AppSec Specialist, Application Security

🔥 6 minutes ago

🇧🇷 Brazil – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Clicksign

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2010

💼 Consulting

⚖️ Legal

💳 Fintech

💰 $3.2M Venture Round on 2022-12

Consulting • Legal • Fintech

Clicksign is a leading Brazilian platform for electronic signatures, providing businesses with a secure and legally valid way to sign documents online. With innovative features such as integration via API, automated document generation, and a focus on user-friendly experiences, Clicksign streamlines the signing process, promoting efficiency and compliance in various sectors including finance, healthcare, and human resources. The company prides itself on its security certifications and adherence to legal standards in electronic signatures.

📋 Description

• Assess technical vulnerabilities and propose solutions to enhance platform security, working across the Ruby, Go, and PHP stacks and developing security fixes in AWS/Lambda. • Rapidly assess requests in the development queue, reducing the AppSec bottleneck and unblocking Engineering deliveries. • Proactively propose and implement code fixes, going beyond simply reporting findings. • Lead threat modeling activities and apply secure-by-design principles to product initiatives. • Create guardrails, tooling, and automations that make the secure path the default for Engineering teams. • Integrate and calibrate security tools in the CI/CD pipeline, including SAST, SCA, and secret scanning, while keeping noise and false positives low.

🎯 Requirements

• Experience in software or security engineering, writing and delivering production code—ideally in Ruby and PHP—including automations in AWS/Lambda. • Experience with Application Security/Product Security, including threat modeling, secure-by-design practices, and the creation of guardrails and tooling. • Solid knowledge of CI/CD pipeline security, with calibrated SAST, SCA, and secret scanning tools. • Knowledge of AWS cloud security as applied to products. • Information security certifications are a plus. • Strong ability to collaborate with Engineering teams, proposing and implementing fixes directly in the code. • Ability to communicate in English, both written and spoken.

🏖️ Benefits

• 100% remote work. • A trust-based culture focused on results, with plenty of challenges and learning opportunities. • Autonomy and ownership in a highly collaborative and empathetic environment. • A feedback culture and regular 1:1s with supportive leadership and no micromanagement. • Meal and food allowance. • Childcare assistance. • Home office allowance. • Healthcare allowance. • Education and cultural allowance. • Gympass. • Birthday day off. • Discounts on therapy. • Discounts on English courses. • Other partner benefits.