About the Role

Remitee is a rapidly expanding fintech company specializing in international payments and cross-border remittances across Latin America.

We are looking for a Penetration Testing Specialist to join our Cybersecurity team. You will own offensive security at Remitee: running assessments across web, mobile, API, cloud, and internal network, embedding with engineering squads as an AppSec partner, and building programs (threat modeling, bug bounty, purple teaming) that make the whole organization more secure. This is a hands-on technical role with direct visibility to leadership.

Key Responsibilities
- Maintain versioned, reproducible, and auditable checklists by target type, covering IAM, role-based authorization, idempotency, rate limiting, error handling, and information exposure.
- Operate and tune the AppSec toolchain integrated into the SDLC: SAST, DAST, SCA, secrets scanning, and IaC scanning.
- Design and maintain a threat modeling program (STRIDE / PASTA / LINDDUN) for critical product features.




- Audit OAuth 2.0 / OIDC / JWT implementations for algorithm confusion, replay attacks, refresh token rotation, PKCE, and claim validation (iss/aud/exp).
- Perform deep API security testing: BOLA/BFLA, mass assignment, rate limiting, idempotency, race conditions, and signed webhooks.
- Secure partner integrations: CSP, frame-ancestors, postMessage, CORS, SameSite, and sandboxing.
- Hunt for business logic vulnerabilities with direct economic impact: double-spend, transaction replay, race conditions, negative amounts, overflow/underflow, limit bypass, rounding manipulation, and reused idempotency keys.
- Write executive and technical reports with CVSS v4 severity, business impact, reproducible PoCs, and actionable remediation. Track findings to closure with SLAs by severity.
- Generate auditable evidence for ISO 27001, BCRA, and partner due diligence processes. Present findings to engineering squads, CTO, CISO, and the risk committee.
- Embed with squads

📌 Penetration Testing Specialist (Buenos Aires)
🏢 Remitee
📍 Buenos Aires