Information Security Analyst III – AppSec

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Identify vulnerabilities in applications, APIs, libraries, components, and pipelines.

• Assist teams in addressing vulnerabilities and implementing secure development practices.

• Manage and improve SAST, DAST, and SCA tools, as well as API security solutions and bot protection.

• Aid in vulnerability management by assessing risks according to their criticality and exposure.

• Conduct technical risk assessments of applications, integrations, and digital user experiences.

• Contribute to the establishment of secure development standards, technical documentation, checklists, and training programs.

• Promote automation, shift-left initiatives, and ongoing security enhancements throughout the SDLC.

⛳️ Requirements

• Background in AppSec, DevSecOps, secure development, or vulnerability assessment.

• Familiarity with OWASP Top 10, API security principles, and the fundamentals of authentication and authorization.

• Experience with static application security testing (SAST), software composition analysis (SCA), and dynamic application security testing (DAST) tools.

• Capability to interpret vulnerabilities and provide actionable remediation recommendations.

• Knowledge of API security (e.g., OAuth2, JWT) and protection against abuse/anti-automation measures.

• Understanding of cloud environments, containers, CI/CD pipelines, and/or Infrastructure as Code (IaC).

• Preferred: Possession of certifications or completion of courses in security, development, or cloud technologies.

🏝️ Benefits

• Medical insurance

• Dental insurance

• Renascer Program – personal renewal and well-being initiative

• Observance of significant dates – we cherish meaningful moments

• Investment in education – support for your learning and growth

• Profit sharing (Results Participation) – we build success together and celebrate achievements

• Individual development plan – we encourage your career ownership

• Private pension plan – securing your future

• Life insurance

• Team events/time together

• Meal and/or food allowance

• Commuter allowance (without payroll deductions)

• Childcare/babysitting assistance – ensuring your child is cared for in a safe, welcoming environment