Staff Security Engineer – AppSec

Job not on LinkedIn

🔥 50 minutes ago

🇧🇷 Brazil – Remote

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🗣️🇧🇷🇵🇹 Portuguese Required

Where this job comes from

Posted on Stone & Company's careers page, not through a job board

First seen by Remote Rocketship 50 minutes ago

Still open on Stone & Company's site. Checked 13 minutes ago.

Logo of Stone & Company

Stone & Company

1 - 10 employees

💼 Consulting

🤝 B2B

Consulting • B2B

Stone + Company is a management and strategy consulting firm that empowers corporate clients to achieve exceptional results by transforming disjointed strategies or crafting new ones into a unified plan designed for optimal performance and team synchronization. The firm focuses on delivering fast and effective outcomes for its clients.

📋 Description

• Define and implement application security strategies, including for applications using LLMs and generative AI • Collaborate with development teams to integrate security from the beginning of the software development lifecycle • Conduct architecture, code, and design reviews to identify vulnerabilities • Define guardrails and standards for LLM-powered applications • Establish guidelines for the secure use of AI-assisted development tools • Develop and promote security standards and best practices • Provide technical guidance and security training • Use and maintain knowledge of automated validation tools in CI/CD, such as SAST, DAST, SCA, and Secret Scanning • Monitor threat trends, including threats to AI systems • Develop solutions to complex security challenges while balancing business needs and risks • Hunt for threats in corporate and production environments • Define security architecture standards with Engineering and Product teams • Create architecture plans and technical roadmaps for migrating legacy systems • Identify vulnerabilities, assess risks, and help prevent attacks • Participate in security incident analysis and response • Train and raise awareness among development teams regarding best practices and the secure use of AI assistants

🎯 Requirements

• Completed or ongoing undergraduate degree in Information Security, Computer Science, Information Systems, Software Engineering, or a related field • Knowledge of common attack vectors • Experience conducting threat modeling • Experience with effective protection mechanisms for APIs and mobile applications • Knowledge of basic Cloud security services and concepts (AWS, Azure, or GCP) • Familiarity with security risks in applications that use LLMs and generative AI, including the OWASP Top 10 for LLM Applications and MITRE ATLAS • Ability to identify opportunities for improvement, new solutions, and alerts • Influence and negotiation skills to guide teams • Ability to work independently • Concise, candid, and assertive communication • Proactive approach to seeking or requesting information • Comfortable working in multidisciplinary teams using agile methodologies • Ability to read and communicate in English

🏖️ Benefits

• Base salary • Variable compensation package (profit sharing, long-term incentive plan, or commission), subject to role eligibility • Health and dental insurance with copayments • Verde Virtual Hospital: 24/7 telemedicine team • Prescription drug subsidy • Meal and/or food allowance – Pluxee • Childcare assistance for children up to 5 years and 11 months old • Assistance for employees with children with disabilities • Life insurance • Fuel allowance or commuting assistance • Home office allowance for hybrid or remote contracts • New Parent Welcome Kit • SESC membership • Education benefit: Internal self-development platform (Studa and Stone Library) • Acolhe360º: Free emotional support • Quick Massage and on-site medical clinic • Wellhub • TotalPass • Pet Club • Flash • Férias&Co • Transportation voucher • Allya • Educational partnerships

Apply Now

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Similar Jobs

🕒 6 days ago

Kyndryl

10,000+ employees

💼 Consulting

📦 Logistics

🏥 Healthcare

Security Architect reviewing risks, controls, and threats for Kyndryl’s mission-critical technology services. Advising teams on secure cloud and enterprise solution architectures.

🕒 June 25

Spassu

1001 - 5000

💼 Consulting

📦 Logistics

📣 Marketing

Information Security Manager leading execution of security services for Spassu. Focused on team leadership, process improvement, and security compliance.

🗣️🇧🇷🇵🇹 Portuguese Required

Built by Lior Neu-ner. I'd love to hear your feedback — Get in touch via DM or support@remoterocketship.com
Follow Remote Rocketship on LinkedInFollow Remote Rocketship on InstagramFollow Remote Rocketship on FacebookFollow Remote Rocketship on TikTok