Analista de Segurança da Informação Pleno – Pentest

About the role

We are looking for a mid‑level Information Security Analyst specialized in penetration testing to join a fast‑growing technology team in Brazil. The role focuses on offensive security, identifying vulnerabilities in web applications and API ecosystems, and helping embed secure‑by‑design practices throughout the software development lifecycle.

Key responsibilities

• Perform penetration tests on complex web applications and integrated partner ecosystems.
• Conduct API security assessments, reviewing authentication flows, OAuth and JWT implementations.
• Support secure development by participating in code reviews and integrating SAST/DAST tools into CI/CD pipelines.
• Produce clear vulnerability reports with actionable recommendations for developers and executive stakeholders.

Required profile

• Minimum 2 years of hands‑on experience in web penetration testing and API security.
• Solid programming skills in at least one language such as Python, NodeJS, PHP or Golang.
• Experience with secure development pipelines and CI/CD security tooling.
• Strong communication ability to translate technical findings into business language.
• Degree in Computer Science, Engineering or related field is desirable.

Required skills

• Penetration testing
• Web application security
• API security (OAuth, JWT)
• Python, NodeJS, PHP, Golang
• SAST / DAST integration
• CI/CD pipeline security

What we offer

• Flexible benefits package (R$ 45 per working day).
• Home‑office support allowance.
• Transportation assistance or shuttle service.
• Health (Bradesco) and dental (Amil) insurance plans.
• Pharmacy assistance, childcare benefit, birthday day off.
• Access to fitness, wellness and mental‑health platforms.
• SESC full membership and discounts on higher‑education programs.
• Free internal learning platform and English courses.