Information Security Specialist

Description

Job Summary: We are seeking an experienced Information Security Specialist with expertise in intrusion testing and advanced penetration testing to protect the technological environment and ensure compliance with BACEN regulations. Key Highlights: 1. Act to protect the technological environment and strengthen the security posture. 2. Conduct advanced penetration tests and lead Red Team operations. 3. Ensure compliance with BACEN resolutions. We are looking for an **Information Security Specialist** to protect our technological environment, strengthen our offensive and defensive security posture, and ensure compliance with BACEN regulations (CMN Resolution No. 5.274 and 538/2025). We seek an experienced, analytical professional with strong expertise in intrusion testing and advanced penetration testing. **Responsibilities:** * Perform penetration tests on web applications, mobile apps, APIs, networks, and infrastructure. * Lead Red Team operations, social engineering tests, and attack simulations. * Map attack surfaces and propose risk reduction strategies. * Automate offensive processes and develop custom scripts. * Prepare technical and executive reports with recommendations and risk analysis. * Support AppSec, DevSecOps, and Infrastructure teams in remediating vulnerabilities. * Develop offensive playbooks for recurring tests. * Monitor emerging attack techniques and offensive trends. * Produce executive reports for the CISO and security committees. * Ensure adherence to BACEN guidelines and resolutions applicable to the IT environment. **Education:** * Bachelor’s degree in Information Technology, Information Security, or related fields. **Essential Requirements:** * Minimum of 5 years of experience in Information Security. * Experience in large enterprises (preferred). * Solid experience in penetration testing: web, mobile, APIs, infrastructure, and networks. * Advanced knowledge of exploitation, post-exploitation, pivoting, and lateral movement. * Ability to lead Red Team operations and resilience testing. * Experience preparing technical and executive reports. * Strong communication skills and ability to translate technical findings for business areas. **Familiarity with methodologies and frameworks:** OWASP, PTES, MITRE ATT&CK, NIST. **Proficiency in offensive tools:** Burp Suite, ZAP, Metasploit, Nmap, Nessus, Cobalt Strike, Kali Linux. **Desirable Certifications:** * OSCP, OSEP, CRTP, CEH, GPEN. * CEH, ECSA. * GSEC / GCIH / GCIA (GIAC). * CISSP. **Additional Differentiators:** * Experience in the financial sector. * Knowledge of PCI DSS. * Techniques for evading and bypassing advanced controls. Minimum Education Level: Bachelor’s Degree * Meal Allowance * Food Allowance * Transportation Allowance * Educational Incentive * Dental Assistance * Medical Assistance * Daycare Assistance