Cyber Security Spec IV (AppSec)
SantanderWhat You'll Do
Act as an advanced technical consultant for Cyber Security, Architecture, and Engineering, guiding on risks, controls, and vulnerability mitigation strategies. Conduct and evolve the DevSecOps process, ensuring integrated security in the development cycle. Perform security testing including static, dynamic, and interactive analysis, secure code review, and threat modeling.
What We're Looking For
Solid knowledge of the SDLC/SSDLC process and security practices in development. Experience in implementing DevSecOps pipelines: SAST, DAST, SCA, IaC, CI/CD, GitHub Actions. Strong understanding of security architecture, APIs, microservices, containers, and incident response including investigation and threat modeling.
What We Offer
The company offers variable compensation including PLR and bonuses, medical and dental assistance, meal and food allowances, complementary pension, life insurance, childcare assistance, gym or wellness programs, transportation allowance, and various health initiatives.
Key Skills & Technologies
Additional Information
Experience Level
Senior
Job Language
Portuguese
Employment Type
Full-time
Work Mode
On-site