Lead pentesting projects in corporate environments, including networks, web applications, APIs, mobile devices, and cloud infrastructures (AWS, Azure, GCP);
Define strategies, methodologies, and execution plans aligned with recognized frameworks (PTES, NIST SP 800-115, OWASP);
Perform advanced attack simulations (Red Teaming), scenario-based tests, and security assessments in hybrid architectures;
Produce technical and executive reports with prioritized recommendations and mitigation plans;
Support internal teams in implementing corrective measures and continuous improvement;
Participate in technical meetings and workshops with stakeholders;
Contribute to the evolution of offensive security practices and the development of internal playbooks;
Integrate security into CI/CD pipelines and support DevSecOps initiatives;
Automate tests and create scripts to increase efficiency and coverage;
Apply attack frameworks such as MITRE ATT&CK in advanced simulations;
Act as a mentor for junior profiles and lead internal training sessions.
