Senior Application Security Analyst (AppSec)

Description

We are a Software Engineering consultancy with over 15 years of experience in software quality and a high technical standard in test automation, digital security, and DevOps culture. **\_We never stop studying and learning**, as we constantly pursue excellence and growth. **\_We value our collaborative environment**, believing in the strength of our team. **\_We act with transparency and respect**, maintaining ethical and moral standards in our relationships with colleagues, partners, and clients. Our team is growing. We have built a results-driven team capable of solving challenging problems. Join us to transform the technology world! **As a Senior AppSec Analyst at PrimeUp, you will:** * Perform security analysis on source code (Secure Code Review), identifying vulnerabilities, logic flaws, unauthorized data exposure, and deviations from secure development best practices; * Validate and investigate vulnerabilities identified by SAST, SCA, DAST, and Container Security tools, helping reduce false positives and prioritize risks; * Support development teams in fixing vulnerabilities by providing technical recommendations and guidance on secure coding practices; * Conduct security assessments based on OWASP Top 10, OWASP API Security Top 10, CWE, CVE, and other industry-standard references; * Support the implementation and evolution of Secure SDLC (SSDLC) practices, contributing to integrating security into the software development lifecycle; * Participate in configuring, operating, and maintaining application security tools and their integrations with CI/CD pipelines; * Support investigations of application-related security incidents by contributing technical analysis and mitigation recommendations; * Monitor vulnerability indicators and metrics, tracking remediation plans alongside technology teams; * Contribute to promoting a secure development culture through guidance and sharing of best practices. **To take on this challenge, you must have:** ----------------------------------------------- * 2–4 years of experience in Information Security, Application Security (AppSec), and/or Software Development with a security focus; * Completed undergraduate degree in Computer Science, Information Systems, Computer Engineering, or related fields; * Experience in Secure Code Review and vulnerability analysis in at least one programming language (Java, .NET, JavaScript/TypeScript, Python, or similar); * Knowledge of OWASP Top 10, OWASP API Security Top 10, and major application vulnerability categories; * Experience with application security tools such as Checkmarx, Fortify, Veracode, SonarQube, Snyk, or equivalents; * Knowledge of analyzing and validating findings from SAST, DAST, and SCA tools; * Familiarity with Git, GitHub, GitLab, or Azure DevOps; * Knowledge of CI/CD pipelines and DevSecOps concepts; * Ability to interact with development teams to support vulnerability remediation; * Knowledge of software development and sound software engineering practices. **Nice-to-have qualifications:** * Knowledge of Cloud Security (AWS, Azure, or GCP); * Experience with containers and Kubernetes; * Knowledge of API and microservices security; * Experience with automation using Python, Shell Script, or PowerShell; * Knowledge of security applied to AI and LLM solutions; * Advanced English proficiency for reading, writing, and speaking. **Note:** This position is fully remote for candidates outside the metropolitan regions of Rio de Janeiro (RJ) and São Paulo (SP). For residents within the metropolitan regions of RJ and SP, the model is hybrid (one day per week onsite). **As part of the PrimeUp team, you will receive:** * CLT employment contract with market-competitive remuneration; * Meal Allowance; * Food Voucher; * Health Insurance; * Dental Insurance; * Life Insurance; * Annual Bonus Leave; * Certification Reimbursement; * PrimeUp Academy (professional training network); * Profit and Results Sharing (PLR); * Gym Membership Plan; * Well-being Program offering psychological, social, financial, and legal support. CWT1WIoEIt