Mid-level Cyber Security Analyst - Pentester

About this role

EBANX is one of the most successful fintechs to emerge from Latin America — and today, we are building a truly global payments company. Our mission has remained constant from day one: to unlock access and enable companies and consumers to participate in the digital economy, no matter where they are.

What started as a bold vision has grown into a platform that connects some of the world’s largest digital businesses with customers across 21 of the fastest-growing markets. We operate where complexity exists — turning local challenges into global opportunities, and building the infrastructure that allows payments to move further, faster, and smarter.

We are a team of builders and problem-solvers. We think globally, act with curiosity, and believe diversity of thought is a competitive advantage.

As EBANX enters its next phase of hyper growth, we are looking for people who want to shape the future of payments, expand what’s possible, and help connect businesses and consumers across borders.

Let’s build what’s next — together.

At EBANX’s IT team you don’t just manage systems and infrastructure. You ensure that our technology, which connects millions of people to global companies, runs flawlessly every day. Here, every solution you create has a direct impact on the revolution of digital payments, making our work truly Out Of The Ordinary.

What your day-to-day will look like

• Perform network, web, mobile application, wireless, and social engineering penetration tests to identify and validate security vulnerabilities.

• Support the planning, execution, and continuous improvement of the organization's external penetration testing program.

• Simulate real-world attacks against applications and infrastructure hosted on-premises and in cloud environments, with a focus on critical business functions.

• Conduct malware analysis and reverse engineering to identify Indicators of Compromise (IoCs) and support threat hunting and security assessments.

• Prepare clear and comprehensive technical reports, executive summaries, and security recommendations for stakeholders at all levels.

• Communicate security findings, risks, and remediation strategies to technical teams and executive leadership.

• Leverage attacker techniques, tools, and procedures (TTPs) to evaluate and improve the organization's security posture.

What you need to shine in this role

• Strong understanding of TCP/IP, networking protocols, operating systems, systems administration, and enterprise network architectures.

• Solid knowledge of cloud security concepts, security protocols, encryption, authentication, authorization, and security controls.

• Experience with security incident analysis, threat analysis, and incident response.

• Hands-on experience performing web application penetration testing, including OWASP Top 10 vulnerabilities such as Injection, Cross-Site Scripting (XSS), authentication and session management flaws, input validation, and web services security.

• Knowledge of information security frameworks and standards, including ISO/IEC 27001, OWASP, NIST Cybersecurity Framework, and NIST Privacy Framework.

•