. **Responsibilities and Assignments** * Identify vulnerabilities in source code and support the definition of remediation plans; * Monitor and support secure coding processes; * Evaluate results from security tools such as SAST, DAST, and SCA; * Perform threat modeling and gather architectural and development security requirements; * Support developers in resolving vulnerabilities and applying security guardrails; * Participate in governance processes and track code and architecture vulnerabilities; * Apply secure development frameworks and best practices, including OWASP ASVS, SAMM, WSTG, and MASVS; * Conduct training and awareness initiatives on Information Security; * Act as a Security Champion, promoting a security culture across technical teams; * Collaborate closely with development, architecture, operations, and security teams; * Support the implementation and monitoring of security practices in CI/CD pipelines using Azure DevOps. **Requirements and Qualifications** * Experience in Application Security and DevSecOps practices; * Knowledge of identifying and addressing source code vulnerabilities; * Hands-on experience with SAST, DAST, and SCA tools; * Experience with Azure DevOps and integrating security into CI/CD pipelines; * Experience with threat modeling and defining security requirements; * Familiarity with OWASP frameworks (ASVS, SAMM, WSTG, MASVS); * Experience in Secure Code Review and integrating security throughout the development lifecycle; * Strong analytical skills and consultative engagement with development teams; * Knowledge of vulnerability governance and tracking; * Experience acting as a Security Champion; * Exposure to critical and high-availability environments; * Knowledge of security automation; * Experience with cloud environments and secure architecture. Compass UOL is a global firm and part of the AI Revolution Company, together transforming organizations using Artificial Intelligence, Generative AI, and other of today’s most advanced technologies. We equip our team with proprietary and external AI-driven tools to design and build digital-native platforms, integrating cutting-edge technologies and enabling companies to innovate, transform their businesses, and drive success in their markets. To achieve this, we attract and develop the best talent, creating opportunities that enhance people’s lives and highlight the positive impact of disruptive technologies. We empower borderless talent and promote knowledge and opportunities in the latest market trends, driving significant personal and professional growth. **Join us and be part of the AI-driven revolution.**
João Silva
Indeed · HR
João Silva
Indeed · HR
