Senior Software Engineer, Security Platform

This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a Senior Software Engineer, Security Platform based in Brazil . As a Senior Software Engineer, Security Platform, you will design, build, and maintain the software infrastructure that powers modern security operations across cloud environments and applications. You will develop backend services, event-driven systems, and automated security controls that help engineering teams identify and resolve vulnerabilities efficiently. Working primarily with Go, Python, AWS, and Kubernetes, you will strengthen the reliability, scalability, and effectiveness of security tooling across the development lifecycle. You will also build intelligent, AI-assisted workflows that streamline vulnerability triage, code reviews, and remediation processes. Collaborating with security and engineering specialists, you will turn security requirements into practical, automated solutions that protect systems without slowing product delivery. This is an exciting opportunity for a hands-on engineer who enjoys solving complex technical challenges, taking ownership of production systems, and making security an integral part of software development. Accountabilities - Security platform engineering: Design, develop, deploy, and maintain security engineering services primarily in Go and Python, running on AWS and Kubernetes. Build new capabilities, improve existing services, strengthen reliability, and retire outdated components when appropriate.

- Event-driven architecture: Own and enhance the messaging infrastructure connecting security services, including the NATS event bus, message contracts, consumers, delivery guarantees, replay mechanisms, back-pressure handling, and observability. - End-to-end security integrations: Connect security scanners, vulnerability management systems, ticketing platforms, and metrics dashboards to ensure findings are tracked from discovery through remediation, with clear ownership and reliable audit evidence. - CI/CD security controls: Build and maintain security gates across GitLab CI pipelines, covering static application security testing (SAST), software composition analysis (SCA), secret detection, container scanning, and infrastructure-as-code (IaC) scanning. - Security gate optimization: Select and configure scanning tools, tune detection rules, manage suppression workflows, reduce false positives, and develop rollout mechanisms that move controls from advisory reporting to enforcement without unnecessarily disrupting engineering delivery. - AI-assisted security workflows: Develop reusable AI-powered tools and agentic workflows, including automated code-review agents, vulnerability triage systems, verification processes, and remediation assistants that other engineers can adopt effectively. - Vulnerability triage and remediation: Validate security findings, confirm true positives, provide reproduction details and actionable remediation guidance, and automate the routing of issues to responsible engineering teams and vulnerability-management operations. - Secure software development: Apply practical web application security expertise to identify and fix vulnerabilities, incorporate security checks into development workflows, and prevent recurring vulnerability patterns across the engineering organization. - Threat modeling and secure design: Participate in threat modeling and security design reviews for the services, integrations, and development pipelines under your responsibility. - Operational reliability: Monitor and improve the performance, availability, and maintainability of security platform services, and participate in the on-call rotation for the systems you own.