Senior Software Engineer, Security Platform

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Design, develop, and manage security engineering services primarily utilizing Golang and Python on AWS and Kubernetes.

• Maintain, enhance, and decommission existing security services.

• Take ownership of the NATS event-driven platform, covering contracts, consumers, delivery guarantees, and observability.

• Integrate scanners, maintain a system of record for findings, manage tickets, and track metrics.

• Oversee SAST, SCA, secret detection, container, and IaC security gates from tuning to enforcement.

• Create CI review agents, automate finding triage and verification, and develop remediation tools.

• Automate workflows from triage to remediation, including context reproduction, fix guidance, and routing.

• Engage in threat modeling and secure design reviews.

• Participate in the on-call rotation.

• Report to the Director of Information Security and collaborate with detection and response teams, along with network and zero trust engineers.

⛳️ Requirements

• Over 6 years of professional software engineering experience, with a strong focus on backend development.

• Recently deployed significant changes to a production application within the last 30 days.

• Strong expertise in Golang, along with practical knowledge of Python.

• Direct experience in building and managing event-driven or message-based systems (NATS, Kafka, or similar), including contracts, idempotent consumers, replay, and back-pressure management.

• Practical experience in developing and operating CI/CD pipeline tools; familiarity with GitLab CI at a fleet scale is a significant advantage.

• Knowledge of web application security, including the OWASP Top 10 in real-world applications.

• Hands-on experience with SAST, SCA, and secret-scanning tools, including tuning for an acceptable signal-to-noise ratio.

• Proven experience in AI-driven engineering, utilizing AI tools and creating agentic workflows adopted by peers.

• Working understanding of AWS and Kubernetes as deployment environments.

• Preferred: experience in fintech, payments, BNPL, or consumer lending sectors.

• Preferred: familiarity with PCI DSS and SOC 2 standards.

• Preferred: experience with software supply-chain integrity, including SBOM pipelines, dependency governance, artifact signing, and provenance.

• Preferred: knowledge of policy-as-code and admission control processes.

• Preferred: exposure to bug bounty programs or external vulnerability report triage.

• Preferred: experience in system-level threat modeling.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance.

• Flexible work hours and remote work options.

• Opportunities for professional development and training.

• A collaborative and inclusive work environment.