Senior DevSecOps Engineer - Real Estate

Novembro 20

Candidatar-se

Receber Emails com Vagas Similares

Truelogic Software

SiteLinkedInTodas as Vagas

SaaS • B2B • Enterprise

Truelogic Software é uma empresa de desenvolvimento de software nearshore especializada em serviços de staff augmentation ágil. Focamos em oferecer desenvolvimento de software sob medida terceirizado, com uma equipe de engenheiros altamente qualificados da América Latina. A Truelogic Software faz parceria tanto com startups quanto com empresas da Fortune 500, oferecendo soluções alinhadas aos fusos horários de seus clientes e garantindo resultados de alta qualidade por meio de colaboração e agilidade na resposta. Com presença em mais de 25 países, a Truelogic valoriza o trabalho remoto para uma melhor qualidade de vida, e seus engenheiros têm experiência em diversos setores, entregando uma ampla variedade de projetos bem-sucedidos globalmente.

501 - 1000 funcionários

Fundada em 2004

☁️ SaaS

🤝 B2B

🏢 Corporativo

Descrição

• Secure Development & Engineering Support • Provide AppSec consulting and guidance to engineering teams on remediation of vulnerabilities and secure coding practices. • Manage and tune SAST, SCA, and secret-scanning tools; assist with findings triage and developer enablement. • Implement and maintain supply chain security measures, including SBOM generation and dependency integrity checks. • Collaborate with DevOps to integrate security checks into CI/CD pipelines and infrastructure-as-code (IaC) • Configure and manage key security and cloud-native tools (AWS Security Hub, GuardDuty, Inspector, Config, etc.). • Partner with teams to harden configurations for WAF, VPN/ZTNA, and endpoint security. • Contribute to infrastructure automation and policy-as-code implementations for security baselines.

🎯 Requisitos

• 5+ years of experience in DevSecOps, Application Security, or related roles. • Strong understanding of cloud environments (AWS preferred) and associated native security services. • Experience with CI/CD tools (e.g., GitHub Actions, Jenkins, CircleCI) and integrating security into pipelines. • Hands-on experience with SAST/SCA tools (e.g., SonarQube, Snyk, Semgrep, Trivy) and vulnerability management platforms. • Familiarity with IaC (Terraform, CloudFormation) and security configuration management. • Comfort with scripting and automation (Python, Bash, or similar). • Strong communication skills and the ability to collaborate effectively with other departments asynchronously or via Slack. • Demonstrated familiarity with AI-based coding tools, MCP servers, and secure implementation considerations preferred. • Working knowledge of SIEM platforms and log analysis tools a plus (e.g., Splunk, Panther, Coralogix). • Knowledge of security frameworks and best practices a plus (NIST CSF, CIS Benchmarks, OWASP Top 10). • Self-directed, curious, and able to manage priorities in a fast-paced environment.

🏖️ Benefícios

• 100% Remote Work: Enjoy the freedom to work from the location that helps you thrive. All it takes is a laptop and a reliable internet connection. • Highly Competitive USD Pay: Earn an excellent, market-leading compensation in USD, that goes beyond typical market offerings. • Paid Time Off: We value your well-being. Our paid time off policies ensure you have the chance to unwind and recharge when needed. • Work with Autonomy: Enjoy the freedom to manage your time as long as the work gets done. Focus on results, not the clock. • Work with Top American Companies: Grow your expertise working on innovative, high-impact projects with Industry-Leading U.S. Companies.