Mindworks

• Perform tests on web applications, APIs, internal and external infrastructure, cloud environments, and Active Directory. • Conduct manual vulnerability validations, controlled exploitation, authorized post-exploitation, and impact analysis. • Review technical findings, evidence, severity assessments, recommendations, and reports produced by the team. • Serve as an operational second opinion for defining processes and work instructions. • Support sensitive technical decisions related to significant findings, false positives, critical risks, and operational validations. • Review and standardize methodologies, playbooks, checklists, templates, and internal procedures. • Support phishing, smishing, and vishing campaigns, including planning, technical validation, result analysis, and recommendations. • Support OSINT activities, password analysis, credential exposure reviews, and monitoring of the Deep and Dark Web. • Contribute to the design of future services, including adversary simulations, tabletop exercises, ransomware simulations, and full Red Team exercises. • Support the definition of technical scope, effort estimates, and consultative discussions with clients.

• Gather technical requirements and map clients' environments. • Design solution architectures focused on information security and IT infrastructure. • Prepare detailed technical and commercial proposals outlining scope and services. • Conduct Proofs of Concept (PoCs) and technical demonstrations. • Support sales executives in technical meetings, acting as the client's primary technology advisor. • Interact with vendors and distributors to register opportunities, defend architectures, and support pricing. • Translate technical requirements into business value during client presentations.