Product Security Engineer (Position located in Brazil)
Core
Ensures the safety of KnowBe4 applications and cloud environments by protecting data privacy, confidentiality, integrity, and availability through security assessments, triaging findings, and assisting engineering teams in building secure products.
Role type
Product Security Engineer
Builds
Secure cloud environments and applications for KnowBe4's digital workforce security platform
Domain
Cybersecurity, Cloud Infrastructure, SaaS Security
Deliverable
production ML models | product features | infrastructure
Required skills
Cloud security (AWS, Terraform), Infrastructure as Code, Container security, Vulnerability management, Threat modeling, Secure SDLC integration, Incident response, Security automation, Web/Mobile/Traditional app pentesting, Security policy enforcement, Risk analysis, Source code review (Ruby, PHP, Go, JS, Python), Security tooling (Burp Suite, SAST, DAST, Dependency Scanning), AI in security testing, Networking fundamentals, Modern web tech (MVC, JWT, GraphQL)
Preferred skills
Security certifications (OSWE, OSCP, CISSP, GPEN, CEH, CCSP)
Technologies
AWS, Terraform, Python, Burp Suite, SAST, DAST, Container scanning tools, GraphQL, JWT, MVC
Responsibilities
Conduct regular security assessments and code reviews; Develop and maintain threat models; Integrate security practices into the software development lifecycle; Identify, assess, and coordinate remediation of vulnerabilities; Implement and maintain security tools and automation systems; Participate in incident response activities; Provide training and guidance to development teams on secure coding and design; Ensure product compliance with industry security standards and regulations; Work with engineering and product teams to embed security in development and deployment; Stay abreast of latest security research and technologies; Conduct risk analysis; Develop and enforce security policies; Leverage AI in security testing workflows.
Seniority
Mid-Senior, hands-on IC
