Analista de Segurança da Informação Sênior | Pentester
XP Inc.São Paulo, Brazil
Posted November 10, 2025
Full Time
About the Company
XP Inc. is one of the largest independent financial institutions in Brazil, owner of brands XP, Rico, Clear, XP Education, InfoMoney, among others.
Job Description
We are seeking a Senior Information Security Analyst | Penetration Tester to join our Application Security team at XP Inc. The successful candidate will have advanced knowledge in planning and executing penetration tests using various frameworks and technologies, as well as experience in web, mobile, and API intrusion testing.
Requirements
- Knowledge and experience with planning and executing penetration tests using frameworks MITRE ATT&CK, Cyber Kill Chain, and Unified Kill Chain
- Advanced knowledge in Web Application, Mobile, API/WebService, and Container Intrusion Testing
- Intermediate knowledge in Cloud and experience or familiarity with intrusion testing in AWS, Azure, and/or GCP cloud environments
- Intermediate knowledge in DevSecOps
- Experience and/or familiarity with using SAST, DAST, frameworks such as OpenSAMM, BSIMM, and Microsoft SDL, system design, and secure architecture
- Good communication to interact with developers and technical areas
- Organization to manage multiple tests and demands simultaneously
- Proactivity to seek solutions and learn new technologies
- Attention to details in vulnerability analysis and alerts
- Ability to understand business flows, user journeys, integrations, and access profiles
Benefits
- Health and wellness
- Financial life
