Senior Information Security Analyst – Offensive Security and Penetration Testing Focus

Sicredi

. Perform penetration testing (pentesting) on web and mobile applications, AI systems, infrastructure, and cloud environments .

Posted 10/23/2026full-timeRemote • BrazilSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in penetration testing methodologies and frameworks, including OWASP, PTES, and MITRE ATT&CK, while effectively communicating technical risks to non-technical stakeholders. Proficient in conducting vulnerability assessments and creating detailed technical reports with remediation strategies.

Highest-signal resume keywords

Penetration TestingVulnerability AssessmentInformation SecurityOffensive Security CertificationsWeb And Mobile Application Security

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Penetration TestingVulnerability AssessmentRisk AssessmentTechnical ReportingAdversary SimulationFuzzingReverse EngineeringMalware AnalysisAI-Based Security AnalysisOWASP Top 10

Soft Skills

CollaborationCommunicationResearch And Analysis

Tools & Technologies

Adversarial Exposure Validation PlatformsAutonomous Pentesting SolutionsOWASPPTESMITRE ATT&CK

Certifications & Qualifications

Offensive Security Certifications

Industry Keywords

Information SecurityWeb SecurityMobile Application SecurityCloud SecurityInfrastructure Security

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Perform penetration testing (pentesting) on web and mobile applications, AI systems, infrastructure, and cloud environments
Collaborate on adversary simulations
Identify vulnerabilities and assess their associated risk levels in existing products and services
Plan, execute, and document penetration tests
Conduct vulnerability assessments of web systems, APIs, networks, and infrastructure
Create technical reports with clear evidence and remediation recommendations
Support internal teams in understanding risks and revalidating implemented fixes
Use frameworks and methodologies such as OWASP, PTES, MITRE ATT&CK, ATLS, and others
Perform internal pentests and manage external vendors
Work with Adversarial Exposure Validation (AEV) platforms and autonomous pentesting solutions
Research and analyze vulnerabilities, including defense evasion, fuzzing, reverse engineering, and malware analysis
Use AI-based tools for security analysis
Translate technical risks for non-technical audiences

Requirements

What you’ll need

Bachelor’s degree in Information Security or a related field
Strong knowledge of Information Security
Offensive security certifications or equivalent knowledge
Practical knowledge of penetration testing methodologies, including OWASP Top 10, PTES, and MITRE ATT&CK
Solid experience in web and mobile application security
Intermediate English proficiency

Benefits

Comp & perks

14th and 15th fixed monthly salaries
Profit-sharing program, based on seniority
Health and dental plans with no copayments
Wellness programs through Wellhub (formerly Gympass), including nutrition, psychological support, workplace exercise, massage, a running group, and a local gym
Meal and food allowance, with flexible allocation percentages between the meal and food cards and no copayment
Extended maternity and paternity leave
Childcare or babysitting allowance for children up to 6 years and 11 months old
Support allowance for children with disabilities, with no age limit
Life insurance
Private pension plan with employer contributions of up to 8% of salary
Training platform – Sicredi Aprende, offering a variety of courses
40-hour workweek, using a time-bank system
Remote-work allowance, except for positions that are fully on-site