Senior Security Engineering Analyst – AppSec

Job not on LinkedIn

🔥 0 minutes ago

🇧🇷 Brazil – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 15%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Compass

WebsiteLinkedInAll Job Openings

10,000+ employees

🏠 Real Estate

📱 Media

Real Estate • Media

Compass is a real-estate-focused content and services site that provides detailed market analysis, buying/selling/renting guides, mortgage and financing information, and home improvement and renovation advice. The site offers resources for homebuyers, sellers, renters, agents, and real estate investors — including articles on appraisals, affordable housing, investment strategies, staging and property maintenance. Compass aims to help users make informed decisions across the housing lifecycle through timely market updates and practical how-to content.

📋 Description

• Define and evolve the corporate Secure Software Development Life Cycle (SSDLC) process • Establish minimum security requirements for applications • Define and implement Security Gates in development and CI/CD processes • Integrate security controls and requirements into the application lifecycle • Support the advancement of a secure development culture across the organization • Participate in projects from the initial conception and architecture stages • Conduct security assessments of proposed solutions and architectures • Identify risks and vulnerabilities and propose mitigation measures • Apply Threat Modeling and Security by Design practices • Work closely with architects, developers, DevOps, and other technical teams • Identify, analyze, and remediate application vulnerabilities • Support development teams in adopting Secure Coding practices • Conduct code reviews from a security perspective • Assess APIs, microservices, containers, and software components • Address vulnerabilities and risks related to dependencies, code, infrastructure, and configurations • Integrate security tools into CI/CD pipelines • Work with SAST, DAST, SCA, Secret Scanning, IaC Scanning, and Container Security solutions • Support the implementation and management of SBOMs • Define criteria and policies for Security Gates • Promote automation of security controls throughout pipelines • Work in AWS environments, supporting the implementation of secure architectures • Assess cloud security configurations and controls • Work with resources such as AWS API Gateway and AWS Security Hub • Support the identification and remediation of risks related to cloud infrastructure and applications

🎯 Requirements

• Experience in medium- to large-scale corporate environments • Experience working directly with development teams • Experience defining or evolving security processes and controls • Knowledge of SSDLC — Secure Software Development Life Cycle • Knowledge of Security by Design • Knowledge of Threat Modeling • Knowledge of the OWASP Top 10 • Knowledge of OWASP ASVS • Knowledge of Secure Coding • Knowledge of API Security • Knowledge of Application Architecture • Knowledge of Microservices Architecture • Knowledge of DevOps and CI/CD • Knowledge of application vulnerability management • Experience with SAST, DAST, SCA, Secret Scanning, IaC Scanning, Container Security, SBOM, CI/CD, and DevSecOps • Experience with AWS • Knowledge of AWS API Gateway • Knowledge of AWS Security Hub • Knowledge of cloud security and architecture

🏖️ Benefits

• Open to applicants with disabilities (PwD) • Remote work