**VemSerFrete.com** =================== Move the future of logistics with us We are building the digital platform that empowers transportation across Latin America. At Frete, your work has a real and daily impact on the lives of millions of people. Frete.com is the largest freight platform in Latin America and includes the brands Fretebras, Cargo X, and Intersite. Join Frete.com and learn more about the challenge within the Information Security team ### **Responsibilities and Duties** * + **Product Security**: Support our product and technology solution development pipeline by applying best security practices in WEB, API, MOBILE, and AI environments. + **DevSecOps Strategy Orchestration**: Design the architecture of our security pipeline, defining how SAST, DAST, SCA, and Secret Scanning tools should operate at scale within CI/CD (GitLab CI) without impeding time-to-market. + **Security Champions Program**: Structure, lead, and engage the Security Champions program, empowering developers from various squads to act as the first line of defense. + **Architectural Standards (Guardrails)**: Define Secure Coding standards and create technological guardrails, ensuring security best practices (e.g., authentication, encryption, secret management) are adopted by default. + **Strategic Risk and Technical Debt Management**: Assess complex vulnerabilities, define zero-based risk prioritization models, and negotiate technical debt mitigation roadmaps directly with Tech Leads and Engineering Managers. + **Bug Bounty and Threat Research**: Manage the technical strategy of the Bug Bounty program, investigate sophisticated attacks, and define systemic actions to mitigate entire classes of vulnerabilities.### **Requirements and Qualifications** + **Code Review and Development**: Ability to read, review, and suggest architectural corrections for code written in Python, Go, or JavaScript/Node.js. + **Software Architecture**: Knowledge of distributed systems architecture, microservices, and APIs, with deep understanding of how modern applications are built and scaled. + **Knowledge** of distributed systems architecture, microservices, and APIs, with deep understanding of how modern applications are built and scaled. + **Threat Modeling**: Practical expertise in conducting Threat Modeling and translating architectural risks into security requirements for developers. + **DevSecOps Tools and Culture**: Insight into continuous integration and continuous delivery (CI/CD), knowing not only how to operate but also how to architect the integration of security checks into complex pipelines. + **Risk Management and Frameworks**: Proficiency in OWASP Top 10, ASVS, CWE, and risk calculation methodologies. + **Cloud Infrastructure**: Knowledge of native cloud security (AWS) and Zero Trust architecture.### **Desirable** + **Advanced Certifications**: AWS Certified Security Specialty, OSWE (Offensive Security Web Expert), GWAPT, or equivalent. + **Culture and Scale**: Prior experience creating or supporting Security Champions programs. + **Advanced Container Security**: Secure architecture for large-scale Kubernetes clusters and adoption of Service Mesh (e.g., Istio). + **FinTech/LogTech Experience**: Experience in high-transaction, highly complex environments. **Our Values:** Absolute commitment Focus on outstanding results Giant ambition Collaboration with positive friction Extreme sense of urgency By joining Frete, you will receive: ️ **Meal or Food Allowance** – paid via the Flash flexible card **Transportation Allowance or Mobility Assistance** **Bradesco Health Insurance** **Dental Assistance** ️ **Life Insurance** **Pharmacy Benefits** **2% of your annual salary for Well-being** **Childcare Assistance** – check eligibility **Birthday Day Off** ️ **TotalPass** – for your health and well-being **PipoSaúde** **Educational Partnerships** – discounts for MBAs, postgraduate programs, language courses (Open English), and technology courses (FIAP) **Home Office Setup Assistance + Monthly Remote Work Allowance** – for fully remote positions And more benefits you’ll discover during the process! Join our team! **Work Modality:** * **Technology (Security, Engineering, and Data Science)**: 100% remote; * **Product (Design, Fraud Prevention, and BI)**: 3 days in-office and 2 days remote; * **All Other Areas**: full-time in-office. Our office is located in São Paulo, in the Morumbi region. * Do you have a disability? Our positions are open to people with disabilities (PCDs) as well. **If this resonates with you, join us on the road and become a Freteiro**
João Silva
Indeed · HR
João Silva
Indeed · HR
