Senior Analyst – Offensive Security

Job not on LinkedIn

🔥 11 minutes ago

🇧🇷 Brazil – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Just posted.
• Jobs at this company usually fill in 28 days.
• No salary listed.

Apply Now

Find Similar Remote Jobs

RecargaPay

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2010

💼 Consulting

📦 Logistics

📣 Marketing

💰 $10M Debt Financing on 2022-07

Consulting • Logistics • Marketing

RecargaPay is a leading all-in-one payment platform in Brazil, dedicated to providing easy and secure access to mobile payments and digital financial services for everyone. The platform enables users to pay bills, recharge transportation and mobile phones, purchase gift cards, and make Pix transactions with credit cards. RecargaPay offers a comprehensive range of financial services, including cashback rewards, small loans, and a digital wallet with daily interest accrual. Additionally, they provide services to businesses, such as free business accounts, payment processing, and marketing solutions. With a focus on accessibility and innovation, RecargaPay strives to change how payments are made in Brazil.

📋 Description

• Protect RecargaPay’s applications and financial products end to end, from feature design through vulnerability remediation. • Serve as the team’s Application Security foundation and own the vulnerability lifecycle in partnership with engineering squads. • Prioritize vulnerabilities based on business risk, considering potential financial loss and customer data exposure. • Negotiate remediation timelines with engineering squads, and track and validate fixes. • Lead threat modeling and design reviews for critical features such as Pix, credit, cards, and onboarding before development begins. • Conduct security code reviews and advance SAST and SCA controls in the CI/CD pipeline. • Plan and execute penetration tests for web applications, APIs, and mobile applications, with a focus on business logic, authentication, and authorization. • Turn penetration testing findings into fixes and regression tests. • Define the technical scope of external penetration tests and the annual PCI DSS cycle. • Triage findings from bug bounty programs, consulting firms, and external reports, validating exploitability, actual severity, and ownership. • Support the Security Champions program and advise engineering squads. • Use and build automation and AI agents to scale code reviews, triage, and security testing. • Act as a technical reference and mentor for the team’s mid-level analysts.

🎯 Requirements

• Strong experience in Application Security at a product company, including end-to-end vulnerability management with development teams and business-risk-based prioritization. • Experience conducting penetration tests of web applications and APIs (REST/GraphQL), including business logic, authentication, and authorization (IDOR/BOLA). • Security code review experience in at least one backend language (Java, Kotlin, Go, Python, or Node.js). • Experience with threat modeling and SAST and SCA tools throughout the development lifecycle. • Ability to develop scripts and automation in Python or Go. • Technical English proficiency for reading documentation, advisories, and research. • Degree in technology or a related field, or equivalent experience. • Preferred: Android and iOS mobile penetration testing (Frida, Objection, Burp Suite). • Preferred: LLM, agent, and MCP security, or experience using AI agents in security workflows. • Preferred: Experience in a regulated financial environment (PCI DSS, LGPD, BACEN). • Preferred: Certifications such as OSWE, BSCP, OSCP, or equivalent. • Ownership: follows vulnerabilities through remediation rather than stopping at the report. • Risk judgment: distinguishes what is exploitable and relevant to the business from noise without inflating severity. • Engineering influence: persuades squads with evidence and negotiates timelines and mitigations when immediate remediation is not possible. • Two-level communication: explains impact to leadership and remediation steps to developers. • Mentorship: raises the technical bar for mid-level analysts through reviews, pairing, and direct feedback. • AI-first mindset: uses AI to scale work while applying sound judgment to false positives. • Ethics and discretion when using privileged access and handling sensitive data.

🏖️ Benefits

• Competitive, market-aligned salary. • Remote work — wherever you are, you’re part of the team! • Home office allowance deposited monthly through the RecargaPay app. • Health and dental insurance with no copay. • Life insurance. • Flexible meal allowance (via Flash). • TotalPass to support your health and well-being. • Freedom to be yourself and an inclusive work environment. • Eligibility to be considered for other opportunities within the RecargaPay Group through the use of data collected during the selection process.

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume