Analista de Segurança da Informação Pleno - Pentest
Accountabilities: Conduct penetration tests on web applications, with emphasis on complex integrations and partner ecosystem validations, identifying vulnerabilities and security gaps in real-world scenarios.
Perform API security assessments, including analysis of authentication flows and token-based mechanisms such as OAuth and JWT, ensuring robust endpoint protection.
Support secure development practices by participating in code reviews and integrating security tools (SAST/DAST) into CI/CD pipelines to enable continuous security validation.
Produce clear and structured vulnerability reports, translating technical findings into actionable recommendations for developers and executive-level risk insights.
Requirements
Proven experience in Information Technology with a strong focus on offensive security and penetration testing.
At least 2 years of experience in Web Pentest and API security assessments.
Solid programming skills in at least one language such as Python, NodeJS, PHP, Golang or equivalent.
Experience working with secure development pipelines and integrating security tools into CI/CD workflows.
Strong communication skills, with the ability to translate technical findings into business and engineering language.
Desirable: degree in Computer Science, Computer Engineering, Systems Analysis or related fields.
Desirable: familiarity with AI-based tools for test automation and technical documentation support.
Benefits
Flexible benefits package (VR) of R$ 45,00 per working day
Home office support allowance
Transportation assistance or shuttle service for metro/train commuters
Bradesco health insurance plan
Amil dental plan
Pharmacy assistance program
Childcare assistance benefit
Birthday day off
Access to fitness and wellness app partnerships
Mental health support through therapy and meditation platforms
SESC full membership partnership
Discounts on undergraduate, postgraduate, and MBA programs
Free access to internal learning platform (Omie Academy)
English in-company course partnerships
Discounts on insurance programs
Exclusive discount platform (Swile Shop)
Partnership benefits with Dell
Profit sharing program (PPRL)
Travel benefits
Life insurance
How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether?
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1