Application Security Specialist | AppSec

Ebanx
Curitiba
Workplace: OnsiteFull timeFunction: CybersecuritySkills: ["Leadership","Communication","Problem-solving","Mentorship","Teamwork"]

Lead EBANX AppSec program, guiding deep-dive security assessments and remediation across global product squads. Architect threat modeling, drive security initiatives with international stakeholders, and manage vulnerability lifecycles from SAST/DAST/SCA results to code fixes. You will leverage multi-language review across Java, Python, Go, Node.js, or .NET, and communicate risk clearly in English to diverse teams.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Ebanx
Ebanx
4 months ago

Application Security Specialist | AppSec

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 5 hours agoStatus: Live

Job Summary

Lead EBANX AppSec program, guiding deep-dive security assessments and remediation across global product squads. Architect threat modeling, drive security initiatives with international stakeholders, and manage vulnerability lifecycles from SAST/DAST/SCA results to code fixes. You will leverage multi-language review across Java, Python, Go, Node.js, or .NET, and communicate risk clearly in English to diverse teams.
Location: Curitiba
Workplace: Onsite
Employment Type: Full time
Job Function: Cybersecurity

Key Responsibilities

  • •Lead the AppSec strategy and provide technical mentorship to junior, mid-level, and senior analysts in performing deep-dive security assessments and remediation.
  • •Architect and oversee Threat Modeling sessions across diverse product squads to identify architectural flaws and security requirements early in the design phase.
  • •Drive global security projects and communicate risk effectively in English to international stakeholders, ensuring security initiatives align with business velocity.
  • •Manage the lifecycle of security vulnerabilities discovered through SAST, DAST, and SCA, providing actionable insights and polyglot code-fix guidance to engineering teams.
  • •Collaborate with engineering teams to integrate security requirements into product development and secure REST/GraphQL APIs along with secrets management policies.

Pay and Benefits

Perks:Health InsuranceDentalMeal AllowanceLearning BudgetRemote Work

Key Requirements

  • •Deep expertise in the AppSec Tooling ecosystem, including hands-on experience configuring and tuning SAST (Static Analysis), DAST (Dynamic Analysis), and SCA (Software Composition Analysis) within CI/CD pipelines;
  • •Strong command of API Security and Secret Management, with a proven track record of securing REST/GraphQL APIs and implementing robust policies for tokens, certificates, and secrets (e.g., HashiCorp Vault, AWS Secrets Manager);
  • •Multi-language coding proficiency, capable of reviewing and securing code across various stacks (such as Java, Python, Go, Node.js, or .NET) to support diverse development teams;
  • •Advanced to Fluent English communication, enabling you to lead technical discussions, document global standards, and collaborate with distributed teams worldwide.
  • •Advanced Security Certifications such as OSWE, CASE, CSSLP, or CISSP and experience automating security guardrails or building internal tools to triaging secrets and vulnerabilities
Experience:FintechPaymentsSaaS
Skills:LeadershipCommunicationProblem-solvingMentorshipTeamwork
Certifications:OSWECASECSSLPCISSP
Languages:English
Tech Stack:SASTDASTSCAAPI SecurityHashiCorp VaultAWS Secrets ManagerJavaPythonGoNode.js.NETCI/CD

Company Brief

Ebanx
Provides payment processing and fintech solutions enabling global merchants to accept local payments across Latin America, offering services like cross-border payments, local acquiring, fraud prevention, and financial integrations.
Industry: Payments
Company Size: Enterprise (1,001+ employees)
Growth: Scaleup
Valuation: Unicorn (USD 1B+)
Funding: Private Equity Backed
Headquarters: Curitiba, Brazil
Founded: 2012
WebsiteLinkedIn