Lead Product Security, AppSec

This is a fully remote position, open to applicants in Chile.

📋 Description

• Tactical and Strategic Definition of Application Security: Establish the roadmap and action plans for the Product Security area, incorporating security controls into the development cycle (DevSecOps) and Cloud/On-Premise architectures.

• Security Architecture and Risk Mitigation: Define standards and assess the architecture of microservices, APIs, and containers (Kubernetes), ensuring threat analysis (Threat Modeling) and transactional fraud prevention from the design phase.

• Consultative Leadership and Technical Negotiation: Serve as a strategic counterpart to the CTO, Engineering Leaders, and Software Architects, negotiating and promoting the collaborative adoption of security best practices.

⛳️ Requirements

• Professional degree in Computer Civil Engineering, Cybersecurity Engineering, Software Engineering, or a related field.

• Proven experience in cybersecurity and application security (minimum of 3 to 4+ years focused on cybersecurity/AppSec), ideally with a background in technical leadership.

• Strong and essential knowledge in: Cybersecurity architecture and threat modeling (Threat Modeling).

• Cloud security (AWS, GCP, Azure) and security for web and mobile applications.

• Software architecture, microservices design, and Kubernetes.

• (Desirable) Industry certifications (CISSP, CSSLP, Cloud Security) and experience in agile environments (Scrum) as well as regulated fintech/banking.

🏝️ Benefits

• Annual budget for self-managed training.

• Remote work opportunities.

• Day off for your birthday.

• Half day off for children’s or parents’ birthdays.

• Short Fridays (every Friday we finish at 2 PM).

• Work from anywhere (Work from wherever you want! Just remember to have a good internet connection).