Senior Application Security Manager – Affirmative Action Position for Women

Job not on LinkedIn

🔥 18 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

iFood

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

🍽️ Food & Beverage

📦 Logistics

📣 Marketing

Food & Beverage • Logistics • Marketing

iFood is a leading food delivery platform based in Brazil, connecting customers with a wide array of restaurants and food options. The company leverages cutting-edge technology and artificial intelligence to improve customer experience, streamline operations, and enhance delivery logistics. iFood fosters a diverse and inclusive work environment, focusing on sustainability and the positive impact of its services on the community.

📋 Description

• Define the vision, roadmap and OKRs for Application Security, aligned with engineering and business goals. • Build, develop and retain a team of AppSec engineers and security architects; lead hiring, performance calibration, career planning and succession. • Manage budget, contracts and vendor relationships. • Report security posture to executive leadership. • Drive automation of security processes. • Articulate complex technical strategies at the executive level. • Create and manage automated controls (SAST, DAST, SCA, secret scanning, IaC scanning, container scanning) in CI/CD pipelines. • Manage quality gates and associated metrics. • Implement policy-as-code and admission controls in Kubernetes; ensure supply chain traceability (SBOM, artifact signing, provenance). • Operate the vulnerability management program. • Conduct and escalate threat modeling and secure design reviews for new systems and structural changes. • Define architectural standards for authentication and authorization, encryption and key management, secrets management, API security, multi-tenant isolation and service-to-service communication. • Evaluate risks of new technologies adopted by engineering. • Manage a distributed Security Champions program across product teams. • Define the secure coding curriculum and measurably raise engineering security maturity. • Act as technical escalation for application security incidents; lead blameless post-mortems and ensure corrective actions address root structural causes. • Support compliance and privacy requirements (PCI-DSS, SOC 2, ISO 27001, LGPD) by translating regulatory requirements into engineering controls.

🎯 Requirements

• Technical experience in DevSecOps, Offensive Security and Application Security Architecture. • Experience in governance of artificial intelligence risks applied to cybersecurity. • Ability to define and execute security strategies aligned with business objectives. • Experience leading, building and retaining AppSec and security architecture teams. • Familiarity with SAST, DAST, SCA, secret scanning, IaC scanning and container scanning. • Knowledge of CI/CD, quality gates, policy-as-code and Kubernetes. • Knowledge of SBOM, artifact signing and supply chain provenance. • Knowledge of threat modeling and secure design reviews. • Knowledge of authentication, authorization, encryption, key and secrets management, API security, multi-tenant isolation and service-to-service communication. • Familiarity with PCI-DSS, SOC 2, ISO 27001 and LGPD.