Analista de Aplicação e Segurança de Software - Seg. Info. | Curitiba/PR
Core
Evolve application security by integrating security into the software development lifecycle, identifying vulnerabilities, and automating controls.
Role type
Senior Application Security Engineer (AppSec/DevSecOps)
Builds
Secure software applications, APIs, and CI/CD pipelines
Domain
Information Security / Software Development
Required skills
AppSec, DevSecOps, Secure SDLC, API security, Vulnerability management, Git, CI/CD, Authentication and access control
Preferred skills
GitHub Advanced Security, CodeQL, Burp Suite, SonarQube, Veracode, Web/Mobile/API security, Cloud (Azure/AWS), Containers, Kubernetes, OWASP, NIST, ISO 27001, LGPD
Technologies
GitHub, Azure DevOps, SAST, DAST, SCA, IaC, Kubernetes, Azure, AWS
Responsibilities
Structure and evolve Secure SDLC, Define security requirements and standards for applications and APIs, Participate in threat modeling and control definition, Integrate SAST, DAST, SCA, and secret detection into CI/CD pipelines, Evaluate and prioritize vulnerabilities until validation, Perform code reviews and security analysis, Define severity criteria and risk acceptance, Evaluate third-party components and solutions, Support incident response and software supply chain protection, Create technical documentation and support Security Champions, Evaluate security of SaaS solutions and vendor software
