Ethical Hacker – Penetration Tester

• Plan and execute penetration tests in external environments exposed to the internet
• Conduct security assessments in internal environments, including lateral movement and privilege escalation
• Perform penetration tests on web applications and APIs
• Assess authentication, authorization, session management, and business logic controls
• Conduct authorized testing of corporate Wi-Fi networks
• Plan and conduct social engineering campaigns for awareness and risk measurement
• Assess applications and solutions based on Generative AI and LLMs, identifying security risks and data exposure
• Support the definition of technical scope and effort estimates for new projects
• Produce technical and executive reports with evidence, risk ratings, and recommendations
• Present findings to technical and executive audiences
• Work in compliance with legal and ethical requirements and each project's rules of engagement

• Proven experience in penetration testing and vulnerability assessments
• Knowledge of penetration testing methodologies and frameworks for infrastructure, web applications, and APIs
• Strong knowledge of TCP/IP networks, network protocols and services, Active Directory, Windows and Linux systems, authentication and authorization, and security controls
• Knowledge of web application and API security
• Knowledge of wireless networks and security mechanisms
• Knowledge of risks related to Generative AI and LLMs
• Experience with offensive security tools and script-based automation
• Excellent technical report-writing skills
• Ability to present findings clearly to different audiences
• Strong organizational skills to manage multiple projects simultaneously
• Completed higher education or a technical degree in Information Security, Computer Networks, Information Systems, Computer Science, or a related field
• Certifications in Offensive Security, Application Security, Network Security, or Cloud Security are a plus
• Experience with secure development and code review is a plus
• Experience with AWS, Azure, or GCP is a plus
• Knowledge of containers and security automation is a plus
• Experience with assessments involving Generative AI, RAG, AI agents, and model APIs is a plus
• Intermediate or advanced English proficiency for communication is a plus

• Training and professional development support through courses, events, certifications, and learning paths
• Flash Card with flexible monthly credits for food and meal benefits
• Corporate health insurance after permanent employment
• Dental insurance with no monthly premium after permanent employment
• Career and professional development plan
• Ongoing support, goal setting, periodic feedback, and professional growth opportunities
• Galactic Credits for access to the R2D2 refrigerator stocked with beverages
• Company-paid life insurance
• Semiannual performance bonus program based on performance and key indicators, after permanent employment
• Qulture.Rocks platform for feedback, goal and OKR management, individual development plans, recognition, priorities, and professional progress tracking