Senior Information Security Analyst – Offensive Security, Penetration Testing

• Conduct penetration tests (pentests) on web and mobile applications, AI systems, infrastructure, and cloud environments
• Collaborate on adversary simulations
• Identify vulnerabilities and assess their corresponding risk levels in existing products and services
• Plan, execute, and document penetration tests
• Perform vulnerability assessments of web systems, APIs, networks, and infrastructure
• Produce technical reports with evidence and clear remediation recommendations
• Support internal teams in understanding risks and revalidating implemented fixes
• Use frameworks and methodologies such as OWASP, PTES, MITRE ATT&CK, and ATLS
• Conduct internal penetration tests and manage external vendors

• Bachelor’s degree in Information Security or a related field
• Strong knowledge of Information Security
• Offensive security certifications or equivalent knowledge
• Practical knowledge of penetration testing methodologies, including OWASP Top 10, PTES, and MITRE ATT&CK
• Solid experience in web and mobile application security
• Intermediate English proficiency
• Experience with AEV (Adversarial Exposure Validation) platforms or autonomous penetration testing
• Knowledge of defense evasion, fuzzing, reverse engineering, and malware analysis
• Knowledge of security analysis tools that leverage AI models
• Strong communication skills and the ability to translate technical risks for non-technical audiences

• 14th and 15th fixed annual salaries
• Profit-sharing payments, based on seniority
• Health and dental insurance with no co-payments
• Well-being programs through Wellhub (formerly Gympass), including nutrition, psychological support, workplace exercise, massage, a running group, and a local gym
• Meal and food allowances, with flexible allocation percentages between the meal and food cards and no co-payments
• Extended maternity and paternity leave
• Childcare or nanny allowance for children up to 6 years and 11 months old
• Support for children with disabilities, with no age limit
• Life insurance
• Private pension plan with employer contributions of up to 8% of salary
• Sicredi Aprende training platform with a wide range of courses
• 40-hour workweek, using a time bank system
• Remote work allowance, except for fully on-site positions