Security Analyst – Purple Team, Offensive and Defensive Security

Job not on LinkedIn

🔥 12 hours ago

🇧🇷 Brazil – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🔐 Security Analyst

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Bancorbrás

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 1983

✈️ Travel

🛡️ Insurance

Travel • Insurance • Tourism

Bancorbrás is a conglomerate of companies operating in Brazil for over 40 years, specializing in tourism, consortia, and insurance. With a diverse portfolio, Bancorbrás strives to enhance quality of life for its clients by offering travel experiences, facilitating investments, and providing insurance solutions tailored to various needs. The company also emphasizes its commitment to social citizenship through philanthropic activities conducted by the Instituto Bancorbrás.

📋 Description

• Conduct internal and external penetration tests and simulate real-world attack scenarios • Identify, prioritize, mitigate, and track the remediation of vulnerabilities in applications and infrastructure • Integrate and optimize SAST, DAST, and SCA testing in CI/CD pipelines • Review architectures, define security requirements, and support resilient solutions from the outset (Security by Design) • Exploit vulnerabilities, assess risks, and support secure solutions based on LLM models • Train and mentor development teams in secure coding and threat mitigation • Document risks, attack vectors, and corrective actions in technical and management reports

🎯 Requirements

• Completed postgraduate degree in Information Security, Computer Science, Computer Engineering, Information Systems, or related fields • Hands-on experience in penetration testing, attack simulation, vulnerability assessment, and mitigation/defensive techniques • Proficiency in MITRE ATT&CK, OWASP Top 10 / LLM, PTES, and NIST • Experience with Burp Suite, Metasploit, Nmap, Nessus, OpenVAS, SonarQube, Snyk, Checkmarx, or similar tools • Experience integrating security into CI/CD pipelines and conducting SAST, DAST, and SCA analysis • Ability to translate technical vulnerabilities into business risks and collaborate across development, infrastructure, and management teams • OSCP, CEH, Security+, CISSP, and Pentest+ certifications are a plus • Advanced English proficiency for technical and corporate communication is a plus

🏖️ Benefits

• Attendance Bonus: Three days of paid leave per year • Education Assistance: 50% reimbursement for development-focused courses, available after one year with the company • Home Office Allowance: Monthly additional payment to cover remote-work expenses • Childcare Assistance for children under six years of age • Christmas Basket: Special year-end bonus • Health Insurance with nationwide coverage and co-payments • Dental Insurance • Private Pension Plan with employer contributions • Life Insurance • TRIB PASS – Leisure and Tourism Platform with a 50% monthly subscription subsidy • Meal and Food Allowance (Caju Card), provided for each day worked • Wellhub (Gympass)