Staff Security Engineer – AppSec

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Develop and execute application security strategies, including those for applications utilizing LLMs and generative AI.

• Partner with development teams to embed security from the initial stages of the software development lifecycle.

• Perform architecture, code, and design reviews to detect vulnerabilities.

• Establish guardrails and standards for applications powered by LLMs.

• Create guidelines for the secure utilization of AI-assisted development tools.

• Formulate and advocate for security standards and best practices.

• Offer technical guidance and security training.

• Utilize and maintain expertise in automated validation tools within CI/CD, including SAST, DAST, SCA, and Secret Scanning.

• Track threat trends, particularly those targeting AI systems.

• Innovate solutions to complex security issues while balancing business requirements and risks.

• Conduct threat hunting in corporate and production environments.

• Define security architecture standards in collaboration with Engineering and Product teams.

• Develop architectural plans and technical roadmaps for the migration of legacy systems.

• Identify vulnerabilities, evaluate risks, and assist in preventing attacks.

• Engage in security incident analysis and response.

• Educate and raise awareness among development teams about best practices and the secure use of AI assistants.

⛳️ Requirements

• Completed or pursuing an undergraduate degree in Information Security, Computer Science, Information Systems, Software Engineering, or a related discipline.

• Understanding of common attack vectors.

• Experience in conducting threat modeling.

• Familiarity with effective protection mechanisms for APIs and mobile applications.

• Knowledge of fundamental Cloud security services and concepts (AWS, Azure, or GCP).

• Awareness of security risks in applications utilizing LLMs and generative AI, including the OWASP Top 10 for LLM Applications and MITRE ATLAS.

• Capability to identify improvement opportunities, new solutions, and alerts.

• Strong influence and negotiation skills to guide teams.

• Ability to work autonomously.

• Clear, candid, and assertive communication skills.

• Proactive in seeking or requesting information.

• Comfortable collaborating in multidisciplinary teams using agile methodologies.

• Proficient in reading and communicating in English.

🏝️ Benefits

• Base salary.

• Variable compensation package (profit sharing, long-term incentive plan, or commission), contingent on role eligibility.

• Health and dental insurance with copayments.

• Verde Virtual Hospital: 24/7 telemedicine support.

• Prescription drug subsidy.

• Meal and/or food allowance – Pluxee.

• Childcare assistance for children up to 5 years and 11 months.

• Support for employees with children with disabilities.

• Life insurance.

• Fuel allowance or commuting assistance.

• Home office allowance for hybrid or remote roles.

• New Parent Welcome Kit.

• SESC membership.

• Education benefit: Internal self-development platform (Studa and Stone Library).

• Acolhe360º: Complimentary emotional support.

• Quick Massage and on-site medical clinic.

• Wellhub.

• TotalPass.

• Pet Club.

• Flash.

• Férias&Co.

• Transportation voucher.

• Allya.

• Educational partnerships.