Senior AppSec Penetration Tester

Remitee; Buenos Aires; Presencial; ARS 59.548.000 - 119.095.000; Jornada completa

Descripción de la vacante

Remitee is seeking a Penetration Testing Specialist to lead offensive security across web, mobile, API, cloud, and internal networks. You will embed with engineering squads as an AppSec partner, drive threat modeling, bug bounty, and purple-team activities, and report to leadership with actionable remediation.

This is a hands-on technical role with direct visibility to the CTO and CISO. You will design, run, and document tests following PTES/OWASP guidelines, manage security assessments, and

Formación

• 4+ years in pentesting or application security with hands-on production experience.
• In-house pentester or AppSec engineer on a live product.
• Ability to read and reason through code in at least 2 languages (Python, .NET, Node/TypeScript, or Java).
• Documented methodology: PTES, OWASP WSTG/MASTG/ASVS, OWASP API Top 10.

Responsabilidades

• Plan and execute penetration tests across web, mobile, API, cloud, and internal networks.
• Conduct application security code reviews and analyze logic, auth, and data handling.
• Operate and tune the AppSec toolchain in SDLC: SAST, DAST, SCA, secrets scanning, IaC scanning.
• Design and maintain threat modeling programs for critical features.
• Audit OAuth 2.0 / OIDC / JWT implementations for common attacks.
• Hunt for business logic vulnerabilities with real-world impact.
• Build AI-assisted workflows for recon, triage, PoC generation, and fuzzing.

Conocimientos

Penetration testing

Application security

Python

.NET

Node/TypeScript

Java

Cloud security

OAuth 2.0 / OIDC / JWT

Reporting

AI workflows

Herramientas

SAST

DAST

SCA

IaC scanning

Descripción del empleo

Remitee is seeking a Penetration Testing Specialist to lead offensive security across web, mobile, API, cloud, and internal networks. You will embed with engineering squads as an AppSec partner, drive threat modeling, bug bounty, and purple-team activities, and report to leadership with actionable remediation.

This is a hands-on technical role with direct visibility to the CTO and CISO. You will design, run, and document tests following PTES/OWASP guidelines, manage security assessments, and