Looking for a job

Enzo Teles

@enzoteles

Offensive Security Analyst conducting penetration tests and Red Team operations, with original Ruby on Rails RCE research.

Brazil

Message

At Confidential, I conduct penetration tests across web, API, mobile, infrastructure, and AI assets, and carry out Red Team operations mapped to MITRE ATT&CK. I also produce OSINT-driven Cyber Threat Intelligence and validate fixes with infrastructure, development, and Blue Team colleagues.

My security research uncovered a previously undocumented Remote Code Execution gadget chain in Ruby on Rails, published through responsible disclosure with a Docker-based reproduction lab. I also built Dux, a private AI-assisted toolkit for end-to-end penetration testing orchestration.

At CJR Computing Junior Enterprise, I founded and led the Offensive Security group, training members through labs and penetration testing classes. I’m also a former Brazilian Army officer and pursue bug hunting and security research.

Experience

Work history, roles, and key accomplishments

Current

Mid-Level Offensive Security Analyst

Current

Confidential

Dec 2025 - Present (10 months)

Conducts external and internal penetration tests across Web, API, mobile, infrastructure, and AI assets following PTES, OWASP WSTG, ASVS, MASTG, and Top 10 for LLMs. Performs Red Team operations simulating APT TTPs mapped to MITRE ATT&CK and the Cyber Kill Chain, and produces Cyber Threat Intelligence through OSINT and attack surface monitoring.

Penetration Testing Web Security API Security Mobile Security Infrastructure Security AI Security Red Team Operations Threat Intelligence OSINT MITRE ATT&CK Cyber Kill Chain PTES OWASP Web Security Testing Guide OWASP ASVS OWASP Mobile Application Security Testing Guide OWASP Top 10 for LLMs CVSS Risk Assessment Technical Reporting

Cybersecurity Leader

CJR Computing Junior Enterprise

Jul 2024 - Jul 2026 (2 years)

Founded and led CJR's Offensive Security group, training members through labs and penetration testing classes. Conducted application security reviews on React.js, Nest.js, Next.js, Prisma, and TypeScript projects, and received internal recognition for initiative and technical impact.

Offensive Security Penetration Testing Application Security React NestJS Next.js Prisma TypeScript Training Leadership

Cyber Threat Intelligence Intern

Teltec Solutions

Nov 2025 - Dec 2025 (1 month)

Collected, correlated, and enriched threat data from open sources and the deep/dark web. Prepared playbooks, methodologies, and cyber intelligence reports for corporate clients, and deployed CTI tooling environments with Docker and Portainer.

Threat Intelligence OSINT Deep Web Darknet Threat Analysis Playbooks Docker Portainer

Military Officer

Brazilian Army

Feb 2023 - Mar 2024 (1 year 1 month)

Placed 1st overall in the 2023 Reserve Officers Training Course and received the Aspirante Apollo award, Best Physical Fitness, and Best Conduct. Built leadership and decision-making skills under pressure.

Leadership Decision making Physical Fitness