Mid-level Cyber Security Analyst - Pentester

EBANX is one of the most successful fintechs to emerge from Latin America — and today, we are building a truly global payments company. Our mission has remained constant from day one: to unlock access and enable companies and consumers to participate in the digital economy, no matter where they are. What started as a bold vision has grown into a platform that connects some of the world’s largest digital businesses with customers across 21 of the fastest-growing markets. We operate where complexity exists — turning local challenges into global opportunities, and building the infrastructure that allows payments to move further, faster, and smarter. We are a team of builders and problem-solvers. We think globally, act with curiosity, and believe diversity of thought is a competitive advantage. As EBANX enters its next phase of hyper growth, we are looking for people who want to shape the future of payments, expand what’s possible, and help connect businesses and consumers across borders. Let’s build what’s next — together. At EBANX’s IT team you don’t just manage systems and infrastructure. You ensure that our technology, which connects millions of people to global companies, runs flawlessly every day. Here, every solution you create has a direct impact on the revolution of digital payments, making our work truly Out Of The Ordinary . What your day-to-day will look like Perform network, web, mobile application, wireless, and social engineering penetration tests to identify and validate security vulnerabilities. Support the planning, execution, and continuous improvement of the organization's external penetration testing program. Simulate real-world attacks against applications and infrastructure hosted on-premises and in cloud environments, with a focus on critical business functions. Conduct malware analysis and reverse engineering to identify Indicators of Compromise (IoCs) and support threat hunting and security assessments. Prepare clear and comprehensive technical reports, executive summaries, and security recommendations for stakeholders at all levels. Communicate security findings, risks, and remediation strategies to technical teams and executive leadership. Leverage attacker techniques, tools, and procedures (TTPs) to evaluate and improve the organization's security posture. What you need to shine in this role Strong understanding of TCP/IP, networking protocols, operating systems, systems administration, and enterprise network architectures. Solid knowledge of cloud security concepts, security protocols, encryption, authentication, authorization, and security controls. Experience with security incident analysis, threat analysis, and incident response. Hands-on experience performing web application penetration testing, including OWASP Top 10 vulnerabilities such as Injection, Cross-Site Scripting (XSS), authentication and session management flaws, input validation, and web services security. Knowledge of information security frameworks and standards, including ISO/IEC 27001, OWASP, NIST Cybersecurity Framework, and NIST Privacy Framework. Excellent written and verbal communication skills, with the ability to explain technical concepts to both technical and non-technical audiences. Bonus points if you have Industry-recognized security certifications such as OSCP , CEH , CompTIA Security+ , GWAPT , GPEN , or equivalent. Cloud security certifications such as AWS Certified Security – Specialty , Microsoft Azure Security Engineer Associate , or similar. Experience with malware reverse engineering, threat intelligence, or purple team exercises. Knowledge of offensive security automation, scripting (Python, PowerShell, Bash), or security tooling development. Experience working in financial services, fintech, or highly regulated environments (PCI DSS, ISO 27001, SOC 2, etc.). Professional proficiency in English and Spanish. EBANX offers: Performance Bonus: Annual bonus program based on company results. Meal Allowance: Monthly a…