3 days ago
Remote, BrazilStaff+
Responsibilities
- Own multiple security domains end-to-end, including application security, threat intelligence, detection engineering, and cloud security posture.
- Lead architectural reviews and threat modeling for high-risk projects while enforcing secure-by-design and secure-coding standards.
- Plan, hire for, or directly execute penetration tests and red team exercises and drive remediation of findings.
- Resolve complex cross-service vulnerabilities and security incidents while coordinating engineering teams and improving detection and response maturity.
- Define security KPIs, SLAs, and SLOs and build monitoring and alerting to track organizational accountability.
- Drive architecture decisions, security debt reduction, and security-relevant migrations involving identity, cloud, and key management.
- Manage medium-to-large security initiatives such as red team programs, vulnerability reduction, compliance audits, zero-trust rollouts, cloud hardening, and detection coverage programs.
- Mentor engineers, lead security RFCs and design documents, and communicate threat models, risk trade-offs, and security guidance to technical and non-technical stakeholders.
Requirements
- Prior security engineering experience is mandatory.
- Deep hands-on experience in one or more of Application Security, Security Architecture, Cloud/Infrastructure Security, IAM, or Detection and Response, with familiarity across the other domains.
- Experience building secure, well-tested code for security tooling and automation, such as detection rules, scanners, and IAM guardrails.
- Extensive experience in Security Engineering or software engineering with significant security impact and a strong record of delivering high-impact projects.
- Experience leading security-sensitive RFCs, design documents, threat models, and risk trade-off decisions.
- Ability to mentor engineers, navigate legacy systems, guide remediation, and collaborate with technical and non-technical stakeholders.
- Knowledge of relevant attacker tactics, techniques, and procedures and compliance frameworks such as SOC 2, ISO 27001, LGPD, and GDPR.
- Fluency in English and strong communication skills.
- Applicants are encouraged to apply even if they do not meet every qualification, but prior security engineering experience is required.
Benefits
- Free Wellhub Gold+ membership with access to gyms, studios, digital fitness programs, and wellness resources, with coverage for up to three family members.
- Wellz emotional wellbeing program with personalized journeys, therapy sessions, and on-demand content.
- Health, dental, and life insurance.
- Flexible remote and hybrid work options; this specific role is remote within Brazil, with home office reimbursement.
- Flexible schedules aligned with time zones, team needs, and personal routines.
- Vacation eligibility after six months, additional annual days off based on tenure, and a birthday holiday.
- 100% paid parental leave, including extended leave and a part-time ramp-back period for birthing parents.
- Career development platforms, interactive learning sessions, personalized development roadmaps, and internal opportunities.
- Inclusive, collaborative culture focused on wellbeing, learning, and continuous feedback.
Categories
About Wellhub
Wellhub is a corporate wellness platform for employers, bundling access to gyms and studios, digital fitness, mindfulness, therapy, nutrition, and sleep apps under one subscription. It sells B2B wellbeing programs that leverage a large partner network and usage insights to boost employee adoption. Founded in 2012 and headquartered in New York, the privately held company rebranded from Gympass.