Senior Analyst, Offensive Security
New
R
RecargaPayFinancial technology
BrazilFull-TimeSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Languages
- Inglês técnico para leitura de documentação, advisories e pesquisas.
- Required Skills
- GraphQLPythonGoRESTful APIs
Requirements
- Bring solid Application Security experience in a product company.
- Have experience managing vulnerabilities end to end with development teams and prioritizing by business risk.
- Have experience penetration testing web applications and APIs, including REST and GraphQL, business logic, authentication, and authorization (IDOR/BOLA).
- Perform security code reviews in at least one backend language: Java, Kotlin, Go, Python, or Node.js.
- Have experience with threat modeling and SAST and SCA tools in the development lifecycle.
- Develop scripts and automations in Python or Go.
- Read technical documentation, advisories, and research in English.
- Have a technology-related degree or equivalent experience.
- Mobile penetration testing for Android and iOS, including Frida, objection, and Burp Suite, is a plus.
- Experience with LLM, agent, and MCP security or AI agents in security workflows is a plus.
- Experience in a regulated financial environment, including PCI DSS, LGPD, or BACEN, is a plus.
- OSWE, BSCP, OSCP, or equivalent certifications are a plus.
Responsibilities
- Own application vulnerability triage, business-risk prioritization, squad coordination, remediation tracking, and fix validation.
- Conduct threat modeling and design reviews for critical features before development.
- Perform security code reviews and improve SAST and SCA controls in the development pipeline.
- Plan and execute web, API, and mobile penetration tests focused on business logic, authentication, and authorization.
- Turn security findings into remediation work and regression tests.
- Define technical scope for external penetration tests and the annual PCI DSS cycle, and triage external findings.
- Support the Security Champions program and guide squads in secure development.
- Build and use AI automations and agents for code review, triage, and security testing.
- Act as a technical reference and mentor mid-level analysts.
View Full Description & ApplyYou'll be redirected to the employer's site
