Application Security Engineer

Job not on LinkedIn

🔥 12 hours ago

🇧🇷 Brazil – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

💻 Application Engineer

👻 Ghost score 25%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

ROIT

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2016

💼 Consulting

⚖️ Legal

☁️ SaaS

Consulting • Legal • SaaS

ROIT is a Brazilian tax-technology company that provides an integrated ecosystem of SaaS solutions and AI-powered tools to help medium and large companies prepare for and manage the 2026 tax reform. Its offerings include an official tax-reform calculator that reprocesses SPED files and invoices, an Invoice-to-Pay automation suite (with ERP/SAP integrations), Tax Discovery for reclaiming taxes, regulatory consulting and education programs, and ongoing support for compliance and scenario planning.

📋 Description

• Structure and evolve ROIT’s Application Security and DevSecOps strategy. • Implement continuous security practices throughout the software development lifecycle (Secure SDLC). • Integrate security tools and controls into CI/CD pipelines. • Implement and enhance SAST, DAST, SCA, Secret Scanning, Container Scanning, and IaC Scanning practices. • Define and promote secure standards for APIs, microservices, Kubernetes, and cloud workloads. • Support engineering teams in identifying, prioritizing, and remediating vulnerabilities. • Participate in threat modeling, architectural reviews, and the definition of security controls. • Support initiatives related to ISO 27001, compliance, risk management, and audits. • Monitor critical vulnerabilities, risks, and application security incidents. • Automate security processes and controls whenever possible. • Promote a security culture across technical teams by acting in a consultative and collaborative manner. • Contribute to the organization’s technical maturity by advancing modern security practices.

🎯 Requirements

• Bachelor’s degree in Computer Science, Software Engineering, Information Systems, Information Security, or a related field. • Strong experience in Application Security, DevSecOps, or Software Engineering Security. • Experience working in cloud-native environments and with distributed architectures. • Experience with CI/CD pipelines and security automation. • Knowledge of web application security. • Knowledge of REST APIs and authentication/authorization. • Knowledge of Kubernetes and containers. • Knowledge of security in AWS, Azure, or GCP environments. • Knowledge of the OWASP Top 10. • Knowledge of threat modeling. • Knowledge of vulnerability management. • Experience with SAST, DAST, SCA, Container Security, Secret Detection, and IaC Security tools. • Knowledge of modern engineering and automation practices. • Familiarity with compliance and security frameworks, particularly ISO 27001. • Preferred qualifications: experience in high-scale B2B SaaS environments; experience at technology companies or fintechs; knowledge of event-driven architectures and microservices; experience developing AI-powered automations for security; security, cloud, or DevSecOps certifications; experience in regulated environments involving highly critical data.