Senior Cybersecurity Analyst

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Collaborate closely with development teams to advocate for secure development methodologies (Secure Coding)

• Assist in the implementation and advancement of Application Security (AppSec) and DevSecOps initiatives

• Perform security evaluations of web applications, APIs, and integrations

• Detect vulnerabilities and assist teams in addressing and mitigating risks

• Engage in code reviews with a focus on security

• Utilize SAST, DAST, SCA, and vulnerability scanning tools

• Aid in the creation of secure pipelines within CI/CD environments

• Help establish application security standards, policies, and best practices

• Work on security measures related to Artificial Intelligence, encompassing data protection, secure model utilization, and risk analysis

• Evaluate risks associated with generative AI and intelligent automation

• Collaborate with Engineering, Architecture, Cloud, and Information Security teams

• Foster security and secure AI practices awareness among technical and product teams

• Keep track of trends, threats, and best practices in AppSec, DevSecOps, and AI security

⛳️ Requirements

• Understanding of Information Security, particularly Application Security (AppSec)

• Familiarity with secure development practices and the OWASP Top 10

• Experience with or knowledge of SAST, DAST, and SCA

• Proficiency in tools such as SonarQube, Checkmarx, Semgrep, OWASP ZAP, Burp Suite, Snyk, and Dependency-Check

• Knowledge of REST APIs, contemporary web applications, and microservices

• Familiarity with CI/CD pipelines using GitHub Actions, GitLab CI/CD, or Jenkins

• Basic understanding of cloud computing and security in AWS or Google Cloud

• Experience with Git

• Knowledge of Docker and Kubernetes

• Familiarity with tools like Trivy, Wiz, or Prisma Cloud

• Interest in or experience with security related to Artificial Intelligence

• Understanding of generative AI security, data protection, and risk assessment

• Knowledge of the OWASP LLM Top 10

• Excellent communication skills for collaboration with development, engineering, and product teams

• Analytical and cooperative mindset, with a continuous interest in both offensive and defensive security

• Ability to work independently, prioritize risks, and thrive in dynamic settings

• Capability to investigate, test, automate, and implement improvements

• Strong organizational skills for documenting standards, processes, and technical decisions

🏝️ Benefits

• Flash Card offering flexible benefits for food, meals, mobility, healthcare, education, culture, and well-being

• Medical insurance

• Dental insurance

• Life insurance

• Transportation allowance

• Home office allowance

• Childcare assistance

• Extended maternity and paternity leave

• TotalPass

• OnHappy

• Pet insurance collaboration with Guapeco

• C4life providing legal, emotional, social, and financial support, along with pet assistance

• +Família by Avus

• Partnership with SESC

• Profit Sharing and Results-Based Bonus

• Birthday day off

• Freedom to create, test, and transform ideas into tangible solutions

• Accelerated learning opportunities

• Inclusive and diverse workplace

• Fully remote work setup