DevSecOps Engineer (Remote from Brazil)

Jobgether; Teletrabalho; BRL 645.000 - 807.000; Tempo integral

Resumo da oferta

A technology recruitment partner is seeking a DevSecOps Engineer in Brazil to enhance security measures in cloud environments. You'll design CI/CD pipelines, automate vulnerability management, and collaborate with various teams to improve operational resilience. Ideal candidates have over 5 years of experience in DevSecOps and a solid understanding of cloud services, Kubernetes, and security practices. This role offers a competitive salary and remote working flexibility.

Serviços

Competitive salary and stock options

Comprehensive health benefits

Home-office setup allowance (USD $500)

Monthly stipend for remote work expenses (USD $150)

Qualificações

• 5+ years of experience in DevSecOps, security engineering, or cloud security.
• Hands-on cloud service experience (AWS, GCP, or Azure).
• Strong knowledge of CI/CD practices and issues.

Responsabilidades

• Embed security into CI/CD pipelines and manage vulnerabilities.
• Automate patching and remediation processes.
• Conduct threat modeling and security design reviews.
• Define and report key security KPIs.

Conhecimentos

Cloud service providers experience (AWS, GCP, or Azure)

Kubernetes

Terraform

Container security

Scripting/programming (Python, Go)

Identity and access management

Security tooling automation

Cross-functional collaboration

Formação académica

Bachelor's degree in Computer Science, Information Security, or equivalent

Descrição da oferta de emprego

This position is posted by Jobgether on behalf of a partner company. We are currently looking for a DevSecOps Engineer in Brazil.

In this role, you will be at the forefront of security, reliability, and DevOps, designing and implementing resilient cloud infrastructure and CI/CD pipelines. You will embed security as code throughout the software development lifecycle, automate remediation, and strengthen platform defenses while enabling rapid and safe delivery at scale. Partnering closely with engineering, DevOps, and product teams, you will help lead incident response for high-severity outages and drive measurable improvements in operational and security resilience. This position balances hands‑on technical execution with strategic influence, helping shape security standards and best practices across a distributed, remote‑first team. You will have the opportunity to impact both the reliability of the platform and the safety of the products used by millions of clients globally.

Accountabilities

• Embed security into CI/CD pipelines, including Infrastructure as Code scanning, secrets management, Software Composition Analysis, policy-as-code, and deployment guardrails.
• Automate vulnerability management, patching, and remediation across cloud and containerized workloads.
• Harden cloud and Kubernetes environments through secure configurations, network segmentation, and workload identity management.
• Advance supply chain security by managing SBOMs, artifact signing, and dependency governance.
• Develop secure deployment patterns, including canary rollouts, safe rollbacks, and guardrails to minimize impact.
• Conduct security design reviews and threat modeling for new services and major architecture changes.
• Strengthen identity and access management practices, enforcing least privilege and secure secrets lifecycle.
• Support compliance and audit readiness by operationalizing controls and maintaining documentation.
• Partner with engineering teams to champion secure coding practices and risk-based decision-making.
• Define and report key security KPIs, driving continuous improvement across infrastructure and platform security.

Requirements

• 5+ years of experience in DevSecOps, security engineering, or cloud security within modern cloud-native environments.
• Hands‑on experience with cloud service providers (AWS, GCP, or Azure), Kubernetes, Terraform, and container security.
• Strong knowledge of secure CI/CD practices, including IaC security, dependency scanning, secrets management, and policy-as-code.
• Experience automating vulnerability and patch management workflows.
• Proficiency in scripting/programming (Python, Go, or similar) for security tooling and automation.
• Solid understanding of identity and access management concepts.
• Familiarity with detection engineering, logging, telemetry, and incident response processes.
• Ability to collaborate with cross‑functional teams, explaining risks and influencing secure design decisions.
• Comfortable participating in on‑call rotations and handling high‑severity incidents.
• Bachelor’s degree in Computer Science, Information Security, or equivalent experience.

Benefits

• Competitive salary and stock options.
• Comprehensive health benefits.
• New hire home‑office setup allowance (USD $500).
• Monthly stipend for remote work expenses (USD $150 via Brex Card).
• Opportunity to work remotely with a globally distributed team.
• Inclusive, diverse, and supportive work environment.

Why Apply Through Jobgether?

We use an AI‑powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top‑fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre‑contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.