Security Analyst – Penetration Testing
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Analista de segurança conduzindo testes de intrusão e avaliações de vulnerabilidades para proteger clientes digitais da Stefanini Cyber. Atuando em ambientes web, mobile, cloud, AD e IoT/OT.
Responsibilities:
- Conduct controlled attack simulations and penetration tests across web, mobile, cloud, Active Directory, and IoT/OT environments
- Identify and validate vulnerabilities, demonstrating their impact safely and in a controlled manner
- Participate in social engineering campaigns, MITRE ATT&CK-based exercises, and Purple Teaming initiatives
- Prepare technical and executive reports, connecting identified risks to business impact
- Support clients in developing mitigation plans and follow up on recommendations
- Use methodologies and references such as PTES, OSSTMM, NIST, and OWASP
- Work with tools such as Burp Suite, Metasploit, and BloodHound
- Develop or adapt scripts in Python, PowerShell, or Bash
- Communicate technical findings to diverse audiences
- Document the scope, evidence, limitations, and results of tests
- Collaborate with security, infrastructure, and development teams to validate risks and recommendations
Requirements:
- Completed or ongoing higher education in Information Security, Information Technology, or a related field
- Practical knowledge of penetration testing and vulnerability assessment
- Strong verbal and written communication skills, organization, and the ability to work effectively as part of a team
- Familiarity with Windows and Linux operating systems, networks, and communication protocols
- Knowledge of at least one scripting language, such as Python, PowerShell, or Bash
- DESEC, CompTIA PenTest+, CEH, eJPT, or eWPT certifications are a plus but not required
- Experience with web, mobile, cloud, Active Directory, or IoT/OT environments is a plus
- Knowledge of MITRE ATT&CK, social engineering, Purple Teaming, or cloud security is a plus
- Participation in labs, CTFs, personal projects, or contributions to the security community is a plus
Benefits:
- Meal or food allowance
- Discounts on courses, universities, and language institutions
- Stefanini Academy — a platform offering free, up-to-date online courses with certificates
- Mentoring
- Benefits club offering discounts on consultations and medical tests
- Health insurance
- Dental insurance
- Benefits and discounts at leading establishments
- Travel club
- Pet care partnership
Similar Jobs
Compliance & Security Analyst
Compliance analyst leading CMMC 2.0 and NIST 800-171 readiness for Logicalis clients. Authoring SSPs, managing remediation, and validating audit evidence.
Information Security Compliance Analyst
Information Security Compliance Analyst strengthening Data Recognition Corporation’s security compliance program. Managing GovRAMP, NIST RMF, SOC 2 audits, risk remediation, and business continuity initiatives.
Security Analyst
Security Analyst managing vulnerability scanning and exposure programs for GuidePoint Security, a cybersecurity services provider. Advising customers and deploying vulnerability infrastructure across cloud and on-premise environments.
Senior Information Security Analyst
Analista sênior de segurança protegendo soluções digitais e serviços de TI da Hitss. Atuando com Microsoft Defender, firewalls, antivírus, proxy, SFTP e resposta a chamados.
Senior Security Analyst, MDR
Senior Security Analyst leading cloud, identity, endpoint, and SaaS investigations for Artemis's AI-driven defense platform. Shaping Apollo's managed detection and response service.
Security Analyst
Security Analyst protecting systems, data, and client information at Power Digital, an AI-native growth firm. Monitoring threats, managing vulnerabilities, and maintaining SOC 2 compliance.
Associate Security Analyst II
Security Analyst hunting threats across client environments for DirectDefense, a managed cybersecurity services provider. Monitoring SIEM/EDR systems and delivering actionable incident-response guidance.
Security Analyst I
Security Analyst I monitoring client environments, investigating threats, and supporting 24/7 incident response. Producing vulnerability reports and communicating findings to technical and executive audiences.
IT Security Analyst I – Evening Shift
IT Security Analyst monitoring security events and responding to incidents for VC3’s municipal and organizational IT clients. Investigating alerts, analyzing logs, and supporting threat hunting on an evening shift.
IT Security Analyst I
IT Security Analyst monitoring security events and responding to incidents for VC3, an IT services provider serving municipalities and organizations across the United States and Canada.
Cyber Security Analyst III – Digital Forensics, Incident Response
Cybersecurity analyst conducting digital forensics and incident response for the U.S. Department of Energy Hanford Site. Monitoring enterprise threats, investigating incidents, and supporting remediation.
Cybersecurity Analyst
Analista de Cyber Security protegendo soluções digitais da Click Cannabis para acesso responsável à cannabis medicinal. Condução de pentests, DevSecOps, segurança AWS e resposta a incidentes.
Principal Research Analyst – Information Security
Principal Research Analyst leading ISACA’s information security research, frameworks, and practitioner content. Representing the global technology association through thought leadership, events, and member guidance.
IT Security Analyst
IT Security Analyst supporting Signode’s SOC through threat detection, incident response, and malware analysis. Monitoring alerts, hunting threats, and improving security operations processes.
Associate Security Analyst
Security Analyst monitoring client environments, investigating threats, and tuning SIEM detections. DirectDefense delivers managed cybersecurity defense, vulnerability assessments, and compliance services.
Security Analyst
T1 Security Analyst investigating security incidents and logs for Playtech, a global gaming technology company. Supporting incident response and security infrastructure across 24/7 operations.
Analista de Seguridad de la Información – Semi Senior
Analista de Seguridad de la Información apoyando la operación de ciberseguridad de Stefanini. Monitoreando alertas, afinando reglas y analizando riesgos, vulnerabilidades y controles.
Information Security Compliance Analyst
Information security compliance analyst supporting ImageTrend’s healthcare and emergency-response software platforms. Coordinating audits, risk management, cloud compliance, and security controls across AWS and Azure.
Information Security Analyst
Information Security Analyst defending Satellite Office’s global brand portfolio from cyber threats. Hunting threats, responding to major incidents, and strengthening protection across 2,000+ IT assets.
Security Analyst – Third Shift
Security Analyst investigating alerts and incidents for nuHarbor’s managed cybersecurity services. Executing response actions and escalating high-severity findings for client protection.