Senior DevSecOps Analyst

Description

Job Summary: We are seeking a Senior DevSecOps Analyst to serve as the security focal point for the development team, defining security requirements and ensuring secure applications. Key Highlights: 1. Act as the security focal point for development teams. 2. Support the evolution of security practices in CI/CD pipelines. 3. Interact with developers to guide remediation and propose security best practices. ### **Description** With 25 years in the market, JD Consultores—founded in 2001—began focused on project and systems consulting, and in 2002 launched its first software solution, JDSPB. Today, we are the only Brazilian company 100% specialized in Messaging and Compliance for the financial sector, with a mission to develop solutions that securely and compliantly connect institutions to the Central Bank of Brazil. We lead the segment in which we operate and possess the largest PSTI (Information Security Technical Team) in the market, with over 13 years of experience and 160 certified institutions. Among our solutions are JDPI for instant payments, JDNPC for bills, and JDJUD and JDCSS for client reporting and judicial order handling. Currently, we serve over 400 clients—including banks, payment institutions, brokerage firms, finance companies, cooperatives, SCMs, and SCDs—all regulated by the Central Bank of Brazil. We seek a Senior DevSecOps Analyst with experience in secure development, CI/CD, SAST, DAST, code analysis, and dynamic application analysis. This professional will work alongside the development team as the security focal point, supporting the definition of security requirements, vulnerability identification, and assurance that new applications, versions, and features are securely coded. **Responsibilities** * Act as the security focal point for development teams. * Support the definition of security requirements for applications, new versions, and features. * Assess whether applications are being developed securely. * Support the identification, analysis, and remediation of application vulnerabilities. * Work with SAST and DAST practices and tools. * Support code analysis and dynamic application analysis. * Support the evolution of security practices in CI/CD pipelines. * Interact with developers to guide remediation, explain risks, and propose secure development best practices. * Support the use of tools such as Azure DevOps, SonarQube, and other security tools within the context of secure development. ### **Minimum Requirements** * Bachelor’s degree in Computer Science, Computer Engineering, Information Systems, Information Security, or related fields. * Minimum 4 years of experience in information security. * Knowledge of secure development frameworks (OWASP SAMM and NIST SSDF). * Experience implementing security tools in CI/CD. * Experience with SAST and DAST. * Experience with code analysis and dynamic application analysis. * Solid technical foundation in programming. * Knowledge of Delphi and C\#. * Knowledge of cloud technologies. * Experience or knowledge of Azure DevOps. * Experience or knowledge of SonarQube. * Strong communication skills for collaboration with development teams. * Ability to explain risks, guide remediation, and provide technical support to developers. * Technical English for reading. **Preferred Qualifications** * Experience with AWS. * Knowledge of Docker. * Knowledge of Kubernetes. * Knowledge of Terraform/IaC. * Prior experience as a developer. **Our Benefits:** * Health Insurance – Bradesco, fully covered for JD employees. * Dental Insurance – Bradesco, fully covered for JD employees. * Meal/Voucher Allowance. * TotalPass/Wellhub. * Profit Sharing (PLR). * Life Insurance – Porto Seguro. * Birthday Day-Off. * Childcare Assistance.