Product Security Engineer (Remote) (Fluent in English)

Knowbe4; Brasil; Teletrabalho; BRL 120 000 - 180 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Bonus based on monthly targets

Employee referral bonuses

Adoption assistance

Tuition reimbursement

Certification reimbursement

Certification completion bonuses

Resumo da oferta

KnowBe4 in Brazil is hiring a mid-level Product Security Engineer to perform hands-on security testing, code reviews, and threat modeling across its platform. You will work with global teams in the US and Brazil to strengthen security controls before and after production.

The role emphasizes collaboration, rapid triage of findings, and embedding secure coding practices throughout the SDLC, with opportunities to use Burp Suite, AWS, and Terraform in a modern, growth-focused environment.

Qualificações

• Experience in application security, penetration testing, or red teaming.
• Hands-on pentesting across web, mobile, and traditional apps.
• Ability to read multiple languages in code (Ruby, PHP, Go, JavaScript, Python).
• Strong knowledge of OWASP Top 10 and core security concepts.
• Excellent written and spoken English for global collaboration.

Responsabilidades

• Perform automated and manual security assessments and pentests.
• Review application source code to identify vulnerabilities.
• Triages findings and collaborates with engineering to remediate.
• Maintain threat models and build security automations.
• Partner with product teams to embed secure coding practices in SDLC.

Conhecimentos

Application Security

Penetration Testing

Red Teaming

Code Comprehension

Security Fundamentals

English Communication

Team Collaboration

Ferramentas

Burp Suite

SAST/DAST

Dependency Scanning

AWS

Terraform

Descrição da oferta de emprego

KnowBe4 empowers the modern workforce to make smarter security decisions every day. Trusted by more than 70,000 organizations worldwide, KnowBe4 is the pioneer of digital workforce security, securing both AI agents and humans. The KnowBe4 Platform provides attack simulation and training, collaboration security, and agent security powered by AIDA (Artificial Intelligence Defense Agents) and a proprietary Risk Score. The platform leverages 15-years of behavioral data to combat advanced threats including social engineering, prompt injection, and shadow AI. By securing humans and agents, KnowBe4 leads the industry in workforce trust and defense.

KnowBe4 is seeking a mid-level Product Security Engineer in Brazil to join our Security team! In this role, your primary focus will be hands-on penetration testing and security reviews, evaluating application code before and after it hits production to ensure company and customer data remain safe.

As our engineering team accelerates development, you will play a critical role in scaling our security coverage, triaging findings, and collaborating directly with global engineering teams across the US and Brazil.

To learn more about our team and office culture in São Paulo, Brazil, visit the following links. Careers Page: https://www.knowbe4.com/careers/locations/sao-paulo
Glassdoor: https://www.glassdoor.com/Location/KnowBe4-S%C3%A3o-Paulo-Location-EI_IE969384.0,7_IL[…]M_-C1lsxoZq7Cx8IriVE8MkrzuTmnJzqego77RAWZz9sqGt_55BflwYKpQeg
LinkedIn: https://www.linkedin.com/company/knowbe4/life/brazil/

Responsibilities:

• Application Security Testing & Pentesting: Conduct automated and manual security assessments and penetration tests across web, mobile, and traditional applications.
• Code Security Reviews: Analyze source code across multiple programming languages to identify vulnerabilities and guide remediation before and after production deployment.
• Vulnerability Triage & Remediation: Work closely with engineering teams to assess, prioritize, and resolve application vulnerabilities.
• Threat Modeling & Automation: Maintain threat models and build security automations to streamline security testing workflows.
• Security Engagement: Partner with product and development teams to embed secure coding practices throughout the software development lifecycle (SDLC).

Requirements:

• Experience in Application Security, Penetration Testing, or Red Teaming.
• Pentesting Expertise: Strong hands-on experience with both automated and manual web, mobile, and traditional application pentesting
• Code Comprehension: Proven ability to read and analyze source code in multiple languages (such as Ruby, PHP, Go, JavaScript, or Python)
• Security Fundamentals: Broad understanding of web application vulnerabilities (e.g., OWASP Top 10, CWE) and core information security concepts
• Language & Communication: Strong technical English communication skills (written and spoken) to collaborate smoothly across international teams
• Cultural Fit: Collaborative, open mindset with a strong focus on teamwork and positive team dynamics

Preferred / Nice-to-Have

• Experience with cloud computing environments (AWS, Terraform)
• Familiarity with security tools (e.g., Burp Suite, SAST/DAST, dependency scanning)
• Experience with Python scripting or leveraging AI tools in security workflows
• Relevant industry certifications (e.g., OSCP, OSWE, GPEN, CISSP)

Our Fantastic Benefits

• company-wide bonuses based on monthly sales targets
• employee referral bonuses
• adoption assistance
• tuition reimbursement
• certification reimbursement
• certification completion bonuses

All in a modern, high-tech, and fun work environment. For more details about our benefits in each office location, please visit www.knowbe4.com/careers/benefits.

Note: An applicant assessment and background check may be part of your hiring procedure.

Individuals seeking employment at KnowBe4 are considered without prejudice to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, sexual orientation or any other characteristic protected under applicable federal, state, or local law. If you require reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please visit www.knowbe4.com/careers/request-accommodation.