Security Analyst – Penetration Testing

Stefanini Cyber

. Conduct controlled attack simulations and penetration tests across web, mobile, cloud, Active Directory, and IoT/OT environments .

Posted 10/8/2026full-timeRemote • BrazilMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in conducting penetration tests and vulnerability assessments across various environments, utilizing methodologies such as PTES and OWASP. Proficient in scripting with Python, PowerShell, or Bash, and effectively communicates technical findings to diverse audiences.

Highest-signal resume keywords

Penetration TestingVulnerability AssessmentPython ScriptingBurp SuiteMITRE ATT&CK

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Penetration TestingVulnerability AssessmentScriptingSocial EngineeringCloud SecurityActive DirectoryIoT/OT EnvironmentsTechnical ReportingRisk MitigationNetwork Protocols

Soft Skills

Strong Communication SkillsTeam CollaborationOrganization

Tools & Technologies

Burp SuiteMetasploitBloodHound

Certifications & Qualifications

CompTIA PenTest+CEHEJPTEWPT

Industry Keywords

PTESOSSTMMNISTOWASPPurple TeamingControlled Attack SimulationsTechnical FindingsBusiness Impact

Tech Stack

Tools & technologies

CloudIoTLinuxPython

About the role

Key responsibilities & impact

Conduct controlled attack simulations and penetration tests across web, mobile, cloud, Active Directory, and IoT/OT environments
Identify and validate vulnerabilities, demonstrating their impact safely and in a controlled manner
Participate in social engineering campaigns, MITRE ATT&CK-based exercises, and Purple Teaming initiatives
Prepare technical and executive reports, connecting identified risks to business impact
Support clients in developing mitigation plans and follow up on recommendations
Use methodologies and references such as PTES, OSSTMM, NIST, and OWASP
Work with tools such as Burp Suite, Metasploit, and BloodHound
Develop or adapt scripts in Python, PowerShell, or Bash
Communicate technical findings to diverse audiences
Document the scope, evidence, limitations, and results of tests
Collaborate with security, infrastructure, and development teams to validate risks and recommendations

Requirements

What you’ll need

Completed or ongoing higher education in Information Security, Information Technology, or a related field
Practical knowledge of penetration testing and vulnerability assessment
Strong verbal and written communication skills, organization, and the ability to work effectively as part of a team
Familiarity with Windows and Linux operating systems, networks, and communication protocols
Knowledge of at least one scripting language, such as Python, PowerShell, or Bash
DESEC, CompTIA PenTest+, CEH, eJPT, or eWPT certifications are a plus but not required
Experience with web, mobile, cloud, Active Directory, or IoT/OT environments is a plus
Knowledge of MITRE ATT&CK, social engineering, Purple Teaming, or cloud security is a plus
Participation in labs, CTFs, personal projects, or contributions to the security community is a plus

Benefits

Comp & perks

Meal or food allowance
Discounts on courses, universities, and language institutions
Stefanini Academy — a platform offering free, up-to-date online courses with certificates
Mentoring
Benefits club offering discounts on consultations and medical tests
Health insurance
Dental insurance
Benefits and discounts at leading establishments
Travel club
Pet care partnership