Mid-Level Analyst, Offensive Security
New
R
RecargaPayFinancial technology
BrazilFull-TimeMiddle
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Languages
- Inglês técnico para leitura de documentação, advisories e pesquisas.
- Required Skills
- Node.jsPythonJavaKotlinGo
Requirements
- Have experience in Application Security or application penetration testing.
- Have solid knowledge of OWASP Top 10 and OWASP API Security Top 10.
- Have experience following vulnerability remediation with development teams.
- Be able to read code in at least one backend language: Java, Kotlin, Go, Python, or Node.js.
- Have experience with SAST, SCA, or DAST tools and Burp Suite or a similar tool.
- Have experience developing scripts in Python or Go.
- Have technical English for reading documentation, advisories, and research.
- Have education in technology or a related field, or equivalent experience.
- Preferred: web and API penetration testing focused on business logic and authorization, or Android and iOS mobile testing using Frida and objection.
- Preferred: knowledge of LLM, agent, and MCP security, including prompt injection, tool abuse, and authorization.
- Preferred: security integration in CI/CD and automation using n8n or AI agents.
- Preferred: experience in a regulated financial environment, including PCI DSS, LGPD, or BACEN.
- Preferred: BSCP, eWPT, OSCP, or equivalent certification.
Responsibilities
- Classify and prioritize application vulnerabilities with teams, guide squads through remediation, and validate fixes by retesting.
- Triage SAST, SCA, and automated code-review findings, identify false positives, and provide actionable context for genuine issues.
- Support threat modeling and design reviews for features.
- Review pull requests for security issues.
- Conduct scoped penetration tests of web applications, APIs, and mobile applications, providing reproducible evidence and clear impact.
- Reproduce and validate external findings from bug bounty reports and consultancy penetration tests.
- Guide squad Security Champions on fixes and secure development practices.
- Build and maintain automation and AI agents to scale team work.
- Develop a specialty in Adversarial Security, AI Security, or Security Automation and deliver its quarterly roadmap.
View Full Description & ApplyYou'll be redirected to the employer's site
