Senior Information Security Engineer

Job not on LinkedIn

🔥 6 hours ago

🇧🇷 Brazil – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 18%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

DOMVS iT

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2014

💼 Consulting

🏥 Healthcare

🏢 Enterprise

Consulting • Healthcare • Enterprise

DOMVS iT is a Brazilian technology services company with over a decade of experience that provides IT staffing (Squad as a Service), managed squads, consulting, outsourcing, application management, and cloud & data services. The firm offers digital experience and product design services (Product Discovery, PDaaS), cloud architecture, FinOps, migrations, data masking/virtualization, and enterprise application support (including SAP), serving business customers across multiple cities and countries.

📋 Description

• Own the architecture and evolution of Lhasa’s security guardrail files (.md and equivalent formats), including structure, scope, versioning, update frequency, and integration with development tools • Define security requirements for AI engineers using AI to write code, covering data handling, authentication, injection prevention, and AI-specific vulnerability patterns • Establish and continuously improve secure-by-design principles for Lhasa’s software development • Continuously recalibrate guardrails as AI-powered programming tools, threat patterns, and product architecture evolve • Lead guardrail adoption across solution teams, resolving ambiguities and handling exceptions with clear justifications

🎯 Requirements

• Extensive information security experience, with a strong focus on application security or product security • Proven experience owning secure development frameworks, guardrail standards, or DevSecOps programs • Demonstrated experience integrating security into CI/CD pipelines and automating security gate controls • Experience leading application security assessments, including threat modeling, SAST/DAST, and penetration testing coordination • Previous experience working with, or in close and continuous collaboration with, software development teams • Track record of independently addressing complex product security challenges and delivering results across multiple teams • Advanced knowledge of application security, including the OWASP Top 10 and equivalent frameworks • Deep knowledge of vulnerability patterns in AI-generated code and how to address them at the framework and pipeline levels • Strong knowledge of AI-specific attack vectors, including prompt injection, data poisoning, model manipulation, and risks associated with agentic systems • Specialized knowledge of CI/CD tools and security gate implementation mechanisms, including SAST, DAST, dependency scanning, and secrets detection • Practical knowledge of ISO 27001, NIST, and ISO 42001 as applied to software products • CISSP, CEH, or equivalent certification (preferred) • Experience with secure design of AI systems or formal AI security assessment frameworks (preferred) • Familiarity with ISO 42001, the EU AI Act, or contributions to security standards or open-source security tools (preferred) • Previous experience in software development or DevSecOps engineering (preferred)

🏖️ Benefits

• The support needed to achieve professional success • A collaborative and innovative environment