Sr Product Security Engineer

Mindbody; São Paulo; Presencial; BRL 150 000 - 220 000; Tempo integral

Resumo da oferta

Mindbody in São Paulo, Brazil is seeking a Senior Security Engineer who will contribute significantly to the Product Security team by improving security processes and tools. This role demands a collaborative approach to solving complex security challenges in software development practices.

With a focus on enhancing security posture through partnerships across teams, the ideal candidate will have extensive knowledge in DevSecOps, cloud security, and application security. Candidates should possess strong programming skills in languages such as Python or .NET and a passion for security automation.

Qualificações

• 4+ years of experience in product security and cloud-native security.
• 2+ years in a Senior Security role managing product security initiatives.
• Fluency in Python, .NET, or TypeScript.

Responsabilidades

• Partner with software engineering to tackle security challenges.
• Integrate various security tools within CI/CD pipelines.
• Ensure security requirements meet industry standards.

Conhecimentos

DevSecOps

Cloud Security

Application Security

Python

Automation

Formação académica

Bachelor's degree in Computer Science or related field

Ferramentas

SAST

DAST

SCA

CI/CD

Burp Suite

Descrição da oferta de emprego

At Playlist, life's richest moments happen when people step away from screens to move, connect, explore, and play. We're building the definitive platform for intentional living, connecting people with inspiring experiences in fitness, wellness, and beyond. With popular brands like Mindbody and ClassPass, Playlist empowers businesses and individuals, making it effortless for aspirations to become actions. Join us in reshaping technology's role to foster meaningful, real-world connections.

Mindbody equips wellness entrepreneurs with technology to support thriving businesses and create exceptional experiences. Innovation and curiosity drive our culture, connecting businesses and individuals through cutting-edge solutions. Join us if you're passionate about enhancing wellness through technology.

Employment Type (Brazil): This position is offered as a CLT (Consolidação das Leis do Trabalho) employee role. Candidates must be comfortable being hired under a CLT employment arrangement.

Who we are

We are a dedicated team of product security engineers committed to developing and supporting ground‑breaking software products. Together we will work to safeguard the future, enabling wellness businesses worldwide to empower their customers to lead healthy lives. Driven by a higher purpose, we continuously challenge ourselves and our organization to excel, recognizing the strength that comes from collaborative efforts toward a common objective. We are strong advocates for a diverse workplace, fostering an environment where individuals can bring their authentic selves to contribute to our shared success. At the core of our achievements is a deep belief in the value of our people. If you share our passion and vision, we invite you to consider joining our team. Together, we can explore remarkable feats and make a lasting impact!

Your role

• As a Senior Security Engineer, you will be responsible for contributing to the success of the Product Security team in several key areas. You’ll work to reduce security friction across engineering by fostering partnership and collaboration to enhance our security posture. Security enablement will be a crucial aspect of your responsibilities, spanning devsecops integration, automation, vulnerability identification, and remediation, and hands‑on tooling development. You will own the integration and operation of SAST, DAST, SCA, and CNAPP solutions within synchronous and asynchronous pipelines — identifying issues, submitting remediation PRs, and validating fixes through automated retesting. You will also build, maintain, and continuously improve agentic security tooling that scales the team’s capabilities across all phases of the SDLC.
• You’ll play a vital role to ensure software solutions are secure by default. You will facilitate continuous security testing, measurability, and reporting on the impact of security initiatives.
• You’ll pursue continuous improvement to help Playlist achieve its mission: Powering the world’s fitness and wellness businesses and connecting them with more consumers, more effectively, than anyone else.

You will

• Partner with software engineering and platform teams to identify and solve complex security problems.
• Operate, integrate, and continuously tune SAST, DAST, SCA, and CNAPP tooling within pipelines — supporting engineering, triaging findings, driving remediation, and measuring coverage and effectiveness over time.
• Design, build, and maintain agentic security tools — including LLM‑assisted workflows for exploitable code identification, vulnerability triage, and remediation guidance — deployed across planning, development, testing, and production phases of the SDLC.
• Identify security gaps and demonstrate strategic recommendations for remediation.
• Address security issues identified throughout the secure software development lifecycle.
• Conduct security testing, beginning with the product planning phase continuing through production deployment.
• Define and integrate security requirements ensuring alignment with industry standards and best practices.
• Ability to work independently, and lead both cyber security and cross‑functional security initiatives.
• Stay abreast of emerging security threats, vulnerabilities and controls.

About the right team member

You are an intellectually curious senior engineer who is passionate about creating impactful security solutions and who communicates those solutions clearly to both technical and non‑technical audiences. You bring deep expertise in devsecops, cloud security, and application security — and you write code to solve security problems, not just identify them. You are fluent in one or more modern languages (Python, .NET, or TypeScript preferred) and comfortable building automation, integrations, and agentic tooling. You have a software engineering background and are eager to apply it to grow the Product Security function while working closely with security champions, engineering teams, and company leadership.

You will thrive in this role with experience

• 4+ year experience across multiple security domains with an emphasis on product security and cloud‑native security.
• Possess verifiable software engineering and penetration testing skills.
• 2+ year senior security experience leading and executing product security initiatives (i.e. devsecops, security consulting, and penetration testing).
• Proficiency with modern languages including Python, .NET, or TypeScript, with hands‑on experience building security automation, integrations, and agentic tooling.
• Hands‑on experience operating and integrating SAST, DAST, SCA, WAF, and CNAPP solutions (e.g., Semgrep, Checkmarx, Snyk, Wiz, or equivalents) within CI/CD pipelines.
• Hands‑on experience with design, code review, and securing products and solutions for public cloud‑based applications and infrastructure.
• Experience with offensive testing tools like Burp Suite and Kali Linux.
• Experience securing applications deployed using Docker, Kubernetes, and public cloud environments.
• Product Security experience working for a SaaS‑based organization or within a consulting firm.
• Excellent leadership skills with a track record of driving security initiatives within software development teams.
• Excellent communication skills (both written and verbal).
• Self‑motivated, self‑directed, and self‑organized.

Note: This description outlines key responsibilities but isn’t intended to cover every task or duty. Additional responsibilities may be assigned as needed to support the team and business goals.

The Company is an Equal Opportunity Employer. We highly value diversity at our company and encourage people of all different backgrounds, experiences, abilities and perspectives to apply. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability status, or other protected characteristics.