Senior Security Engineer - InfoSec

gympass; Brasil; Remote; BRL 180,000 - 260,000; Full time

Job summary

Wellhub is hiring a Senior Security Engineer to join the InfoSec team in Brazil. This is a fully remote role within Brazil, focusing on investigating and responding to security incidents to protect our cloud environment.

You will collaborate with IT, Cloud Security, and engineering teams to develop mitigation plans, enhance observability, and deliver secure products customers can trust.

Qualifications

• Bachelor's degree in Computer Science or Engineering, Information Technology, or related areas.
• Experience with AWS, with a track record of deploying medium to large-scale projects.
• Detect, analyze and clarify hacking attempts, security incidents, and alerts from our monitoring stack.
• Experience with a SIEM and monitor alarms, indicators of compromise, and use cases.

Responsibilities

• Lead hands-on investigation, triage, and response to security incidents and threat attempts.
• Drive cybersecurity projects and mitigation plans with IT, Cloud Security, and engineering teams.
• Enhance cybersecurity observability by refining tools and processes for threat detection.

Skills

AWS

SIEM

Automation scripting

Communication

English and Portuguese fluency

Education

Bachelor's degree in CS/Engineering/IT

Tools

Monitoring stack

AI-assisted workflows

Job description

Your wellbeing, our mission. Join a company shaping a healthier world.

GET TO KNOW US

At Wellhub we're revolutionizing workplace wellness. Our platform connects employees worldwide to the best partners for fitness, mindfulness, therapy, nutrition, and sleep-all in one simple subscription.

Headquartered in NYC with team members in Europe, North America and South America, we're on a mission to make every company a wellness company.

We believe work should be fulfilling, inspiring, and balanced. Here, you'll find a team that values wellbeing, collaboration, and different perspectives, where passion and creativity push boundaries to create real impact.

Your contributions will help shape a healthier, more balanced world for you and millions of people globally.

Join us in redefining the future of wellbeing!

THE OPPORTUNITY

We are hiring a Senior Security Engineer in our InfoSec area in Brazil ! This is a Remote - Brazil position, meaning you can work from anywhere within the country.

Please note that this role is only open to candidates in Brazil.

The mission of the Infosec team is to make Wellhub a safer company for its customers, partners, end users, and employees by protecting the entire ecosystem from internal and external threats and contributing to the creation of safe and secure products.

This role is focused on investigating and responding to security incidents and threat attempts to protect our cloud-based environment.

You will collaborate closely with IT, Cloud Security, and engineering teams to develop projects, mitigation plans, enhance our cybersecurity observability, and help deliver a product our customers can trust.

YOUR IMPACT

• Lead the hands-on investigation, triage, and response to security incidents and threat attempts, directly protecting our cloud-based environment
• Drive the development and execution of cybersecurity projects and mitigation plans in close collaboration with IT, Cloud Security, and engineering teams
• Actively enhance our cybersecurity observability, refining tools and processes to detect and counter internal and external threats more effectively
• Serve as a first line responder during incident response activities, ensuring rapid triage, containment, and timely communication to all relevant stakeholders
• Help build and maintain customer trust by contributing directly to the creation and delivery of safe, secure, and resilient products
• Organize and manage interdependencies between security initiatives and other technology areas to ensure cohesive, comprehensive protection for the entire ecosystem
• Develop, update, and maintain automations to accelerate security ticket triage and enhance the efficiency of incident response workflows
• Design, evaluate, and operate AI-assisted workflows (LLMs and agents) for alert triage, enrichment, and incident response, with human-in-the-loop controls
• Contribute to detection and response coverage for AI-related risks, including LLM applications, AI agents, and employee use of AI tools
• Live the mission: inspire and empower others by genuinely caring for your own wellbeing and your colleagues. Bring wellbeing to the forefront of work, and create a supportive environment where everyone feels comfortable taking care of themselves, taking time off, and finding work-life wellness.

WHO YOU ARE

• Bachelor's Degree in Computer Science or Engineering, Information Technology, or related areas
• Experience with AWS, with a track record of deploying medium to large-scale projects
• Detect, analyze and clarify hacking attempts, security incidents, and alerts from our monitoring stack
• Experience with a SIEM and monitor alarms, indicators of compromise, and use cases
• Experience with programming languages for automations
• You discuss with security engineers and colleagues security challenges and improvements
• You proactively work on solving and preventing incidents, and you regularly present your findings to the leadership
• You help to keep our threat intelligence initiatives at a high level
• You can identify, manage and communicate with all project stakeholders
• You understand information security frameworks, standards, and best practices
• You know information security certifications (GPDR, PCI-DSS, ISO27001, SOC 2, HIPAA etc.)
• You have the ability to speak English and Portuguese fluently and idiomatically
• You use AI tools and LLM-based automation to speed up investigation, triage, and detection engineering, and you validate their output critically
• You understand the security risks of AI systems, such as prompt injection, data leakage, insecure agent/tool access, and shadow AI

Prior experience in Security