Key skills
AWSAzureCloudCyber SecurityGoogle Cloud PlatformKubernetesSDLCGCPGoogle CloudIAMPrismaOAuthCI/CDCheckmarxOWASP
About this role
Role Overview
- Lead Cyber Security and AppSec initiatives;
- Define security standards and controls;
- Support Secure SDLC and DevSecOps practices;
- Manage vulnerabilities in applications, infrastructure, and cloud;
- Assist squads in remediating security flaws;
- Participate in secure architecture reviews;
- Conduct security analyses of APIs and web applications;
- Support incident response and monitoring of security metrics;
- Foster a security culture and continuous improvement.
Requirements
- Bachelor's degree in Systems Analysis, Computer Science, Data Processing, Computer Engineering, or related fields;
- Experience in Information Security / Cyber Security;
- Knowledge of: AppSec, DevSecOps, OWASP Top 10, API Security, IAM, SIEM/SOC, hardening, and Vulnerability Management;
- Experience with SAST/DAST/SCA tools and security in CI/CD;
- Experience with AWS, Azure, and/or GCP environments;
- Knowledge of Kubernetes, OAuth, MFA, and web applications;
- Familiarity with ISO 27001, NIST, CIS Controls, and Brazil's General Data Protection Law (LGPD).
Nice to have:
- Experience with tools such as Defender, Sentinel, Checkmarx, Veracode, Prisma Cloud, and CrowdStrike;
- Certifications such as CISSP, CISM, CEH, Security+, and AWS Security Specialty;
- Experience in regulated or financial environments.
Tech Stack
- AWS
- Azure
- Cloud
- Cyber Security
- Google Cloud Platform
- Kubernetes
- SDLC
Benefits
- Meal voucher on Flash card 🍽️
- Food allowance on Flash card 🛒
- SulAmérica health insurance 🏥
- MetLife dental insurance 😁
- TotalPass and Wellhub wellness programs 💪
- Birthday day off 🎉
- Childcare assistance 👶
- Corporate university
- UniSign 📚
- Life insurance 🔒
- Educational partnerships 🎓
- SESC partnership/discounts 🏖️
- "Best Maternity" program 🤱
- Extended maternity and paternity leave 👪
- Pharmacy card 💊
- Profit-sharing (PLR) 💼