Especialista em appsec (application security)
Clicksign
- Experiência com engenharia de software ou de segurança escrevendo e entregando código de produção (idealmente Ruby e PHP), incluindo automações em AWS/Lambda.
- Vivência com Application Security/Product Security: threat modeling, secure-by-design e criação de guardrails e tooling.
- Sólido conhecimento em segurança de pipelines de CI/CD, com SAST, SCA e secret scanning calibrados.
- Conhecimentos sobre segurança em nuvem AWS aplicada ao produto.
- Desejável certificações na área de segurança da informação.
- Forte habilidade em colaborar com times de Engenharia, propondo e implementando correções diretamente no código; e não apenas comunicando achados.
- Habilidade de se comunicar em inglês (escrito e falado).
- Avaliar vulnerabilidades técnicas e propor soluções para elevar a segurança da nossa plataforma, atuando no nosso stack (Ruby, Go e PHP) e desenvolvendo correções de segurança em AWS/Lambda.
- Avaliar com agilidade as demandas da fila de desenvolvimento, reduzindo o gargalo de AppSec e destravando as entregas da Engenharia.
- Propor e implementar ativamente correções (fixes) em código, indo além do apontamento de achados.
- Conduzir threat modeling e aplicar princípios de secure-by-design nas iniciativas de produto.
- Criar guardrails, tooling e automações que tornem o caminho seguro o caminho padrão para os times de Engenharia.
- Integrar e calibrar ferramentas de segurança no pipeline de CI/CD (SAST, SCA e secret scanning), mantendo baixo nível de ruído e de falsos positivos.
Vaga publicada há 14 horas atrás
Empregos semelhantes que podem ser interessantes para vocêCom base na vaga Especialista em appsec (application security) em Home office
- ...architecture of Rain’s custodial and non-custodial wallet infrastructure. Design flexible signing infrastructure supporting MPC, HSMs, secure enclaves, TEEs, and emerging cryptographic approaches. Build wallet systems supporting EOAs, smart contract wallets, account...
- HO l Home Office Efetivo (CLT) Administrador Biólogo Engenheiro Ambiental Engenheiro de Produção Gestor Ambiental Tecnólogo em Gestão Ambiental Responsabilidades Roadmap e Metas: Liderar o processo de construção e calibragem do roadmap de metas 2030 ...
- ...probability, issuing credit recommendations, classifying portfolios, and monitoring asset quality. Review and approve credit applications, ensuring compliance with internal policies and regulatory requirements. Monitor overdue accounts, follow up on payments, and...
- ...communication and technical collaboration abilities in distributed team environments. Architect, build, and maintain scalable native iOS applications. Integrate mobile applications with backend services via RESTful APIs. Collaborate with multi-functional international...
- Conhecimentos Técnicos Administração Oracle Database (11g, 12c, 19c ou superior). SQL avançado e PL/SQL. Tuning de performance (SQL Tuning e Performance Tuning). Oracle Enterprise Manager (OEM). Oracle Data Pump (Export/Import). RMAN (Recovery Manager...
- ...Responsibilities Identify and reduce security risk across AWS, Kubernetes, containerized... ...teams to design practical controls and secure-by-default patterns. Improve... ...insurance and 80% for dependents, wherever applicable. Annual company off-site held in a new...
- ...for resilience and performance Fuzzing and other proactive security analysis techniques Tracing and profiling for distributed systems... ...behaviour Build and maintain reliable, fault-tolerant applications and services Collaborate proactively with a globally...
- ...opportunity Design, develop, and maintain high-quality mobile applications using React Native and TypeScript Own the end-to-end... ...Experience integrating and consuming APIs, with attention to security and performance on mobile ~ Experience with frontend testing...
- ...background in MongoDB who will help us to build a fully managed MongoDB solution based on Juju. We're aiming to build the most reliable and secure way to deploy and operate MongoDB on machines, VMs, public cloud and Kubernetes. The MongoDB team is small, meaning you will be a...
- Candidate-se rapidamente pelo email: Requisitos e qualificações: Experiência sólida em Quality Assurance (QA); Experiência com testes funcionais, regressivos e exploratórios; Vivência com automação de testes; Conhecimento em metodologias ágeis (Scrum/Kanban...
- Você e suas habilidades são bem-vindas aqui! Experiência em desenvolvimento de aplicações em nuvem da AWS; Domínio mais apurado sobre Debug, Profiling e otimização do Java; Domínio da linguagem Java 8/11/17/21; Experiência mínima de 5 anos com desenvolvimento...
- ...and deploy next-generation Agentic AI and Generative AI solutions. The ideal candidate will have strong hands-on expertise in LLM application development, particularly using LangChain, LangGraph, RAG, and Graph RAG frameworks, along with advanced Python engineering...
Rehva Tech
Home officehá 1 dia atrás - ...Responsibilities Build and maintain technical controls across SOC 2, ISO 27001, HIPAA, and other security and compliance frameworks. Automate compliance workflows, evidence collection, access reviews, security checks, and repetitive processes. Implement and monitor...
- .... We are building community management at scale. We have multiple positions available, at different seniority levels. All applications and candidates are handled through this single entry point. To improve your chances of success in this application, read our...
- ...era of seamless interconnection between people, devices, and applications. We're driven by a desire to transform and modernize what's... ...payments, and related services. These capabilities will give agents secure, reliable ways to join meetings, browse the web, communicate,...
- ...establish which teams might be an excellent fit, and progress your application with them. At Canonical a Senior+ Engineer is not only an... ...– from kernel to web – benchmarks, optimization Software security – fuzzing, tabletop threat models, analysis, audit Build...
- ...na administração, operação técnica e sustentação de WAF (Web Application Firewall), preferencialmente Akamai; Forte conhecimento em... ...técnicas relacionadas à Akamai ou segurança de aplicações em nuvem (AppSec); Compreensão de vulnerabilidades Web comuns (ex: OWASP Top...
- ...to-Have Skills Modern Data & AI Literacy: Conceptual understanding of modern data stack architecture and practical business applications of GenAI, LLMs, or predictive ML models within corporate finance. High-Volume SaaS/Marketplace Experience: Previous experience...Trabalho remoto
- ...mitigação com clareza técnica, priorização por risco e orientação prática. Conectar achados ofensivos com Blue Team, CSIRT, IAM, AppSec, arquitetura e governança. Apoiar a evolução de indicadores de exposição, resiliência e efetividade dos controles. O...
- ...NICE TO HAVE (Preferred) Experience working in consulting or client-facing environments. Knowledge of cloud security, governance, and compliance best practices. Experience supporting multi-account AWS environments. Familiarity with platform engineering and...
- ...architecture, prompt engineering, and API integrations for voice/chatbots, while implementing best practices and ensuring high-quality, secure deliverables. It combines expertise in prompt engineering, knowledge base structuring, and system integration to enable end-to-end...
- .... Partner with threat research and detection engineering teams to translate analytical needs into scalable systems. Maintain secure handling and isolation practices for malicious samples and analysis environments. Document architecture, runbooks, and operational...
$ 135.000 a $ 155.000 por año
...with the ability to teach others how to solve architectural problems. Extensive experience with Python, including developing applications and complex data processing tasks. Familiarity with Django or Flask. Advanced experience with PostgreSQL, including query optimization...- ...industries. We help global companies embrace public and private cloud infrastructure, cloud native operations, and open source applications. For this team we are looking for several Alliances Engineers to support OEM (hardware manufacturers), GSI (global system...
- ...both components synchronized as they evolve. Handle production kernel-mode driver signing, EV certificates, Microsoft attestation, Secure Boot, and code integrity. Build the installer, update mechanism, clean uninstall path, and enterprise deployment story....
- ...everything happening around it: Redis, high-volume queues, workers, event-driven workflows, WebSockets and multiple interconnected applications running on Laravel Cloud, DigitalOcean and AWS. The role is backend-first, but we work heavily with the TALL stack — Tailwind...
- ...supports revenue-critical systems without compromising safety or security. Collaborate on large-scale distributed systems... ...ability to autonomously debug issues across the stack (OS, network, application) ~ Apply a solid understanding of distributed systems and technologies...
- ...resilient distributed systems. You drive the success of those leveraging Canonical’s Ubuntu and Juju to build multi-cloud deployable applications. We see quality engineering as a first class engineering practice and are looking for people who can bring deep engineering...
- ...Engenheiro de Software Sênior | Security Platform Engineering Profissional com forte experiência em desenvolvimento de software, arquitetura... ...OAuth2 OIDC JWT OWASP Top 10 Segurança de APIs Secure Coding Criptografia aplicada Observabilidade Datadog...Trabalho remoto
- ...will be very nice if you also bring: Experience implementing cloud cost optimization strategies (FinOps) Solid background in security and compliance standards for platform engineering Experience with internal developer platforms (IDPs) and dev-ex enablement...
Deseja receber mais vagas?
Assine e receba vagas semelhantes a Especialista em appsec (application security). Seja o primeiro a se candidatar!
