Analista de Segurança da Informação Pleno -… at Jobgether · Brazil

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Analista de Segurança da Informação Pleno - Pentest based in Brazil.

This role is part of a fast-growing technology environment focused on building and securing scalable digital products. You will act as a key player in identifying vulnerabilities across web applications and API ecosystems. The position emphasizes offensive security, with a strong focus on penetration testing and real-world attack simulation. You will work closely with engineering teams to strengthen secure development practices across the SDLC. The role also involves security validation of integrations and third-party partners within a complex ecosystem. It is ideal for professionals who enjoy technical depth, autonomy, and continuous learning in cybersecurity. You will help shape secure-by-design practices while contributing directly to business trust and resilience.

Accountabilities:

• Conduct penetration tests on web applications, with emphasis on complex integrations and partner ecosystem validations, identifying vulnerabilities and security gaps in real-world scenarios.
  • Perform API security assessments, including analysis of authentication flows and token-based mechanisms such as OAuth and JWT, ensuring robust endpoint protection.
  • Support secure development practices by participating in code reviews and integrating security tools (SAST/DAST) into CI/CD pipelines to enable continuous security validation.
  • Produce clear and structured vulnerability reports, translating technical findings into actionable recommendations for developers and executive-level risk insights.

Requirements

    - Proven experience in Information Technology with a strong focus on offensive security and penetration testing.
    - At least 2 years of experience in Web Pentest and API security assessments.
    - Solid programming skills in at least one language such as Python, NodeJS, PHP, Golang or equivalent.
    - Experience working with secure development pipelines and integrating security tools into CI/CD workflows.
    - Strong communication skills, with the ability to translate technical findings into business and engineering language.
    - Desirable: degree in Computer Science, Computer Engineering, Systems Analysis or related fields.
    - Desirable: familiarity with AI-based tools for test automation and technical documentation support.

Benefits

        - Flexible benefits package (VR) of R$ 45,00 per working day
        - Home office support allowance
        - Transportation assistance or shuttle service for metro/train commuters
        - Bradesco health insurance plan
        - Amil dental plan
        - Pharmacy assistance program
        - Childcare assistance benefit
        - Birthday day off
        - Access to fitness and wellness app partnerships
        - Mental health support through therapy and meditation platforms
        - SESC full membership partnership
        - Discounts on undergraduate, postgraduate, and MBA programs
        - Free access to internal learning platform (Omie Academy)
        - English in-company course partnerships
        - Discounts on insurance programs
        - Exclusive discount platform (Swile Shop)
        - Partnership benefits with Dell
        - Profit sharing program (PPRL)
        - Travel benefits
        - Life insurance

How Jobgether works:

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1