4 days ago
São Paulo, BrazilStaff+
Responsibilities
- Drive the application security roadmap, including threat modeling standards, secure code review practices, API security testing, and security pipeline architecture.
- Define security guardrails for AI and agentic workflows, including prompts, destructive actions, data exposure, LLM integrations, and MCP servers.
- Set technical direction for detection engineering, alert pipelines, and automated response using the security stack.
- Own incident response readiness by designing playbooks, leading tabletop exercises, and serving as technical lead during major incidents.
- Define cloud security assessment standards across AWS and Kubernetes and address complex environments directly.
- Own and improve the vendor security assessment and third-party due diligence framework, including high-risk reviews.
- Mentor mid-level and senior engineers by reviewing detection logic, assessments, and playbooks without formal management responsibilities.
Requirements
- 7+ years of experience in information security, including building or substantially maturing a security function or program from the ground up.
- Deep hands-on expertise in cloud infrastructure security across AWS and Kubernetes, including architecting controls.
- Experience driving application security programs involving threat modeling, secure code review, CI/CD pipeline hardening, and API security testing.
- Experience defining security guardrails for AI and agentic tooling, including LLM integrations, MCP servers, and automated workflows.
- Strong detection engineering experience, including designing detection strategy and mentoring others in writing rules.
- Deep experience with endpoint security tooling, EDR/XDR, and identity and access management architecture in SaaS-heavy environments.
- Experience with Google Workspace, Okta, Cloudflare Access, SSO, and SCIM.
- Experience designing or significantly evolving vendor security assessment and third-party due diligence programs.
- Excellent written and verbal communication skills and comfort presenting security decisions to leadership and cross-functional stakeholders.
- Business fluency in English.
Benefits
- Competitive salary and benefits.
- Stock options.
- Discretionary performance bonus.
- Access to the latest tools and technology.
- Opportunity to work with a world-class team and help build a fintech app in Latin America.
- In-office 3–4 days per week.
Tech Stack
Categories
