Security Software Engineer

Jobgether; Brasil; Híbrido; BRL 150 000 - 260 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Annual bonus

USD 2,000 learning budget

Travel internationally

Resumo da oferta

Jobgether is seeking a Security Software Engineer based in Brazil. The role embeds security expertise within software teams, influencing design, development, testing and maintenance with a strong emphasis on secure SDLC practices.

You will implement security features, conduct vulnerability analysis, and collaborate across engineers, customers, and open source communities to strengthen security across Linux-based ecosystems.

Qualificações

• Undergraduate degree or equivalent in CS, STEM, or related field.
• Solid understanding of common software security vulnerabilities and remediation techniques.
• Experience driving security initiatives across engineering teams.

Responsabilidades

• Define, implement, test, and document security features across software products.
• Lead security initiatives within product teams and promote secure SDLC practices.
• Analyze and remediate vulnerabilities in open source software and Linux-based systems.
• Conduct source code audits and security analysis to identify and mitigate issues.
• Apply threat modeling, architecture reviews, static analysis, fuzzing, and proactive security assessments.
• Collaborate with partners and open source communities to improve security standards.

Conhecimentos

C/C++

Python/Go

Linux

Security engineering

Threat modeling

Static analysis

Open source collaboration

Formação académica

Bachelor’s degree in CS or related

Ferramentas

Debian/Ubuntu

Open source tools

Cryptographic APIs (OpenSSL, Libgcrypt)

Descrição da oferta de emprego

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security Software Engineer based in Brazil.

This role offers the opportunity to embed security expertise directly within software engineering teams and influence how products are designed, developed, tested, and maintained.
You will combine software engineering with proactive security practices such as threat modeling, architecture reviews, static analysis, fuzzing, and vulnerability response.
The position covers the full product security lifecycle, from developing secure features and hardening systems to investigating vulnerabilities and supporting security certifications.
You will work extensively with Linux and open source technologies while contributing to upstream projects and strengthening security across complex software ecosystems.
The role involves close collaboration with engineers, customers, partners, and open source communities to establish robust security practices and solutions.
You will have opportunities to work with technologies spanning Linux cryptography, security automation, vulnerability assessment, and low-level system components.
This position is ideal for a highly motivated security-focused engineer who combines strong technical skills with curiosity, accountability, and a passion for open source.

Accountabilities

• Define, implement, test, and document security features and capabilities across software products.
• Lead security-focused initiatives within product engineering teams and promote secure development practices throughout the software development lifecycle.
• Analyze, reproduce, remediate, and test vulnerabilities affecting open source software and Linux-based systems.
• Conduct source code audits and security analysis to identify vulnerabilities and recommend effective remediation strategies.
• Apply security engineering techniques including threat modeling, architecture and design reviews, tabletop exercises, static analysis, fuzzing, and proactive security assessments.
• Contribute to Ubuntu and upstream open source projects to improve security and support the broader open source community.
• Integrate security tools into engineering infrastructure, development pipelines, and operational processes.
• Develop and maintain hardening automation and security capabilities for Linux environments.
• Enhance Linux cryptographic components to support country-specific compliance and certification requirements, including FIPS and Common Criteria.
• Collaborate with external partners on security standards and Center for Internet Security benchmarks.
• Support the achievement and maintenance of relevant security certifications.
• Provide technical guidance and security best-practice support to other engineering teams.
• Monitor emerging security threats, technologies, vulnerabilities, and industry trends and incorporate relevant developments into engineering practices.
• Participate in international team events and other required travel at least twice per year.

Requirements

• Undergraduate degree in Computer Science, STEM, or a related field, or a compelling alternative professional and technical background.
• Strong academic performance and a demonstrated history of exceeding expectations.
• Thorough understanding of common software security vulnerabilities, attack categories, and appropriate remediation techniques.
• Solid knowledge of modern software engineering practices and secure software development lifecycle principles.
• Experience acting as a security champion or driving security initiatives across engineering teams.
• Proficiency in at least one programming language such as C, C++, Python, Go, Rust, Java, Ruby, PHP, or JavaScript/TypeScript.
• Practical experience with Linux, preferably Debian or Ubuntu-based environments.
• Familiarity with open source development tools, workflows, methodologies, and community practices.
• Strong understanding of security engineering principles and the ability to apply them throughout product development.
• Excellent written and spoken English communication skills.
• Strong interpersonal, presentation, and collaboration skills, with the ability to influence technical teams effectively.
• High levels of curiosity, flexibility, accountability, self-motivation, and personal initiative.
• Results-oriented mindset with a strong commitment to delivering against agreed objectives.
• Willingness and ability to work effectively in a globally distributed environment and travel internationally at least twice per year.
• Experience with Linux kernel development is an advantage.
• Knowledge of FIPS, Common Criteria, security certifications, OVAL, OpenSSL, Libgcrypt, or low-level Linux cryptographic APIs is a plus.
• Experience with performance engineering, security tooling, or vulnerability assessment is beneficial.
• Demonstrated ability to learn quickly and adapt to new technologies is highly valued.

Benefits

• Compensation based on geographical location, experience, and performance.
• Annual compensation review, with additional reviews where appropriate for graduates and associates.
• Performance-driven annual bonus.
• Distributed work environment with twice-yearly in-person team sprints.
• USD 2,000 annual personal learning and development budget.
• Recognition and performance rewards.
• Annual holiday leave.
• Maternity and paternity leave.
• Employee Assistance Programme.
• Opportunities to travel internationally and meet colleagues across global teams.
• Priority Pass and travel upgrades for eligible long-haul company events.
• Hands-on exposure to Linux security, open source software, cryptography, vulnerability response, security automation, and secure software engineering.
• Opportunities to contribute to upstream open source projects and collaborate with engineers, customers, partners, and security communities worldwide.