Ethical Hacker – Penetration Tester
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Pentester conduzindo avaliações ofensivas em infraestrutura, aplicações, redes Wi-Fi e soluções de IA. Grupo Trade Technology oferece tecnologia, segurança e transformação digital.
Responsibilities:
- Plan and execute penetration tests in external environments exposed to the internet
- Conduct security assessments in internal environments, including lateral movement and privilege escalation
- Perform penetration tests on web applications and APIs
- Assess authentication, authorization, session management, and business logic controls
- Conduct authorized testing of corporate Wi-Fi networks
- Plan and conduct social engineering campaigns for awareness and risk measurement
- Assess applications and solutions based on Generative AI and LLMs, identifying security risks and data exposure
- Support the definition of technical scope and effort estimates for new projects
- Produce technical and executive reports with evidence, risk ratings, and recommendations
- Present findings to technical and executive audiences
- Work in compliance with legal and ethical requirements and each project's rules of engagement
Requirements:
- Proven experience in penetration testing and vulnerability assessments
- Knowledge of penetration testing methodologies and frameworks for infrastructure, web applications, and APIs
- Strong knowledge of TCP/IP networks, network protocols and services, Active Directory, Windows and Linux systems, authentication and authorization, and security controls
- Knowledge of web application and API security
- Knowledge of wireless networks and security mechanisms
- Knowledge of risks related to Generative AI and LLMs
- Experience with offensive security tools and script-based automation
- Excellent technical report-writing skills
- Ability to present findings clearly to different audiences
- Strong organizational skills to manage multiple projects simultaneously
- Completed higher education or a technical degree in Information Security, Computer Networks, Information Systems, Computer Science, or a related field
- Certifications in Offensive Security, Application Security, Network Security, or Cloud Security are a plus
- Experience with secure development and code review is a plus
- Experience with AWS, Azure, or GCP is a plus
- Knowledge of containers and security automation is a plus
- Experience with assessments involving Generative AI, RAG, AI agents, and model APIs is a plus
- Intermediate or advanced English proficiency for communication is a plus
Benefits:
- Training and professional development support through courses, events, certifications, and learning paths
- Flash Card with flexible monthly credits for food and meal benefits
- Corporate health insurance after permanent employment
- Dental insurance with no monthly premium after permanent employment
- Career and professional development plan
- Ongoing support, goal setting, periodic feedback, and professional growth opportunities
- Galactic Credits for access to the R2D2 refrigerator stocked with beverages
- Company-paid life insurance
- Semiannual performance bonus program based on performance and key indicators, after permanent employment
- Qulture.Rocks platform for feedback, goal and OKR management, individual development plans, recognition, priorities, and professional progress tracking
Similar Jobs
Staff Mobile Security Engineer
Staff Mobile Security Engineer securing MrBeast’s large-scale mobile media, gaming, and fintech experiences. Owning device integrity, fraud defense, and security engineering team growth.
Security Engineer
Security Engineer investigating high-impact incidents and building SIEM-based detections for Expleo, a global engineering and technology services provider. Remote role for candidates living in Portugal.
Information Security Officer
Information Security Officer maintaining Finom’s certified ISMS, risk framework, audits, and supplier assessments. Supporting compliance for the company’s European B2B financial platform.
Information Security Officer
Information Security Officer maintaining ISMS, audits, and ICT risk management for Finom’s European financial platform. Improving compliance through supplier assessments, reporting, automation, and regulatory monitoring.
Information Security Officer
Information Security Officer managing ISMS, audits, vendor assessments and ICT risk for Finom’s European financial platform. Reporting to the CISO and improving compliance through automation.
Application Security Architect
Application Security Architect securing NinjaOne’s unified IT operations platform. Leading threat modeling, secure architecture reviews, and security initiatives across software, cloud, infrastructure, and identity.
Security Consultant II
Security Consultant II leading Prolexic DDoS integration, testing, and project delivery. Advising Akamai customers on web security, mitigation, and long-term security strategy.
Senior Security Engineer, Enterprise Security
Senior Security Engineer engineering controls and automation for Databricks, the Data and AI company. Securing enterprise applications, identity, cloud, SaaS, and data systems.
Senior Security Researcher – Red Team
Senior Security Researcher conducting red-team operations against GenAI, deepfake, cloud, and voice-security systems. Strengthening Pindrop’s cybersecurity platform through offensive research and attack automation.
Security Advisor II, Falcon Complete
Security Advisor assessing Falcon environments and improving customer security posture. Guiding CrowdStrike Falcon Complete customers through remediation, reporting, and technical issue resolution.
Security Advisor II, Falcon Complete
Security Advisor guiding CrowdStrike Falcon Complete customers toward stronger security posture. Assessing Falcon environments, recommending remediation, and resolving customer issues.
Regional Sales Director – Identity Security
Regional Sales Director leading Cyera’s Pacific Northwest sales team. Building territory growth and exceeding quotas for Cyera’s AI and data security platform.
Information Security, Compliance & Internal Controls Manager – ISO 27001
Information Security Manager preparing Cloudiax’s cloud SAP services for ISO 27001, NIS-2, and IKS compliance. Managing audits, security documentation, and internal control processes remotely worldwide.
Senior Manager, Application and Pipeline Security
Senior Manager leading Nielsen’s AI-driven application and cloud security for media measurement platforms. Building automated DevSecOps guardrails, vulnerability remediation, and secure AWS development workflows.
Staff Software Engineer, Security Factory – Static Analysis
Staff software engineer directing GitLab's AI-assisted static analysis engine and SAST capabilities. Defining program-analysis architecture, trustworthy agent tooling, and security detection quality.
Cybersecurity Director
Cybersecurity Director leading Cummins’ global application, cloud, vulnerability, and penetration-testing security strategy. Translating technical findings into enterprise risk decisions and enabling secure Frontier AI adoption.
Azure Cloud & Security Engineer
Azure Cloud & Security Engineer building secure, scalable Azure infrastructure for CI&T’s enterprise AI transformation solutions. Managing Bicep IaC, Azure DevOps pipelines, Container Apps, KEDA autoscaling, and cloud security.
Senior IT Systems Specialist – IAM & Security – F5 BIG-IP, Keycloak, Nevis
Senior IAM & Security specialist operating F5 BIG-IP, Keycloak and Nevis solutions for a Swiss recruiting agency client. Securing authentication and access to business-critical applications, APIs and portals.
Information Security Compliance Intern
Information Security Compliance Intern supporting audit partner operations at Sprinto, an autonomous trust platform. Building AI-assisted workflows for compliance and evidence mapping.
Cybersecurity Intern – Application Security
Cybersecurity intern supporting application security projects at GuidePoint Security, a cybersecurity solutions provider. Building skills through technical development, security response, training, and expert mentorship.