Senior Information Security Analyst, Pentester

Vivovita

Pentester sênior realizando avaliações ofensivas em aplicações web, APIs e infraestrutura da Vivo Vita. Identificando vulnerabilidades, validando correções e produzindo relatórios técnicos e executivos.

Posted 8/17/2026full-timeBarueri • 🇧🇷 BrazilSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in advanced penetration testing across web applications, APIs, and infrastructure, with a strong foundation in security frameworks and protocols. Capable of producing detailed technical reports and evolving offensive security practices.

Highest-signal resume keywords

Penetration TestingAPI SecurityActive Directory AssessmentTechnical ReportingNetwork Protocols

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Penetration TestingAPI SecurityActive Directory AssessmentNetwork ProtocolsAuthorization Flaws IdentificationOWASP FrameworkPTES FrameworkTCP/IPJWTOAuth2

Soft Skills

Clear CommunicationAnalytical Thinking

Tools & Technologies

RESTSOAPGraphQLGRPC

Industry Keywords

Information SecurityComputer ScienceInformation TechnologyExternal IntegrationsSecurity Best Practices

Tech Stack

Tools & technologies

DNSGraphQLGRPCSOAPTCP/IP

About the role

Key responsibilities & impact

Perform advanced penetration tests on web applications, APIs, and internal/external environments
Conduct assessments following frameworks such as OWASP, PTES, and community best practices
Perform in-depth Active Directory assessments, including attack surface mapping, identification of structural weaknesses, and evaluation of real-world risks
Review and test the external perimeter, identifying inadvertent exposure and potential exploitation paths
Produce technical reports with clear evidence and concise explanations, as well as executive summaries for leadership
Validate remediations and retest critical environments
Help evolve internal processes, tools, and offensive security practices

Requirements

What you’ll need

Bachelor's degree in Information Security, Computer Science, Computer Engineering, Information Systems, Information Technology, or a related field
Solid experience in penetration testing: web, API, and infrastructure
Strong knowledge of networks and protocols: TCP/IP, DNS, authentication mechanisms, and session management
Experience in API security, including REST, SOAP, GraphQL, and gRPC
Understanding of endpoints, HTTP methods, and versioning
Knowledge of JWT, OAuth2, authorization flows, and scopes
Identification of authorization flaws (IDOR / BOLA - Broken Object Level Authorization)
Assessment of external integrations and dependencies

Benefits

Comp & perks

Meal allowance (Pluxee Benefits)
Medical and dental insurance (extendable to dependents)
Childcare assistance
Life insurance
Private pension plan
Birthday day off (one day off during your birthday month)
Profit-sharing
Exclusive employee offer from Vivo (50% discount on the bill in your name), with special discounts on landline, broadband, and TV
Discounts on universities, courses, and continuing education
Partnerships with Sesc and Senai
Well-being programs