Bruno Dias
@brunodias2
I lead red team and penetration testing across mobile, web, APIs, hardware, and physical environments.
BrazilWhat I'm looking for
I'm the Principal Red Team Engineer at Empreendimentos Pague Menos, leading mobile, API, and web penetration testing, architecture reviews, purple team exercises, and Cymulate simulations.
Previously at PwC Brasil, I delivered mobile, API, web, hardware, physical, Wi-Fi, and ATM penetration tests, including an international physical and Wi-Fi testing project in New York. I also monitored attacks and reported security findings and business impacts to clients.
With more than 18 years in technology and over 8 years in offensive security, I've also taught technical IT courses at SENAC, creating lesson plans and training materials. I bring hands-on AppSec, DevSecOps, incident response, and cybersecurity education experience.
Experience
Work history, roles, and key accomplishments
Offensive Security Specialist
Empreendimentos Pague Menos
Feb 2026 - Present (7 months)
Principal Red Team Engineer performing penetration testing on mobile, API, and web applications, architecture reviews, purple team exercises, and Cymulate simulations.
Senior Pentester
PwC Brasil
Oct 2022 - Feb 2026 (3 years 4 months)
Conducted penetration testing on mobile, API, web, hardware, and physical systems, including planning and executing ATM, physical, and WiFi pentests for an international project in New York, and monitoring attacks.
Information Security Analyst
PwC Brasil
Nov 2019 - Sep 2022 (2 years 10 months)
Performed penetration testing on client applications and infrastructures using market methodologies and tools, and generated final reports detailing vulnerabilities and business impacts.
Professional Training Instructor
SENAC
Jan 2019 - Mar 2022 (3 years 2 months)
Taught technical classes in short courses and technical programs in the IT field, created schedules and lesson plans for training sessions, and developed teaching materials.
Education
Degrees, certifications, and relevant coursework
MBA Business Management: Cybersecurity and Privacy
MBA, Business Management
MBA in Business Management with focus on Cybersecurity and Privacy, currently in progress.
ICSI (International CyberSecurity Institute), UK
Certified Network Security Specialist (CNSS), Network Security
Certified Network Security Specialist (CNSS) certification obtained.
EC-Council
Certified Secure Computer User (CSCU), Secure Computer User
Certified Secure Computer User (CSCU) certification obtained.
Certiprof
Cybersecurity Awareness Professional Certification (CAPC), Cybersecurity Awareness
Cybersecurity Awareness Professional Certification (CAPC) obtained.
Cloud Skills Boost – Google
Google Cloud Cybersecurity Certificate, Cloud Cybersecurity
Google Cloud Cybersecurity Certificate obtained.
EU Cyber Academy
Certified Ransomware Protection Officer (CRPO), Ransomware Protection
Certified Ransomware Protection Officer (CRPO) certification obtained.
RedTeamLeaders
Certified Red Team Operations Management (CRTOM), Red Team Operations
Certified Red Team Operations Management (CRTOM) certification obtained.
UNICIV
Bootcamp Ethical Hacking, Ethical Hacking
Bootcamp Ethical Hacking training completed.
Desec
Mobile Pentest, Mobile Security
Mobile Pentest training completed.
SEC4US
Mobile Hacking Application, Mobile Security
Mobile Hacking Application training completed.
Great Learning
Ethical Hacking – Mobile Platforms and Network Architecture, Ethical Hacking
Ethical Hacking – Mobile Platforms and Network Architecture training completed.
David Bombal
Android Bug Bounty Hunting, Android Security
Android Bug Bounty Hunting training completed.
TCM Security
IoT and Hardware Hacking, IoT and Hardware Hacking
IoT and Hardware Hacking training completed.
Cyberbit and PwC Brazil
Threat Detection and Response, Threat Detection and Response
Threat Detection and Response training completed.
FGV
Cybersecurity: A classic cyberattack anatomy, Cybersecurity
Cybersecurity: A classic cyberattack anatomy training completed.
Udemy
Incident Response, Incident Response
Incident Response training completed.
Qualys
Qualys TotalAppSec, Application Security
Qualys TotalAppSec training completed.
HackSmarter
HackWithMe: Active Directory, Active Directory
HackWithMe: Active Directory training completed.
HackSmarter
Guided Lab: IAM Enumeration, Identity and Access Management
Guided Lab: IAM Enumeration training completed.
RedTeamLeaders
Red Team Operation Management, Red Team Operations
Red Team Operation Management training completed.
Nuclea
Cybersecurity – Business Continuity, Cybersecurity
Cybersecurity – Business Continuity training completed.
Google SecOps Foundation, Security Operations
Google SecOps Foundation training completed.
Front Seat
English Course, English
English course completed at Front Seat.
Bachelor’s Degree in Technology, System Analysis and Development
Bachelor's Degree, System Analysis and Development
Bachelor's degree in Technology, System Analysis and Development, completed in 2011.
PostGraduate Degree in Information Security
Postgraduate Degree, Information Security
Postgraduate degree in Information Security, completed in 2025.
Tech stack
Software and tools used professionally
Availability
Location
BrazilAuthorized to work in
Salary expectations
Social media
Job categories
Skills
Interested in hiring Bruno?
You can contact Bruno and 90k+ other talented remote workers on Himalayas.
Message BrunoGet matched with your dream remote job
Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!
