AppSec & DevSecOps Engineer

Jobgether • Greater São Paulo Area

Remote

This Job is No Longer Active This position is no longer accepting applications

AI Summary

Jobgether is seeking an AppSec & DevSecOps Engineer to lead the implementation of secure development practices across the software lifecycle. The ideal candidate will have experience in Application Security and DevSecOps, with a strong understanding of secure development methodologies and cloud security.

Key Highlights

Lead the implementation of secure development practices across the software lifecycle

Design, standardize, and maintain secure CI/CD pipelines

Conduct risk assessments, threat modeling, and security evaluations

Key Responsibilities

Act as a technical reference for Application Security (AppSec) and DevSecOps practices across development projects

Integrate security into all stages of the software development lifecycle using Secure SDLC and Shift Left methodologies

Design, standardize, and maintain secure, reusable, automated, and version-controlled CI/CD pipelines

Implement DevSecOps controls and security best practices within continuous delivery workflows

Conduct risk assessments, threat modeling exercises, and security evaluations for applications and architectures

Perform vulnerability triage, analysis, and remediation support alongside development teams

Operate and manage security tools including SAST, DAST, SCA, container security, and Infrastructure as Code (IaC) scanners

Conduct security-focused code reviews, especially for .NET Core and Node.js applications

Evaluate and improve cloud security architectures and controls within AWS, Azure, or GCP environments

Ensure compliance with governance and security frameworks such as ISO 27001, SOC 2, and PCI DSS

Develop scripts and automations for security controls and integrations with SIEM/SOC platforms

Promote security awareness, mentorship, and training initiatives across technology teams

Interested in remote work opportunities in Devops? Discover Devops Remote Jobs featuring exclusive positions from top companies that offer flexible work arrangements.

Technical Skills Required

Secure SDLC methodologies Shift Left security strategies CI/CD platforms (Azure DevOps, GitHub Actions, GitLab CI, Jenkins) SAST, DAST, SCA security tools .NET Core and Node.js environments Cloud computing platforms (AWS, Azure, GCP) Containers and orchestration technologies (Docker, Kubernetes) Infrastructure as Code (Terraform, ARM, CloudFormation) Secure architecture principles and Threat Modeling practices

Benefits & Perks

Full-time remote work model within Brazil

Opportunity to work with advanced technologies

Collaborative and innovation-focused work environment

Browse our curated collection of remote jobs across all categories and industries, featuring positions from top companies worldwide.

Nice to Have

Security certifications (CSSLP, CEH, Security+, AZ-500, AWS Security Specialty)

Experience with SIEM/SOC environments and monitoring integrations

Knowledge of OWASP Top 10, ASVS, and SAMM frameworks

Experience working in regulated or highly critical environments

Job Description

This is an exciting opportunity for a cybersecurity professional passionate about embedding security into modern software development and cloud-native environments. In this role, you will lead the implementation of secure development practices across the entire software lifecycle, helping engineering teams deliver resilient, scalable, and compliant applications. You will work closely with developers, architects, DevOps, and cloud teams to strengthen security automation, vulnerability management, and secure CI/CD processes. The position combines technical depth, strategic influence, and hands-on execution, making it ideal for professionals who enjoy solving complex security challenges while enabling innovation. This fully remote role offers the chance to contribute to cutting-edge digital transformation initiatives in a collaborative and technology-driven environment.

Want the full job description? Read the complete details on LinkedIn, the original posting.

Continue on LinkedIn

This is a short excerpt. All rights to the full description belong to its original publisher.