AppSec Specialist, Application Security

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Evaluate technical vulnerabilities and recommend solutions to strengthen platform security, collaborating across Ruby, Go, and PHP stacks while developing security fixes in AWS/Lambda.

• Swiftly analyze requests in the development queue to minimize the AppSec bottleneck and facilitate Engineering deliveries.

• Take the initiative to suggest and implement code fixes, going beyond merely reporting issues.

• Direct threat modeling sessions and apply secure-by-design principles to product initiatives.

• Develop guardrails, tools, and automations that ensure the secure path is the default choice for Engineering teams.

• Integrate and fine-tune security tools within the CI/CD pipeline, including SAST, SCA, and secret scanning, while maintaining low levels of noise and false positives.

⛳️ Requirements

• Proven experience in software or security engineering, writing and delivering production code—preferably in Ruby and PHP—including automations within AWS/Lambda.

• Familiarity with Application Security/Product Security, encompassing threat modeling, secure-by-design methodologies, and the development of guardrails and tools.

• Strong understanding of CI/CD pipeline security, utilizing calibrated SAST, SCA, and secret scanning tools.

• Knowledge of AWS cloud security as it pertains to products.

• Information security certifications are advantageous.

• Exceptional ability to collaborate with Engineering teams, proposing and executing fixes directly within the code.

• Proficient in English communication, both verbal and written.

🏝️ Benefits

• Fully remote work.

• A trust-based culture centered around results, providing numerous challenges and opportunities for learning.

• Autonomy and responsibility in a highly cooperative and understanding environment.

• A culture of feedback with regular one-on-ones with supportive leadership and no micromanagement.

• Meal and food allowances.

• Childcare support.

• Home office support.

• Healthcare funding.

• Education and cultural funding.

• Gympass access.

• A day off for your birthday.

• Discounts on therapy services.

• Discounts on English courses.

• Additional partner benefits.