Offensive Security Engineer, dLocal
Emerging markets payments platform
Open for applications
Emerging markets payments platform
501-1000 employees
Open for applications
501-1000 employees
Company mission
To enable global merchants to connect seamlessly with billions of emerging market users.
Role
Who you are
- Advanced background in Offensive Security (Red Team active participation)
- Strong understanding of vulnerabilities, common attack vectors and how to solve/fix them
- A great eye to identify/analyze attacks on company assets and also simulate internal/external attacks (Ethical Hacker mindset)
- Well-rounded background in host, network and application security (Web, API and Mobile)
- Huge familiarity with threat analysis (malware, phishing, social engineering, etc)
- Attacker mindset ability to think about creative threats and attack vectors
- Knowledge in tailored reconnaissance, weaponization, exploitation and lateral movement
- Know-How of Threat modeling in a cloud environment
- Experience with common security tools including but not limited to: Nmap, SQLmap, Metasploit, Kali Linux (OS), Burp Suite, Qualys/WAS, ZAP Proxy, Prowler, Censys/Shodan and others
- Familiarity with implementation and maintenance of SAST/DAST/IAST sensors
- In-depth knowledge of OWASP10, SANS25 and other world-known security frameworks
- Understanding of a complete SDLC and how to make it secured (S-SDLC)
- Familiarity with Cloud platforms (AWS or equivalent)
- Ability to lead people to problem resolution when it comes to Security (Integrate teams, especially Engineering Team)
- Effective written and oral communication involving both business and technical sides of the business
- Quickly identify issues and solve them
- Ability to present technical risks to a broader audience (both written and spoken)
Desirable
- Experience on research of vulnerabilities and development of exploitation tools
- Building and automating common Red Team processes and activities
- Knowledge of security architectures, both monoliths and microservices, including how they are developed and operate at scale
- Certification or equivalent knowledge (DCPT/OSCP/OSCE/OSWP/OSWE/CEH)
- Exposure to PCI-DSS framework or any other relevant security standard will be valued
- Have previously participated as speaker (or just participated in the activities) on Security conferences like DefCon, MindTheSec, EkoParty, Hackaflag, Bhack, You sh0t the sheriff, CryptoRave, etc
- Active participation in CTFs and also Bug Bounty programs
What the job involves
- Assess network, environment, or technologies
- Write tooling to assist with offensive security assessment
- Conduct discovery activities to map environments
- Build, conduct, and participate in offensive security exercises
- Perform penetration testing (application, API, mobile, infrastructure), vulnerability scanning (internal and external), code reviews and design/architecture reviews
- Work closely with development teams to mitigate or remediate security vulnerabilities
- Empower developers to do their jobs securely without creating additional friction
- Educate our engineers about security in application code and infrastructure
- Educate our non-technical employees about security good practices and attacks
- Assist in Incident Response activities (if it involves Security)
Our take
It is clearly evident that there is a massive payments gap between developed countries and emerging economies, with consumers in many countries having little or no access to modern, innovative options. dLocal was established in Uruguay to address this gap, which it aims to close not only for its neighbouring countries but across the globe.
Through its unique "One dLocal" concept (one direct API, one platform, and one contract), global companies can accept payments, send pay-outs and settle funds globally without separately managing pay-in and pay-out processors. The company also supplies a defense suite and local issuing for virtual and physical pre-paid cards in Latin America, as well as tools for building payments infrastructure for platforms and marketplaces.
Since being founded in 2016, the company has expanded across Uruguay, the USA, Israel, Brazil and Europe, powering growth in emerging economies in LATAM, APAC, the Middle East and North Africa. The company has seen significant growth while remaining confident and committed to its original mission. A recent development was its licensing by Brazil’s Central Bank as a payments institution, which means it can accept deposits from the public, manage e-wallets, and participate directly in Brazil’s payments systems.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
Few candidates hear
back within 2 weeks
25% employee growth in 12 months
Company
Funding (last 2 of 3 rounds)
Apr 2021
$150m
LATE VC
Sep 2020
$200m
SERIES A
Total funding: $357m
Company HQ
Tres Cruces, Montevideo, Montevideo Department
Articles
Leadership
Sergio Fogel
(CSO)Co-founded multiple companies, such as AstroPay, and is an Official Member of the Forbes Finance Council.
Sebastian Kanovich
(CEO)Was General Manager at AstroPay before becoming CEO for 2 years.
Share this job
View 17 more jobs at dLocal