASP Top 10 (broken authentication, mass assignment, BOLA/IDOR, race conditions, business logic flaws em fluxos financeiros).
Experiência em segurança mobile (Android/iOS): reversing de APKs/IPAs, hooking com Frida, bypass de certificate pinning, análise de armazenamento local, etc.
Conhecimento prático em segurança de ambientes cloud-native: Kubernetes (RBAC, pod escape, service account abuse), Docker (container breakout), AWS/GCP (privilege escalation, misconfiguration exploitation).
Experiência com infraestrutura de Red Team: C2 frameworks (Cobalt Strike, Sliver, custom C2), redirectors, OPSEC, evasão e persistência.
Habilidade em programação e scripting (Python, Go, Bash) para desenvolvimento de tooling ofensivo e automações.
Conhecimento do MITRE ATT&CK Framework e capacidade de mapear operações a TTPs relevantes.
Familiaridade com protocolos e sistemas financeiros é um diferencial forte.
Traduzir findings técnicos em risco de negócio para diferentes audiências.

Para Realçar o Sabor:

Experiência em testes de segurança de sistemas baseados em LLMs/AI (prompt injection, jailbreaking, tool-use abuse, data exfiltration via AI agents).
Uso de AI/LLMs para automação de tarefas ofensivas (triagem de vulnerabilidades, geração de payloads, análise de código, reconhecimento automatizado).
Participação em programas de bug bounty com track record relevante.
Publicação de pesquisas, CVEs, write-ups ou palestras em conferências de segurança.
Certificações relevantes (OSCP, OSEP, OSWE, CRTO, CARTE, CRT, eMAPT).
Experiência prévia em fintechs, bancos ou empresas de pagamentos.

Buscamos uma pessoa apaixonada por segurança da informação, que esteja sempre em busca de novos aprendizados e que goste de desafios. Se você se identifica com este perfil, adoraríamos conhecer você!

About the Company

iFood

Online food delivery platform charging commissions

iFood is an online food delivery service in Brazil that connects customers with a wide network of restaurants and grocery stores through a digital platform. It earns money by charging partner restaurants and stores commissions on orders, offering customer subscription plans that provide benefits like free delivery and discounts, and selling advertising space to partners. The platform works by letting users browse menus, place orders, and choose delivery options; orders route to participating restaurants and stores who fulfill them, with iFood taking a commission from each sale, while subscription and advertising features provide additional revenue. iFood differentiates itself through its large partner network and diversified revenue streams in a highly competitive market, aiming to be the leading platform for convenient food and grocery delivery in Brazil.

Company size: 10,001+
Company stage: N/A
Total funding: $822.4M
Headquarters: Osasco, Brazil
Founded: 2011

Recently Posted Jobs

Explore more opportunities at iFood

See more jobs