Security Engineer – DevSecOps, AppSec

Saipos | Sistema para Restaurante

Security Engineer implementing and maintaining security tools in CI/CD pipelines for a leading Brazilian tech company. Collaborating with development teams to enhance security measures.

Posted 7/27/2026full-timeRemote • 🇧🇷 BrazilMid-LevelSeniorWebsite

Tech Stack

Tools & technologies

AWSCloudPythonSDLCTerraformVault

About the role

Key responsibilities & impact

Implement and maintain SAST, DAST and SCA tools in the CI/CD pipeline (Bitbucket/GitHub/GitLab)
Implement, maintain, operate and evolve the Secrets Manager and Vault
Perform continuous secret scanning in repositories and drive remediation of findings with development teams
Conduct security-focused code reviews on critical features — authentication, authorization, external integrations, handling of sensitive data
Harden infrastructure: Terraform state, IAM policies, AWS configurations, Security Groups
Support remediation of technical findings collected from security analysis tools, external pentests and internal scans
Build and lead the Security Champions program — identify focal points within dev squads and structure ongoing training
Conduct threat modeling for new features and critical integrations with product and engineering teams
Define and document security requirements in the SDLC — from design to deployment
Assess the security of internal and external APIs, partner integrations and authentication flows

Requirements

What you’ll need

Hands-on experience with CI/CD pipelines and integrating security tools (SAST, SCA, secret scanning) into the development workflow.
Strong knowledge of AWS: IAM, S3, Lambda, Security Groups, VPC, KMS and cloud security best practices.
Experience with infrastructure as code (Terraform) — able to identify and remediate security issues in IaC.
Knowledge of OWASP Top 10 and OWASP API Security Top 10 with the ability to apply them in code and architecture reviews.
Ability to write scripts and automations for analysis and remediation (Python or Bash).
Ability to read and interpret code in at least one language used in the product.
Critical thinking and risk analysis.
Proactive: initiative and anticipation.
Interpersonal communication with development teams.
Technical independence.
Collaboration and teamwork.
Teaching skills and knowledge transfer.
Result-oriented: delivery and outcomes.

Benefits

Comp & perks

Contract (PJ) with 30 days of paid leave
Health insurance with monthly premium 100% covered by the company (for contractors after 6 months)
Dental plan (for contractors after 6 months)
Life insurance
Full equipment kit
Home office allowance - R$180.00/month
Day off during your birthday month
Gympass discount
No dress code — be yourself!
Extended maternity and paternity leave