SONDA
Agibank
Senior AI Security Analyst - Campinas/SP
About Us
We are proudly Brazilian and popular, always digital, and in-person whenever the client desires. We innovate to provide access to financial services and offer an experience that encourages people to overcome today's challenges. Our reason for existing is clear: to fight for a banking experience that welcomes and encourages all Brazilians. And we do this with availability, welcome, and agility.
Our Culture, The Agi Way
Living for the Customer
Our main asset is our customers. The company only exists if it can solve their pain points, delivering products and experiences better than available alternatives in the market.
Acting Like an Entrepreneur
How many companies do you know that demand a sense of ownership from their team? Many, right? But how many of them enable people to actually be owners? And it's not about giving this opportunity to a few, but about making it possible for everyone. At Agibank, it's like this, so here you act like an owner because you already are one or because you dream of being the next.
Growing on the Journey
Our culture is strong. So, it only makes sense to be an entrepreneur here if you identify strongly with it. If you are a results-obsessed person, dread the comfort zone, are in constant pursuit of knowledge, prefer things said directly, and want to be surrounded by people who are also like that, you will really enjoy your journey here.
Our Technology Team
Much more than code and systems—it's the essential medium that makes our unique model possible, combining the best of digital with physical and human presence. Here, technology is not an end in itself, but the bridge between innovation and the real customer experience. They work side-by-side with business areas to ensure robust, scalable, and people-centered solutions, without sacrificing a deep technical and scientific perspective in areas like software development, infrastructure, cybersecurity, and architecture. It is at this intersection of purpose, technique, and impact that they build the present and future.
I'm an Owner Program
The 'I'm an Owner' program is more than a long-term incentive program – it's recognition for those who live our culture daily. Each year, the Program has new participants, employees who become owners of the business and benefit from the appreciation of Agibank as the company grows. So, those who are part of this story are those who dive headfirst into challenges to deliver great results. This is how we truly build a culture of ownership. Here, the formula is simple: you grow. Agibank grows with you.
Work Model
Hybrid • Campinas/SP
Hiring Company: Hypeflame
Learn more about our day-to-day on LinkedIn and YouTube.
Check out our reviews on Glassdoor.
Your Challenges for Growth on the Journey
- Act as the technical reference for the AI Security team: distribute and monitor deliveries, review code, prompts, and tests, and conduct continuous technical mentoring to accelerate team evolution;
- Be the main driver of AI at Agi, promoting AI adoption with governance, security, and controls appropriate for the banking environment;
- Lead the implementation and governance of AI Gateway Security, defining policies for access, logging, auditing, traceability, and inference cost control;
- Foster the use and orchestration of AI with n8n or similar tools, creating reusable flows, templates, and patterns that accelerate automation in SI teams;
- Support Information Security teams in implementing AI task automation platforms, from opportunity discovery to production delivery;
- Define security testing strategies for applications based on LLMs, covering prompt injection, jailbreaking, data leakage, tool abuse, and context manipulation, with automated suites in Promptfoo or equivalent tools;
- Establish the security review process and approval criteria for MCPs, skills, and tools used by developers and agents;
- Define security quality gates for ML artifacts, supply chain, and CI/CD pipelines;
- Define metrics, indicators, and observability for LLMs traffic, agents, and internal platforms;
- Ensure AI initiatives align with regulatory and risk requirements of the financial sector, such as CMN Resolution 4.893 and LGPD, in addition to internal audit standards.
What You Need to Become an Agilizado?
Requirements
- Solid experience in key SI areas (Governance, Identity Management, Cloud Security, Security Engineering, Offensive Security, Security Architecture, and Cyber Defense), with the ability to act as a technical peer to specialists and transform their pain points into applicable AI solutions;
- Experience leading internal SI, technology, or fintech initiatives, with a mandate for prioritization, opportunity discovery, and continuous delivery;
- Hands-on experience with AI orchestration and workflow automation using n8n or similar tools, such as Make, LangGraph, or Temporal;
- Proficiency in APIs, HTTP, authentication and authorization (OAuth2, OIDC, mTLS), log and event analysis, and data flows;
- Advanced experience with version control (Git, GitLab/GitHub) and CI/CD pipelines, including the implementation of security controls in these pipelines;
- Ability to design and review architectures, data flows, policies, configurations, and prompts, questioning technical assumptions and defining security requirements;
- Advanced-level development in Python, to automate analyses, build agents, integrate model APIs, and review team code;
- Knowledge of JavaScript/TypeScript;
- LLMs: practical mastery of model capabilities and limitations, including context window, RAG, function calling, tool use, prompt engineering, evals, and inference cost structure;
- Agents: experience building agents in production, with task definition, tool orchestration, context management, failure handling, and behavior observability;
- MCP (Model Context Protocol): ability to evaluate, integrate, and build MCP servers and clients, as well as define security controls for their use;
- AI Gateway and AI controls: experience or strong knowledge in implementing gateways, guardrails, and LLM Firewalls;
- Experience with LLMs evaluation frameworks, such as Promptfoo, DeepEval, Ragas, or similar;
- Knowledge of OWASP Top 10 for LLM Applications and MITRE ATLAS;
- Critical evaluation: know when AI is the appropriate solution and, with the same clarity, when it is not.
Preferred
- Experience in financial institutions or regulated environments, such as banks, fintechs, or insurance companies;
- Experience with AI red teaming or participation in CTFs focused on LLMs;
- Security or cloud certifications, such as OSCP, OSAI, CCSP, or AWS/Azure/GCP Security.
Benefits and Perks
- Health and well-being: health plan, dental plan, free psychological and medical telemedicine, Totalpass, Meal and food vouchers, and Life insurance/funeral assistance;
- Maternity and paternity: childcare assistance, 6-month maternity leave, 20-day paternity leave, Meal/Food vouchers during the leave period;
- Private pension;
- Profit Sharing Program (PPR) according to rules established annually;
- Transportation voucher;
- Round-trip shuttle for Campinas and region (within a 50 km radius). Seats are reservable based on availability and route. For those driving, we have free parking;
- Gift day off in your birthday month;
- Cashback on Credit Card: 1% of cashback on the total credit card bill, credited to the next bill;
- CDB Investment with differentiated yield: up to 105% of CDI;
- Digital Communication Fee Exemption;
- Worker's Credit: differentiated rate and term. Available for application after 6 months with the company;
- FGTS Saque-Aniversário Advance;
- Dr. Pet: option to get pet health insurance with up to 20% discount.
