AppSec, Security Analyst, Mid and Senior

Job not on LinkedIn

🔥 9 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Compass

WebsiteLinkedInAll Job Openings

10,000+ employees

🏠 Real Estate

📱 Media

Real Estate • Media

Compass is a real-estate-focused content and services site that provides detailed market analysis, buying/selling/renting guides, mortgage and financing information, and home improvement and renovation advice. The site offers resources for homebuyers, sellers, renters, agents, and real estate investors — including articles on appraisals, affordable housing, investment strategies, staging and property maintenance. Compass aims to help users make informed decisions across the housing lifecycle through timely market updates and practical how-to content.

📋 Description

• Monitor, analyze, and respond to security incidents, identifying threats and defining containment and mitigation measures • Identify, assess, and track the remediation of vulnerabilities in applications, systems, infrastructure, and cloud environments • Participate in vulnerability, risk, and security incident management processes • Support security testing, technical assessments, and periodic audits • Contribute to the implementation and evolution of Security by Design and DevSecOps practices, integrating security into the software development lifecycle • Work closely with development teams to identify and remediate application vulnerabilities • Develop and maintain information security policies, procedures, standards, and controls • Produce technical reports related to risks, vulnerabilities, incidents, and threats • Support compliance and security requirements monitoring, considering frameworks and regulations such as ISO, NIST, and LGPD (Brazilian Data Protection Law) • Promote the dissemination of best practices and internal awareness on Information Security • Monitor threats, vulnerabilities, and market trends, proposing continuous improvements to security controls

🎯 Requirements

• Knowledge of Application Security (AppSec) • Knowledge of SOC / Security Operations • Knowledge of cloud security, especially Azure environments • Knowledge of Offensive Security / Penetration Testing • Knowledge of DevSecOps • Knowledge of vulnerability and risk management • Knowledge of security incident response and handling • Desirable knowledge in Information Security • Knowledge of OWASP and common application vulnerabilities • Knowledge of Azure DevOps • Knowledge of DevSecOps concepts and Security by Design • Knowledge of security in Cloud/Azure environments • Knowledge of vulnerability and incident management • Knowledge of frameworks and best practices such as NIST and ISO 27001 • Knowledge of LGPD and data protection requirements • Knowledge of tools and practices for monitoring, analysis, and incident response