Cybersecurity Engineer

Tink; São Paulo; Teletrabalho; BRL 120.000 - 160.000; Tempo integral

Resumo da oferta

A leading tech firm is seeking a DevSecOps Engineer to enhance the security of cloud-native applications. Key responsibilities include designing secure CI/CD pipelines, collaborating on vulnerabilities, and managing AWS security. The ideal candidate should have 2+ years in a related field and proficiency in English. This position offers remote work flexibility and is based in Brazil.

Qualificações

• 2+ years of experience in DevSecOps or related field.
• Familiarity with PCI DSS preferred.
• Familiarity with threat modeling and cloud security.

Responsabilidades

• Design security controls in CI/CD pipelines.
• Integrate security scanning tools into workflows.
• Manage cloud security configurations.

Conhecimentos

DevSecOps processes

CICD pipelines

English proficiency (B1+)

Good knowledge of security best practices

Scanning tools (e.g., Checkmarx)

Formação académica

Bachelor’s Degree in relevant field

Ferramentas

AWS

Terraform

Descrição da oferta de emprego

Company Description

Founded by experienced entrepreneurs and engineers in 2016, Pismo is a technology company that provides a comprehensive processing platform for banking, card issuing and financial market infrastructure and helps customers innovate and build the next generation of banking and payment solutions. Pismo joined Visa in 2024.

Leveraging Visa’s solutions, our core platform, and an expanding suite of capabilities, Pismo addresses the technological challenges that large banks, marketplaces, and fintech companies face in migrating from legacy systems to more advanced technology in the market. Pismo’s cloud-based platform empowers firms to build and launch financial products rapidly, scaling as they grow to have a broader audience while keeping high security and availability standards.

Pismo’s 500+ employees are located in more than 10 countries around the world.

Job Description

As a DevSecOps Engineer at Pismo, you will be a key player in embedding security into every stage of our software development lifecycle. You’ll work closely with engineering, platform, and GRC teams to ensure our cloud-native infrastructure and applications are secure, scalable, and compliant with industry standards.

What you will do:

• Design and implement security controls in CI/CD pipelines (Shift Left).
• Integrate SAST, SCA, and DAST tools into development workflows.
• Collaborate with developers to remediate vulnerabilities early in the lifecycle.
• Manage and monitor cloud security configurations (AWS, EKS, IAM, GuardDuty).
• Develop and maintain infrastructure-as-code (Terraform) with security best practices.
• Support red team exercises and penetration testing remediation.
• Ensure compliance with PCI DSS and secure handling of sensitive data (e.g., PAN, PII).
• Contribute to threat modeling, risk assessments, and incident response planning.

This is a remote position. A remote position does not require job duties be performed within proximity of a Visa office location. Remote positions may be required to be present at a Visa office with scheduled notice. #LI-Remote

Qualifications

Minimum qualifications:

• 2+ years of relevant work experience with a Bachelor’s Degree OR 5+ years of relevant work experience
• Previous experience with DevSecOps process or configuration of CICD pipelines
• English proficiency: B1+ – You’ll need to be comfortable joining weekly team meetings in English.
• Good knowledge of security best practices
• Familiarity with scanning tools like Checkmarx, SonarQube, or similar
• Be based in Brazil

Nice to have:

• Bachelor’s degree completed in Computer Science, Information Systems, Software Engineering, or related fields (If not completed, expected graduation by the end of 2025 or early 2026)
• Familiarity with PCI DSS
• Experience with threat modeling
• Experience working with AWS
• Development experience
• Terraform and YAML language

Additional Information

Visa is an EEO Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status. Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with EEOC guidelines and applicable local law.