Staff Security Engineer – Application Security

🔥 0 minutes ago

🇧🇷 Brazil – Remote

⏰ Full Time

🔴 Lead

💻 Application Engineer

Where this job comes from

Posted on Wellhub's careers page, not through a job board

First seen by Remote Rocketship 0 minutes ago

Logo of Wellhub

Wellhub

1001 - 5000 employees

Founded 2012

👥 HR Tech

☁️ SaaS

🤝 B2B

💰 Accelerator/Incubator on 2024-12

HR Tech • SaaS • B2B

Wellhub is a corporate wellness platform that packages fitness, mindfulness, nutrition and sleep services into a single subscription for employees whose companies offer it as a workplace benefit. The platform provides access to a large global network (120,000+ in-person gyms & studios, 3,800+ virtual personal trainers, and 90+ premium wellness apps), supports both employer-paid and employee-paid subscription options, and is delivered via an app that companies can launch in about 30 days. Wellhub positions itself as an HR-facing benefit (helping reduce healthcare costs and turnover) and a consumer-facing wellness subscription for employees.

📋 Description

• Own multiple security domains end-to-end, including application security, threat intelligence, detection engineering, and cloud security posture • Lead system and architectural reviews and threat modeling for high-risk projects • Enforce secure-by-design standards and set secure-coding benchmarks • Scope, hire, or directly run penetration tests and red team exercises against critical systems • Drive root-cause remediation with engineering teams • Own and resolve complex cross-service vulnerabilities and security incidents • Coordinate multiple engineering teams and communicate status to stakeholders • Convert postmortems into guardrails that prevent recurrence and improve detection and response maturity • Set and enforce security KPIs, SLAs, and SLOs • Build monitoring and alerting for organizational accountability • Drive architecture decisions to reduce security debt • Plan and execute security-related migrations and platform updates involving identity, cloud, and key management • Manage medium-to-large security initiatives such as red team programs, vulnerability reduction, compliance audits, zero-trust rollouts, cloud security hardening, and detection coverage programs • Mentor engineers and translate complex security concepts into actionable guidance

🎯 Requirements

• Prior experience in security engineering is mandatory • Extensive experience in Security Engineering or software engineering with high security impact • Deep hands-on experience in one or more of AppSec, Security Architecture, Cloud/Infra Security, IAM, or Detection & Response • Working familiarity across the other security sub-domains • Ability to write secure, well-tested code for security tooling and automation • Experience with detection rules, scanners, and IAM guardrails • Experience navigating legacy systems and identifying refactoring and hardening opportunities • Experience leading RFCs and design documents for security-sensitive changes • Ability to document threat models, risk trade-offs, and failure predictions • Knowledge of attacker TTPs and compliance frameworks including SOC 2, ISO 27001, LGPD, and GDPR • Fluency in English and strong communication skills

🏖️ Benefits

• Free Gold+ Wellhub membership with access to onsite gyms and studios, digital fitness programs, and online wellness resources for meditation, nutrition, mental wellbeing support, and more • Ability to add up to three family members to the Wellhub membership • Wellz emotional wellbeing program with personalized journeys, 52 individual therapy sessions per year, and on-demand content • Health, dental, and life insurance • Flexible benefits program • Hybrid and remote work options; specific model discussed with recruiter and hiring manager • Home office reimbursement • Flexible schedules aligned with time zones, team needs, and personal routines • Vacations after 6 months • Additional 3 days off per year • 1 day off for each year of tenure, up to 5 additional days • Extra holiday for birthday • 100% paid parental leave for all new parents • Extended leave and ramp-back period for parents giving birth • Access to world-class learning platforms and interactive sessions • Personalized development roadmap • Internal career opportunities • Continuous learning and feedback • Inclusive and supportive workplace culture • Equal opportunity employment • Syndio Fair Pay Certification

Apply Now

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Similar Jobs

🕒 October 23

In All Media

1001 - 5000

💼 Consulting

📣 Marketing

☁️ SaaS

Senior Database Application Engineer bridging application development and database infrastructure at global technology firm Inallmedia.com. Designing, optimizing, and integrating SQL Server and MongoDB data solutions.

Built by Lior Neu-ner. I'd love to hear your feedback — Get in touch via DM or support@remoterocketship.com
Follow Remote Rocketship on LinkedInFollow Remote Rocketship on InstagramFollow Remote Rocketship on FacebookFollow Remote Rocketship on TikTok