Information Security Specialist

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Develop and sustain the information security program, encompassing policies, standards, and progress metrics.

• Act as a consultative advisor to Engineering, Product, IT, and other teams regarding architectural decisions.

• Enhance the secure development lifecycle (Secure SDLC, threat modeling, code review, SAST, DAST, dependency and container scanning).

• Evaluate and improve security controls within AWS cloud environments, including IAM, networking, secrets, logging, and backups.

• Implement the vulnerability management process, covering identification, classification, prioritization, and remediation.

• Organize penetration tests, external assessments, and third-party due diligence/risk assessments.

• Develop the security incident response plan and conduct regular simulations.

• Assist in compliance with Brazil’s LGPD, audits, technical meetings/customer RFPs, and future certifications like ISO 27001.

• Support corporate security initiatives, including identity management, corporate endpoints, and access lifecycle management.

• Act as the Information Security contact point at Pulsus.

⛳️ Requirements

• Extensive, diverse experience in Information Security (AppSec, Cloud Security, Infrastructure, or GRC).

• Proficiency in web application, API, and SaaS architecture security.

• Hands-on knowledge of secure development practices (DevSecOps) and OWASP risks.

• Familiarity with vulnerability management tools (SAST, DAST, secrets scanning, container security) and CI/CD pipelines.

• Solid understanding of cloud environments, preferably AWS, and access management (IAM).

• Awareness of LGPD, data privacy regulations, and incident response strategies.

• Bachelor’s degree in IT, Information Security, or a related discipline.

• Excellent organizational, documentation, and communication skills to facilitate effective collaboration in a fully remote setting.

• Previous experience in B2B SaaS companies or in support of Enterprise customers.

• Familiarity with mobile security (Android) or MDM/EMM platforms.

• Experience preparing for ISO/IEC 27001, SOC 2, or frameworks like CIS Controls/NIST.

• Industry certifications such as AWS Certified Security, Security+, CISSP, CCSP, or ISO 27001.

🏝️ Benefits

• Meal/food allowance through iFood Benefícios.

• Complimentary iFood Club membership.

• Health insurance options: SulAmérica – Clássico Apartamento or Especial 100 R1 plans.

• Health insurance options: Unimed Unimax – Private or Semi-Private plans.

• Dental insurance coverage: SulAmérica.

• Dental insurance coverage: Bradesco Odonto.

• Life insurance policy.

• Profit-sharing bonus (PPR) based on the attainment of company goals.

• Day off for birthdays.

• Wellhub (Gympass): A platform providing access to gyms and apps focused on physical and emotional health and well-being.

• Starbem: A health and well-being platform offering online consultations with psychologists, nutritionists, and physicians.

• A variety of discounts and benefits through iFood Benefícios partners, including points earned in the Vale Bônus app, discounts at pharmacies and cinemas, online courses, travel, and much more.