Cybersecurity Specialist – DevSecOps

Jobtailor; São Paulo; Presencial; BRL 180 000 - 240 000; Tempo integral

Resumo da oferta

Jobtailor is seeking a DevSecOps Engineer to advance security across our CI/CD pipelines, cloud environments, and containerized workloads in São Paulo. You will promote best practices, lead remediation of vulnerabilities, and collaborate with development teams to secure applications and infrastructures.

Strong hands‑on experience with SAST/DAST/SCA tools, IaC automation, and cloud security in AWS, Azure, or GCP is required.

Qualificações

• Strong experience in DevSecOps and cybersecurity.
• Knowledge of integrating security into CI/CD pipelines.
• Experience with OWASP Top 10 and vulnerability mitigation.
• Knowledge of API and web application protection.
• Hands‑on experience with SAST, DAST, and SCA tools.
• Knowledge of cloud security (AWS, Azure and/or GCP).
• Experience with credential management and access control.
• Knowledge of Docker and Kubernetes.
• Experience analyzing and remediating vulnerabilities in containers.
• Knowledge of Infrastructure as Code (Terraform, CloudFormation or similar).
• Experience automating security processes.
• Knowledge of risk management and incident response.

Responsabilidades

• Implement and promote DevSecOps practices within CI/CD pipelines.
• Ensure vulnerabilities are identified and remediated before production deployment.
• Work on application, API, and cloud environment security.
• Conduct vulnerability assessments using SAST, DAST, and SCA tools.
• Implement and monitor image scanning processes and container security.
• Define and enforce security controls in AWS, Azure and/or GCP environments.
• Automate security processes using Infrastructure as Code (IaC).
• Support development teams in adopting security best practices.
• Lead risk analyses, remediation efforts, and the handling of critical vulnerabilities.
• Contribute to strategic decisions related to application and infrastructure security.

Conhecimentos

DevSecOps

Cybersecurity

CI/CD integration

OWASP Top 10

API & Web Protection

SAST/DAST/SCA

Cloud security

Docker

Kubernetes

Infrastructure as Code

Credential management

Access control

Risk management

Incident response

Ferramentas

Docker

Kubernetes

Terraform

CloudFormation

AWS

Azure

GCP

SAST tools

DAST tools

SCA tools

Descrição da oferta de emprego

Responsibilities

• Implement and promote DevSecOps practices within CI/CD pipelines;
• Ensure vulnerabilities are identified and remediated before production deployment;
• Work on application, API, and cloud environment security;
• Conduct vulnerability assessments using SAST, DAST, and SCA tools;
• Implement and monitor image scanning processes and container security;
• Define and enforce security controls in AWS, Azure and/or GCP environments;
• Automate security processes using Infrastructure as Code (IaC);
• Support development teams in adopting security best practices;
• Lead risk analyses, remediation efforts, and the handling of critical vulnerabilities;
• Contribute to strategic decisions related to application and infrastructure security.

Requirements

• Strong experience in DevSecOps and cybersecurity;
• Knowledge of integrating security into CI/CD pipelines;
• Experience with OWASP Top 10 and vulnerability mitigation;
• Knowledge of API and web application protection;
• Hands‑on experience with SAST, DAST, and SCA tools;
• Knowledge of cloud security (AWS, Azure and/or GCP);
• Experience with credential management and access control;
• Knowledge of Docker and Kubernetes;
• Experience analyzing and remediating vulnerabilities in containers;
• Knowledge of Infrastructure as Code (Terraform, CloudFormation or similar);
• Experience automating security processes;
• Knowledge of risk management and incident response.