Application Security Specialist, AppSec

Job not on LinkedIn

🔥 7 minutes ago

🇧🇷 Brazil – Remote

⏳ Contract/Temporary

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

LEO Learning Brasil

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2012

📚 Education

🏢 Enterprise

☁️ SaaS

Education • Enterprise • SaaS

LEO Learning Brasil is a company focused on innovative corporate training and development solutions. They offer a comprehensive platform, LearningFlix, which combines learning management system (LMS) capabilities with extensive educational content and artificial intelligence. With over a decade of experience, LEO Learning Brasil specializes in creating customized training paths and supports organizations in implementing effective corporate learning strategies.

📋 Description

• Ensure the security of Revvo’s applications and digital solutions • Identify, analyze, classify, and track the remediation of vulnerabilities in PHP applications • Conduct source code reviews focused on the OWASP Top 10 • Perform security testing (penetration testing) on web applications, APIs, integrations, and services • Implement and operate SAST, DAST, and SCA tools • Assess vulnerabilities in PHP libraries, frameworks, components, and third-party dependencies • Support developers in implementing fixes and secure coding best practices • Assess authentication, authorization, access control, session management, and data protection • Integrate automated security controls into development processes and CI/CD pipelines • Assess security risks in products that use artificial intelligence, including integrations with AI models, data exposure, prompt injection, and API misuse • Support security incident analysis, vulnerability investigations, and the definition of preventive actions • Assess security configurations for servers, applications, cloud services, and WAFs • Prepare technical reports, document evidence, establish remediation priorities, and track security metrics • Participate in architecture assessments and drive the continuous improvement of product security practices • Respond to customer security questionnaires regarding digital products • Partner with development teams to promote secure coding, data protection, API security, and the integration of controls throughout the development lifecycle

🎯 Requirements

• Bachelor’s degree in Computer Science, Software Engineering, Information Systems, Information Security, Computer Engineering, or a related field • Relevant training in secure PHP development and web application security • Knowledge of the OWASP Top 10 and OWASP API Security Top 10 • Knowledge of vulnerability assessment and security testing • Knowledge of REST API security and OAuth 2.0/OpenID Connect authentication • Knowledge of DevSecOps, Git, and security integration into CI/CD • Knowledge of cloud security and application infrastructure • Knowledge of security for artificial intelligence applications and LLMs • Knowledge of dependency analysis, CVE management, and vulnerability remediation • Solid experience in AppSec, PHP, secure architecture, and DevSecOps • Ability to define corporate secure development standards and AppSec policies • Proficiency in SAST, DAST, SCA, code review, and security control automation • Advanced knowledge of cloud security, authentication, authorization, cryptography, and data protection • Ability to assess critical vulnerabilities, support incident investigations, and define mitigation strategies • Experience defining SSDLC processes and integrating security into the development lifecycle • Knowledge of artificial intelligence security, including risks associated with LLMs, information leakage, prompt injection, and integrations with external services • Ability to define security metrics, vulnerability indicators, remediation SLAs, and improvement roadmaps • Experience providing technical guidance to developers and security professionals • Experience with threat modeling, risk analysis, and secure architecture for applications and APIs • Certifications such as ISC2 Certified in Cybersecurity (CC), CSSLP, Burp Suite Certified Practitioner (BSCP), CompTIA Security+, or cloud security certifications are desirable

🏖️ Benefits

• Pharmacy benefits • Workplace exercise program • Discount club • Wellhub (Gympass) membership • Conexa healthcare benefit • Psicologia Viva benefit • Birthday day off • Remote-work allowance

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume