Security Engineer (DevSecOps / AppSec)

Description

**We are looking for a new person to join our Tech team as a** **Security Engineer (DevSecOps / AppSec)****!** Can you imagine being part of one of Brazil's largest technology companies for restaurants? We serve over **19,000 clients** nationwide and are the **market leader in cloud-based management software** for the foodservice industry! Additionally, we are one of iFood’s **Super Integrators**, delivering a complete solution — from **Point of Sale to Back Office**. Amazing, right? And there’s more: **iFood is our investor!** This means we’re experiencing exponential and accelerated growth — which is why we’re seeking people who share our energy, our drive to innovate, and our ambition to revolutionize the food service market, growing alongside us!  **Responsibilities and Duties** **What will be part of your day-to-day** * Implement and maintain SAST, DAST, and SCA tools within CI/CD pipelines (Bitbucket/GitHub/GitLab) * Implement, maintain, operate, and evolve Secrets Manager and Vault * Conduct continuous secret scanning across repositories and lead remediation of findings with development teams * Perform code reviews focused on security for critical features — authentication, authorization, external integrations, handling of sensitive data * Harden infrastructure: Terraform state, IAM policies, AWS configurations, Security Groups * Support remediation of technical findings collected from security analysis tools, external pentests, and internal scans * Build and lead the Security Champions program — identify focal points within dev squads and structure ongoing training * Conduct threat modeling for new features and critical integrations alongside product and engineering teams * Define and document security requirements throughout the SDLC — from design to deployment * Assess security of internal and external APIs, partner integrations, and authentication flows **Requirements and Qualifications** **What we expect from you** * Practical experience with CI/CD pipelines and integrating security tools (SAST, SCA, secret scanning) into the development workflow. * Solid knowledge of AWS: IAM, S3, Lambda, Security Groups, VPC, KMS, and cloud security best practices. * Experience with Infrastructure-as-Code (Terraform) — ability to identify and fix security issues in IaC. * Knowledge of OWASP Top 10 and OWASP API Security Top 10, with ability to apply them in code and architecture reviews. * Ability to write scripts and automations for analysis and remediation (Python or Bash). * Reading and interpreting code in at least one language used in the product. * Critical thinking and risk analysis. * Proactivity: initiative and anticipation. * Interpersonal communication with development teams. * Technical independence. * Collaboration and teamwork. * Teaching ability and knowledge transfer. * Results-oriented: delivery and outcomes. **What will set you apart here** * Experience with Bitbucket * Secret management: hands-on experience with HashiCorp Vault and/or AWS Secrets Manager. * Familiarity with DAST tools (OWASP ZAP, Burp Suite) integrated into pipelines. * Knowledge of Docker container and image repository security. * Experience applying CIS Benchmarks to AWS workloads. * Basic knowledge of mobile security or binary analysis — a differentiator in the context of installers and apps. * Familiarity with cloud posture management tools (Wiz, Prisma Cloud, AWS Security Hub, GuardDuty). * Experience reviewing security in serverless architectures (Lambda, API Gateway) **Certifications — Preferred** * AWS Certified Solutions Architect – Associate * AWS Certified Solutions Architect – Professional * AWS Certified Security – Specialty * Certified DevSecOps Professional (CDP) — Practical DevSecOps * HashiCorp Vault Associate **Additional Information** **Liked it? Hold on — there’s more!** Here, you’ll also enjoy: **PJ Contract** with **30 paid days of rest** **Health insurance with 100% company-paid monthly fee** *(for PJ after 6 months)* **Dental plan** *(for PJ after 6 months)* **Life insurance** **** **Complete equipment kit** **Home Office Allowance —** R$180.00/month **Birthday day off** **Gympass discount** **No dress code** — be yourself! **Extended maternity and paternity leave** We are a SaaS technology company and the **Brazilian market leader in food service management**. More than just software, we are strategic partners to over **15,000 establishments**, helping each business optimize processes, reduce costs, and increase sales. **We’re passionate about simplifying life for those living the daily reality of restaurants — and we do so through agility, intelligence, and education!** We operate **comprehensively**, integrating management needs into a single platform and accelerating the digital transformation of restaurants, bars, and delivery services across the country. We are **backed by iFood** and growing rapidly, empowering thousands of operations. Here, you’ll find a team passionate about technology, autonomy, and innovation — with real impact on our customers’ daily lives. If you seek **challenges**, **growth**, and the opportunity to help **build something great**, **Saipos** is **your place!**