Application Security Analyst | Senior

Work set-up: 
Full Remote
Contract: 
Full time
Experience: 
Senior (5-10 years)
Work from: 
Brazil

Offer summary

Qualifications:

Experience in designing security architectures for systems and applications., Knowledge of DevSecOps practices and tools like SAST, DAST, IAST, and SCA., Ability to analyze scanner results and recommend actions., Background in security testing, threat modeling, and compliance frameworks like OWASP ASVS..

Key responsibilities:

  • Lead security initiatives based on market frameworks.
  • Implement DevSecOps practices and integrate security tools into development pipelines.
  • Conduct security-focused code reviews and audits.
  • Support development teams in adopting security best practices.

Compass.uol logo
Compass.uol XLarge
5001 - 10000 Employees
See all jobs

Job description

JOB DESCRIPTION

.


RESPONSIBILITIES AND ASSIGNMENTS

  • Conduzir iniciativas de segurança com base em frameworks consolidados de mercado;
  • Implementar práticas de DevSecOps, integrando ferramentas SAST, DAST e SCA às esteiras de desenvolvimento;
  • Realizar revisões de código com foco em segurança e compliance;
  • Conduzir auditorias no Fortify e análises de falsos positivos;
  • Participar da arquitetura de sistemas com foco em segurança desde o início;
  • Conduzir modelagens de ameaças e propor planos de mitigação;
  • Criar e promover materiais educativos sobre segurança (flyers, guidelines);
  • Automatizar rotinas de segurança e criar scripts preventivos;
  • Apoiar os times de desenvolvimento na adoção de boas práticas.

    • REQUIREMENTS AND QUALIFICATIONS


      • Experiência na definição de arquiteturas e soluções de segurança para ambientes, sistemas e aplicações;
      • Experiência com pipelines seguros e ferramentas SAST, DAST, IAST e SCA;
      • Capacidade analítica para interpretar resultados de scanners e propor ações;
      • Vivência em projetos de segurança voltados para aplicações;
      • Conhecimento em frameworks de segurança e testes de intrusão;
      • Experiência validação da segurança das aplicações utilizadas em AppSec;
      • Experiência com modelagem de ameaças e OWASP ASVS.


        • Não possui todos os requisitos para a vaga?


          Está tudo bem! Na Compass UOL, estimulamos o desenvolvimento contínuo de novos talentos e transformamos desafios em oportunidades.


          ADDITIONAL INFORMATION


          #remote

          remote


          DREAM BIG WHEN IT COMES TO TECHNOLOGY. BE A COMPASSER! 🚀

          Compass UOL is a global company that is part of AIR, which drives the transformation of organizations through Artificial Intelligence, Generative AI, and Digital Technologies.


          We design and build digitally native platforms using cuttingedge technologies to help companies innovate, transform businesses, and drive success in their markets. With a focus on attracting and developing the best talent, we create opportunities that improve lives and highlight the positive impact of disruptive technologies on society.


          Thats why our selection process goes beyond technical skills. Our goal is to find unique individuals with the potential to make an extraordinary impact on our clients.


          We empower talent without borders and promote knowledge and opportunities in the latest market trends, driving significant results.


          Join us and be part of the AIdriven digital revolution in the technology universe.


          HOW OUR SELECTION PROCESS WORKS

          1. ONLINE APPLICATION
          Choose the opportunity that best fits your goals. Remember: having a welldetailed profile with your experiences and knowledge can make all the difference!
          2. INTERVIEWS
          Learn about our culture and company! During interviews, be present and do your best to share your expertise in a chronological and structured way.
          3. EVALUATION
          Our tests and assessments focus on finding talent with the cultural and technical fit for the position applied for.
          4. FEEDBACK

          Wait for our response regardless of the result! We have Gupy platform feedback certification.

Required profile

Experience

Level of experience: Senior (5-10 years)
Spoken language(s):
Portuguese
Check out the description to know which languages are mandatory.

Hard Skills

DevSecOpsSASSApplication SecurityThreat ModelingPenetration TestingSoftware SecurityGeneral SecurityApplication Frameworks

Other Skills

  • Analytical Skills
Are you interested?

Security Analyst Related jobs

See more Security Analyst jobs