[Hiring] Senior Security Engineer | AppSec @Wellhub

Role Description

We are hiring a Senior Security Engineer | AppSec to our Information Security team in Brazil! This is a Remote – Brazil position, meaning you can work from anywhere within the country. Please note that this role is only open to candidates in Brazil.

The Information Security team is responsible for protecting our global subscription platform serving millions of users. As a Senior Security Engineer, you will drive software security across our product verticals — starting with application security (secure SDLC, SAST/DAST, secure design reviews) and expanding into adjacent domains like detection engineering, IAM, and vulnerability management. This is a unique opportunity to help build a security engineering program from the ground up in a high-growth environment. You will own a control domain end-to-end in a role that is deliberately generalist — we are looking for someone who reasons deeply about root causes and partners closely with engineering teams to embed security seamlessly into product delivery.

Your Impact

• Own core application security services, security tooling (e.g., SAST/DAST, IAM, vulnerability management), and detection pipelines end-to-end.
• Lead post-incident responses and post-mortems, transforming root-cause findings into concrete guardrails, automation, and policy improvements.
• Drive security-by-design standards across product development by writing clear RFCs, threat models, and architectural design docs for high-risk projects.
• Establish and enforce vulnerability remediation SLAs and security metrics, utilizing monitoring tools to hold engineering teams accountable.
• Execute seamless security-critical migrations and platform updates while preserving data integrity and auditability throughout.
• Partner with cross-functional teams (Engineering, Legal, Product) to deliver medium-to-large security initiatives while maintaining transparency as scope evolves.
• Live the mission: inspire and empower others by genuinely caring for your own wellbeing and your colleagues.

Qualifications

• An experienced security engineer with prior work experience delivering high-impact security tooling, detection logic, or secure SDLC mechanisms in modern cloud environments.
• An adaptable and collaborative professional with a willingness to step outside your primary AppSec focus to support other InfoSec contexts—such as Cloud Security, GRC, or Detection—as team priorities evolve.
• A proactive technical partner with extensive experience in modern cloud architectures and container ecosystems (e.g., AWS/EKS, GCP/GKE, Istio, ArgoCD).
• A clear, empathetic communicator with fluency in English and Portuguese, able to translate complex technical security risks into actionable guidance for engineers and non-technical stakeholders alike.
• A pragmatic problem-solver with the ability to balance rigorous security standards against product velocity, making data-informed trade-off decisions.
• A developer at heart with in-depth knowledge of secure coding practices, proficient in writing clean, well-tested code for security automation.
• A security champion with familiarity with key governance and compliance frameworks (e.g., SOC 2, ISO 27001, LGPD/GDPR) to inform daily engineering decisions.

Requirements

• Prior experience in security engineering is a mandatory requirement.

Benefits

• Free Gold+ membership with access to onsite gyms and studios, digital fitness programs, and online wellness resources for meditation, nutrition, mental wellbeing support, and more!
• A complete emotional wellbeing program with personalized journeys that combine individual therapy sessions (52 per year) and on-demand content.
• Health, dental, and life insurance.
• As a Flexible First company, we offer hybrid and remote options to give you the freedom to work in a way that suits you.
• Employees receive vacations after 6 months and additional 3 days off per year + 1 day off for each year of tenure (up to 5 additional days) + an extra holiday for your birthday!
• 100% paid parental leave to all new parents.
• Access world-class platforms, participate in interactive sessions, build your personalized development roadmap, and explore internal opportunities.
• You’ll join a team of passionate people who come together to break boundaries, support each other, and create a meaningful impact in workplace wellness.