Lead Engineer - AppSec

Requisitos

• Solid experience in application security, or in software development with strong security focus
• Deep knowledge of OWASP Top 10 and OWASP API Security Top 10, plus vulnerability classes (injection, XSS, IDOR, SSRF, auth/access control..
• Ability to read and review code, preferably JavaScript/TypeScript (Node.js)
• Hands-on with security testing tools such as Burp Suite, OWASP ZAP, Semgrep, SonarQube, Snyk or similar
• Experience integrating security checks into CI/CD pipelines (e.g
• GitHub Actions, Jenkins)

Desejáveis

• Experience with cloud environments (AWS), including container and Kubernetes security
• Knowledge of infrastructure-as-code security (Terraform)
• Experience conducting threat modeling on microservices architectures
• Certifications such as OSCP, OSWE, CSSLP or equivalents
• Knowledge of compliance frameworks and standards: LGPD, ISO 27001, SOC 2