Mid-level Cyber Security Analyst - Pentester

At EBANX’s IT team you don’t just manage systems and infrastructure. You ensure that our technology, which connects millions of people to global companies, runs flawlessly every day. Here, every solution you create has a direct impact on the revolution of digital payments, making our work truly Out Of The Ordinary.

Responsibilities

Perform network, web, mobile application, wireless, and social engineering penetration tests to identify and validate security vulnerabilities; Support the planning, execution, and continuous improvement of the organization's external penetration testing program; Simulate real-world attacks against applications and infrastructure hosted on-premises and in cloud environments, with a focus on critical business functions; Conduct malware analysis and reverse engineering to identify Indicators of Compromise (IoCs) and support threat hunting and security assessments; Prepare clear and comprehensive technical reports, executive summaries, and security recommendations for stakeholders at all levels; Communicate security findings, risks, and remediation strategies to technical teams and executive leadership; Leverage attacker techniques, tools, and procedures (TTPs) to evaluate and improve the organization's security posture

Requirements

Strong understanding of TCP/IP, networking protocols, operating systems, systems administration, and enterprise network architectures; Solid knowledge of cloud security concepts, security protocols, encryption, authentication, authorization, and security controls; Experience with security incident analysis, threat analysis, and incident response; Hands-on experience performing web application penetration testing, including OWASP Top 10 vulnerabilities such as Injection, Cross-Site Scripting (XSS), authentication and session management flaws, input validation, and web services security; Knowledge of information security frameworks and standards, including ISO/IEC 27001, OWASP, NIST Cybersecurity Framework, and NIST Privacy Framework; Excellent written and verbal communication skills, with the ability to explain technical concepts to both technical and non-technical audiences

Nice to have

Industry-recognized security certifications such as OSCP, CEH, CompTIA Security+, GWAPT, GPEN, or equivalent; Cloud security certifications such as AWS Certified Security – Specialty, Microsoft Azure Security Engineer Associate, or similar; Experience with malware reverse engineering, threat intelligence, or purple team exercises; Knowledge of offensive security automation, scripting (Python, PowerShell, Bash), or security tooling development; Experience working in financial services, fintech, or highly regulated environments (PCI DSS, ISO 27001, SOC 2, etc.); Professional proficiency in English and Spanish

Benefits

Performance Bonus: Annual bonus program based on company results; Meal Allowance: Monthly allowance to support your meals; EBANX Education: Financial assistance for undergraduate, graduate, and MBA programs to support your professional growth; EBANX Skills: Dedicated budget for courses, certifications, and workshops to encourage continuous learning; Language Classes: Language classes to support your personal and professional development; Health & Well-being: Medical and dental plans with extensive coverage, including support for dependents and wellness programs; Flexible Work Culture: Semi-flexible hours, additional day off on your birthday, and year-end break to support work-life balance; Well-being Program: Access to activities and resources that promote physical and mental health