Backend Developer – Information Security Focus

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Identify, analyze, and address vulnerabilities discovered through penetration tests (pentests), automated scans, audits, and customer reports, ensuring compliance with deadlines based on risk severity.

• Implement enhancements to backend security focusing on aspects such as authentication, authorization, encryption, secrets management, and safeguarding sensitive information.

• Conduct thorough code reviews to identify security vulnerabilities and provide guidance to development teams on best practices.

• Integrate and sustain security tools within CI/CD pipelines, encompassing SAST, DAST, dependency analysis, and exposed-secret detection.

• Monitor, update, and resolve issues related to dependencies and libraries that have known vulnerabilities.

• Offer technical assistance for security incident responses, engaging in investigations, remediation efforts, and post-incident analyses.

• Create and document secure development standards, procedures, and guidelines for engineering teams.

• Collaborate with the Information Security Coordination team to enhance security maturity and address customers’ technical inquiries.

• Work in conjunction with Engineering, Product, and Information Security teams.

⛳️ Requirements

• Experience as a mid-level Backend Developer, demonstrating proficiency in the languages, frameworks, and technologies utilized by Robbu.

• Understanding of application and API vulnerabilities, including the OWASP Top 10 and OWASP API Security Top 10.

• Familiarity with authentication and authorization mechanisms such as OAuth 2.0, JWT, and access control.

• Knowledge of applied cryptography, including TLS, password hashing, and data encryption at rest.

• Experience with relational databases and practices for preventing SQL Injection.

• Familiarity with Git and CI/CD (continuous integration and continuous delivery) pipelines.

• Understanding of application security analysis tools (SAST, DAST, and SCA).

• Knowledge of LGPD principles in relation to software development, particularly regarding the protection and minimization of personal data usage.

• A strong sense of urgency and accountability in addressing vulnerabilities and adhering to deadlines.

• Attention to detail and critical thinking skills to identify potential risks and exploitation scenarios.

• Excellent communication skills with the ability to convey technical risks to diverse audiences.

• A collaborative mindset, capable of working alongside Engineering and Product teams without disrupting the development workflow.

• A consultative and instructional approach to fostering a secure development culture.

• Autonomy, strong organizational skills, and the capacity to prioritize the security backlog effectively.

• Proficiency in technical English for reading and interpreting documentation and security alerts.

• A bachelor’s degree, technologist degree, or technical education is acceptable as per the structured requirements of the posting.

🏝️ Benefits

• Comprehensive health and wellness programs.

• Opportunities for professional development and continuous learning.

• Flexible work arrangements to support work-life balance.

• Engaging work environment that encourages collaboration and innovation.