Senior Information Security Analyst (Red Team)

Description

Job Summary: Join the SI operations team as a Red Team member, conducting penetration tests, managing cloud vulnerabilities, and supporting project security at Mais.Mobi. Key Highlights: 1. Red Team operations with focus on system and infrastructure penetration testing 2. Vulnerability management in Cloud environments (AWS and OCI) 3. Project oversight and security requirement recommendations Mais.Mobi is an urban mobility company committed to rethinking transportation and technology sectors to anticipate the future desired by cities and people. The organization manages various products and electronic fare systems, including Riocard Mais and Cartão Macaé. We deliver tailored solutions for the market, supporting operations in customer service, management, loyalty programs, and payment methods—transforming mobility with security, transparency, and continuous technical support. **Responsibilities and Duties** * Conduct SI operations within the Red Team, performing penetration tests across environments (e.g., websites, APIs, mobile applications, databases, etc.); * Conduct SI operations for vulnerability remediation in Cloud environments (AWS and OCI); * Monitor business-area projects, identifying and recommending security requirements, and evaluating whether those requirements are being fulfilled; * Map security risks during system development and recommend controls to mitigate those risks; * Support the Blue Team in validation testing and rule creation (e.g., WAF, SIEM, etc.); * Participate in meetings and present identified vulnerabilities from penetration tests; * Deliver secure coding training to development teams. **Requirements and Qualifications** * Proficiency with security tools (Burp Suite, Firewall, WAF, IDS, SIEM, Nessus, DLP, Web Gateway, etc.); * Knowledge of computer network and cloud infrastructure; * Familiarity with security and technology frameworks and regulations, including ISO 27001, ISO 27701, NIST CSF, CIS Controls, MITRE ATT\&CK, OWASP; * Experience conducting GAP Analysis using security frameworks. * Knowledge of information security risk management; * Understanding of vulnerability and threat handling in applications and infrastructure. * Analytical thinking, business acumen, strong interpersonal communication skills, and ability to handle highly complex tasks; * Postgraduate degree in information security is recommended; * Certifications such as ISO 27001, Security\+, CEH, or OSCP are desirable. **Mais.Mobi** is an urban mobility company committed to rethinking transportation and technology sectors to anticipate the future desired by cities and people. We deliver tailored solutions for the market, supporting operations in customer service, management, loyalty programs, and payment methods—transforming mobility with security, transparency, and continuous technical support.