Application Security Architect

This is a fully remote position, open to applicants in Brazil, +3 more countries.

📋 Description

• Collaborate with engineering teams to assess system designs and source code for potential security and architectural vulnerabilities.

• Facilitate threat modeling, secure design evaluations, and architecture review meetings with engineering teams.

• Implement and enhance AI-assisted workflows aimed at product security.

• Define and steer security initiatives from proof-of-concept stages to operational maturity.

• Create comprehensive reports and presentations tailored for both technical and executive audiences.

• Document security architectures, policies, and best practices.

• Provide mentorship and technical direction to fellow security team members.

• Foster a culture of security awareness throughout the organization.

• Lead and advance the Security Champions program to encourage shared responsibility for secure design practices.

• Integrate security into application, cloud, infrastructure, and identity layers from the design phase through deployment.

⛳️ Requirements

• A resume in English is mandatory.

• Candidates must reside in Brazil, Colombia, Ecuador, or Mexico.

• Over 5 years of experience in software security is required.

• At least 2 years of experience in security architecture or offensive security roles.

• Proficient in one or more programming languages, such as Java, Kotlin, or C++.

• Strong comprehension of application security principles, including authentication, authorization, cryptography, and secure communications.

• Familiarity with security frameworks and methodologies like OWASP, NIST, BSIMM, STRIDE, and DREAD.

• Practical experience with identity and access management technologies including OAuth 2.0, SAML, and OIDC.

• Knowledge of cloud security practices in AWS environments.

• Experience with contemporary delivery technologies, such as Infrastructure as Code (IaC) and Continuous Integration/Continuous Deployment (CI/CD) pipelines.

• Solid understanding of security in both Linux and Windows enterprise environments.

• Experience with security testing and commonly used security tools.

• Exceptional communication, analytical, and problem-solving abilities.

• A Bachelor's degree in Computer Science, Information Technology, or a related discipline, or equivalent practical experience.

• Relevant certifications like OSCP, OSWE, or SecurityX are preferred but not essential.

• This position does not qualify for visa sponsorship.

🏝️ Benefits

• Flexible working hours with home office options to help you balance personal life and work responsibilities.

• Opportunities for personal and professional growth.

• Skills enhancement through a well-regarded training platform.

• Competitive salary package.

• Unlimited access to onboarding, training, and support.

• Collaboration with a diverse international workforce.