Senior Security Engineer (Vulnerability Management)

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Security Engineer (Vulnerability Management) based in Brazil.

You will play a strategic role leading Vulnerability Management and driving a modern CTEM (Continuous Threat Exposure Management) program across a complex, fast-scaling technology environment.
The position is focused on identifying, prioritizing, and reducing real security risks across cloud, infrastructure, applications, and development pipelines.
You will act as a technical leader and trusted advisor, influencing multiple engineering teams and security stakeholders.
The role requires strong collaboration with AppSec, DevOps, Product, and Engineering to embed security into the full SDLC.
You will also be responsible for translating complex vulnerabilities into clear business risk and remediation strategies.
This is a high-impact, cross-functional role in a highly innovative and performance-driven engineering culture operating remotely across 🇧🇷 Brazil.

Accountabilities:

• Lead the end-to-end implementation of a CTEM-based Vulnerability Management program, ensuring continuous visibility, prioritization, and remediation of security risks across systems and services.
• Manage and evolve vulnerability workflows including Bug Bounty programs, AppSec findings, cloud security issues, and infrastructure exposure.
• Collaborate closely with Application Security, Engineering, and DevOps teams to integrate security practices into the Secure Development Lifecycle (SDLC).
• Assess, validate, and prioritize vulnerabilities, including critical issues and zero-days, and define risk-based remediation plans aligned with business priorities.
• Act as a technical reference for security decisions, supporting trade-offs between speed, cost, and risk acceptance when necessary.
• Drive remediation orchestration to ensure fixes improve systemic resilience rather than only addressing isolated issues.
• Communicate security risks effectively to both technical teams and executive stakeholders.

Requirements:

• Strong experience in Vulnerability Management, Application Security, or Security Engineering roles in complex, cloud-native environments.
• Proven ability to lead or contribute to CTEM or similar risk-based security exposure management programs.
• Solid understanding of secure software development practices, SDLC, and modern DevSecOps environments.
• Experience working across infrastructure, cloud, and application security domains.
• Strong ability to collaborate across multiple teams and functions, with an “extreme collaboration” mindset.
• Excellent communication skills, with the ability to translate technical risks into business impact for non-technical audiences.
• Ability to prioritize and manage complex security findings in fast-paced engineering environments.

Benefits:

• Competitive salary
• Profit sharing program
• Meal allowance
• Comprehensive health and dental insurance
• Life insurance coverage
• Childcare and atypical parenthood support
• Wellhub access (well-being and fitness platform)
• Home office allowance
• Employee assistance program (mental, legal, financial, and social support)
• Extended parental leave
• Paid days off for special occasions (including birthday, Mother’s Day, Father’s Day)
• Discount programs for services and educational institutions
• Reading kit for children (PlayKids).

How Jobgether works:

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

 Why Apply Through Jobgether? 

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1