[Hiring] Staff Security Engineer @Wellhub

Role Description

We are hiring a Staff Security Engineer | AppSec to our Information Security team in Brazil! This is a Remote – Brazil position, meaning you can work from anywhere within the country. Please note that this role is only open to candidates in Brazil.

The Information Security team is responsible for protecting our subscription-based product serving millions of users. As a Staff Security Engineer, you will own multiple security domains end-to-end:

• Software security (secure SDLC, vulnerability management, threat modeling, pentesting, and red teaming)
• Incident response
• Threat intelligence
• Cloud security
• Compliance/GRC

You will connect pentest findings, incident root causes, compliance requirements, and cloud misconfigurations into a unified risk strategy.

Your Impact

• Own multiple security domains end-to-end (e.g., application security, threat intelligence, detection engineering, cloud security posture).
• Lead system and architectural reviews and threat modeling for high-risk projects.
• Scope, hire, or directly run pentests and red team exercises against critical systems.
• Own and drive the resolution of complex, cross-service vulnerabilities and security incidents.
• Set and enforce clear security KPIs, SLAs, and SLOs across the domains you touch.
• Drive architecture decisions across interconnected systems to reduce security debt.
• Plan and execute security-relevant migrations and platform updates seamlessly.
• Manage end-to-end delivery of medium-to-large security initiatives.
• Live the mission: inspire and empower others by genuinely caring for your own wellbeing and your colleagues.

Qualifications

• A versatile security specialist with deep hands-on experience in one or more security sub-domains (AppSec, Security Architecture, Cloud/Infra Security, IAM, or Detection & Response).
• A hands-on builder who writes secure, well-tested code for security tooling and automation.
• A pragmatic problem-solver and mentor who can navigate legacy systems and messy environments.
• A strategic technical leader who has led RFCs and design docs for security-sensitive changes.
• A composed collaborator comfortable facilitating hard conversations.
• A forward-looking risk navigator who thinks in mid-to-long-term horizons.
• A proactive industry learner who stays current on the threat landscape and industry practices.
• An influential communicator with fluency in English and strong communication skills.
• A seasoned security professional with extensive experience in Security Engineering.

Requirements

• Prior experience in security engineering is a mandatory requirement.

Benefits

• Free Gold+ membership with access to onsite gyms and studios, digital fitness programs, and online wellness resources.
• A complete emotional wellbeing program with personalized journeys that combine individual therapy sessions and on-demand content.
• Health, dental, and life insurance.
• Flexible work options, including hybrid and remote opportunities.
• Flexibility in shaping how and when work gets done.
• Paid time off after 6 months, additional days off per year, and an extra holiday for your birthday.
• 100% paid parental leave for all new parents.
• Access to world-class platforms for career growth and continuous learning.
• A culture that empowers you to take ownership of your role and wellbeing.