Senior Information Security Analyst – Pentesting/Red Team

Job not on LinkedIn

🔥 14 hours ago

🇧🇷 Brazil – Remote

⏰ Full Time

🟠 Senior

🔐 Security Analyst

🗣️🇧🇷🇵🇹 Portuguese Required

Where this job comes from

Posted on DB's careers page ↗DB's careers page, not through a job board

First seen by Remote Rocketship 14 hours ago

Still open on DB's site. Checked 2 hours ago.

Apply Now
Logo of DB

DB

501 - 1000 employees

💼 Consulting

Software • Technology • Consulting

DB is a company that specializes in assisting organizations with digital transformation, focusing on understanding problems and finding optimal solutions. They offer a range of services including Agile design and development, digital innovation, software development, sourcing, and consulting. With a dedicated team, DB emphasizes quality in software engineering and provides tailored technological solutions to meet client demands effectively. Additionally, they promote innovation through their DBLab initiative, ensuring that their approaches are applicable, replicable, and scalable for their clients' success.

📋 Description

• Conduct comprehensive security assessments of web applications, APIs, mobile applications, and infrastructure • Lead Red Team exercises simulating the TTPs (Tactics, Techniques, and Procedures) of threats relevant to the business • Prepare business-oriented executive and technical reports, adapting the language and level of detail to the audience • Collaborate consultatively with Product and Blue Team teams to strengthen mitigations and detection and response capabilities • Propose improvements to testing methodologies, automate tasks, and contribute to the team’s technical maturity • Serve as a technical reference for the team, supporting colleagues and sharing knowledge about emerging threats and new techniques

🎯 Requirements

• Extensive experience conducting penetration tests in real-world environments, including web applications, REST/GraphQL APIs, iOS/Android mobile applications, and on-premises/cloud infrastructure • Proficiency in frameworks and methodologies including OWASP Top 10, OWASP MASTG, PTES, NIST SP 800-115, and MITRE ATT&CK • Deep knowledge of Linux and Windows, networking (protocols, firewalls, ZTNA, VPNs), authentication and authorization, engineering platform environments, and defense in depth • Ability to develop scripts and tools in Python, Go, Shell Script, or similar languages • Clear communication skills, with the ability to translate technical risks into business language for stakeholders at different organizational levels • Autonomy in managing requests, with clear understanding of priorities, risks, and commitments • Adaptability to work across different contexts and continuously learn in an evolving threat landscape • Strong ethical standards when handling sensitive information and test results, both inside and outside the organization • Proactive knowledge sharing, openness to feedback, and a constructive approach to technical reviews • OSCP, OSWE, OSED, CPTS, CPENT, eMAPT, eWPTX, or equivalent certifications are desirable • Experience with security-focused code review (Java, Node.js, Python, Go, Shell Script) is desirable • Technical content creation, such as blogs, white papers, CTF write-ups, or presentations, is desirable • Active participation in the security community, including CTFs, Hack The Box, TryHackMe, bug bounty programs, or security-focused open-source contributions, is desirable

🏖️ Benefits

• iFood meal and food allowance • Home office allowance • Health insurance • Dental insurance • Birthday day off • Life insurance • Extended maternity and paternity leave • Educational partnerships • TotalPass health and wellness partnership • Clude Saúde partnership • Reimbursement programs • Flexible working hours • Dress code: Be yourself.

Apply Now

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Similar Jobs

🕒 3 days ago

Spassu

1001 - 5000

💼 Consulting

📦 Logistics

📣 Marketing

Analista sênior de segurança da informação na Spassu, empresa de tecnologia. Atuando em GRC, resposta a incidentes, riscos, conformidade e proteção de ativos em contrato SOC.

🗣️🇧🇷🇵🇹 Portuguese Required

🕒 3 days ago

Spassu

1001 - 5000

💼 Consulting

📦 Logistics

📣 Marketing

Analista de segurança da informação em SOC da Spassu, tratando incidentes e vazamentos de dados. Administrando ferramentas de segurança, vulnerabilidades e conformidade regulatória.

🗣️🇧🇷🇵🇹 Portuguese Required

🕒 3 days ago

Unifique

1001 - 5000

💼 Consulting

📦 Logistics

📡 Telecommunications

Analista de cibersegurança protegendo ativos e tratando incidentes na Unifique, empresa brasileira de telecomunicações. Foco em EDR, SIEM, vulnerabilidades e melhoria contínua.

🗣️🇧🇷🇵🇹 Portuguese Required

🕒 4 days ago

RecargaPay

201 - 500

💼 Consulting

📦 Logistics

📣 Marketing

Sr. Cyber Security Analyst securing RecargaPay’s AWS infrastructure supporting financial products. Managing cloud risks, incidents, compliance controls, and secure delivery with engineering teams.

🗣️🇧🇷🇵🇹 Portuguese Required

🕒 4 days ago

RecargaPay

201 - 500

💼 Consulting

📦 Logistics

📣 Marketing

Sr. Cyber Security Analyst conduzindo Exposure Management no Blue Team da fintech RecargaPay. Priorizando riscos, automatizando remediação e monitorando postura cloud, identidade e SASE.

🗣️🇧🇷🇵🇹 Portuguese Required

Built by Lior Neu-ner. I'd love to hear your feedback — Get in touch via DM or support@remoterocketship.com
Follow Remote Rocketship on LinkedInFollow Remote Rocketship on InstagramFollow Remote Rocketship on FacebookFollow Remote Rocketship on TikTok