Compensation
This employer didn't list pay. Model a likely range with the calculator.
Model this offer in the calculatorPosting language
Job description
Team: IT
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Analista de Segurança da Informação Pleno - Pentest based in Brazil.
This role is part of a fast-growing technology environment focused on building and securing scalable digital products.
You will act as a key player in identifying vulnerabilities across web applications and API ecosystems.
The position emphasizes offensive security, with a strong focus on penetration testing and real-world attack simulation.
You will work closely with engineering teams to strengthen secure development practices across the SDLC.
The role also involves security validation of integrations and third-party partners within a complex ecosystem.
It is ideal for professionals who enjoy technical depth, autonomy, and continuous learning in cybersecurity.
You will help shape secure-by-design practices while contributing directly to business trust and resilience.
Accountabilities:
- Conduct penetration tests on web applications, with emphasis on complex integrations and partner ecosystem validations, identifying vulnerabilities and security gaps in real-world scenarios.
- Perform API security assessments, including analysis of authentication flows and token-based mechanisms such as OAuth and JWT, ensuring robust endpoint protection.
- Support secure development practices by participating in code reviews and integrating security tools (SAST/DAST) into CI/CD pipelines to enable continuous security validation.
- Produce clear and structured vulnerability reports, translating technical findings into actionable recommendations for developers and executive-level risk insights.
- Proven experience in Information Technology with a strong focus on offensive security and penetration testing.
- At least 2 years of experience in Web Pentest and API security assessments.
- Solid programming skills in at least one language such as Python, NodeJS, PHP, Golang or equivalent.
- Experience working with secure development pipelines and integrating security tools into CI/CD workflows.
- Strong communication skills, with the ability to translate technical findings into business and engineering language.
- Desirable: degree in Computer Science, Computer Engineering, Systems Analysis or related fields.
- Desirable: familiarity with AI-based tools for test automation and technical documentation support.
- Flexible benefits package (VR) of R$ 45,00 per working day
- Home office support allowance
- Transportation assistance or shuttle service for metro/train commuters
- Bradesco health insurance plan
- Amil dental plan
- Pharmacy assistance program
- Childcare assistance benefit
- Birthday day off
- Access to fitness and wellness app partnerships
- Mental health support through therapy and meditation platforms
- SESC full membership partnership
- Discounts on undergraduate, postgraduate, and MBA programs
- Free access to internal learning platform (Omie Academy)
- English in-company course partnerships
- Discounts on insurance programs
- Exclusive discount platform (Swile Shop)
- Partnership benefits with Dell
- Profit sharing program (PPRL)
- Travel benefits
- Life insurance
Requirements
Benefits
Related roles