Activate JobCopilot
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Engenharia de Segurança Cibernética Sênior | RD Station based in Brazil.
This is a senior cybersecurity engineering role focused on strengthening and scaling vulnerability management practices across a fast-moving, product-driven environment.
You will be responsible for connecting vulnerability detection to effective remediation, ensuring security risks are properly prioritized and addressed across the software development lifecycle.
The role acts as a bridge between engineering, security leadership, and governance teams, helping translate technical findings into actionable risk decisions.
You will design and evolve processes, dashboards, and metrics that provide visibility into the organization’s security posture.
A key part of your impact will be defining risk-based prioritization models that improve efficiency and reduce exposure at scale.
The environment is highly collaborative, combining strong technical depth with autonomy and continuous improvement.
This position is ideal for someone who enjoys shaping security strategy while staying close to engineering execution.
Accountabilities:
- Lead and evolve the vulnerability management program, ensuring integration with engineering, security, and governance teams.
- Define and implement risk-based prioritization models considering severity, exploitability, exposure, and business context.
- Build and maintain dashboards and security metrics to support operational and executive visibility.
- Standardize technical inputs to support formal risk acceptance, exceptions, and governance processes with GRC teams.
- Orchestrate vulnerability management rituals and cross-functional forums to ensure consistent follow-up and remediation.
- Support the full vulnerability lifecycle, from discovery to remediation tracking and closure.
- Collaborate with product, infrastructure, and engineering teams to ensure security findings are actionable and prioritized.
- Contribute to continuous improvement of security processes, automation, and scalability of the vulnerability program.
Requirements:
- Strong experience in cybersecurity, Application Security (AppSec), or vulnerability management roles.
- Proven ability to define and operate risk-based prioritization models using frameworks such as CVSS and exposure-based scoring.
- Experience working with vulnerability scanning tools, security backlog management, and security dashboards.
- Solid understanding of the vulnerability lifecycle and security risk management processes.
- Ability to communicate complex technical security concepts clearly to both technical and executive stakeholders.
- Experience collaborating with engineering, infrastructure, and product teams in fast-paced environments.
- Familiarity with security governance processes and risk management practices (GRC interaction is a plus).
- Nice to have: experience with cloud security, SaaS environments, security automation via APIs, and frameworks such as OWASP SAMM, ISO 27001, and NIST.
- Strong analytical thinking, ownership mindset, and ability to operate in scalable, high-complexity environments.
Benefits:
- Competitive compensation package aligned with senior cybersecurity roles
- Remote-friendly work model with flexible arrangements
- Exposure to large-scale SaaS and high-growth product environments
- Opportunity to shape and mature a strategic vulnerability management program
- Collaboration with highly skilled engineering and security teams
- Continuous learning culture with focus on technical and leadership development
- Health and wellness benefits (to be detailed by the hiring company)
- Inclusive and collaborative work environment focused on autonomy and impact.
Your email job alert is now active!
