Offensive Security Specialist

Job not on LinkedIn

🔥 0 minutes ago

🇧🇷 Brazil – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Just posted.
• Jobs at this company usually fill in 28 days.
• No salary listed.

Apply Now

Find Similar Remote Jobs

RecargaPay

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2010

💼 Consulting

📦 Logistics

📣 Marketing

💰 $10M Debt Financing on 2022-07

Consulting • Logistics • Marketing

RecargaPay is a leading all-in-one payment platform in Brazil, dedicated to providing easy and secure access to mobile payments and digital financial services for everyone. The platform enables users to pay bills, recharge transportation and mobile phones, purchase gift cards, and make Pix transactions with credit cards. RecargaPay offers a comprehensive range of financial services, including cashback rewards, small loans, and a digital wallet with daily interest accrual. Additionally, they provide services to businesses, such as free business accounts, payment processing, and marketing solutions. With a focus on accessibility and innovation, RecargaPay strives to change how payments are made in Brazil.

📋 Description

• Serve as the technical authority for RecargaPay’s Offensive Security team. • Define how the team protects applications, financial products, and AI assets. • Define the technical strategy for AppSec and offensive testing, including methodology, coverage, business-risk-based prioritization, and metrics. • Own the application vulnerability management program, ensuring critical issues are remediated on time and negotiating priorities with engineering leadership. • Lead threat modeling and architecture reviews for critical initiatives such as Pix, lending, cards, and AI agents. • Plan and execute complex penetration tests of web applications and APIs, focusing on business logic and attack chains. • Turn recurring findings into security controls and regression tests. • Define the scope of external penetration tests and the annual PCI DSS cycle. • Serve as the technical authority for triaging external findings, including bug bounty submissions, consulting engagements, and external reports. • Lead the evolution of automation and AI agents to scale code review, triage, and security testing. • Technically represent the team in audits, with partner teams, and with leadership, translating technical risk into business decisions. • Serve as the technical authority for the entire team and act as the manager’s technical deputy, mentoring senior and mid-level professionals.

🎯 Requirements

• Experience providing technical leadership for an Application Security or offensive testing program at a product company. • End-to-end experience managing vulnerabilities in partnership with engineering, prioritizing by business risk, and reporting metrics to leadership. • Strong expertise in web application and API penetration testing (REST/GraphQL), including business logic, authentication, authorization (IDOR/BOLA), and attack chains. • Security code review experience in at least one backend language: Java, Kotlin, Go, Python, or Node.js. • Architecture-level threat modeling experience. • Experience developing automation and custom tools in Python or Go. • Practical use of AI (LLMs or agents) in security work, such as triage, code review, or testing. • Degree in technology or a related field, or equivalent experience. • Technical English proficiency for reading documentation, advisories, and research. • Nice to have: Experience with LLM, agent, and MCP security (prompt injection, tool abuse, and data exposure). • Nice to have: Mobile penetration testing for Android and iOS (Frida, objection, Burp Suite). • Nice to have: Experience in a regulated financial environment (PCI DSS, LGPD, BACEN) and with audits. • Nice to have: Certifications such as OSWE, BSCP, OSCP, or equivalent, as well as public contributions such as CVEs, research, or conference talks.

🏖️ Benefits

• Competitive, market-aligned salary. • Remote work — wherever you are, you are part of the team! • Home office allowance paid monthly through the RecargaPay app. • Health and dental insurance with no copay. • Life insurance. • Flexible meal allowance via Flash. • TotalPass to support your health and well-being. • Diversity & Inclusion at RecargaPay: freedom to be yourself, in an inclusive environment that welcomes different perspectives and experiences. • You may be considered for other opportunities within the RecargaPay Group through the use of your résumé, in accordance with Brazil’s LGPD.

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume