22 days ago
Remote, BrazilStaff+
Responsibilities
- Own multiple security domains end-to-end and act as the technical authority for complex cross-service security challenges.
- Establish secure-by-design architectural standards, lead threat modeling, and define organization-wide secure-coding benchmarks.
- Drive complex incident responses and post-mortems, converting findings into systemic guardrails and platform-level preventions.
- Lead offensive and defensive security initiatives, including red team exercises and penetration testing engagements.
- Set security SLAs, SLOs, and KPIs and build monitoring to track remediation, response times, and security posture.
- Partner with Engineering, Product, and Legal leadership on threat intelligence, compliance, and long-term security investments.
- Mentor engineering teams and promote a security-minded engineering culture.
Requirements
- Extensive experience in security engineering or software engineering with significant security impact.
- Proven experience scaling security in complex cloud environments.
- Expert knowledge of secure architecture design, threat modeling, and engineering-wide secure coding standards.
- Fluency in English and Portuguese.
- Deep understanding of attacker TTPs, AWS/EKS, GCP/GKE, Istio, ArgoCD, and regulatory frameworks including SOC 2, ISO 27001, LGPD, and GDPR.
- Prior experience guiding and mentoring engineering teams.
- Applicants must have prior experience in security engineering.
Benefits
- Remote position open only to candidates located in Brazil; the specific flexible or hybrid/remote model can be discussed with the recruiter and hiring manager.
- Free Wellhub Gold+ membership, including wellness resources and coverage for up to three family members.
- Wellz emotional wellbeing program with therapy sessions and on-demand content.
- Health, dental, and life insurance.
- Home-office reimbursement.
- Vacation after six months, additional annual days off based on tenure, and a birthday holiday.
- 100% paid parental leave, with extended leave and a ramp-back period for birth parents.
- Career development platforms, interactive sessions, personalized development roadmaps, and internal opportunities.
Tech Stack
Categories
