We use technical cookies and Zorky's de-identified visit log. Yandex Metrica (data is stored on servers in Russia) runs only with your consent. We never sell data. More about cookies and statistics.
Zorky is in test mode — everything is free. Jobs and company pages are open to everyone; links to postings and your personal feed open after you sign up. Sign up →
ZorkyZorky
Location
Where are you looking for work?
All countries →
English
@termdocs
← All jobs

Lead Engineer - AppSec

LeadremoteBrazil, BR2w ago
Market insights
📊 Security: salaries and demand on the market
Show company and link
Free, after you sign in.
Apply
Upload your CV — employers and recruiters from different countries looking for your profile can contact you directly.
Send your CV →
Description
Accountabilities
  • Lead application security practices: Act as the technical security reference for Product and Engineering teams, integrating security early in the software development lifecycle without unnecessarily slowing delivery.
  • Conduct threat modeling: Facilitate threat modeling sessions for new features and architectural changes, identifying potential attack paths, assessing risks, and recommending appropriate security controls before implementation.
  • Perform security reviews and testing: Review application code and conduct manual security testing across web, API, and mobile applications to identify vulnerabilities such as cross-site scripting (XSS), insecure direct object references (IDOR), server-side request forgery (SSRF), injection flaws, and access control weaknesses.
  • Strengthen automated security testing: Implement, maintain, and optimize Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and secrets detection tools within CI/CD pipelines.
  • Manage vulnerabilities end to end: Triage, prioritize, track, and coordinate remediation activities, helping developers understand findings and implement effective fixes.
  • Establish security standards: Develop secure coding guidelines, checklists, and best practices covering authentication, authorization, encryption, and personal data protection.
  • Improve security visibility and performance: Assess the current application security landscape,
Full description, company and the link to apply — after you sign in. Sign in
Employer contacts (email/phone/telegram) are hidden from the public preview. Send your CV so employers can reach you directly.
Report this job
Urgent question? Message @termdocs