Security Engineer (DevSecOps / AppSec)

Requisitos

• Practical experience with CI/CD pipelines and integrating security tooling (SAST, SCA, secret scanning) into development workflows
• Solid knowledge of AWS security services and practices (IAM, S3, Lambda, Security Groups, VPC, KMS, cloud security principles)
• Hands-on experience with Terraform and remediating security risks in infrastructure-as-code
• Strong understanding of OWASP Top 10 and OWASP API Security Top 10, applied to code and architecture reviews
• Ability to develop scripts and automations for security analysis and remediation using Python, Bash, or similar

Desejáveis

• Experience with Bitbucket
• Practical experience with HashiCorp Vault and/or AWS Secrets Manager
• Familiarity with DAST tools (OWASP ZAP, Burp Suite) and their CI/CD integration
• Knowledge of Docker security and container image repositories
• Experience applying CIS Benchmarks to AWS workloads