11289145 - Senior DevSecOps Analyst

Description

MTP – Methods and Technology is a Spanish multinational with 28 years of experience, operating in over 21 countries, with headquarters in Brazil, Spain, and Mexico. We are specialists in **Digital Business Assurance**, combining strategy, technology, and innovation to support major enterprises in their digital transformation journey. With over 80 active clients across Finance, Insurance, Telecom, Industry, Retail, Technology, and Energy sectors, we deliver solutions that ensure quality, security, and performance across the entire digital lifecycle. **Responsibilities and Assignments** **Objective:** Drive the evolution of DevSecOps and Application Security practices by integrating security into development pipelines and supporting technical teams in identifying, prioritizing, and remediating vulnerabilities in applications, APIs, and corporate environments. This role will serve a major client in the construction industry, within a context of digital systems focused on civil construction and real estate markets—including portals, mobile apps, CRM, customer purchase journeys, integrations with banks, financing, credit analysis, documents, contracts, and sensitive personal data—requiring strict attention to security controls, privacy, and LGPD compliance. **Key Responsibilities:** * Implement and evolve DevSecOps/AppSec practices across the development lifecycle; * Integrate security tools into CI/CD pipelines; * Utilize the Conviso platform for vulnerability management, prioritization, and tracking; * Support squads in remediating vulnerabilities in .NET Core, Angular, and React applications; * Conduct security analyses including SAST, DAST, SCA, container scanning, and secret detection; * Promote Secure Coding best practices and the OWASP Top 10; * Support defining security controls for APIs, authentication, authorization, logging, and secret management; * Generate security metrics, vulnerability backlogs, and remediation status reports; * Support evidence collection for compliance, LGPD, and security governance. **Requirements and Qualifications** **Mandatory Requirements:** * Senior-level experience in DevSecOps, AppSec, or Application Security; * Knowledge of CI/CD pipelines such as Azure DevOps, GitHub Actions, GitLab CI, or Jenkins; * Experience with Conviso or similar AppSec tools; * Knowledge of security applied to .NET Core, Angular, and React; * Experience with SAST, DAST, SCA, OWASP Top 10, CWE, and CVSS; * Knowledge of REST APIs, authentication, authorization, encryption, and vulnerability management; * Knowledge of cloud platforms, containers, infrastructure-as-code, and secret management; * Ability to guide development teams in addressing security flaws. **Behavioral Profile:** * Technical, senior, hands-on profile; * Strong communication skills with development, architecture, security, and business stakeholders; * Ability to prioritize risks and vulnerabilities; * Collaborative mindset to support teams in advancing security maturity; * Organized, with a sense of urgency and focus on continuous improvement. **Additional Information** **Work Model: Remote First** **Contract Type: PJ (Individual Entrepreneur)** **Benefits:** * Mental health and well-being program * Partner discounts #### **About MTP** MTP – Methods and Technology is a Spanish multinational with 28 years of experience, operating in over 21 countries, with headquarters in Brazil, Spain, and Mexico. We are specialists in **Digital Business Assurance**, combining strategy, technology, and innovation to support major enterprises in their digital transformation journey. With over 80 active clients across Finance, Insurance, Telecom, Industry, Retail, Technology, and Energy sectors, we deliver solutions that ensure quality, security, and performance across the entire digital lifecycle. Our delivery model rests on three foundational pillars: active management, technical excellence, and continuous oversight—factors reflected in our **97% satisfaction rate** and **2.5% turnover**, which is **75% lower than the IT industry average**. #### **What We Do** We support the full digital journey—from conception to operations—through five specialized areas: * **Quality Assurance (QA):** functional, service, performance, and security testing. * **Automation (AUT):** QAOps, Continuous Testing, RPA, and Data & TDM. * **Development Experience (DevX):** DevOps, DevSecOps, Agile Development, and ongoing support. * **Business Experience (BizX):** UX/UI, digital marketing, and customer experience. * **Data Intelligence (iData):** DataOps, Big Data, and Analytics. #### **How We Deliver** Our **core business** lies in the **MTP Delivery Models**, designed to adapt to each client’s technological maturity and strategic objectives. * **Dedicated Professional Service:** specialized professionals assigned exclusively to one project or client, fully managed by MTP. * **Closed Squad:** complete, multidisciplinary teams operating under agile management with an innovation focus. * **Factory Model:** scalable structure supporting multiple projects while ensuring quality and predictability. * **Fixed-Scope Projects:** deliveries with defined budget, timeline, and requirements. * **Consulting:** strategic and technical support for technological modernization and digital transformation. These models enable MTP to offer **flexible, customized, and sustainable solutions**, maintaining **predictability, productivity, and consistent results**. #### **Our Culture** At MTP, we believe in **designing today’s solutions for tomorrow’s challenges**. We foster a collaborative environment characterized by **close mentorship, continuous development, and constant recognition**. Our commitment is to **people’s growth and delivery excellence**, promoting balance between **performance and well-being**. Low turnover, trusted client relationships, and team stability reflect a strong, transparent, and results-oriented culture. #### **Our Certifications and Recognitions** We take pride in being a company recognized globally for **high standards in quality, security, and management**: * **Great Place to Work (GPTW):** ranked among the *Best Companies to Work For* for six consecutive years. * **TMMi Level 5:** world’s first company to achieve the highest maturity level. * **ISO 9001:2015:** first certified organization focused on test factories, software, and bodyshops. * **ISO/IEC 27001:2022:** Information Security Management System. * **ISO 14001:2015:** Environmental Management System. * **ISO 14064-3:2019:** Greenhouse Gas Verification. * **ISO/IEC 15504, 12207:2017, 20000-3:2019, and 17020:2012:** software quality, lifecycle, and compliance standards. * **CMMI-DEV/3** and **ISTQB Silver Partner** (International Software Testing Qualifications Board). #### **Working at MTP** Joining MTP means entering an environment that values **people, knowledge, and sustainable results**. Here, every professional has space to learn, grow, and contribute to impactful projects within a team that unites **solidity, innovation, and purpose**. Be part of the future! **\#WeAreMTP**