Analista de Segurança da Informação Pleno - Pentest

Accountabilities: Conduct penetration tests on web applications, with emphasis on complex integrations and partner ecosystem validations, identifying vulnerabilities and security gaps in real-world scenarios.

Perform API security assessments, including analysis of authentication flows and token-based mechanisms such as OAuth and JWT, ensuring robust endpoint protection.

Support secure development practices by participating in code reviews and integrating security tools (SAST/DAST) into CI/CD pipelines to enable continuous security validation.

Produce clear and structured vulnerability reports, translating technical findings into actionable recommendations for developers and executive-level risk insights.

Requirements

Proven experience in Information Technology with a strong focus on offensive security and penetration testing.

At least 2 years of experience in Web Pentest and API security assessments.

Solid programming skills in at least one language such as Python, NodeJS, PHP, Golang or equivalent.

Experience working with secure development pipelines and integrating security tools into CI/CD workflows.

Strong communication skills, with the ability to translate technical findings into business and engineering language.

Desirable: degree in Computer Science, Computer Engineering, Systems Analysis or related fields.

Desirable: familiarity with AI-based tools for test automation and technical documentation support.

Benefits

Flexible benefits package (VR) of R$ 45,00 per working day

Home office support allowance

Transportation assistance or shuttle service for metro/train commuters

Bradesco health insurance plan

Amil dental plan

Pharmacy assistance program

Childcare assistance benefit

Birthday day off

Access to fitness and wellness app partnerships

Mental health support through therapy and meditation platforms

SESC full membership partnership

Discounts on undergraduate, postgraduate, and MBA programs

Free access to internal learning platform (Omie Academy)

English in-company course partnerships

Discounts on insurance programs

Exclusive discount platform (Swile Shop)

Partnership benefits with Dell

Profit sharing program (PPRL)

Travel benefits

Life insurance

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best!  Why Apply Through Jobgether? 

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1