ORAEX CLOUD CONSULTING

Security Engineer

• Implement and evolve Cybersecurity practices with a focus on DevSecOps, Application Security (AppSec) and security process automation;
• Support the integration of security controls into CI/CD pipelines (Jenkins, Azure DevOps and GitLab), contributing to SSDLC adherence and continuous improvement of secure development processes;
• Perform security analyses, tests and validations on applications, identifying vulnerabilities and supporting their remediation with development teams;
• Develop and maintain automations in Python and/or Shell Script to optimize Cybersecurity activities, including metric collection, report generation and tool integrations;
• Support initiatives applying Artificial Intelligence and LLMs in security processes, contributing to analysis, information correlation and automation of operational activities;
• Work together with AppSec, CTU, Risk Remediation, Development and Infrastructure teams to implement security improvements and follow up on technical requests;
• Analyze vulnerabilities identified by SAST, SCA, DAST and infrastructure scanners, supporting risk prioritization and remediation;
• Produce metrics, dashboards and operational and management reports related to Cybersecurity initiatives and processes;
• Contribute to area projects and initiatives, participating in the definition and implementation of technical solutions aligned with security best practices.

Mid-level Cybersecurity Analyst – AppSec