Plan and execute penetration tests (Black-, Gray
and White-box) and vulnerability assessments on web and mobile applications and complex infrastructures.
Perform assessments on Android and iOS applications, including bypassing protection mechanisms and binary analysis.
Provide strategic recommendations and assist in risk mitigation with Development and Infrastructure teams.
Participate in stakeholder meetings to translate technical risks into business impact and potential financial loss.
Test and implement new technologies, tools and methodologies to optimize vulnerability identification.
Promote a security-first culture and provide guidance on secure architecture best practices across the company.
Perform activities in compliance with the Information Security Management System (ISMS) requirements and documentation.

Strong knowledge of OWASP (Top 10, MASVS and MSTG) and penetration testing frameworks.
Proficiency in languages such as Python, Java, Ruby, shell scripting or PowerShell for exploit development and automation.
Experience with GraphQL and RESTful APIs, SOA middleware, system integrations and perimeter security.
Proficiency with tools such as Kali Linux, Metasploit, Wireshark and Burp Suite Professional.
Deep understanding of network protocols, operating systems (Linux/Windows) and modern application architectures.
Ability to produce detailed technical reports and clear executive presentations.
Ability to infer and demonstrate the financial impact of vulnerabilities.
Creative, outside-the-box thinking to simulate complex attack scenarios.
Certifications such as OSCP, CEH, Security+ and other industry certifications are valued.

Meal/food allowance loaded on the Flash card.
Sulamérica medical and dental plan with co-payment (R$450 discount per dependent).
Total Pass.
Home office allowance on the Flash card.
Mental health support (VOLL Care).
Education assistance through VOLL Education.
Group life insurance.
6-month maternity leave.
30-day paternity leave (Our parental leave policy equally applies to same-sex couples).
Paid vacation after 6 months of employment.
Day off.

Senior Offensive Security Analyst

Key skills