Apply

Ready to go for it?

AI Apply speeds things up—apply directly if you prefer.

FREE ACCESS
5,000–10,000 jobs/day
Scoutfield Logo

See all jobs on Scoutfield

Search thousands of fresh jobs every day.

Discover
  • Fresh listings
  • Fast filters
  • No subscription required
Create a free account and start exploring right away.
Protiviti

Senior Penetration Tester

Protiviti

. Plan and execute external and internal penetration tests across web applications, APIs, and mobile applications using black-box, gray-box, and white-box methodologies .

Posted 10/16/2026full-timeSão Paulo • BrazilSeniorWebsite

Core Competencies

Role fit
Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in penetration testing methodologies, including black-box, gray-box, and white-box techniques, while effectively communicating findings and remediation strategies to technical teams and leadership. Proficient in using various tools for vulnerability assessment and has a strong foundation in offensive security practices.

Highest-signal resume keywords
Penetration TestingVulnerability AssessmentOWASP MethodologiesBurp SuiteActive Directory

ATS Keywords

Tailor your resume
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills
Penetration TestingVulnerability AssessmentWeb Application TestingAPI TestingMobile Application TestingPythonBashPowerShellSecure Code ReviewCloud Security
Soft Skills
Clear CommunicationProactivityTechnical CuriosityTime ManagementProject Management
Tools & Technologies
Burp SuiteNmapMetasploitBloodHoundImpacketFrida
Certifications & Qualifications
OSCPOSWEOSEPCRTOEWPTXEMAPTDCPTGPENCEH
Industry Keywords
Offensive SecurityCVSSOWASP Top 10OWASP API Security Top 10OWASP MASVSMASTGCTFsPublicationsCVEsDesktop Application Penetration Testing

Tech Stack

Tools & technologies
AndroidiOSPython

About the role

Key responsibilities & impact
  • Plan and execute external and internal penetration tests across web applications, APIs, and mobile applications using black-box, gray-box, and white-box methodologies
  • Conduct reconnaissance, enumeration, exploitation, post-exploitation, privilege escalation, and lateral movement
  • Identify and exploit vulnerabilities using manual techniques and automated tools
  • Assess the real-world impact of vulnerabilities and classify risks, including using CVSS
  • Prepare technical and executive reports with evidence, proof-of-concept demonstrations, and prioritized recommendations
  • Present findings to clients’ technical teams and leadership, support remediation, and conduct retesting
  • Support scoping and effort estimation for new projects
  • Mentor less experienced professionals and contribute to internal methodologies, tools, and playbooks
  • Provide end-to-end technical leadership for penetration tests for clients across industries and of varying sizes
  • Make occasional client visits, with availability to travel

Requirements

What you’ll need
  • Bachelor’s degree in Computer Science, Information Systems, Engineering, or a related field
  • Solid, demonstrable experience in offensive security and penetration testing projects
  • Hands-on experience conducting external and internal infrastructure penetration tests, including Active Directory environments
  • Hands-on experience conducting web application and API penetration tests, including OWASP Top 10 and OWASP API Security Top 10
  • Hands-on experience conducting Android and/or iOS mobile penetration tests, including OWASP MASVS/MASTG
  • Proficiency in methodologies such as OWASP, PTES, and OSSTMM
  • Proficiency with Burp Suite, Nmap, Metasploit, BloodHound, Impacket, Frida, and other tools
  • Ability to propose clear, feasible, and prioritized remediation recommendations
  • Advanced English proficiency, including reading, writing, and speaking
  • Availability to work on-site in São Paulo, SP, or Rio de Janeiro, RJ, and to travel as required
  • Certifications such as OSCP, OSWE, OSEP, CRTO, eWPTX, eMAPT, DCPT, GPEN, or CEH are a plus
  • Proficiency in Python, Bash, or PowerShell for automation and exploit adaptation is a plus
  • Experience with secure code review, cloud security, bug bounty programs, CTFs, publications, CVEs, reverse engineering, and desktop application penetration testing is a plus
  • Proactivity, technical curiosity, clear communication, ability to manage multiple projects, and strong time-management skills

Benefits

Comp & perks
  • Health insurance through SulAmérica
  • TotalPass with access to fitness and leisure activities
  • Physical and mental health programs through Eleva
  • iFood Benefícios card with flexible options for meals, groceries, home office expenses, and more
  • Transportation allowance
  • Reimbursement for ride-hailing services, company shuttle transportation, or parking if you do not choose the transportation allowance
  • Profit-sharing bonus tied to the achievement of targets
  • Bonuses for work anniversaries, marriage, or the birth of a child
  • Birthday month day off
  • Annual allowance for books, courses, or events
  • Support for postgraduate studies, undergraduate education, and language courses
  • Life insurance for you and your beneficiaries
  • Hybrid work model, with activities primarily performed remotely and occasional client visits