Penetration Tester conducting internal security assessments for SaaS platform. Collaborating with engineering teams to identify and document vulnerabilities while driving remediation efforts.
Responsibilities
Conduct in-depth penetration tests on web applications, APIs, microservices , and internal SaaS components.
Perform manual vulnerability discovery and exploitation following OWASP methodologies.
Simulate adversarial attack scenarios and participate in RED Team exercises.
Conduct cloud-focused penetration tests and configuration reviews (AWS, OCI and Azure).
Test LLM/AI features for prompt injection, jailbreaking, data leakage, model manipulation, and other emerging threats.
Develop custom proof-of-concept exploits where applicable.
Work closely with engineering and product teams to provide clear remediation guidance.
Create clear, detailed technical reports with reproduction steps and exploit evidence.
Present findings to technical and leadership teams.
Contribute to threat models and risk assessments.
Requirements
3+ years of hands-on experience in cybersecurity , with a focus on penetration testing.
Strong understanding of OWASP Top 10 and practical experience exploiting them in real-world applications.
Experience testing REST and GraphQL APIs.
Solid understanding of web technologies (HTML, JavaScript, SQL, authentication mechanisms, etc.).
Proven experience performing manual exploitation (not just tool-based scanning).
Experience testing cloud-hosted applications and infrastructure (AWS, OCI and Azure).
Knowledge of modern authentication (OAuth, JWT, SSO, SAML).
AI/LLM Security (Preferred, Not Mandatory)
Experience testing AI/LLM-powered features.
Knowledge of prompt injection, jailbreaks, RAG attacks, model extraction, data leakage vectors.
Pricing Analyst ensuring strategic price positioning in fuel distribution at Ipiranga. Collaborating with commercial teams for market insights and pricing strategy improvements.
Customer service analyst at Althaia, engaging in consumer support and pharmacovigilance. Ensuring compliance with regulations while promoting health and well - being.
Real Estate Rotational Analyst at Nuveen gaining hands on experience across the business in various sectors of Real Estate. Contribute to investment production and product development activities while collaborating with senior leadership.
Relationship Models Analyst at BBVA contributing to strategic KPI executions and communications. Supporting strategic goals and helping teams understand relationship models' targets.
Analyst focused on corporate goal management within Dasa, the largest integrated health network in Brazil. Responsible for governance, control, and evolution of corporate goal processes.
Statistical Modeling Analyst focusing on Risk Modeling at Central Ailos cooperative. Analyzing data and developing predictive models for credit risk management.
Analista de Patrocínio Jr supporting B2B corporate sponsorship strategies within New Business Development at Amcham RS. Enhancing partnerships and revenue generation in Brazil.
Analista Telecom Senior managing voice services and configurations in telecommunications at Alares. Ensuring high availability and performance within voice networks in São Paulo.
Implementation Analyst leading client implementations for financial institutions at a global fintech leader. Involves training, consulting, and project management for various online banking products.
Lead the Credit Risk Strategy and Analytics function at Navy Federal Credit Union. Drive risk mitigation strategies and manage complex projects with autonomy.