Open to opportunities

Rafael Bosch

@rafaelbosch

Message

CRTE/CRTP-certified red team operator delivering CVE-driven enterprise security improvements.

Brazil

Message

What I'm looking for

I’m looking to lead red-team and offensive security engagements—mapping TTPs to MITRE, delivering CVE-driven findings, and partnering with dev teams to remediate vulnerabilities while improving detection in SIEM/EDR.

I’m a CRTE/CRTP-certified Red Team operator focused on offensive security that leads to measurable risk reduction. I’ve authored 3 published CVEs and documented enhanced security posture through exploits on Exploit-DB.

In my roles, I execute large-scale penetration testing and adversarial simulations mapped to MITRE ATT&CK TTPs. I’ve run 10 adversarial simulations to drive outcomes like domain compromise, credential harvesting, and EDR bypass across multiple kill chain phases.

I bring hands-on experience across web, mobile, wireless, and infrastructure environments—penetrating targets beyond one layer of the attack surface. I’ve executed 300+ penetration tests, covering OWASP Top 10, and I’ve supported enterprise remediation by reporting and guiding cross-functional teams.

I also contribute to malware research and security tooling. I’ve reverse-engineered macOS malware, developed detection logic (including Yara rules), and improved internal threat detection through adversary simulations—pairing operational findings with training and Secure Development Lifecycle (SDLC) discipline.

Experience

Work history, roles, and key accomplishments

Current

Offensive Security Team Lead

Current

Samsung SDS

Aug 2025 - Present (10 months)

Conducted penetration testing for Samsung Electronics applications and led Red Team operations, presenting findings and remediation guidance. Authored 3 CVEs and supported cloud security automation using AWS and SCP.

Penetration Testing Red Team Operations CVE Exploit Development AWS Security Adversarial Testing

Senior Penetration Tester

Samsung SDS

Jan 2024 - Aug 2025 (1 year 7 months)

Executed 100+ Web/API and infrastructure security assessments, triaging critical issues and reducing the enterprise attack surface. Led Red Team engagements with domain admin compromise in 85% of assessments and achieved EDR evasion; identified auth flaws aligned to PCI DSS.

Infrastructure Assessments Red Team Security Triage EDR PCI DSS Executive Reporting Security Training

Application Security Engineer

Claro Brasil

Jan 2023 - Jan 2024 (1 year)

Improved security threat detection by applying 60+ CI/CD application manual reviews and authoring custom security rules. Validated remediation using SAST/DAST findings and helped integrate regex-based detection patterns into the CI/CD pipeline.

CI CD Security DAST Burp suite OWASP ZAP Nuclei Nmap Metasploit BloodHound Wireshark

Offensive Security Engineer

Ernesto Borges Advogados

Jul 2022 - Jan 2024 (1 year 6 months)

Performed advanced infrastructure penetration testing and security assessments for web extensions and RPA systems. Conducted Red Team operations including WPA2-Enterprise and Evil Twin wireless assessments, delivering executive reports and remediation guidance while reducing cloud assessment overhead by 40%.

Penetration Testing Red Team Operations Wireless Security Testing (WPA2 Evil Twin)Executive Reporting

Malware Researcher

Mosyle

Jan 2022 - Jun 2022 (5 months)

Reverse-engineered macOS malware and produced documented malicious indicators and behavioral fingerprints. Developed YARA rules and conducted threat intelligence research to identify emerging macOS malware and malicious groups.

Malware Analysis YARA Threat Intelligence Behavioral Fingerprinting

Penetration Tester

IBLISS Digital Security

Oct 2021 - Apr 2022 (6 months)

Performed mobile penetration testing and Red Team operations across client sectors. Improved assessment kickoff and delivery practices while strengthening penetration testing methods.

Red Team Operations Vulnerability Assessment Penetration Testing

Penetration Tester

Tripla

Jul 2021 - Oct 2021 (3 months)

Conducted web/API, mobile, and infrastructure security assessments for clients and delivered detailed reports. Guided clients through findings and recommendations to support complete understanding of security vulnerabilities and mitigations.

Mobile Security Security Assessments Technical Reporting Vulnerability Mitigation Guidance