Senior Information Security Analyst (Red Team)

Description

Job Summary: Work in Information Security operations as part of the Red Team, performing penetration tests, addressing vulnerabilities, and supporting project security. Key Highlights: 1. Conducting penetration testing in the environment (websites, APIs, mobile applications, databases) 2. Addressing cloud-based vulnerabilities (AWS and OCI) 3. Supporting the Blue Team in validating/creating security rules Mais.Mobi is an urban mobility company dedicated to rethinking the transportation and technology sectors to anticipate the future that cities and people desire. The organization manages various products and electronic fare systems, such as Riocard Mais and Cartão Macaé. We deliver tailored solutions for the market, supporting operations in customer service, management, loyalty programs, and payment methods—transforming mobility with security, transparency, and continuous technical support. **Responsibilities and Duties** * Perform Information Security operations within the Red Team, conducting penetration tests in the environment (e.g., websites, APIs, mobile applications, databases, etc.); * Perform Information Security operations addressing cloud-based vulnerabilities (AWS and OCI); * Monitor business-area projects, identifying and recommending security requirements and assessing whether these requirements are being fulfilled; * Map security risks during system development and recommend controls to mitigate those risks; * Support the Blue Team in validation/creation rule testing (e.g., WAF, SIEM, etc.); * Participate in meetings and present identified vulnerabilities from penetration tests; * Deliver secure coding training to development teams. **Requirements and Qualifications** * Proficiency with security tools (Burp Suite, Firewalls, WAF, IDS, SIEM, Nessus, DLP, Web Gateway, etc.); * Knowledge of computer network and cloud infrastructure; * Familiarity with security and technology frameworks and regulations including ISO 27001, ISO 27701, NIST CSF, CIS Controls, MITRE ATT\&CK, OWASP; * Experience performing GAP Analysis using security frameworks. * Knowledge of information security risk management; * Understanding of vulnerability and threat handling in applications and infrastructure. * Analytical thinking, business acumen, strong interpersonal communication skills, and ability to handle highly complex tasks; * Postgraduate studies in information security are recommended; * Certifications such as ISO 27001, Security\+, CEH, or OSCP are desirable. **Mais.Mobi** is an urban mobility company dedicated to rethinking the transportation and technology sectors to anticipate the future that cities and people desire. We deliver tailored solutions for the market, supporting operations in customer service, management, loyalty programs, and payment methods—transforming mobility with security, transparency, and continuous technical support.