SONDA
Agibank
Mid-Level Cyber Security Analyst (Architecture Security) - Campinas/SP
About Us
We are proudly Brazilian and popular, always digital and in-person whenever the client desires. We innovate to provide access to financial services and offer an experience that encourages people to overcome today's challenges. Our reason for existence is clear: to fight for a banking experience that welcomes and encourages all Brazilians. And we do this with availability, welcome, and agility.
Our Culture, The Agi Way
Living for the Customer
Our main asset is our customers. The company only exists if it can solve their pain points, delivering products and experiences better than available alternatives in the market.
Acting Like an Entrepreneur
How many companies do you know that demand an owner's spirit from the team? Many, right? But how many of them enable people to actually be owners? And this isn't about giving this opportunity to a few, but about making it possible for everyone. At Agibank, it's like this, so here you act like an owner because you already are one or because you dream of being the next.
Growing on the Journey
Our culture is strong. So, it only makes sense to be an entrepreneur here if you identify strongly with it. If you are a results-obsessed person, dread the comfort zone, live in eternal pursuit of knowledge, prefer things said directly, and want to be surrounded by people who are also like that, you will really enjoy your journey here.
Our Technology Team
Much more than code and systems — it's the essential medium that makes our unique model possible, combining the best of digital with physical and human presence. Here, technology is not an end in itself, but the bridge between innovation and the real customer experience. They work side-by-side with business areas to ensure robust, scalable, and people-centered solutions, without neglecting a deep technical and scientific perspective in areas like software development, infrastructure, cybersecurity, and architecture. It is at this intersection of purpose, technique, and impact that they build the present and future.
I'm the Owner Program
The 'I'm the Owner' program is more than a long-term incentive program – it's recognition for those who live our culture daily. Each year, the Program has new participants, employees who become owners of the business and benefit from the appreciation of Agibank as the company grows. So, those who are part of this story are the ones who dive headfirst into challenges to deliver great results. This is how we truly build a culture of ownership. Here, the formula is simple: you grow. Agibank grows with you.
Work Model
Hybrid • Campinas/SP
Learn more about our day-to-day on LinkedIn and YouTube.
Check our reviews on Glassdoor.
Your Challenges to Grow on the Journey
- Perform penetration tests on APIs and mobile applications, and when necessary, on web applications;
- Design and review secure architectures for cloud environments (AWS/Azure), applying least privilege, Zero Trust, and Threat Modeling;
- Incorporate security throughout the secure software development lifecycle (SSDLC), promoting a shift-left culture with development teams;
- Build, maintain, and evolve security pipelines in CI/CD (GitLab or GitHub), including SAST, DAST, SCA, secrets scanning, and IaC scanning;
- Intensively use AI in the secure development flow to automate analyses, accelerate fixes, and continuously strengthen our security defenses;
- Collaborate with developers on code reviews, guidance for fixes, and secure-by-design practices;
- Define and validate encryption standards and TLS/mTLS implementations between services and integrations;
- Develop scripts and proof-of-concepts to validate vulnerabilities and security controls.
What You Need to Become an Agilizado?
Requirements
- Hands-on experience in pentesting APIs and mobile applications;
- In-depth knowledge of the secure software development lifecycle (SSDLC);
- Solid experience with CI/CD and security pipelines in GitLab or GitHub;
- Solid experience in architecture for cloud environments (AWS and/or Azure);
- Proven use of AI tools in development and security workflows;
- Mastery of concepts such as least privilege, Zero Trust, and Threat Modeling (e.g., STRIDE, PASTA);
- Knowledge of cryptography and TLS and mTLS protocols;
- Familiarity with OWASP Top 10, OWASP API Security Top 10, and OWASP MASVS/MASTG;
- Technical English for reading documentation and reports;
- Degree in Information Security, Computer Science, or related fields (or equivalent experience).
Preferred
- Experience in the banking sector;
- Experience in web application pentesting;
- Proficiency with scripting languages (Python, Bash, or Go) for automation and PoCs;
- Experience with Infrastructure as Code (Terraform, CloudFormation) and container security (Docker, Kubernetes);
- Certifications such as OSCP, OSWE, CPTS, CWES, eWPTX, AWS Security Specialty, AZ-500, or similar.
Benefits and Perks
- Health and well-being: health plan, dental plan, free psychological and medical teleconsultation, Totalpass, Meal and Food Vouchers, and Life Insurance/funeral assistance;
- Maternity and paternity: childcare assistance, 6-month maternity leave, 20-day paternity leave, Meal/Food Vouchers during leave;
- Private pension;
- Profit Sharing Program (PPR) according to rules established annually;
- Transportation voucher;
- Round-trip shuttle for Campinas and region (within a 50 km radius). Seats are reservable based on availability and route. For those driving, we have free parking;
- Day off for your birthday month;
- Credit card cashback: 1% of cashback on the total credit card bill, credited to the next bill;
- CDB Investment with differentiated yield: up to 105% of CDI;
- Digital Communication Fee Waiver;
- Worker's Credit: differentiated rate and term. Available for hiring after 6 months with the company;
- FGTS Withdrawal Anticipation;
- Dr. Pet: option to get a pet health plan with up to 20% discount.
Hiring Company: Hypeflame
