Security Engineer – DevSecOps, AppSec

Job not on LinkedIn

🔥 46 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Saipos | Sistema para Restaurante

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2017

🍽️ Food & Beverage

📦 Logistics

💼 Consulting

Food & Beverage • Logistics • Consulting

Saipos is a comprehensive restaurant management system that offers solutions for various types of food establishments, including delivery services, pizzerias, sushi bars, and franchises. With features like digital menus, automated delivery routing, and financial control, Saipos aims to enhance operational efficiency and improve customer service for its users. The software integrates with major delivery apps and is designed to streamline business processes within the food service industry, making it an ideal choice for over 10,000 restaurants looking to optimize their management practices.

📋 Description

• Implement and maintain SAST, DAST and SCA tools in the CI/CD pipeline (Bitbucket/GitHub/GitLab) • Implement, maintain, operate and evolve the Secrets Manager and Vault • Perform continuous secret scanning in repositories and drive remediation of findings with development teams • Conduct security-focused code reviews on critical features — authentication, authorization, external integrations, handling of sensitive data • Harden infrastructure: Terraform state, IAM policies, AWS configurations, Security Groups • Support remediation of technical findings collected from security analysis tools, external pentests and internal scans • Build and lead the Security Champions program — identify focal points within dev squads and structure ongoing training • Conduct threat modeling for new features and critical integrations with product and engineering teams • Define and document security requirements in the SDLC — from design to deployment • Assess the security of internal and external APIs, partner integrations and authentication flows

🎯 Requirements

• Hands-on experience with CI/CD pipelines and integrating security tools (SAST, SCA, secret scanning) into the development workflow. • Strong knowledge of AWS: IAM, S3, Lambda, Security Groups, VPC, KMS and cloud security best practices. • Experience with infrastructure as code (Terraform) — able to identify and remediate security issues in IaC. • Knowledge of OWASP Top 10 and OWASP API Security Top 10 with the ability to apply them in code and architecture reviews. • Ability to write scripts and automations for analysis and remediation (Python or Bash). • Ability to read and interpret code in at least one language used in the product. • Critical thinking and risk analysis. • Proactive: initiative and anticipation. • Interpersonal communication with development teams. • Technical independence. • Collaboration and teamwork. • Teaching skills and knowledge transfer. • Result-oriented: delivery and outcomes.

🏖️ Benefits

• Contract (PJ) with 30 days of paid leave • Health insurance with monthly premium 100% covered by the company (for contractors after 6 months) • Dental plan (for contractors after 6 months) • Life insurance • Full equipment kit • Home office allowance - R$180.00/month • Day off during your birthday month • Gympass discount • No dress code — be yourself! • Extended maternity and paternity leave