Mid-Level Analyst, Offensive Security

Job not on LinkedIn

🔥 0 minutes ago

🇧🇷 Brazil – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Just posted.
• Jobs at this company usually fill in 28 days.
• No salary listed.

Apply Now

Find Similar Remote Jobs

RecargaPay

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2010

💼 Consulting

📦 Logistics

📣 Marketing

💰 $10M Debt Financing on 2022-07

Consulting • Logistics • Marketing

RecargaPay is a leading all-in-one payment platform in Brazil, dedicated to providing easy and secure access to mobile payments and digital financial services for everyone. The platform enables users to pay bills, recharge transportation and mobile phones, purchase gift cards, and make Pix transactions with credit cards. RecargaPay offers a comprehensive range of financial services, including cashback rewards, small loans, and a digital wallet with daily interest accrual. Additionally, they provide services to businesses, such as free business accounts, payment processing, and marketing solutions. With a focus on accessibility and innovation, RecargaPay strives to change how payments are made in Brazil.

📋 Description

• Protect RecargaPay’s applications and financial products in partnership with engineering squads. • Support the team’s Application Security function, tracking vulnerabilities from triage through remediation. • Classify and prioritize vulnerabilities, guide squads, and validate fixes through retesting. • Triage SAST, SCA, and automated code review findings, separating false positives and escalating genuine vulnerabilities with appropriate context. • Support threat modeling and feature design reviews. • Conduct security code reviews of pull requests. • Perform web application, API, and mobile application penetration tests within defined scopes, providing reproducible evidence and clear impact assessments. • Support the triage of external findings, such as bug bounty reports and consultancy penetration tests, by reproducing and validating vulnerabilities. • Guide Security Champions on remediation and secure development best practices. • Build and maintain automations and AI agents to scale the team’s work. • Develop deep expertise in one of the following areas: Adversarial Security, AI Security, or Security Automation. • Deliver the quarterly roadmap for the selected area of specialization. • Work on an AI-first team, using automation and AI agents daily, with mentorship from a senior team member.

🎯 Requirements

• Experience in Application Security or application penetration testing, with solid knowledge of the OWASP Top 10 and OWASP API Security Top 10. • Experience working with development teams to track vulnerability remediation. • Ability to read code in at least one backend language: Java, Kotlin, Go, Python, or Node.js. • Experience with SAST, SCA, or DAST tools and with Burp Suite or a similar solution. • Scripting experience in Python or Go. • Technical English proficiency for reading documentation, advisories, and research. • Degree in technology or a related field, or equivalent experience. • Preferred: Web and API penetration testing focused on business logic and authorization, or Android and iOS mobile penetration testing, including Frida and Objection. • Preferred: Experience with LLM, agent, and MCP security, including prompt injection, tool abuse, and authorization. • Preferred: Experience integrating security into CI/CD pipelines and building automations with n8n or AI agents. • Preferred: Experience in a regulated financial environment, including PCI DSS, Brazil’s LGPD, and BACEN requirements. • Preferred: Certifications such as BSCP, eWPT, OSCP, or equivalent. • Ownership of your scope, technical curiosity, effective communication with engineering, sound risk judgment, collaboration, an AI-first mindset, ethics, and discretion when using privileged access and handling sensitive data.

🏖️ Benefits

• Competitive, market-aligned salary. • Remote work — wherever you are, you’re part of the team! • Home office allowance deposited monthly through the RecargaPay app. • Health and dental insurance with no copay. • Life insurance. • Flexible meal allowance via Flash. • TotalPass to support your health and well-being. • Diversity and inclusion at RecargaPay. • Potential use of your data for other opportunities within the RecargaPay group, subject to your authorization and applicable LGPD requirements.

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume