Security Engineer (DevSecOps / AppSec)

📋 Description

• Implement and maintain security tools in CI/CD (SAST, DAST, SCA, secret scanning).
• Operate, maintain, and improve Vault and cloud secret management solutions.
• Monitor repos for exposed secrets; collaborate to remediate findings.
• Perform security-focused code reviews for auth, external integrations, and sensitive data.
• Strengthen infrastructure security: Terraform, IAM, AWS, security groups, VPC, KMS.
• Develop Security Champions program and security education within teams.

🎯 Requirements

• CI/CD with security tooling: SAST, SCA, secret scanning integrated into workflows.
• AWS security services knowledge: IAM, S3, Lambda, SG, VPC, KMS.
• Terraform IaC: identify and fix security issues in configs.
• OWASP Top 10 and OWASP API Security Top 10 knowledge; apply in reviews.
• Python or Bash scripting for automation.
• Able to read and understand code in at least one language used in products.

🎁 Benefits

• Fully remote work with flexibility and autonomy.
• PJ contract with 30 days paid rest.
• Health insurance after 6 months for PJ contractors.
• Dental insurance after 6 months.
• Home office allowance of R$180 per month.
• Flexible, inclusive culture with no dress code.