Security Analyst

• Perform Penetration Tests (Pentests) on applications (web/mobile), infrastructure and cloud environments;
• Execute Red Team and Purple Team exercises;
• Participate in adversary simulation exercises;
• Identify vulnerabilities and assess their risk level in existing products and services;
• Plan, execute and document penetration tests (pentests);
• Perform vulnerability analysis on web systems, APIs, networks and infrastructure;
• Produce technical reports with evidence and clear remediation recommendations;
• Support internal teams in understanding risks and revalidating applied fixes;
• Use frameworks and methodologies such as OWASP, PTES, MITRE ATT&CK, among others;
• Execute internal pentests and manage external vendors;
• Experience with AEV platforms (Adversarial Exposure Validation);
• Ability to simulate realistic attacks including reconnaissance, initial access, lateral movement, privilege escalation, persistence and data exfiltration, including familiarity with post-exploitation frameworks (C2);
• Defensive collaboration (purple teaming): ability to integrate Red Team efforts with the Blue Team, supporting the cyber defense team in validating detections and creating security monitoring rules;
• Research and vulnerability analysis skills, with knowledge related to defense evasion, fuzzing, reverse engineering and malware analysis;
• Knowledge of tools for assessing security in AI models, including prompt injection and data poisoning tests;
• Knowledge of integrating machine learning to predict attack paths in security testing and adversary simulation exercises.

Senior Information Security Analyst – Offensive Security, Penetration Testing

Cloud Security Analyst

Analista de Segurança de Aplicações – Senior

Analista de Segurança da Informação – Sênior

Information Security Analyst, Bilingual

Operations Intelligence Analyst