Cyber Security Specialist | AppSec

EBANX; Curitiba; Presencial; BRL 180 000 - 320 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Performance Bonus

Meal Allowance

Education Support

Skills Budget

Language Classes

Health & Well-being

Flexible Work Culture

Well-being Program

Resumo da oferta

EBANX in Curitiba is seeking an Application Security Specialist (AppSec) to lead security assessments, shape the AppSec strategy, and mentor junior, mid, and senior analysts across product squads.

You will architect threat modeling, drive cross‑functional security initiatives, manage vulnerabilities from SAST/DAST/SCA, and communicate risk to international stakeholders in English.

This role offers a comprehensive benefits package and a chance to shape secure payments at a global scale.

Qualificações

• Deep expertise in AppSec tooling including SAST, DAST, and SCA within CI/CD pipelines.
• Experience securing REST/GraphQL APIs and managing tokens, certificates, and secrets.
• Ability to review and secure code across Java, Python, Go, Node.js, or .NET.
• Strong English communication for global stakeholders.

Responsabilidades

• Lead the AppSec strategy and provide technical mentorship to junior, mid, and senior analysts across product squads.
• Architect and oversee Threat Modeling sessions to identify architectural security flaws early in design.
• Drive global security projects and communicate risk effectively in English to international stakeholders.
• Manage vulnerability lifecycle from SAST/DAST/SCA, providing actionable guidance to engineering teams.

Conhecimentos

AppSec tooling

API security

Secret management

Multi-language code review

English fluency

Ferramentas

SAST

DAST

SCA

HashiCorp Vault

AWS Secrets Manager

Descrição da oferta de emprego

Application Security Specialist | AppSec

Curitiba | On-site

EBANX is one of the most successful fintechs to emerge from Latin America — and today, we are building a truly global payments company. Our mission has remained constant from day one: to unlock access and enable companies and consumers to participate in the digital economy, no matter where they are. What started as a bold vision has grown into a platform that connects some of the world's largest digital businesses with customers across 21 of the fastest-growing markets. We operate where complexity exists — turning local challenges into global opportunities, and building the infrastructure that allows payments to move further, faster, and smarter. We are a team of builders and problem-solvers. We think globally, act with curiosity, and believe diversity of thought is a competitive advantage.

As EBANX enters its next phase of hyper growth, we are looking for people who want to shape the future of payments, expand what's possible, and help connect businesses and consumers across borders. Let's build what's next — together.

At EBANX's IT team you don't just manage systems and infrastructure. You ensure that our technology, which connects millions of people to global companies, runs flawlessly every day. Here, every solution you create has a direct impact on the revolution of digital payments, making our work trulyOut Of The Ordinary.

What your day-to-day will look like

• Lead the AppSec strategy and technical mentorship , guiding Junior, Mid-level, and Senior analysts in performing deep-dive security assessments and complex remediation;
• Architect and oversee Threat Modeling sessions across diverse product squads to identify architectural flaws and security requirements early in the design phase;
• Drive global security projects and communicate risk effectively in English to international stakeholders, ensuring that security initiatives align with business velocity;
• Manage the lifecycle of security vulnerabilities discovered through SAST, DAST, and SCA , providing actionable insights and polyglot code-fix guidance to engineering teams.

What you need to shine in this role

• Deep expertise in the AppSec Tooling ecosystem, including hands-on experience configuring and tuning SAST (Static Analysis), DAST (Dynamic Analysis), and SCA (Software Composition Analysis) within CI/CD pipelines;
• Strong command of API Security and Secret Management, with a proven track record of securing REST/GraphQL APIs and implementing robust policies for tokens, certificates, and secrets (e.g., HashiCorp Vault, AWS Secrets Manager);
• Multi-language coding proficiency, capable of reviewing and securing code across various stacks (such as Java, Python, Go, Node.js, or .NET) to support diverse development teams;
• Advanced to Fluent English communication, enabling you to lead technical discussions, document global standards, and collaborate with distributed teams worldwide.

Bonus points if you have

• Advanced Security Certifications such as OSWE, CASE, CSSLP, or CISSP, demonstrating a high level of professional dedication;
• Experience automating custom security "guardrails" or building internal tools to automate the triaging of secrets and vulnerabilities at scale;
• Active participation in the security community, whether through Bug Bounty programs, open-source security projects, or speaking at conferences like OWASP Global AppSec.

EBANX offers:

• Performance Bonus: Annual bonus program based on company results.
• Meal Allowance: Monthly allowance to support your meals.
• EBANX Education: Financial assistance for undergraduate, graduate, and MBA programs to support your professional growth.
• EBANX Skills: Dedicated budget for courses, certifications, and workshops to encourage continuous learning.
• Language Classes: Language classes to support your personal and professional development.
• Health & Well-being: Medical and dental plans with extensive coverage, including support for dependents and wellness programs.
  Flexible Work Culture: Semi-flexible hours, additional day off on your birthday, and year-end break to support work-life balance.
• Well-being Program: Access to activities and resources that promote physical and mental health.

Learn more about our #ebanxlife onLinkedIn and Instagram , and see what it's like to be part of a global team that breaks barriers, creates opportunities, and celebrates every achievement together.

An Out Of The Ordinary career is waiting for you here!

We believe it is possible to create a diverse, equal and inclusive environment. That is why we have prepared a questionnaire that addresses demographic issues by collecting sensitive personal data. The information collected is part of our efforts to monitor our evolution, so filling it out is optional, but we invite you to do so. Filling in or refusing to provide these details will in no way affect your hiring process, but it will help us to get to know the people who apply to EBANX better. Check out this link for more information to support your decision on whether or not to provide consent for the processing of this data.