Senior Information Security Analyst, Pentester

Jobtailor; Barueri; Presencial; BRL 120 000 - 180 000; Tempo integral

Resumo da oferta

Jobtailor is seeking a security expert to perform advanced penetration testing across web applications, APIs, and infrastructure in a Barueri, SP team. The role emphasizes identifying risks, mapping attack surfaces, and delivering clear, executive-ready reports.

You will apply OWASP/PTES and industry best practices, validate remediations, and help evolve security tools and processes. Collaboration with leadership is essential for prioritizing remediation efforts.

Qualificações

• Bachelor's degree required or equivalent in Information Security/CS/Engineering.
• Solid experience in penetration testing across web, API, and infrastructure.
• Strong knowledge of TCP/IP, DNS, authentication mechanisms, and session management.
• Experience with API security including REST, SOAP, GraphQL, and gRPC.
• Understanding of endpoints, HTTP methods, and versioning.
• Knowledge of JWT, OAuth2, authorization flows, and scopes.
• Identification of authorization flaws (IDOR/BOLA).
• Assessment of external integrations and dependencies.

Responsabilidades

• Perform advanced penetration tests on web applications, APIs, and internal/external environments.
• Conduct assessments following frameworks such as OWASP, PTES, and community best practices.
• Perform in-depth Active Directory assessments, mapping attack surface and real-world risks.
• Review and test the external perimeter for exposure and exploitation paths.
• Produce technical reports with evidence and executive summaries for leadership.
• Validate remediations and retest critical environments.
• Help evolve internal processes, tools, and offensive security practices.

Conhecimentos

Penetration Testing

API Security

Active Directory Assessment

Network Protocols

JWT

OAuth2

Formação académica

Bachelor's degree in Information Security, Computer Science, Computer Engineering, Information Systems, Information Technology, or related field

Ferramentas

REST

SOAP

GraphQL

GRPC

Descrição da oferta de emprego

• Perform advanced penetration tests on web applications, APIs, and internal/external environments
• Conduct assessments following frameworks such as OWASP, PTES, and community best practices
• Perform in-depth Active Directory assessments, including attack surface mapping, identification of structural weaknesses, and evaluation of real-world risks
• Review and test the external perimeter, identifying inadvertent exposure and potential exploitation paths
• Produce technical reports with clear evidence and concise explanations, as well as executive summaries for leadership
• Validate remediations and retest critical environments
• Help evolve internal processes, tools, and offensive security practices

Requirements

• Bachelor's degree in Information Security, Computer Science, Computer Engineering, Information Systems, Information Technology, or a related field
• Solid experience in penetration testing: web, API, and infrastructure
• Strong knowledge of networks and protocols: TCP/IP, DNS, authentication mechanisms, and session management
• Experience in API security, including REST, SOAP, GraphQL, and gRPC
• Understanding of endpoints, HTTP methods, and versioning
• Knowledge of JWT, OAuth2, authorization flows, and scopes
• Identification of authorization flaws (IDOR / BOLA - Broken Object Level Authorization)
• Assessment of external integrations and dependencies

Core Competencies

Demonstrates expertise in advanced penetration testing across web applications, APIs, and infrastructure, with a strong foundation in security frameworks and protocols. Capable of producing detailed technical reports and evolving offensive security practices.

Highest-signal resume keywords

• Penetration Testing
• API Security
• Active Directory Assessment
• Technical Reporting
• Network Protocols

ATS Optimization Keywords

Hard Skills

• Penetration Testing
• API Security
• Active Directory Assessment
• Network Protocols
• Authorization Flaws Identification
• OWASP Framework
• PTES Framework
• TCP/IP
• JWT
• OAuth2

Soft Skills

• Clear Communication
• Analytical Thinking

Industry Keywords

• Information Security
• Computer Science
• Information Technology
• External Integrations
• Security Best Practices

Tools & Technologies

• REST
• SOAP
• GraphQL
• GRPC