Ethical Hacker – Penetration Tester

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Develop and implement penetration tests in external environments that are accessible via the internet.

• Execute security evaluations in internal environments, focusing on lateral movement and privilege escalation.

• Conduct penetration assessments on web applications and APIs.

• Evaluate authentication, authorization, session management, and business logic controls.

• Carry out authorized testing on corporate Wi-Fi networks.

• Organize and implement social engineering campaigns aimed at raising awareness and measuring risks.

• Analyze applications and solutions related to Generative AI and LLMs, identifying potential security vulnerabilities and data exposure.

• Assist in defining the technical scope and estimating efforts for new initiatives.

• Generate technical and executive reports that include evidence, risk assessments, and recommendations.

• Convey findings to both technical and executive audiences.

• Adhere to legal and ethical standards as well as the specific engagement rules of each project.

⛳️ Requirements

• Demonstrated experience in penetration testing and vulnerability assessments.

• Familiarity with penetration testing methodologies and frameworks applicable to infrastructure, web applications, and APIs.

• In-depth understanding of TCP/IP networks, network protocols and services, Active Directory, Windows and Linux systems, as well as security controls related to authentication and authorization.

• Knowledge of security measures pertaining to web applications and APIs.

• Understanding of wireless networks and their associated security mechanisms.

• Awareness of risks associated with Generative AI and LLMs.

• Proficient in using offensive security tools and automating tasks through scripting.

• Strong technical writing capabilities for report generation.

• Ability to effectively present findings to diverse audiences.

• Excellent organizational skills to handle multiple projects concurrently.

• Completed higher education or technical degree in Information Security, Computer Networks, Information Systems, Computer Science, or a related field.

• Certifications in Offensive Security, Application Security, Network Security, or Cloud Security are advantageous.

• Experience with secure development practices and code reviews is a plus.

• Familiarity with AWS, Azure, or GCP is an added advantage.

• Knowledge of containers and security automation is beneficial.

• Experience with assessments involving Generative AI, RAG, AI agents, and model APIs is a plus.

• Intermediate or advanced proficiency in English for effective communication is a plus.

🏝️ Benefits

• Support for training and professional development through courses, events, certifications, and tailored learning paths.

• Flash Card providing flexible monthly credits for food and meal benefits.

• Corporate health insurance available after permanent employment.

• Dental insurance with no monthly premium following permanent employment.

• A structured plan for career and professional development.

• Continuous support, goal-setting, periodic feedback, and opportunities for professional growth.

• Galactic Credits for access to the R2D2 refrigerator filled with beverages.

• Company-paid life insurance coverage.

• Semiannual performance bonus program tied to performance and key indicators, post-permanent employment.

• Access to the Qulture.Rocks platform for feedback, goal and OKR management, individual development plans, recognition, priorities, and tracking of professional progress.