Devsecops Engineer

Jobgether; Brasil; Remoto; BRL 120.000 - 180.000; Tempo integral

Benefícios oferecidos por esta vaga

Competitive compensation

Stock options

Remote-first environment

Flexible office access

Global collaboration

Professional growth

Inclusive environment

Accessibility support

Resumo da vaga

Jobgether is seeking a DevSecOps Engineer based in Brazil to strengthen security across cloud, development, and deployment environments. You will design automated security solutions, integrate scanners into CI/CD, and ensure secure infrastructure while promoting a security-first mindset across teams.

In a remote-first, global organization, you will collaborate with developers, security, and operations to implement threat modeling, vulnerability management, and incident response practices,

Qualificações

• 3+ years in Security/SecOps or DevSecOps, with cloud experience.
• Hands-on with policy-as-code and IaC security scanning tools.
• Proficient in JavaScript/TypeScript or Python; CI/CD expertise.

Responsabilidades

• Develop, implement, and maintain automated security tools and processes.
• Integrate SAST, DAST, and vulnerability tooling into CI/CD pipelines.
• Secure cloud infra with IaC security scanning and misconfiguration remediation.
• Configure and optimize WAFs and firewall configurations for apps.
• Monitor, detect, and respond to security incidents with security-first culture.
• Collaborate with dev/ops/security teams to embed security across SDLC.
• Support compliance, audits, and evidence gathering for controls.

Conhecimentos

JavaScript/TypeScript

Python

CI/CD pipelines

Cloud security

WAF management

Ferramentas

Checkov

tfsec

Terrascan

Cloudflare

Docker

Kubernetes

Descrição da vaga

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a DevSecOps Engineer based in Brazil.

We are looking for an experienced DevSecOps Engineer to strengthen security across cloud infrastructure, software development, and deployment environments within a fast-growing global technology organization. In this role, you will bridge the gap between development, operations, and security teams, ensuring that security is embedded throughout the software development lifecycle. You will design and implement automated security solutions, integrate vulnerability detection and code analysis tools into CI/CD pipelines, and help maintain secure, resilient infrastructure. Working with modern technologies and automation frameworks, you will proactively identify risks, improve security controls, and support continuous monitoring across systems. You will also contribute to compliance initiatives and security best practices while helping engineering teams deliver reliable and secure products at scale. This is an exciting opportunity to make a meaningful impact in a collaborative, remote-first environment where automation, innovation, and security are essential.

Accountabilities:

• Develop, implement, and maintain automated security tools and processes to identify vulnerabilities, perform code analysis, monitor systems, and conduct security testing.
• Integrate security scanners, static application security testing (SAST), dynamic application security testing (DAST), and vulnerability assessment tools into CI/CD pipelines.
• Identify, assess, and remediate infrastructure misconfigurations using policy-as-code approaches and Infrastructure as Code (IaC) security scanning solutions.
• Collaborate with infrastructure and operations teams to design, implement, and maintain secure cloud infrastructure, network architecture, and deployment processes.
• Establish and enforce appropriate security controls, including access management, authentication, encryption, and infrastructure protection.
• Configure, manage, and optimize Web Application Firewalls (WAF) and firewall solutions to protect applications and infrastructure against potential threats.
• Implement and maintain continuous security monitoring processes to proactively detect suspicious activities, vulnerabilities, and security anomalies.
• Perform log analysis, support intrusion detection capabilities, and monitor system activity to identify and respond to potential security incidents.
• Work closely with development, operations, and security teams to integrate security requirements into the software development lifecycle and promote a security-first engineering culture.
• Assess potential security risks and recommend appropriate mitigation strategies, applying threat modeling, vulnerability management, and incident response practices.
• Support compliance assessments, security audits, and regulatory requirements by collaborating with auditors and providing relevant documentation and evidence of security controls.
• Identify opportunities to improve security automation, streamline operational processes, and strengthen the organization's overall security posture.
• Promote security awareness and best practices across engineering teams, ensuring security considerations are incorporated into development and deployment decisions.

Requirements:

• At least 3 years of professional experience in Security, Security Operations (SecOps), DevSecOps, or a related technical discipline.
• Hands-on experience identifying, assessing, and remediating infrastructure misconfigurations using policy-as-code methodologies and IaC security scanning tools such as Checkov, tfsec, or Terrascan.
• Basic programming and scripting skills in JavaScript, TypeScript, and/or Python.
• Experience with Git or other version control systems and a solid understanding of CI/CD pipelines.
• Practical experience managing and tuning Web Application Firewall (WAF) and firewall configurations, preferably using Cloudflare or equivalent solutions.
• Strong understanding of security principles, standards, and best practices, including OWASP Top 10, secure coding, encryption, authentication, access control, and security testing.
• Familiarity with DevSecOps methodologies, infrastructure automation, containerization, and orchestration technologies such as Docker and Kubernetes.
• Understanding of configuration management, infrastructure security, and monitoring and observability practices.
• Ability to assess security risks and implement appropriate controls, with knowledge of threat modeling, risk assessment, vulnerability management, and incident response planning.
• Experience with automation tools and security solutions, including SAST, DAST, vulnerability management platforms, log analysis tools, and security-focused frameworks.
• Strong analytical and troubleshooting skills, with the ability to identify security weaknesses and develop practical remediation strategies.
• Excellent communication and collaboration skills, with the ability to work effectively across development, security, and operations teams.
• Proactive mindset, attention to detail, and the ability to promote security awareness while integrating security practices into everyday engineering workflows.

Nice to have:

• Relevant cybersecurity, cloud security, or DevSecOps certifications.
• Additional experience implementing security automation and integrating security tools into complex CI/CD environments.
• Familiarity with cloud security architectures and enterprise-scale infrastructure environments.
• Experience supporting security compliance initiatives, internal controls, and external audits.

Benefits:

• Competitive compensation: Market-aligned salary based on experience, skills, and geographical location, with compensation localized to the applicable currency.
• Stock options: Opportunities to receive equity grants, depending on role, employment status, and location.
• Additional benefits and perks: Access to supplementary benefits and rewards tailored to employment status and country.
• Remote-first flexibility: Work remotely with flexibility in your working environment.
• Flexible office access: Optional membership to coworking and office spaces through IWG.
• Global collaboration: Work alongside an international team distributed across more than 100 countries.
• Professional growth: Opportunities to develop technical expertise and contribute to innovative security and infrastructure initiatives.
• Inclusive environment: Join a diverse, international workplace that values equal opportunities and professional development.
• Accessibility support: Reasonable accommodations are available throughout the recruitment, interview, and assessment processes for candidates who require them.

We appreciate your interest and wish you the best!

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.