Senior Information Security Analyst – Offensive Security and Penetration Testing Focus

• Perform penetration testing (pentesting) on web and mobile applications, AI systems, infrastructure, and cloud environments
• Collaborate on adversary simulations
• Identify vulnerabilities and assess their associated risk levels in existing products and services
• Plan, execute, and document penetration tests
• Conduct vulnerability assessments of web systems, APIs, networks, and infrastructure
• Create technical reports with clear evidence and remediation recommendations
• Support internal teams in understanding risks and revalidating implemented fixes
• Use frameworks and methodologies such as OWASP, PTES, MITRE ATT&CK, ATLS, and others
• Perform internal pentests and manage external vendors
• Work with Adversarial Exposure Validation (AEV) platforms and autonomous pentesting solutions
• Research and analyze vulnerabilities, including defense evasion, fuzzing, reverse engineering, and malware analysis
• Use AI-based tools for security analysis
• Translate technical risks for non-technical audiences

• Bachelor’s degree in Information Security or a related field
• Strong knowledge of Information Security
• Offensive security certifications or equivalent knowledge
• Practical knowledge of penetration testing methodologies, including OWASP Top 10, PTES, and MITRE ATT&CK
• Solid experience in web and mobile application security
• Intermediate English proficiency

• 14th and 15th fixed monthly salaries
• Profit-sharing program, based on seniority
• Health and dental plans with no copayments
• Wellness programs through Wellhub (formerly Gympass), including nutrition, psychological support, workplace exercise, massage, a running group, and a local gym
• Meal and food allowance, with flexible allocation percentages between the meal and food cards and no copayment
• Extended maternity and paternity leave
• Childcare or babysitting allowance for children up to 6 years and 11 months old
• Support allowance for children with disabilities, with no age limit
• Life insurance
• Private pension plan with employer contributions of up to 8% of salary
• Training platform – Sicredi Aprende, offering a variety of courses
• 40-hour workweek, using a time-bank system
• Remote-work allowance, except for positions that are fully on-site