Senior Red Team Analyst

Job not on LinkedIn

🔥 22 minutes ago

🇧🇷 Brazil – Remote

⏳ Contract/Temporary

🟠 Senior

🧐 Analyst

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Pagaleve

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2021

💳 Fintech

🛍️ eCommerce

👥 B2C

💰 Debt Financing on 2022-08

Fintech • eCommerce • B2C

Pagaleve is a financial technology company that enables users to make purchases in installments without interest using the Pix payment method. With a mobile app, customers can conveniently manage their shopping experiences across thousands of partner stores offering various goods, from clothing to electronics. Pagaleve is designed to simplify the payment process for both consumers and retailers, emphasizing security and ease of use.

📋 Description

• Design, build, and continuously improve an autonomous penetration testing agent integrated into the staging environment and CI/CD pipeline • Cover the OWASP Top 10, OWASP API Security Top 10, business logic flaws, authentication, authorization, IDOR/BOLA, and cloud misconfigurations • Define permitted scope, action boundaries, human approval requirements for destructive testing, and audit trails • Measure the agent’s false-positive rate, coverage, and vulnerabilities identified against manual penetration testing • Integrate findings into the engineering workflow with tickets, severity ratings, reproducible evidence, and remediation suggestions • Support threat modeling for new features and translate scenarios into test cases • Conduct manual penetration tests of web applications, APIs, mobile applications, and AWS infrastructure • Perform ad hoc testing before releases, prepare technical and executive reports, validate fixes, and track remediation • Plan and conduct red team and purple team exercises with the Blue Team • Simulate identity and SSO compromise, abuse of Pix payment flows, lateral movement in AWS, and social engineering • Map the techniques used and measure the Blue Team’s detection and response capabilities • Serve as the technical point of reference for another Red Team professional by reviewing findings and providing mentorship • Contribute evidence for audits and regulatory requirements, such as BCB Resolution 85 • Work with the Red Team, Blue Team, and engineering teams to remediate vulnerabilities

🎯 Requirements

• 5+ years of experience in offensive security, including end-to-end web application and API penetration testing • Strong command of the OWASP Top 10, OWASP API Security Top 10, and authentication, authorization, and business logic testing • Hands-on experience with Burp Suite and offensive security tools, without relying solely on scanners • Proficiency in Python (or Go/TypeScript), with a track record of building custom tools—not just scripts • Experience building with LLMs, including agents, tool use, structured prompts, or model API integrations • Offensive-security knowledge of AWS, including IAM, privilege escalation, and exposed services • Experience integrating security into CI/CD pipelines • Clear report-writing skills for both engineering teams and leadership • Strong ethical judgment and discipline in adhering to scope and rules of engagement • Practical offensive security certifications such as OSCP, OSWE, OSEP, BSCP, eWPTX, or equivalent • Experience in fintech, payment systems, or Pix • Open-source security projects, published CVEs, or bug bounty participation • Experience with red team or purple team exercises at organizations with a mature SOC • Mobile application testing experience (Android and iOS) • Knowledge of AI agent evaluation, including evals, false-positive measurement, and securing the agent itself (prompt injection and tool abuse) • Experience with infrastructure as code (Terraform) and containers

🏖️ Benefits

• PJ contractor arrangement • Competitive compensation • Health insurance covering 100% of the employee and 75% of the first dependent • Birthday month day off • Monthly discount coupon for stores that accept Pix Parcelado • Fully remote work

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume