Information Security Coordinator – AppSec

Job not on LinkedIn

🔥 10 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Arco Educação

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

📚 Education

🤝 B2B

Education • B2B

Arco Educação é uma companhia brasileira focada em soluções educacionais para o ensino básico, desenvolvendo conteúdo, tecnologia e serviços para mais de 1. 3 milhões de alunos e mais de 5. 000 escolas privadas em todo o país, abrangendo desde a educação infantil até o ensino médio. O propósito da Arco é aliar educação de excelência e gestão eficiente.

📋 Description

• Lead the team’s day-to-day operations by assigning tasks according to seniority, tracking deliveries and removing technical and organizational blockers. • Serve as a technical reference and mentor, supporting individual development plans and career progression. • Keep management aligned on priorities, risks and outcomes. • Translate the security roadmap into an executable workplan that balances governance, offensive security and incident response. • Implement, maintain and evolve a controls program based on NIST CSF, NIST SP 800-53 and CIS Controls v8, supporting audits and compliance. • Coordinate and/or execute penetration tests, red team exercises and threat hunting, evaluating integrations with third parties, APIs, attack surface and internal and external environments, and track remediations. • Support engineering in adopting shift-left practices, security in CI/CD, IaC security, Cloudflare and AWS WAFs, containers, cloud platforms and vulnerability management. • Monitor performance indicators and support reporting to management. • Operate CSPM (Wiz) and SAST/SCA pipelines to investigate exposed tokens, vulnerable APIs and open buckets, providing telemetry for risk matrices. • Plan and facilitate tabletop exercises with technical and business areas. • Act consultatively with engineering, product and business teams, guiding discussions toward enabling governance. • Manage penetration testing partners and vendors, structuring schedules, scopes and execution quality. • Produce reports and metrics using Looker and data visualization tools, translating technical data into business impact and highlighting critical risks.

🎯 Requirements

• Bachelor’s degree in Technology, Information Security, Engineering or a related field. • 5–7 years of experience in information security in specialist, coordination or similar roles. • Experience leading or coordinating technical people/teams. • Proven experience in technical areas of Information Security, preferably Yellow or Red Team. • Proficiency with NIST CSF, NIST SP 800-53 and/or CIS Controls v8. • Experience with penetration testing, red team operations, vulnerability exploitation and MITRE ATT&CK. • Independent ability with basic to intermediate SQL to audit data lakes and databases, trace privileges, hunt for PII and identify logical vulnerabilities. • Practical experience with DevSecOps, CI/CD, SAST/DAST/SCA, IaC security, containers and AWS/Azure/GCP. • Experience with data discovery/classification and identifying PII in relational/non-relational databases and BI tools, with a focus on LGPD (Brazilian data protection law). • Experience with DLP and network/traffic posture, including Zscaler, proxies or CASB. • Knowledge of tools and frameworks for generative AI security risks, including NIST AI and ISO 42001. • Familiarity with strategic use of AI for automation, dashboards and metric extraction. • Experience conducting or facilitating tabletop incident response exercises. • A completed bachelor’s degree is required; certifications such as CISSP, OSCP, CEH, GCIH, CRISC or equivalents are a plus.

🏖️ Benefits

• Food and/or meal voucher (Flash) • SulAmérica health and dental plan • Commuter allowance for on-site and hybrid roles • Extended maternity and paternity leave • Childcare assistance • Partnerships with Wellhub and Zenklub (employee wellbeing/mental health) • Education assistance • Discount on airline tickets • Partnership for pet health insurance • Access to Arco educational materials for employees’ children • Partnerships for MBA and postgraduate programs