Santander

Cyber Security Spec IV (AppSec)

Santander

What You'll Do

Act as an advanced technical consultant for Cyber Security, Architecture, and Engineering, guiding on risks, controls, and vulnerability mitigation strategies. Conduct and evolve the DevSecOps process, ensuring integrated security in the development cycle. Perform security testing including static, dynamic, and interactive analysis, secure code review, and threat modeling.

What We're Looking For

Solid knowledge of the SDLC/SSDLC process and security practices in development. Experience in implementing DevSecOps pipelines: SAST, DAST, SCA, IaC, CI/CD, GitHub Actions. Strong understanding of security architecture, APIs, microservices, containers, and incident response including investigation and threat modeling.

What We Offer

The company offers variable compensation including PLR and bonuses, medical and dental assistance, meal and food allowances, complementary pension, life insurance, childcare assistance, gym or wellness programs, transportation allowance, and various health initiatives.

Additional Information

Experience Level

Senior

Job Language

Portuguese

Employment Type

Full-time

Work Mode

On-site