Application Security Analyst II

🕒 August 11

🇧🇷 Brazil – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🔐 Security Analyst

👻 Ghost score 11%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Arco Educação

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

📚 Education

🤝 B2B

Education • B2B

Arco Educação é uma companhia brasileira focada em soluções educacionais para o ensino básico, desenvolvendo conteúdo, tecnologia e serviços para mais de 1. 3 milhões de alunos e mais de 5. 000 escolas privadas em todo o país, abrangendo desde a educação infantil até o ensino médio. O propósito da Arco é aliar educação de excelência e gestão eficiente.

📋 Description

• Work directly with Cloudflare WAF, leading domain migrations, establishing robust security baselines, and creating custom rules to mitigate real-time threats • Work closely with Engineering and Product teams, ensuring Security by Design practices are applied from technical refinement through delivery • Implement, maintain, and optimize security tools integrated into the pipeline, such as SAST, SCA, DAST, and Secret Detection • Support developers in technical understanding, triage, and remediation of security vulnerabilities • Automate security tasks and create scripts using programming languages • Ensure compliance and security best practices in containerized environments and infrastructure as code (IaC) • Contribute to the company's security culture by promoting secure development best practices (Secure Coding)

🎯 Requirements

• Proven experience as an Application Security (AppSec) Engineer or DevSecOps • Strong hands-on experience with Cloudflare WAF, including rule configuration, log analysis, false-positive tuning, and domain migrations • Proficiency in at least one programming language (e.g., Go, Python, JavaScript, TypeScript) for code review and automation • Experience deploying and managing security scanning tools (SAST, SCA, DAST, IAST) • Knowledge of Terraform, Helm, Docker, and Kubernetes • Practical familiarity with OWASP Top 10, ASVS, and SANS • Knowledge or familiarity with the use of Artificial Intelligence applied to security — a plus • EHT and OSCP certifications — a plus

🏖️ Benefits

• Meal and/or food allowance (Flash) • SulAmérica health and dental plan • Transportation allowance for on-site and hybrid positions • Extended maternity and paternity leave • Childcare assistance • Partnerships with Wellhub and Zenklub • Education support / tuition assistance • Discounts on airline tickets • Partnership with pet health insurance plan • Access to Arco educational materials for employees' children • Partnerships for MBA and postgraduate programs