Security Engineer (DevSecOps / AppSec)

📋 Description

• Implement and maintain SAST, SCA, secret-scanning, and other security controls within CI/CD
• Operate and continuously improve secrets-management solutions, including HashiCorp Vault and AWS
• Monitor repositories for exposed secrets and coordinate remediation with development teams.
• Perform security-focused code reviews for critical features involving authentication
• Harden AWS infrastructure and infrastructure-as-code, including IAM policies, Terraform state
• Support remediation of vulnerabilities and findings identified through security tools, penetration

🎯 Requirements

• Practical experience with CI/CD pipelines and integrating security tooling such as SAST, SCA, and
• Solid knowledge of AWS security services and practices, including IAM, S3, Lambda, Security Groups
• Hands-on experience with Terraform and the ability to identify and remediate security risks in
• Strong understanding of OWASP Top 10 and OWASP API Security Top 10, with the ability to apply these
• Ability to develop scripts and automations for security analysis and remediation using Python
• Ability to read and understand application code in at least one programming language used within a

🎁 Benefits

• Remote work model.
• PJ contract with 30 days of paid rest.
• Health and dental insurance with the monthly premium fully covered, subject to copayments for
• Life insurance.
• Day off during your birthday month.
• Wellhub membership.