Code Review Analyst – Application Security

🔥 13 hours ago

🇧🇷 Brazil – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 16%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Open for 1 day.
• Jobs at this company usually fill in 49 days.
• No salary listed.

Apply Now

Check your resume score

Customize resume + cover letter

Find Similar Remote Jobs

☆ Save☑️ Mark as applied❌ Hide

Report problem

MTP Brasil

WebsiteLinkedInAll Job Openings

501 - 1000 employees

💼 Consulting

🛡️ Insurance

📦 Logistics

Consulting • Insurance • Logistics

MTP Brasil is a multinational Spanish company with 17 years of expertise and reference in software quality services. It has software testing factories with ISO 9001 certifications and TMMi Level 5, becoming the first company in the world to achieve the latter in 2013. The factories achieve a testing capacity of 1,000,000 hours per year. MTP Brasil develops various solutions, notably OMNIATEST, a methodology based on parameters defined by ISTQB and certified at TMMi Level 5. OMNIATEST encompasses the complete software quality testing process, from requirements review to production testing. The company serves various sectors, primarily in Telecommunications, Banking, Insurance, Utilities, and Public Administration, leveraging its expertise in Requirements Engineering, Software Test Management methodologies, System Verification and Validation, and Process Improvement.

📋 Description

• Work with Code Review and Application Security, supporting security activities for systems developed within a global organization. • Analyze vulnerabilities identified by SAST and SCA tools. • Assess mitigation proposals, false positives, risks, severity, and their impact on application security. • Monitor and manage ticket queues, select requests, set priorities, and track cases through resolution. • Investigate source code, application behavior, architecture, and data flows. • Advise development teams on security best practices and remediation strategies. • Interact with technical teams via Microsoft Teams, meetings, and written communications. • Collaborate with professionals in Development, QA, Infrastructure, Operations, and Security. • Contribute to improvements in processes, services, and the use of emerging technologies.

🎯 Requirements

• Solid knowledge of Application Security, including software architecture, application behavior, and data flows. • Strong command of OWASP Top 10 concepts, with the ability to identify common vulnerabilities and connect them to appropriate code remediation strategies. • Experience in Software Development, Software Architecture, Quality Assurance (QA), or Application Security Engineering. • Practical knowledge of at least one development language or technology, such as C#, C++, Java, .NET, Node.js, or Python. • Ability to analyze SAST and SCA tool results, assess potential false positives, and validate risk mitigation proposals. • Ability to interpret source code and understand application behavior in order to investigate vulnerabilities and guide remediation. • Self-motivation and autonomy in managing requests, setting priorities, tracking tickets, and driving activities through to completion. • Advanced English proficiency, with strong verbal and written communication skills to explain technical risks, present remediation recommendations, and interact with international teams and stakeholders. • Ability to adapt to change, work in situations with incomplete information, and collaborate with multidisciplinary teams. • Previous hands-on experience as a Software Developer, especially in activities related to code analysis and vulnerability remediation (a plus). • Familiarity with MVC, microservices, and event-driven architecture (a plus). • Knowledge of Agile, XP, Scrum, and Kanban (a plus). • Familiarity with TDD and CI/CD (a plus). • Knowledge of cloud computing architecture and services, especially AWS (a plus). • Familiarity with code review processes and penetration testing (Pentest) concepts (a plus). • Knowledge of or exposure to Burp Suite, Metasploit, Fuzzing, and Jenkins; hands-on Pentest experience is not required (a plus). • Experience using or supporting Artificial Intelligence-based resources applied to Software Engineering or Security services (a plus). • Availability to work with significant overlap with U.S. Eastern Time business hours, not as a mandatory requirement (a plus). • A collaborative and engaged profile, with the ability to share opinions, propose improvements, and contribute to an open and collaborative work environment (a plus).

🏖️ Benefits

• Health insurance • Dental insurance • Meal vouchers • Transportation allowance • Cultural allowance • Education allowance • Life insurance • Mental health and well-being program • Childcare assistance • Partner discounts • Work model: Remote • Employment type: CLT employment contract

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume