Staff Security Engineer | AppSec

Role overview

A subscription platform serving millions of users worldwide is hiring a Staff Security Engineer to anchor its Application Security function. The role is remote within Brazil and sits inside an Information Security team that protects a large-scale consumer product. The center of gravity is software security across the SDLC, while the mandate stretches into incident response, threat intelligence, cloud security, and compliance as priorities evolve.

Responsibilities

- Own multiple security domains end to end, acting as the technical authority for cross-service challenges that lack a clear owner. - Define secure-by-design architectural standards, lead threat modeling sessions, and set organization-wide secure coding benchmarks. - Drive complex cross-service incident response and post-mortem work, converting critical findings into platform-level guardrails and preventions. - Lead offensive and defensive initiatives, including red team exercises and pentest engagements, and drive root-cause remediation directly with engineering teams. - Set SLAs, SLOs, and KPIs for security posture (remediation windows, response times, posture drift) and build the monitoring needed to enforce them. - Partner with engineering, product, and legal leadership to align threat intelligence, compliance requirements, and long-term security investments with business priorities.

Requirements

- Extensive experience in security engineering, or in software engineering with high security impact, including a track record of scaling security in complex cloud environments. - Expert knowledge of secure architecture design, threat modeling, and setting engineering-wide secure coding standards. - Willingness to step outside the primary AppSec focus to support cloud security, GRC, or detection work as team priorities evolve. - Fluency in English and Portuguese, with the ability to translate intricate security tradeoffs into clear risk statements for executives and product partners. - Demonstrated ability to balance long-term risk reduction against business velocity and make high-stakes decisions independently.

Benefits and work setup

- Remote position within Brazil, with hybrid and flexible options available. - Health, dental, and life insurance coverage. - Wellness subscription benefits, including digital fitness, mindfulness, nutrition, and mental wellbeing resources, with the option to add family members. - Emotional wellbeing program offering a generous annual allowance of therapy sessions plus on-demand content. - Home office reimbursement to set up a remote workstation. - Paid time off with vacations after six months, additional tenure-based days, and an extra holiday for a birthday. - 100% paid parental leave for all new parents, with extended leave and a phased return-to-work option for those who give birth. - Access to career growth platforms, learning resources, and internal mobility opportunities.