Senior Information Security Engineer (Red Team)

Description

Job Summary: We are looking for a professional to conduct penetration tests and security assessments on systems and applications, identifying vulnerabilities and ensuring system robustness. Key Highlights: 1. A career that yields more at PagBank 2. Focus on penetration testing and application security 3. A team that collaborates closely and values diversity When you think about your career, what comes to mind? Purpose? Collaboration? Being the protagonist who makes a difference? At PagBank, we offer all this—and much more. We are seeking people who proudly wear our jersey—individuals eager to simplify people's financial lives and drive business growth! Interested in a career that yields more? **Check out this opportunity and \#VemProPags!** **Responsibilities and Duties** * Conduct penetration tests on systems and applications to identify security vulnerabilities. * Perform static and dynamic analyses on mobile applications for iOS and Android platforms. * Plan and execute attack strategies to test the robustness of application security systems. * Conduct manual and automated tests on APIs, web applications, and mobile applications to identify vulnerabilities and security flaws. * Prepare detailed reports highlighting findings, risks, and recommendations for mitigation. * Assess the effectiveness of existing security measures and identify weak points. * Identify, analyze, and document vulnerabilities discovered during testing. * Plan and execute attack simulations, replicating real-world attackers’ tactics, techniques, and procedures to evaluate organizational resilience. **Requirements and Qualifications** * Bachelor’s degree completed in Information Security, Computer Science, Information Systems, Mathematics, Statistics, or related fields. * Experience conducting penetration tests on web applications, APIs, and mobile devices. * Experience with dynamic instrumentation tools to intercept, analyze, and modify application behavior at runtime (e.g., Frida, Objection, or Xposed). * Experience with evasion techniques targeting RASP (Runtime Application Self\-Protection) mechanisms. * Experience identifying and exploiting security vulnerabilities in systems, networks, and applications using both manual techniques and automated tools. * Experience with Black Box, White Box, and Grey Box penetration testing. * Experience creating technical reports. * Knowledge of frameworks such as OWASP, MITRE, NIST, PCI, and MITRE ATT\&CK. * Knowledge of application vulnerabilities and classification methodologies. **Additional Information** To stand out in this role, it would be great if you also have: * Certifications in security such as OSCP, OSWE, CWEE, or similar. * Experience with programming and scripting languages such as Python, Java, JavaScript, among others. You might know us from our card machines or memorable commercials—but we’re so much more! Every day, we develop products and solutions inspired by our purpose: simplifying people’s and businesses’ financial lives. We work to transform how people manage money—opening new possibilities for them to achieve their dreams. **How do we do all this?** **With People** We are a team that plays together! Here, we value all forms of diversity—race/ethnicity, gender, age, origin, persons with disabilities, sexual orientation, family composition, and aesthetics. **With Technology** A disruptive and innovative spirit is in our DNA: we are part of UOL Group, a 100% Brazilian company, an internet pioneer since 1996, transforming people’s lives for over two decades. **With One Culture** We have a strong and unique culture capable of taking us beyond—enabling continued growth and long-term business sustainability. **We are one of the largest digital banks in the country and one of the most profitable fintechs in the segment.** **To experience all this, you’ll receive a comprehensive benefits package that truly makes a difference:** * Meal allowance and/or food voucher. * Health and dental insurance. * Life insurance. * Partnerships with TotalPass and ZenKlub. * Extended maternity and paternity leave. * Childcare allowance. * Discounts of up to 50% on postgraduate programs and MBAs offered by top institutions such as FIA, FAAP, and PUCRS. **And more:** * No dress code: wear whatever makes you feel comfortable. * \#TáDeParabéns: Birthday day off. * Baby Gift: gift for newborns. **Interested in a career that yields more?** Join our unbeatable team! **\#VemProPags.**