Principal Application Security Engineer (Brazil - Remote)

We are seeking a highly skilled and experienced Principal Application Security Engineer to join our team. This role will work closely with the development teams to ensure that security is integrated into the software development lifecycle.

What you will do:

1. Develop and implement application security best practices, policies, and procedures;
2. Conduct regular security assessments and penetration testing to identify and address vulnerabilities;
3. Collaborate with the development team to ensure that security is integrated into the software development lifecycle;
4. Monitor, analyze, and triage security logs to detect and respond to security incidents;
5. Stay up-to-date on the latest security threats and trends, and provide guidance on how to mitigate risks;
6. Provide security training and awareness programs to educate employees on secure software development best practices;
7. Integrate or build security tools that help to continuously monitor our ecosystem.

What we're looking for:

1. Bachelor's degree in Computer Science, Information Technology, or related field;
2. 5+ years of experience in application security engineering;
3. Strong knowledge of web application security vulnerabilities and best practices;
4. Hands-on experience with application security tools such as Snyk, Burp Suite, DefectDojo;
5. Experience with cloud security and container security is a plus;
6. Hands-on experience in scripting/coding, preferably in Python;
7. Excellent communication and interpersonal skills;
8. Good verbal and written communication skills in English.

What we'd love to see:

1. CISSP, CEH, CSSLP, OSCP, GWAPT or other security certifications are a plus.