Desenvolvedor(a) de Segurança de Aplicações Sênior/Especialista

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Desenvolvedor(a) de Segurança de Aplicações Sênior/Especialista based in Brazil.

We are looking for an experienced Application Security Developer to strengthen security practices across software engineering and development environments. In this role, you will play a strategic part in embedding security throughout the software development lifecycle, from architecture design to production deployment. You will identify vulnerabilities, implement security controls, and ensure that risks are effectively addressed and resolved. You will also leverage artificial intelligence, including LLMs and AI agents, to automate and scale security assessments. Working closely with development teams and global security stakeholders, you will promote a proactive security culture and drive continuous improvement. This is an excellent opportunity for a security professional who combines strong technical expertise with leadership, influence, and a hands-on approach.

Accountabilities

• Evaluate application architectures and provide technical guidance and recommendations to ensure security best practices are incorporated into software solutions.

• Implement and maintain security controls across CI/CD pipelines and application environments, integrating security throughout the development lifecycle.

• Investigate suspicious security incidents, analyze potential vulnerabilities, and support appropriate remediation activities.

• Develop AI agents and implement AI-powered solutions to automate, optimize, and scale application security assessments and verification processes.

• Act as the regional point of contact for penetration testing, DAST, SAST, SCA, and other application security initiatives coordinated with global security teams.

• Conduct code reviews to identify security weaknesses and ensure compliance with established application security standards.

• Organize technical presentations, workshops, and knowledge-sharing initiatives to promote security awareness and best practices among software development teams.

• Take end-to-end ownership of identified security vulnerabilities by assessing and prioritizing risks, engaging the relevant stakeholders, tracking remediation deadlines, and ensuring issues are fully resolved.

• Collaborate with engineering teams and global security stakeholders to strengthen application security standards and continuously improve security processes.

Requirements

• Significant professional experience in application security, software development, and secure software engineering practices.

• Strong experience applying Security by Design and Security by Default principles throughout the software development lifecycle.

• Hands-on experience with security tools and technologies in AWS and OCI (Oracle Cloud Infrastructure) environments.

• Familiarity with code analysis and application security tools such as SourceClear, Checkmarx, SonarQube, and Veracode, as well as Jenkins.

• Programming experience with technologies such as Go, PHP, React, and JavaScript.

• Experience or strong interest in applying artificial intelligence to cybersecurity, including Large Language Models (LLMs), AI agents, and security automation.

• Advanced English proficiency, with the ability to communicate effectively with international technical teams.

• Strong ownership mindset, taking responsibility not only for identifying security issues but also for coordinating and ensuring their resolution.

• Excellent communication, negotiation, and influencing skills, particularly when collaborating with technical teams without direct managerial authority.

• Strong analytical thinking, problem-solving abilities, autonomy, and the ability to manage priorities in a dynamic engineering environment.

Nice to Have

• Knowledge of the ISO 27034 application security standard.

• Strong understanding of common application vulnerabilities and participation in security communities or initiatives such as OWASP.

• Previous experience developing AI agents or AI-powered security tools and automation solutions.

• Bachelor's degree or equivalent education in Systems Analysis, Information Systems, or a related field.

• Additional training or professional courses focused on application security.

• CSSLP (Certified Secure Software Lifecycle Professional) certification.

Benefits

• 100% remote work: Flexibility to work from anywhere in Brazil.

• Home office allowance: Monthly allowance of R$180,00, plus additional financial support to purchase home office equipment.

• Meal allowance: Meal voucher or food allowance of R$44,55 per working day.

• Healthcare: Medical and dental insurance with no copayment for employees.

• Well-being programs: Access to Gympass, online meditation, and telemedicine services.

• Pet health insurance: Special partnership offering healthcare plans for pets.

• Education and professional development: Access to an educational platform offering affordable undergraduate and postgraduate programs, language courses, and other learning opportunities through more than 100 educational institutions.

• Life insurance: Financial protection through a life insurance policy.

• Free website hosting: Complimentary website hosting services.

• Additional employee perks and benefits.

How Jobgether works

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1