Mid-level Cybersecurity Analyst – AppSec

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Implement and enhance Cybersecurity practices with an emphasis on DevSecOps, Application Security (AppSec), and the automation of security processes;

• Facilitate the integration of security controls within CI/CD pipelines (Jenkins, Azure DevOps, and GitLab), aiding in SSDLC compliance and the ongoing improvement of secure development methodologies;

• Conduct security analyses, tests, and validations on applications, identifying vulnerabilities and collaborating with development teams for their remediation;

• Create and maintain automation scripts in Python and/or Shell Script to streamline Cybersecurity operations, including metric collection, report generation, and tool integrations;

• Assist in initiatives that leverage Artificial Intelligence and LLMs in security processes, contributing to analysis, information correlation, and the automation of operational tasks;

• Collaborate with AppSec, CTU, Risk Remediation, Development, and Infrastructure teams to implement security enhancements and address technical requests;

• Evaluate vulnerabilities detected by SAST, SCA, DAST, and infrastructure scanners, supporting risk prioritization and remediation efforts;

• Generate metrics, dashboards, and operational and management reports related to Cybersecurity initiatives and processes;

• Participate in area projects and initiatives, aiding in the definition and execution of technical solutions aligned with security best practices.

⛳️ Requirements

• Experience in DevOps and/or DevSecOps environments;

• Proficient in CI/CD pipelines (Jenkins, Azure DevOps, GitLab);

• Familiarity with version control systems (Git);

• Experience with containerization and orchestration technologies such as Docker and Kubernetes;

• Knowledge of security tools integrated into the software development lifecycle (SAST, SCA, DAST);

• Experience in automation using Python and/or Shell Script;

• Understanding of Application Security (AppSec) principles and SSDLC;

• Familiarity with Artificial Intelligence concepts, LLMs, AI APIs, and process automation;

• Knowledge of agile methodologies (Scrum and Kanban);

• Strong analytical capabilities, problem-solving skills, and effective communication with multidisciplinary teams.

🏝️ Benefits

• Comprehensive health and wellness benefits;

• Opportunities for professional development and training;

• Flexible working hours and remote work options;

• Collaborative and innovative work environment;

• Competitive salary and performance-based incentives.