Mid-Level Cyber Security Analyst (Architecture Security) - Campinas/SP

About us

We are proudly Brazilian and popular, always digital and in-person when the client wants. We innovate to provide access to financial services and offer an experience that encourages people to win today. Our reason for existing is clear: to fight for a banking experience that welcomes and encourages all Brazilians. And we do this with availability, hospitality, and agility.

Our culture, The Agi Way

Live for the customer Our main asset is our customers. The company only exists if it can solve their pain points, delivering products and experiences better than the alternatives available in the market.

Act like an entrepreneur How many companies do you know that demand an ownership spirit from the team? Many, right? But how many of them enable people to actually be owners? And it's not about giving this opportunity to a few, but about making it possible for everyone. At Agibank, it's like this, so here you act as an owner because you already are one or because you dream of being the next.

Grow on the journey Our culture is strong. So, it only makes sense to undertake here if you identify deeply with it. If you are a person fanatic about results, dread the comfort zone, live in eternal search for knowledge, prefer things said straight to the point, and want to be surrounded by people who are also like that, you will really enjoy your journey here.

Work model Hybrid • Campinas/SP Our Technology team

Much more than code and systems — it is the essential means that makes our unique model possible, which combines the best of digital with physical and human presence. Here, technology is not an end in itself, but the bridge between innovation and the real customer experience. They work side by side with business areas to ensure robust, scalable, and people-centered solutions, without giving up an in-depth technical and scientific view in fronts such as software development, infrastructure, cybersecurity, and architecture. It is in this intersection between purpose, technique, and impact that they build the present and future.

Your challenges to grow on the journey

• Perform penetration testing on APIs and mobile applications and, when necessary, on web applications;
• Design and review secure architectures for cloud environments (AWS/Azure), applying least privilege, Zero Trust, and Threat Modeling;
• Incorporate security throughout the secure development lifecycle (SSDLC), promoting the shift left culture with development teams;
• Build, maintain, and evolve security pipelines in CI/CD (GitLab or GitHub), including SAST, DAST, SCA, secrets scanning, and IaC scanning;
• Use AI intensively in the secure development workflow to automate analyses, accelerate fixes, and continuously strengthen our security barriers;
• Work alongside developers in code reviews, guidance on fixes, and secure by design practices;
• Define and validate encryption standards and TLS/mTLS implementations between services and integrations;
• Develop scripts and proofs of concept to validate vulnerabilities and security controls.

What you need to become an Agilizado?

Requirements

• Practical experience in pentest of APIs and mobile applications;
• In-depth knowledge of the secure development lifecycle (SSDLC);
• Solid experience with CI/CD and security pipelines in GitLab or GitHub;
• Solid experience in architecture for cloud environments (AWS and/or Azure);
• Proven use of AI tools in development and security workflows;
• Mastery of concepts such as least privilege, Zero Trust, and Threat Modeling (e.g., STRIDE, PASTA);
• Knowledge of cryptography and TLS and mTLS protocols;
• Familiarity with OWASP Top 10, OWASP API Security Top 10, and OWASP MASVS/MASTG;
• Technical English for reading documentation and reports;
• Degree in Information Security, Computer Science, or related areas (or equivalent experience).

Differentials

• Experience in a banking environment;
• Experience in pentest of web applications;
• Skill with scripts (Python, Bash, or Go) for automation and PoCs;
• Experience with Infrastructure as Code (Terraform, CloudFormation) and container security (Docker, Kubernetes);
• Certifications such as OSCP, OSWE, CPTS, CWES, eWPTX, AWS Security Specialty, AZ-500, or similar.

Benefits and conveniences

• Health and well-being: health plan, dental plan, free psychological and medical telecare, Totalpass, Meal and Food vouchers, and Life insurance/funeral assistance;
• Maternity and paternity: childcare assistance, 6-month maternity leave, 20-day paternity leave, VA/VR during the leave period;
• Private pension;
• Profit Sharing Program (PPR) following the rules established annually;
• Transportation vouchers;
• Round-trip chartered bus to Campinas and region (within a radius of up to 50 km). Places are reservable subject to seat and route availability. For those who go by car, we have free parking;
• Gift day off in your birthday month;
• Money back on your Credit Card: 1% cashback on the total amount of the card statement, reverted as credit on the following statement;
• CDB Investment with differentiated yield: up to 105% of CDI;
• Exemption from Digital Communication Fees;
• Worker's Credit: differentiated rate and term. Available for contracting after 6 months at the company;
• FGTS Birthday Withdrawal anticipation;
• Dr. Pet: possibility to get a health plan for pets with up to 20% discount.

Hiring company: Hypeflame

Tô de dono Program

Tô de Dono is more than a long-term incentive program – it is the recognition of those who live our culture daily. Every year, the Program has new participants, employees who become owners of the business and profit from Agibank's appreciation whenever the company grows. So, those who are part of this history are those who dive headfirst into challenges to deliver great results. This is how we truly build a culture of owners. Here, the formula is simple: you grow. Agibank grows with you.

Learn more about our daily life on LinkedIn and Youtube.

Check our reviews on Glassdoor.