About The Role

Remitee is a rapidly expanding fintech company specializing in international payments and cross-border remittances across Latin America .

We are looking for a Penetration Testing Specialist to join our Cybersecurity team. You will own offensive security at Remitee: running assessments across web, mobile, API, cloud, and internal network, embedding with engineering squads as an AppSec partner, and building programs (threat modeling, bug bounty, purple teaming) that make the whole organization more secure. This is a hands‑on technical role with direct visibility to leadership.

Key Responsibilities
- Plan and execute penetration tests across web applications, mobile (iOS/Android), APIs, cloud infrastructure, and internal networks, following PTES, OWASP WSTG, OWASP MASTG, OWASP API Security Top 10, OWASP ASVS, and NIST.
- Maintain versioned, reproducible, and auditable checklists by target type, covering IAM, role‑based authorization, idempotency, rate limiting, error handling, and information exposure.
- Conduct application security code reviews in backend codebases:



input validation, authorization flaws (BOLA/IDOR), financial logic bugs (decimal precision, rounding, conversions), concurrency, idempotency, webhook signatures, and secrets handling.
- Operate and tune the AppSec toolchain integrated into the SDLC: SAST, DAST, SCA, secrets scanning, and IaC scanning.
- Design and maintain a threat modeling program (STRIDE / PASTA / LINDDUN) for critical product features.
- Audit OAuth 2.0 / OIDC / JWT implementations for algorithm confusion, replay attacks, refresh token rotation, PKCE, and claim validation (iss/aud/exp).
- Perform deep API security testing: BOLA/BFLA, mass assignment, rate limiting, idempotency, race conditions, and signed webhooks.
- Secure partner integrations: CSP, frame‑ancestors, postMessage, CORS, SameSite, and sandboxing.
- Hunt for business logic vulnerabilities with direct economic impact: double‑spend, transaction replay, race

📌 Penetration Testing Specialist (Buenos Aires)
🏢 Remitee
📍 Buenos Aires