Sr Product Security Engineer

Playlist; São Paulo; Presencial; BRL 223 200 - 334 800; Tempo integral

Resumo da oferta

Playlist in São Paulo is looking for a Senior Security Engineer to enhance product security across multiple domains. You will lead initiatives for security tooling, devsecops integration, and vulnerability management while collaborating with engineering teams.

The ideal candidate has 4+ years in product security, proficiency in modern programming languages like Python, and experience with cloud-native solutions. Enjoy a dynamic environment encouraging impactful contributions to improve wellness through secure technology.

Qualificações

• 4+ years across multiple security domains with emphasis on product security and cloud-native security.
• Verifiable software engineering and penetration testing skills.
• 2+ years senior security experience leading and executing product security initiatives.

Responsabilidades

• Contribute to security enablement across devsecops integration.
• Own integration and operation of SAST, DAST, SCA, and CNAPP.
• Ensure software solutions are secure by default.

Conhecimentos

DevSecOps

Cloud Security

Application Security

Python

Automation

Formação académica

4+ years in security domains

Software Engineering Background

Ferramentas

SAST

DAST

SCA

Kubernetes

Burp Suite

Descrição da oferta de emprego

About the Company

At Playlist, life's richest moments happen when people step away from screens to move, connect, explore, and play. We're building the definitive platform for intentional living, connecting people with inspiring experiences in fitness, wellness, and beyond. With popular brands like Mindbody and ClassPass, Playlist empowers businesses and individuals, making it effortless for aspirations to become actions. Join us in reshaping technology's role to foster meaningful, real-world connections.

Employment Type (Brazil)

This position is offered as a CLT (Consolidação das Leis do Trabalho) employee role. Candidates must be comfortable being hired under a CLT employment arrangement.

Who we are

We are a dedicated team of product security engineers committed to developing and supporting ground-breaking software products. Together we will work to safeguard the future, enabling wellness businesses worldwide to empower their customers to lead healthy lives. Driven by a higher purpose, we continuously challenge ourselves and our organization to excel, recognizing the strength that comes from collaborative efforts toward a common objective. We are strong advocates for a diverse workplace, fostering an environment where individuals can bring their authentic selves to contribute to our shared success. At the core of our achievements is a deep belief in the value of our people. If you share our passion and vision, we invite you to consider joining our team. Together, we can explore remarkable feats and make a lasting impact.

Your role

• As a Senior Security Engineer, you will contribute to the success of the Product Security team in key areas: reducing security friction across engineering, fostering partnership, and enhancing our security posture. Responsibilities include security enablement across devsecops integration, automation, vulnerability identification, and remediation, and hands‑on tooling development.
• Own the integration and operation of SAST, DAST, SCA, and CNAPP solutions within synchronous and asynchronous pipelines—identifying issues, submitting remediation PRs, and validating fixes through automated retesting.
• Build, maintain, and continuously improve agentic security tooling that scales the team’s capabilities across all phases of the SDLC.
• Ensure software solutions are secure by default; facilitate continuous security testing, measurability, and reporting on the impact of security initiatives.
• Pursue continuous improvement to help Playlist achieve its mission of powering the world’s fitness and wellness businesses.

You will

• Partner with software engineering and platform teams to identify and solve complex security problems.
• Operate, integrate, and continuously tune SAST, DAST, SCA, and CNAPP tooling within pipelines—supporting engineering, triaging findings, driving remediation, and measuring coverage and effectiveness over time.
• Design, build, and maintain agentic security tools—including LLM‑assisted workflows for exploitable code identification, vulnerability triage, and remediation guidance—deployed across planning, development, testing, and production phases.
• Identify security gaps and make strategic recommendations for remediation.
• Address security issues identified throughout the secure software development lifecycle.
• Conduct security testing from product planning through production deployment.
• Define and integrate security requirements ensuring alignment with industry standards and best practices.
• Lead independent and cross‑functional security initiatives.
• Stay abreast of emerging security threats, vulnerabilities, and controls.

About the right team member

You are an intellectually curious senior engineer passionate about creating impactful security solutions and communicating them clearly to both technical and non‑technical audiences. You bring deep expertise in devsecops, cloud security, and application security, and you write code to solve security problems. You are fluent in one or more modern languages (Python, .NET, or TypeScript) and comfortable building automation, integrations, and agentic tooling. You have a software engineering background and are eager to grow the Product Security function while working closely with security champions, engineering teams, and company leadership.

You will thrive in this role with experience

• 4+ years across multiple security domains with emphasis on product security and cloud‑native security.
• Verifiable software engineering and penetration testing skills.
• 2+ years senior security experience leading and executing product security initiatives.
• Proficiency with modern languages including Python, .NET, or TypeScript, and hands‑on experience building security automation, integrations, and agentic tooling.
• Hands‑on experience operating and integrating SAST, DAST, SCA, WAF, and CNAPP solutions within CI/CD pipelines.
• Experience designing, code reviewing, and securing public‑cloud applications and infrastructure.
• Experience with offensive testing tools like Burp Suite and Kali Linux.
• Experience securing deployments using Docker, Kubernetes, and public cloud environments.
• Product Security experience at a SaaS organization or consulting firm.
• Excellent leadership skills and a track record of driving security initiatives within development teams.
• Excellent written and verbal communication skills.
• Self‑motivated, self‑directed, and self‑organized.

Equal Opportunity Employer

The Company is an Equal Opportunity Employer. We highly value diversity at our company and encourage people of all different backgrounds, experiences, abilities and perspectives to apply. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability status, or other protected characteristics.