Cooperativa Central Ailos

Financial Planning and Analysis

• Support the development of the risk model monitoring scope, based on mathematical and statistical methodologies;
• Execute risk model monitoring procedures (PD, LGD, EAD);
• Assess the integrity of the data used in risk model monitoring;
• Apply statistical tests to risk models;
• Evaluate the adequacy of rules and methodologies used in model development in accordance with current regulations (Resolution 4.966/21);
• Monitor indicators and limits established to track model performance;
• Prepare technical and executive reports on risk model performance;
• Contribute to the team in developing solutions to improve controls and tools and to automate operational tasks;
• Ensure proper response to internal and external audits and regulatory bodies;
• Support other departments and affiliated cooperatives, acting as a point of reference and providing technical guidance on key model monitoring indicators;
• Share knowledge, promote a risk-aware culture, and exchange experiences in a collaborative environment.

Financial Risk Analyst II – Risk Model Validation

Security Engineer

• Plan, execute and document internal and external penetration tests, including web applications, APIs, mobile apps, networks, servers, cloud environments and third-party components.
• Perform in-depth vulnerability assessments, including manual exploitation and validation of findings identified by automated scanners.
• Simulate real-world attacks, including scenario-based intrusion testing (Black Box, White Box and Grey Box).
• Conduct Red Teaming/Adversary Simulation activities when applicable.
• Prepare technical and executive reports detailing findings, attack vectors, severity and remediation recommendations.
• Support technical teams in understanding and remediating vulnerabilities, providing clear, practical mitigation guidance.
• Perform security reviews of code and architecture focused on identifying exploitation points (when applicable).
• Contribute to the evolution of offensive security processes and methodologies, aligned with frameworks such as OWASP, MITRE ATT&CK and PTES.
• Support the SOC and incident response team by providing offensive insights that contribute to more effective detections.
• Deliver technical workshops and awareness training focused on offensive security and vulnerability prevention.

Financial Risk Analyst II – Risk Model Validation

Information Security Analyst II – Penetration Testing