DevSecOps Security Analyst – MID

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Identify vulnerabilities in source code and aid in establishing remediation strategies;

• Monitor and assist in the secure coding process;

• Evaluate findings from security tools such as SAST, DAST, and SCA;

• Conduct threat modeling and gather architectural and development security requirements;

• Assist developers in addressing vulnerabilities and implementing security guardrails;

• Engage in governance processes and track code and architectural vulnerabilities;

• Employ secure development frameworks and best practices, including OWASP ASVS, SAMM, WSTG, and MASVS;

• Provide training and awareness programs on Information Security;

• Serve as a Security Champion, fostering a security-first culture within technical teams;

• Collaborate effectively with development, architecture, operations, and security teams;

• Support the execution and oversight of security practices in CI/CD pipelines utilizing Azure DevOps;

⛳️ Requirements

• Experience in Application Security and DevSecOps methodologies;

• Knowledge of identifying and addressing vulnerabilities in source code;

• Practical experience with SAST, DAST, and SCA tools;

• Familiarity with Azure DevOps and integrating security within CI/CD pipelines;

• Proficient in threat modeling and establishing security requirements;

• Understanding of OWASP frameworks (ASVS, SAMM, WSTG, MASVS);

• Experience with Secure Code Review processes and security throughout the development lifecycle;

• Strong analytical abilities and a consultative approach when collaborating with development teams;

• Knowledge of governance and vulnerability management procedures;

• Proven experience acting as a Security Champion;

• Experience in high-stakes and high-availability environments;

• Understanding of security automation;

• Familiarity with cloud environments and secure architecture;

🏝️ Benefits

• Competitive salary and performance-based bonuses;

• Opportunity for professional development and certifications;

• Flexible work schedule and remote work options;

• Comprehensive health and wellness benefits;

• Engaging work environment with a focus on innovation;

• Employee recognition programs and team-building activities;