Product Security Analyst

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Evaluate technical vulnerabilities and recommend solutions to enhance the security of our platform, engaging with our stack (Ruby, Go, and PHP) and developing security fixes in AWS/Lambda.

• Swiftly assess requests in the development queue to minimize the AppSec bottleneck and facilitate Engineering deliveries.

• Proactively suggest and implement code fixes, going beyond simply reporting issues.

• Perform threat modeling and apply secure-by-design principles to product initiatives.

• Develop guardrails, tools, and automations that make the secure path the default for Engineering teams.

• Integrate and fine-tune security tools within the CI/CD pipeline (SAST, SCA, and secret scanning), ensuring minimal noise and few false positives.

⛳️ Requirements

• Experience in software or security engineering delivering production code (preferably Ruby and PHP), including automation in AWS/Lambda.

• Background in Application Security/Product Security: threat modeling, secure-by-design principles, and the creation of guardrails and tooling.

• Strong understanding of CI/CD pipeline security, with calibrated SAST, SCA, and secret scanning.

• Knowledge of AWS cloud security as it pertains to product environments.

• Security-related certifications are advantageous.

• Excellent collaboration skills with Engineering teams, focusing on proposing and executing fixes directly in code rather than merely communicating findings.

• Proficiency in English (both written and spoken).

🏝️ Benefits

• Fully remote work environment.

• Trust-based culture centered on results, offering numerous challenges and learning opportunities.

• Autonomy and ownership within a collaborative and empathetic atmosphere.

• A feedback-oriented culture with regular one-on-ones with supportive leadership and no micromanagement.

• Comprehensive benefits package including meal/food allowance, childcare support, home office allowance, health, education, and cultural benefits, Gympass, a birthday day-off, discounts on therapy and English courses, and other partner perks.