Information Security Analyst, Mid-Level

Jobtailor

São Paulo

Presencial

BRL 150 000 - 210 000

Tempo integral

Há 3 dias

Torna-te num dos primeiros candidatos

Recebe mais respostas dos empregadores

Envia um currículo específico para a oferta em poucos minutos.

Resumo da oferta

Jobtailor is seeking a Security Engineer to design and implement secure architectures for applications, APIs, and websites in São Paulo. You will enhance CI/CD pipelines with GitLab, integrating SAST, DAST, SCA, and secrets management to reduce risk.

You will collaborate across teams, promote a security culture, and stay current with OWASP Top 10, cloud security, and AppSec tools while automating security processes with Python or Bash.

Qualificações

Strong knowledge of OWASP Top 10, threat modeling, and API security.
Advanced experience with GitLab CI/CD and security tools.
Experience conducting security-focused code reviews and managing secrets.
Automation skills using Python, Bash, or similar languages.
Experience with IAM, networking, KMS/Vault, and compliance.
Familiarity with AppSec and Cloud Security tools.
Proactive, collaborative profile, with project experience and strong communication skills.

Responsabilidades

Demonstrates expertise in secure application architecture, CI/CD pipeline implementation, and automation for security processes.
Promotes multicloud security across AWS, Azure, GCP, and OCI.
Serves as a technical reference and fosters a security culture within teams.

Conhecimentos

Secure Architecture

GitLab CI/CD

Automation

OWASP Top 10

Cloud Security

Ferramentas

GitLab

SAST

DAST

SCA

Secrets Management

AWS

Azure

GCP

OCI

AppSec Tools

Descrição da oferta de emprego

Ensure secure architectures for applications, APIs, and websites.
Implement and enhance secure CI/CD pipelines in GitLab, including SAST, DAST, SCA, and secrets management.
Support teams in secure development practices (Secure SDLC).
Create security automations for detection, incident response, and hardening.
Work on multicloud security across AWS, Azure, GCP, and OCI.
Promote a security culture and serve as a technical reference.

Requirements

Strong knowledge of the OWASP Top 10, threat modeling, and API security.
Advanced experience with GitLab CI/CD and security tools.
Experience conducting security-focused code reviews and managing secrets.
Automation skills using Python, Bash, or similar languages.
Experience with IAM, networking, KMS/Vault, and compliance.
Familiarity with AppSec and Cloud Security tools.
Proactive, collaborative profile, with project experience and strong communication skills.

Core Competencies

Demonstrates expertise in secure application architecture, CI/CD pipeline implementation, and automation for security processes. Proficient in multicloud security practices and fostering a security-focused culture within teams.

Highest-signal resume keywords