AppSec Specialist, Application Security

🕒 July 20

🇧🇷 Brazil – Remote

⏰ Full Time

🟢 Junior

🟡 Mid-level

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 11%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Clicksign

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2010

💼 Consulting

⚖️ Legal

💳 Fintech

💰 $3.2M Venture Round on 2022-12

Consulting • Legal • Fintech

Clicksign is a leading Brazilian platform for electronic signatures, providing businesses with a secure and legally valid way to sign documents online. With innovative features such as integration via API, automated document generation, and a focus on user-friendly experiences, Clicksign streamlines the signing process, promoting efficiency and compliance in various sectors including finance, healthcare, and human resources. The company prides itself on its security certifications and adherence to legal standards in electronic signatures.

📋 Description

• Assess technical vulnerabilities and propose solutions to improve the security of our platform, working in our stack (Ruby, Go, and PHP) and developing security fixes on AWS/Lambda. • Quickly assess development queue demands, reducing the AppSec bottleneck and unblocking Engineering deliveries. • Actively propose and implement fixes in code, going beyond merely reporting findings. • Conduct threat modeling and apply secure-by-design principles to product initiatives. • Create guardrails, tooling, and automations that make the secure path the default for Engineering teams. • Integrate and tune security tools in the CI/CD pipeline (SAST, SCA, and secret scanning), keeping noise and false positives low.

🎯 Requirements

• Experience in software engineering or security, writing and delivering production code (ideally Ruby and PHP), including automations on AWS/Lambda. • Experience in Application Security/Product Security: threat modeling, secure-by-design, and creating guardrails and tooling. • Strong knowledge of CI/CD pipeline security, with calibrated SAST, SCA, and secret scanning. • Knowledge of AWS cloud security as applied to the product. • Information security certifications are a plus. • Strong ability to collaborate with Engineering teams, proposing and implementing fixes directly in code — not just reporting findings. • Ability to communicate in English (written and spoken).

🏖️ Benefits

• 100% remote work. • Trust-based culture, results-oriented, with plenty of challenge and learning opportunities. • Autonomy and ownership in a collaborative and empathetic environment. • Feedback culture and regular 1:1s with human leadership and no micromanagement. • Comprehensive benefits including meal/food allowance, childcare assistance, home office stipend, health coverage, education and cultural benefits, Gympass, birthday day-off, discounts on therapy and English courses, among other partnerships.