Senior Digital Security Specialist – Offensive and Defensive Security

Job not on LinkedIn

🔥 13 hours ago

🇧🇷 Brazil – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Sinqia

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1996

💼 Consulting

💳 Fintech

🏦 Banking

💰 Post-IPO Secondary on 2015-05

Consulting • Fintech • Banking

Sinqia is a technology company focused on providing complete digital platforms for financial institutions and fintechs. Their solutions encompass core banking, custody management, digital onboarding, and regulatory compliance, facilitating the transformation and innovation within the financial services sector. With a commitment to accelerating financial innovation, Sinqia processes a significant volume of financial transactions daily, serving as a technological backbone for both traditional banks and emerging fintech startups.

📋 Description

• Plan and execute black-box, gray-box, and white-box penetration tests on web applications, APIs, networks, servers, and cloud environments, with formal scope and authorization • Simulate real-world attacks, including vulnerability exploitation, privilege escalation, lateral movement, and vulnerability chaining • Conduct vulnerability assessments and review insecure configurations, manually validating automated findings • Perform security-focused code reviews when necessary • Stay up to date on attack techniques, CVEs, and threat trends • Propose technical fixes and identify root causes • Recommend improvements to architecture, hardening, configuration best practices, and compensating controls • Prioritize risks based on severity and impact using CVSS, OWASP, and MITRE ATT&CK • Support development, infrastructure, and cloud teams in implementing fixes and revalidate the results • Contribute to secure development processes and vulnerability management • Prepare technical reports and executive summaries with evidence, reproduction steps, risk ratings, and remediation plans • Present findings and recommendations to technical and non-technical audiences • Read and produce technical documentation in English

🎯 Requirements

• Proven experience in penetration testing and offensive security across multiple domains (web/API, infrastructure, networks, and cloud) • Experience securing AWS environments • Strong knowledge of OWASP Top 10, OWASP ASVS, PTES, MITRE ATT&CK, and CVSS • Solid knowledge of networking, Linux and Windows operating systems, Active Directory, authentication, and cryptography • Experience with Burp Suite, Nmap, Metasploit, and enumeration and post-exploitation tools • Ability to automate tasks and develop custom tools or scripts using Python or Bash • Experience proposing and guiding the implementation of fixes and hardening measures • Strong technical writing and excellent communication skills • Technical proficiency in English • Preferred: experience with Azure, GCP, and/or OCI • Preferred: certifications such as OSCP, OSEP, OSWE, GPEN, GWAPT, CISSP, AWS Certified Security – Specialty, Microsoft AZ-500, Google Professional Cloud Security Engineer, Oracle Cloud Infrastructure Security Professional, or CCSP • Preferred: participation in Bug Bounty programs, CTFs, or responsible vulnerability disclosure (published CVEs) • Preferred: experience with Threat Modeling and security in CI/CD pipelines (DevSecOps)

🏖️ Benefits

• Remote work • Individual contributor role

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume