Senior Security Engineer – InfoSec

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Investigate, assess, and respond to security incidents and potential threat attempts.

• Safeguard Wellhub’s cloud-based infrastructure from both internal and external threats.

• Design and implement cybersecurity projects and mitigation strategies in collaboration with IT, Cloud Security, and engineering teams.

• Improve cybersecurity observability, tools, and processes.

• Act as the first responder during incident response efforts.

• Ensure swift triage, containment, and prompt communication with stakeholders.

• Contribute to the development of safe, secure, and resilient products.

• Organize and oversee interdependencies among security initiatives and various technology domains.

• Create, update, and maintain automation for security ticket triage and incident response workflows.

• Design, assess, and manage AI-assisted workflows utilizing LLMs and agents, incorporating human oversight.

• Assist in enhancing detection and response capabilities for AI-related risks, which include LLM applications, AI agents, and employee utilization of AI tools.

• Collaborate with IT, Cloud Security, and engineering teams to bolster security measures and deliver reliable products.

⛳️ Requirements

• Bachelor’s Degree in Computer Science, Engineering, Information Technology, or related fields.

• Previous experience in Security Engineering is essential.

• Previous experience with cloud technologies is required.

• Demonstrated experience with AWS and executing medium to large-scale projects.

• Capability to identify, analyze, and clarify hacking attempts, security incidents, and monitoring alerts.

• Experience with a SIEM, including monitoring alarms, indicators of compromise, and use cases.

• Familiarity with programming languages for automation purposes.

• Understanding of information security frameworks, standards, and best practices.

• Knowledge of information security certifications and standards such as GPDR, PCI-DSS, ISO27001, SOC 2, and HIPAA.

• Proficient in both English and Portuguese.

• Experience utilizing AI tools and LLM-based automation for investigation, triage, and detection engineering, with careful validation of outputs.

• Comprehension of AI security risks, including prompt injection, data leakage, insecure access to agents/tools, and shadow AI.

• Ability to identify, manage, and engage with project stakeholders.

• Capability to discuss security challenges and enhancements with security engineers and peers.

• Proactive mindset towards resolving and preventing incidents.

• Ability to present findings to leadership effectively.

• Ability to uphold threat intelligence initiatives at a high level.

🏝️ Benefits

• Free Gold+ Wellhub membership, granting access to onsite gyms and studios, digital fitness programs, and online wellness resources.

• Option to include up to three family members in the Wellhub plan.

• Wellz emotional wellbeing program, offering 52 individual therapy sessions per year along with on-demand content.

• Comprehensive health, dental, and life insurance coverage.

• Flexible benefits program.

• Hybrid and remote work options available.

• Home office reimbursement.

• Flexible scheduling in accordance with time zones, team requirements, and personal routines.

• Vacation entitlement after 6 months of employment.

• Additional 3 days off each year.

• 1 day off for each year of tenure, up to a maximum of 5 additional days.

• An extra holiday to celebrate your birthday.

• 100% paid parental leave for all new parents.

• Extended leave and gradual return period for parents giving birth.

• Access to premier learning platforms and interactive sessions.

• Personalized development roadmap.

• Opportunities for internal career advancement.

• Ongoing learning and feedback.

• Inclusive culture and commitment to equal opportunity employment.

• Syndio Fair Pay Certified equitable pay practices.