Application Engineer

• Conduct secure code reviews for Go-based microservices and identify vulnerabilities early in the development cycle
• Perform security testing of APIs, web applications, and backend services before they reach production
• Establish and evolve secure coding standards, guardrails, and reusable patterns for engineering teams
• Lead threat modeling sessions with engineering and product teams at the design phase of new features and services
• Define and enforce security gates in CI/CD pipelines: SAST, DAST, SCA, and secrets scanning with blocking criteria for high-severity findings
• Own the DAST process end-to-end: tool selection, scheduling, escalation workflows, and remediation tracking
• Integrate container image scanning and infrastructure-as-code (IaC) security checks into deployment pipelines
• Support hardening initiatives across Kubernetes, ingress, and workloads
• Contribute to the security observability program by defining and tuning alerting rules for authentication anomalies and suspicious API usage
• Drive the adoption of secure development across engineering teams by providing guidance, training, and hands-on support
• Build and maintain security documentation, runbooks, and standards
• Triage, prioritize, and track remediation of security findings across the platform
• Coordinate external penetration tests and work with vendors on scope, debriefs, and remediation plans
• Sit with product and business teams to understand risk from a product perspective
• Ensure there are no open high-severity findings older than 30 days

Application Security Engineer

• Investigate and resolve complex production incidents across distributed applications and microservices.
• Analyze application logs, APIs, SQL data, and system integrations to identify root causes of production issues.
• Perform structured Root Cause Analysis (RCA) and document findings, corrective actions, and preventive recommendations.
• Debug backend services developed primarily in Node.js and TypeScript, implementing small code fixes when required.
• Validate production fixes through API testing, SQL validation, and regression verification before deployment.
• Collaborate closely with Development, QA, Infrastructure, and third-party vendors to coordinate incident resolution.
• Differentiate issues originating from internally managed applications versus external platforms and coordinate the appropriate resolution path.
• Monitor production environments and proactively identify potential risks before they impact business operations.
• Communicate investigation progress, technical findings, and recommendations to both technical teams and business stakeholders.
• Support deployment validation and investigate issues related to releases, configuration changes, or infrastructure updates.
• Contribute to the continuous improvement of support processes, documentation, and operational best practices.
• Prioritize multiple production incidents based on business impact while maintaining high-quality communication throughout the resolution process.

Application Support Engineer, L3

• Drives the design chain value proposition by generating design wins in technologies and registrations for customers engaged in product design
• Interface with engineering departments of customers and suppliers
• Develops and implements the technical sales account penetration strategy
• Provides participation in supplier/customer design reviews
• Manages the product from beginning to end with communication and in-depth consultation with customers, sales, and vendors
• Creates presentations and other sales tools to enhance technical value

Field Application Engineer

• Define and evolve ROIT's Application Security and DevSecOps strategy;
• Implement continuous security practices throughout the software development lifecycle (Secure SDLC);
• Integrate security tools and controls into CI/CD pipelines;
• Implement and evolve practices related to: SAST; DAST; SCA; Secret Scanning; Container Scanning; IaC Scanning;
• Define and disseminate secure standards for: APIs; microservices; Kubernetes; cloud workloads;
• Support engineering teams in identifying, prioritizing and remediating vulnerabilities;
• Participate in threat modeling, architectural reviews and the definition of security controls;
• Support initiatives related to ISO 27001, compliance, risk management and audits;
• Monitor critical vulnerabilities, risks and incidents related to application security;
• Automate security processes and controls whenever possible;
• Promote a security culture across technical teams, acting in a consultative and collaborative manner;
• Contribute to increasing the organization’s technical maturity in modern security practices.

Application Engineer jobs in Brazil

See all jobs on JobTailor

Application Security Engineer

Application Support Engineer, L3

Field Application Engineer

Application Security Engineer