22 days ago
Remote, BrazilSenior
Responsibilities
- Own application security services, security tooling, detection pipelines, IAM, and vulnerability management end-to-end.
- Lead post-incident response and post-mortems, converting root-cause findings into guardrails, automation, and policy improvements.
- Drive security-by-design standards through secure SDLC practices, RFCs, threat models, and architectural design documentation.
- Establish vulnerability remediation SLAs and security metrics, using monitoring tools to hold engineering teams accountable.
- Execute security-critical migrations and platform updates while preserving data integrity and auditability.
- Partner with Engineering, Legal, and Product on medium-to-large security initiatives.
Requirements
- Prior work experience in security engineering delivering security tooling, detection logic, or secure SDLC mechanisms is mandatory.
- Extensive experience with modern cloud architectures and container ecosystems, including AWS/EKS, GCP/GKE, Istio, or ArgoCD.
- Fluency in English and Portuguese, with the ability to communicate security risks to technical and non-technical stakeholders.
- In-depth knowledge of secure coding practices and proficiency writing clean, well-tested code for security automation.
- Ability to work across AppSec and adjacent Information Security areas such as Cloud Security, GRC, and Detection.
- Familiarity with SOC 2, ISO 27001, LGPD, and GDPR governance and compliance frameworks.
- Strong collaboration, communication, problem-solving, and data-informed decision-making skills.
Benefits
- Free Wellhub Gold+ membership, including access for up to three family members.
- Wellz emotional wellbeing program with therapy sessions and on-demand content.
- Health, dental, and life insurance.
- Flexible first work model with remote and hybrid options; this role is remote within Brazil, with home office reimbursement.
- Vacation eligibility after six months, additional annual days off based on tenure, and a birthday holiday.
- 100% paid parental leave, including extended leave and a part-time ramp-back period for parents giving birth.
- Career development platforms, interactive sessions, personalized development roadmaps, and internal opportunities.
Tech Stack
Categories
