
11 - 50 employees
📣 Marketing
🤝 B2B
Marketing • B2B
H&W Publishing is a U. S. -based holding company focused on direct-response marketing. It describes itself as an innovative holding that specializes in marketing de resposta direta (direct response marketing) and is listed on LinkedIn under Marketing Services. H&W Publishing likely manages or invests in marketing businesses and provides services centered on performance-driven, response-oriented campaigns for clients.
🕒 September 4
🇧🇷 Brazil – Remote
💵 $4k / month
⏳ Contract/Temporary
🟡 Mid-level
🟠 Senior
👮♂️ Cybersecurity / Security Engineer
👻 Ghost score 2%
🗣️🇧🇷🇵🇹 Portuguese Required
Where this job comes from
Posted on H&W Publishing's careers page, not through a job board
First seen by Remote Rocketship September 4
Still open on H&W Publishing's site. Checked 2 days ago.

11 - 50 employees
📣 Marketing
🤝 B2B
Marketing • B2B
H&W Publishing is a U. S. -based holding company focused on direct-response marketing. It describes itself as an innovative holding that specializes in marketing de resposta direta (direct response marketing) and is listed on LinkedIn under Marketing Services. H&W Publishing likely manages or invests in marketing businesses and provides services centered on performance-driven, response-oriented campaigns for clients.
• Execute the technical security scope defined by the Lead Engineer, submitting deliverables for review • Work on production cloud security (AWS and OVH): IAM, VPCs, Security Groups, KMS, secrets, hardening, and public exposure • Manage vulnerabilities end to end: triage, classification (CVSS), owner and deadline assignment, evidence collection, and retesting • Operate SAST, DAST, and SCA tools, distinguishing genuine findings from false positives before creating work items for product teams • Conduct security-focused code reviews, applying the OWASP Top 10 and API Security Top 10 • Implement and maintain security gates in CI/CD pipelines and infrastructure as code • Work on container security, including image builds, registries, and runtime hardening • Write queries and detection rules in a SIEM or log stack and produce the corresponding runbooks • Conduct periodic access reviews, applying MFA, least privilege, and secrets vaults • Automate evidence collection and control validation using Python or Bash • Document what was tested, how it was tested, and what was proven, treating evidence as a deliverable • Report risks and escalate to the Lead anything outside the delegated scope
• Hands-on production cloud security in AWS: IAM and policies, VPCs and segmentation, Security Groups, KMS/secrets, hardening, and public exposure reviews • Linux and networking troubleshooting: TCP/IP, DNS, TLS, VPNs, firewalls, and traffic analysis • Application security (AppSec): practical knowledge of the OWASP Top 10 and API Security Top 10; security-focused code review; operation of SAST, DAST, and SCA tools, with the ability to distinguish genuine findings from false positives • Infrastructure as code and CI/CD: Terraform and pipelines (GitHub Actions, GitLab CI, or equivalent), including the implementation of security gates • Containers: Docker, image builds, registries, and basic runtime hardening • End-to-end vulnerability management: triage, classification (CVSS), owner and deadline assignment, evidence collection, and retesting • Logging and detection: writing queries and rules in a SIEM or log stack (CloudWatch, OpenSearch, Wazuh, Splunk, Sentinel, or similar) and producing runbooks • Identity and access: MFA, least privilege, secrets vaults, and conducting periodic access reviews • Python or Bash scripting for automation, evidence collection, and control validation • Documentation discipline: evidence is a deliverable of the role, not a byproduct • English proficiency for technical reading (documentation, advisories, tools, and consoles) • Maturity to operate under direction: execute the standard defined by the Lead, submit deliverables for review, and escalate anything outside the delegated scope
• Flexible working hours • Career development plan
Apply NowImprove your chances of getting an interview by checking your resume score before you apply.
🕒 September 1
Senior Product Security Engineer securing Tessera Labs' platform across its lifecycle. Performing threat modeling, penetration testing, code reviews, and security tooling.
🕒 August 11
Pentester pleno realizando testes de intrusão em aplicações, redes, APIs e nuvens para a IPV7 Tecnologia. Identificação de vulnerabilidades, relatórios técnicos e validação de remediações.
🗣️🇧🇷🇵🇹 Portuguese Required
🕒 August 6
Especialista em Wazuh implementando e administrando segurança para clientes da IT4US, empresa de cibersegurança. Evoluindo detecção, monitoramento e operações SOC em ambientes Windows e Linux.
🗣️🇧🇷🇵🇹 Portuguese Required
🕒 June 26
Attorney specialized in social security law handling cases remotely for a Brazilian law management company. Requires OAB and strong background in judicial social security law.
🗣️🇧🇷🇵🇹 Portuguese Required
🕒 April 14
Senior Mobile Developer focusing on Information Security for a tech company. Developing secure, scalable mobile applications for Android and iOS using Flutter in a collaborative environment.
🗣️🇧🇷🇵🇹 Portuguese Required