Lead Security Engineer

🕒 August 20

🇧🇷 Brazil – Remote

⏳ Contract/Temporary

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 15%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

LawnStarter

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2013

👥 B2C

🏪 Marketplace

🏠 Real Estate

💰 $10.5M Venture Round on 2019-11

B2C • Marketplace • Real Estate

LawnStarter is a service platform that provides affordable lawn care services at the click of a button. With fast online ordering, quality service, and a user-friendly app, LawnStarter allows customers to easily schedule and manage lawn maintenance services. These include lawn mowing, fertilization, bush trimming, and weeding. The company partners with local professionals to ensure reliable and insured services while supporting small businesses. LawnStarter offers its services across numerous locations in the United States, aiding customers in keeping their lawns beautiful and well-maintained.

📋 Description

• Lead security end-to-end across the PHP/Laravel and TypeScript/React codebase, AWS infrastructure, payment and customer-data flows, and compliance posture • Set the multi-year security direction and build scalable security controls • Establish threat models, automated scanning, incident runbooks, standards, playbooks, and hiring standards • Own application security, including secure-SDLC practices, code and design review, CI scanning, and vulnerability management • Own cloud and infrastructure security, including AWS posture, IAM, networking, encryption, secrets management, and EKS/Kubernetes hardening • Drive PCI scope mapping, SOC 2 and LGPD readiness, vendor risk, and audit/customer security questionnaire responses • Strengthen detection coverage and lead incident response when needed • Define security scans, review gates, conventions, and evaluations for AI-agent-authored code • Collaborate with delivery teams and Cloud & DevOps to make secure shipping the easy path • Plan, hire, mentor, and lead a small security team within roughly 12–18 months • Deliver a risk register, CI security pipeline, compliance baseline, detection and response program, multi-year roadmap, and business case for initial security hires

🎯 Requirements

• Hands-on expertise in at least three of application security, cloud, compliance, and incident response • Real depth building and owning security controls across multiple domains • Ability to use AI tools daily in security work • Experience with threat modeling, secure SDLC, code and design review, SAST, secret scanning, dependency scanning, and vulnerability management • Experience securing AWS infrastructure, including IAM, networking, encryption, secrets management, and EKS/Kubernetes hardening • Experience with PCI scope mapping, SOC 2 and LGPD readiness, vendor risk, and security questionnaires • Experience with detection and response, including Datadog, Sentry, AWS signals, incident runbooks, MTTD, and MTTR • Ability to build automated security gates and conventions for AI-agent-authored code • Hands-on engineering ability to write scripts, build pipelines, configure AWS guardrails, and ship detections • Ability to prioritize risks pragmatically and reduce risk with minimal friction • Strong collaboration with delivery teams and Cloud & DevOps • Payments and marketplace security mindset • Ability and interest to build and lead a small security team within roughly 12–18 months

🏖️ Benefits

• Lead security and take it to the next level • Top-of-market cash compensation • Fully remote (Brazil) • Contractor (PJ) engagement • AI tooling provided, including Claude Code and the agent stack used by engineering • No equity