Ciklum

Senior Application Security Engineer

Ciklum
Apply
1 day ago
Remote, BrazilSenior

Responsibilities

  • Remediate application security findings hands-on by reading code, writing fixes, and opening pull requests.
  • Deploy, configure, and tune SAST and SCA tooling across CI/CD pipelines and repositories, including rule tuning and false-positive cleanup.
  • Triage and prioritize SAST, SCA, and penetration-test findings and drive them to closure with engineering teams.
  • Review pull requests and designs for security issues and develop secure-coding guidance for developers.

Requirements

  • Production software development experience in Python and Go, including writing code and opening pull requests.
  • Hands-on application security experience, especially remediating OWASP Top 10 issues, dependency vulnerabilities, secrets, and authentication or session issues.
  • Direct experience deploying and operating SAST and SCA tools in CI/CD environments.
  • Ability to collaborate with developers and explain security findings in plain language.
  • Availability during US business hours.
  • Healthcare or other regulated-industry experience is desirable.

Benefits

  • Full-time, long-term employment in Brazil.
  • 100% remote work mode.
  • Company-paid medical insurance, mental health programs, and five undocumented sick-leave days per year.
  • 20 working days of paid vacation and local bank holidays.
  • Internal education events, meetups, conferences, workshops, Udemy access, language courses, and company-paid certifications.
  • Internal Mobility Program and opportunities to work on large-scale international projects.
  • Regular team-building events and a collaborative, informal workplace.

Tech Stack

Categories

Ciklum

About Ciklum

1,001-5,000 employees

Ciklum is an IT services firm that builds custom digital products and provides nearshore engineering teams, QA, DevOps, data analytics, and UX for enterprises and high-growth startups. It operates a services model spanning product engineering, e-commerce solutions, and managed delivery centers. Founded in 2002 and headquartered in London, the privately held company serves global clients including Just Eat and Zurich Insurance.

Contact me