Engenheiro de Segurança Cibernética Sênior

This is a fully remote position, open to applicants in Brazil.

📋 Description

• You will be responsible for leading the continuous improvement of the vulnerability management process within the software development cycle, defining and structuring workflows, roles, and prioritization criteria that link the discovery of vulnerabilities to their remediation.

• Your role will involve guiding decisions on efficiency and process scalability based on solid technical expertise and a broad procedural and systemic vision, acting as a bridge between technical teams, security leadership, and governance.

⛳️ Requirements

• Structure and evolve the Vulnerability Management program, ensuring integration with technical teams and security governance.

• Define and implement a technical prioritization model based on risk, considering severity, exploitability, exposure, and business context.

• Develop dashboards and indicators for executive and operational monitoring of vulnerability exposure.

• Standardize technical inputs to support formal risk management processes, exceptions, and risk acceptance with the GRC team.

• Orchestrate forums and rituals for vulnerability tracking involving multidisciplinary teams.

🏝️ Benefits

• Consolidated experience in technology and information security, with a focus on Vulnerability Management, Cybersecurity, or AppSec.

• Experience in technical prioritization of vulnerabilities and interaction with Engineering, Product, Infrastructure, and Governance teams.

• Knowledge of scanning tools, findings management, technical backlog, and dashboard creation.

• Ability to communicate clearly with technical and executive leadership.

• Mastery of the vulnerability lifecycle, management platforms, CVSS, and concepts of criticality and exposure.