Mid-Level Analyst, Offensive Security

RecargaPay

. Protect RecargaPay’s applications and financial products in partnership with engineering squads.

Posted 11/12/2026full-timeRemote • BrazilMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Application Security, including vulnerability management, penetration testing, and secure development practices. Proficient in utilizing automation and AI tools to enhance security processes and deliver effective solutions in a regulated financial environment.

Highest-signal resume keywords

Application SecurityPenetration TestingVulnerability ManagementSAST ToolsOWASP Top 10

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Application Penetration TestingVulnerability RemediationSecurity Code ReviewScripting in PythonReading Code in JavaReading Code in GoReading Code in KotlinReading Code in Node.jsWeb Application SecurityAPI Security

Soft Skills

Effective CommunicationTechnical CuriosityCollaborationSound Risk JudgmentEthics

Tools & Technologies

Burp SuiteSAST ToolsSCA ToolsDAST ToolsN8nAI Agents

Certifications & Qualifications

BSCPEWPTOSCP

Industry Keywords

PCI DSSLGPDBACENFinancial EnvironmentSecurity Automation

Tech Stack

Tools & technologies

AndroidiOSJavaJavaScriptKotlinNode.jsPythonGo

About the role

Key responsibilities & impact

Protect RecargaPay’s applications and financial products in partnership with engineering squads.
Support the team’s Application Security function, tracking vulnerabilities from triage through remediation.
Classify and prioritize vulnerabilities, guide squads, and validate fixes through retesting.
Triage SAST, SCA, and automated code review findings, separating false positives and escalating genuine vulnerabilities with appropriate context.
Support threat modeling and feature design reviews.
Conduct security code reviews of pull requests.
Perform web application, API, and mobile application penetration tests within defined scopes, providing reproducible evidence and clear impact assessments.
Support the triage of external findings, such as bug bounty reports and consultancy penetration tests, by reproducing and validating vulnerabilities.
Guide Security Champions on remediation and secure development best practices.
Build and maintain automations and AI agents to scale the team’s work.
Develop deep expertise in one of the following areas: Adversarial Security, AI Security, or Security Automation.
Deliver the quarterly roadmap for the selected area of specialization.
Work on an AI-first team, using automation and AI agents daily, with mentorship from a senior team member.

Requirements

What you’ll need

Experience in Application Security or application penetration testing, with solid knowledge of the OWASP Top 10 and OWASP API Security Top 10.
Experience working with development teams to track vulnerability remediation.
Ability to read code in at least one backend language: Java, Kotlin, Go, Python, or Node.js.
Experience with SAST, SCA, or DAST tools and with Burp Suite or a similar solution.
Scripting experience in Python or Go.
Technical English proficiency for reading documentation, advisories, and research.
Degree in technology or a related field, or equivalent experience.
Preferred: Web and API penetration testing focused on business logic and authorization, or Android and iOS mobile penetration testing, including Frida and Objection.
Preferred: Experience with LLM, agent, and MCP security, including prompt injection, tool abuse, and authorization.
Preferred: Experience integrating security into CI/CD pipelines and building automations with n8n or AI agents.
Preferred: Experience in a regulated financial environment, including PCI DSS, Brazil’s LGPD, and BACEN requirements.
Preferred: Certifications such as BSCP, eWPT, OSCP, or equivalent.
Ownership of your scope, technical curiosity, effective communication with engineering, sound risk judgment, collaboration, an AI-first mindset, ethics, and discretion when using privileged access and handling sensitive data.

Benefits

Comp & perks

Competitive, market-aligned salary.
Remote work — wherever you are, you’re part of the team!
Home office allowance deposited monthly through the RecargaPay app.
Health and dental insurance with no copay.
Life insurance.
Flexible meal allowance via Flash.
TotalPass to support your health and well-being.
Diversity and inclusion at RecargaPay.
Potential use of your data for other opportunities within the RecargaPay group, subject to your authorization and applicable LGPD requirements.