Security Engineer

Job not on LinkedIn

🔥 19 hours ago

🇧🇷 Brazil – Remote

💵 $4k / month

⏳ Contract/Temporary

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 1%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Fertil Comunicacao e Marketing Ltda.

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2008

📣 Marketing

📱 Media

🤝 B2B

Marketing • Media • B2B

Fertil Comunicacao e Marketing Ltda. is a Brazilian communication and marketing agency that appears to provide digital marketing, communications, and web presence services. The example text suggests they manage hosted websites and implement security/anti-abuse checks (CAPTCHA-style verification) for site access, indicating they may also handle website administration or hosting-related configurations for clients. Their core focus is on marketing and communications delivered to business clients.

📋 Description

• Execute the technical security scope defined by the Lead Engineer, submitting deliverables for review • Work on production cloud security (AWS and OVH): IAM, VPCs, Security Groups, KMS, secrets, hardening, and public exposure • Manage vulnerabilities end to end: triage, classification (CVSS), owner and deadline assignment, evidence collection, and retesting • Operate SAST, DAST, and SCA tools, distinguishing genuine findings from false positives before creating work items for product teams • Conduct security-focused code reviews, applying the OWASP Top 10 and API Security Top 10 • Implement and maintain security gates in CI/CD pipelines and infrastructure as code • Work on container security, including image builds, registries, and runtime hardening • Write queries and detection rules in a SIEM or log stack and produce the corresponding runbooks • Conduct periodic access reviews, applying MFA, least privilege, and secrets vaults • Automate evidence collection and control validation using Python or Bash • Document what was tested, how it was tested, and what was proven, treating evidence as a deliverable • Report risks and escalate to the Lead anything outside the delegated scope

🎯 Requirements

• Hands-on production cloud security in AWS: IAM and policies, VPCs and segmentation, Security Groups, KMS/secrets, hardening, and public exposure reviews • Linux and networking troubleshooting: TCP/IP, DNS, TLS, VPNs, firewalls, and traffic analysis • Application security (AppSec): practical knowledge of the OWASP Top 10 and API Security Top 10; security-focused code review; operation of SAST, DAST, and SCA tools, with the ability to distinguish genuine findings from false positives • Infrastructure as code and CI/CD: Terraform and pipelines (GitHub Actions, GitLab CI, or equivalent), including the implementation of security gates • Containers: Docker, image builds, registries, and basic runtime hardening • End-to-end vulnerability management: triage, classification (CVSS), owner and deadline assignment, evidence collection, and retesting • Logging and detection: writing queries and rules in a SIEM or log stack (CloudWatch, OpenSearch, Wazuh, Splunk, Sentinel, or similar) and producing runbooks • Identity and access: MFA, least privilege, secrets vaults, and conducting periodic access reviews • Python or Bash scripting for automation, evidence collection, and control validation • Documentation discipline: evidence is a deliverable of the role, not a byproduct • English proficiency for technical reading (documentation, advisories, tools, and consoles) • Maturity to operate under direction: execute the standard defined by the Lead, submit deliverables for review, and escalate anything outside the delegated scope

🏖️ Benefits

• Flexible working hours • Career development plan