Job description
Important Information
Location: Brazil
Job Mode: Full-time
Work Mode: Work from home
Responsibilities and Duties
- As a Application Security Engineer, you will lead a comprehensive security program that begins with assessing vulnerabilities and creating prioritized remediation plans;
- Implementing OWASP-based security best practices and threat modeling frameworks throughout the SDLC;
- Establish automated security controls through SAST/DAST integration in CI/CD pipelines, help conduct penetration testing, and create standardized procedures for identifying and addressing security issues;
- Additionally, you will help develop and deliver secure coding training programs and maintain thorough documentation, ensuring the organization maintains a strong security posture through both technical implementation and team enablement.
Essential Skills
Strong experience with SAST/DAST tools;
Proficiency in penetration testing and vulnerability assessment;
Knowledge of common security frameworks (OWASP, NIST);
Experience with security incident response;
Strong programming knowledge;
Understanding of CI/CD pipelines;
Cloud security expertise (AWS preferred);
Database security knowledge;
Experience implementing security automation tools;
Familiarity with DevSecOps practices;
Knowledge of security testing frameworks;
Experience with code analysis tools;
Experience in application security;
Proven experience implementing security programs;
Track record of security remediation projects;
Experience creating and delivering security training.
Additional Skills
- Certifications (preferred):
- CISSP, CSSLP, or equivalent;
- CEH or OSCP for penetration testing;
- Cloud security certifications (AWS Security);
- OWASP certifications.
About Encora
Encora is the preferred digital engineering and modernization partner of some of the world’s leading enterprises and digital native companies. With over 9,000 experts in 47+ offices and innovation labs worldwide, Encora’s technology practices include Product Engineering & Development, Cloud Services, Quality Engineering, DevSecOps, Data & Analytics, Digital Experience, Cybersecurity, and AI & LLM Engineering.
At Encora, we hire professionals based solely on their skills and qualifications, and do not discriminate based on age, disability, religion, gender, sexual orientation, socioeconomic status, or nationality.
