Code Review Services Analyst, Code Review Specialist

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Oversee the ticket queue, proactively choose requests, manage assigned cases from initiation to resolution, and ensure follow-ups are conducted within set timeframes.

• Evaluate SAST and SCA results and assess proposed mitigations, confirming that the implemented controls effectively minimize application risk.

• Examine application behavior, architecture, data flows, and source code to comprehend identified vulnerabilities and potential false positives.

• Offer developers clear, actionable guidance on correcting vulnerabilities found in source code.

• Engage directly with internal development teams via Microsoft Teams, phone calls, or written communication.

• Contribute innovative ideas to enhance service delivery, processes, and the adoption of emerging technologies within the team.

⛳️ Requirements

• Prior hands-on experience as a software developer, especially in advising fellow developers on code remediation.

• Understanding of application architecture patterns such as MVC, microservices, and event-driven architecture.

• Proficiency with Agile methodologies (XP, Scrum, or Kanban), test-driven development (TDD), and CI/CD practices.

• Familiarity with cloud architecture and services, particularly AWS.

• Background in or exposure to code review, penetration testing concepts, Burp Suite, Metasploit, fuzzing, or Jenkins.

• Experience using or supporting AI (artificial intelligence)-based capabilities in engineering or security contexts.

• Capability to work independently in a client-facing environment.

• Security-oriented mindset and technical credibility with developers.

• Ability to make risk-based decisions, function with incomplete information, and communicate effectively in a global setting.

🏝️ Benefits

• Availability to maintain significant working-hours overlap with the US Eastern Time zone (preferred, but not required).