Senior Security Engineer – AppSec

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Take ownership of essential application security services and security tools, including SAST/DAST, IAM, vulnerability management, and comprehensive detection pipelines.

• Lead post-incident evaluations and retrospectives, transforming root-cause analyses into actionable guardrails, automation solutions, and policy enhancements.

• Promote security-by-design principles by drafting RFCs, threat models, and architectural design documentation for high-risk initiatives.

• Implement and uphold vulnerability remediation service level agreements (SLAs) and security metrics using monitoring systems.

• Carry out security-critical migrations and platform updates while ensuring data integrity and audit compliance.

• Collaborate with Engineering, Legal, and Product teams on medium to large-scale security projects.

• Foster software security across product lines, starting with application security and extending into detection engineering, IAM, and vulnerability management.

• Manage a security control domain comprehensively and contribute to the development of the security engineering program.

⛳️ Requirements

• A background in security engineering is essential.

• Previous experience in delivering impactful security tools, detection strategies, or secure SDLC practices within contemporary cloud environments is required.

• A readiness to assist with Cloud Security, GRC, or Detection contexts as priorities shift is expected.

• Significant experience with modern cloud architectures and container ecosystems, including AWS/EKS, GCP/GKE, Istio, and ArgoCD, is necessary.

• Proficiency in both English and Portuguese is required.

• Capability to convert complex technical security risks into practical recommendations for both technical and non-technical stakeholders.

• Aptitude for balancing stringent security protocols with product development speed and making informed, data-driven trade-off decisions.

• Comprehensive knowledge of secure coding practices is essential.

• Expertise in writing clean, well-tested code for security automation is required.

• Familiarity with governance and compliance frameworks such as SOC 2, ISO 27001, LGPD, and GDPR is necessary.

🏝️ Benefits

• Complimentary Gold+ Wellhub membership providing access to onsite gyms and studios, digital fitness programs, and online wellness resources; includes the option to add up to three family members.

• Wellz emotional wellbeing program offering personalized journeys, 52 individual therapy sessions annually, and on-demand content.

• Health, dental, and life insurance coverage.

• Flexible benefits program.

• Flexible working arrangements; remote and hybrid options available, with specific models discussed with the recruiter and hiring manager.

• Home office reimbursement.

• Vacation entitlement after 6 months of employment.

• An additional 3 days off per year.

• 1 day off for each year of service, up to a maximum of 5 extra days.

• An extra holiday to celebrate your birthday.

• 100% paid parental leave for all new parents.

• Extended leave and a part-time ramp-back period for parents giving birth.

• Access to exceptional learning platforms and engaging interactive sessions.

• Customized development roadmap and internal career advancement opportunities.

• Continuous learning and feedback mechanisms.

• A supportive, inclusive culture with a commitment to fair pay.