Product Security Engineer (remote in Brazil)

Role overview A mid-level Product Security Engineer is needed to strengthen application security across web, mobile, and traditional platforms. The role centers on hands-on penetration testing and source-code review, working shoulder-to-shoulder with engineering teams as release velocity increases.

Responsibilities

- Plan and execute combined automated and manual security assessments and penetration tests against web, mobile, and conventional applications. - Read and analyze source code in several programming languages to surface vulnerabilities and recommend fixes before and after deployment. - Partner with engineers to triage findings, prioritize risk, and drive remediation to closure. - Maintain threat models and build automations that streamline recurring security testing work. - Embed secure coding practices throughout the software development lifecycle in collaboration with product and development teams.

Requirements

- Background in application security, penetration testing, or red teaming. - Strong hands-on experience running both automated tooling and manual tests against web, mobile, and traditional applications. - Ability to read and reason about source code in multiple languages such as Ruby, PHP, Go, JavaScript, or Python. - Working knowledge of common web application vulnerability classes (for example OWASP Top 10 and CWE categories) and core information security concepts. - Strong written and spoken technical English for collaboration with international teams. - A collaborative, team-oriented mindset.

Nice to have

- Cloud experience with environments such as AWS and Terraform. - Familiarity with security tooling like Burp Suite, SAST and DAST scanners, and dependency scanners. - Python scripting or hands-on use of AI-assisted security workflows. - Relevant certifications such as OSCP, OSWE, GPEN, or CISSP.

Benefits and work setup

- Company-wide bonuses tied to monthly sales targets, employee referral bonuses, adoption assistance, tuition reimbursement, certification reimbursement, and certification completion bonuses. - Remote role based in Brazil. - Resume submission in English is required.