Security Engineer (DevSecOps / AppSec)

Requisitos

• Practical experience with CI/CD pipelines and integrating security tools (SAST, SCA, secret scanning)
• Solid AWS knowledge: IAM, S3, Lambda, Security Groups, VPC, KMS and cloud security best practices
• Experience with infrastructure as code (Terraform), identifying and fixing security issues in IaC
• Knowledge of OWASP Top 10 and OWASP API Security Top 10, applicable to code review and architecture
• Ability to write scripts and automations for analysis and remediation (Python or Bash)

Desejáveis

• Experience with Bitbucket
• Hands-on secrets management with HashiCorp Vault and/or AWS Secrets Manager
• Familiarity with DAST tools (OWASP ZAP, Burp Suite) integrated into pipelines
• Knowledge of Docker container security and image registries
• Experience with CIS Benchmarks applied to AWS workloads