Staff Security Engineer – AppSec
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Staff AppSec Engineer definindo segurança para produtos de pagamentos da Stone, incluindo aplicações com LLMs e IA generativa. Proteção de APIs, cloud, CI/CD e sistemas de produção.
Responsibilities:
- Define and implement application security strategies, including for applications using LLMs and generative AI
- Collaborate with development teams to integrate security from the beginning of the software development lifecycle
- Conduct architecture, code, and design reviews to identify vulnerabilities
- Define guardrails and standards for LLM-powered applications
- Establish guidelines for the secure use of AI-assisted development tools
- Develop and promote security standards and best practices
- Provide technical guidance and security training
- Use and maintain knowledge of automated validation tools in CI/CD, such as SAST, DAST, SCA, and Secret Scanning
- Monitor threat trends, including threats to AI systems
- Develop solutions to complex security challenges while balancing business needs and risks
- Hunt for threats in corporate and production environments
- Define security architecture standards with Engineering and Product teams
- Create architecture plans and technical roadmaps for migrating legacy systems
- Identify vulnerabilities, assess risks, and help prevent attacks
- Participate in security incident analysis and response
- Train and raise awareness among development teams regarding best practices and the secure use of AI assistants
Requirements:
- Completed or ongoing undergraduate degree in Information Security, Computer Science, Information Systems, Software Engineering, or a related field
- Knowledge of common attack vectors
- Experience conducting threat modeling
- Experience with effective protection mechanisms for APIs and mobile applications
- Knowledge of basic Cloud security services and concepts (AWS, Azure, or GCP)
- Familiarity with security risks in applications that use LLMs and generative AI, including the OWASP Top 10 for LLM Applications and MITRE ATLAS
- Ability to identify opportunities for improvement, new solutions, and alerts
- Influence and negotiation skills to guide teams
- Ability to work independently
- Concise, candid, and assertive communication
- Proactive approach to seeking or requesting information
- Comfortable working in multidisciplinary teams using agile methodologies
- Ability to read and communicate in English
Benefits:
- Base salary
- Variable compensation package (profit sharing, long-term incentive plan, or commission), subject to role eligibility
- Health and dental insurance with copayments
- Verde Virtual Hospital: 24/7 telemedicine team
- Prescription drug subsidy
- Meal and/or food allowance – Pluxee
- Childcare assistance for children up to 5 years and 11 months old
- Assistance for employees with children with disabilities
- Life insurance
- Fuel allowance or commuting assistance
- Home office allowance for hybrid or remote contracts
- New Parent Welcome Kit
- SESC membership
- Education benefit: Internal self-development platform (Studa and Stone Library)
- Acolhe360º: Free emotional support
- Quick Massage and on-site medical clinic
- Wellhub
- TotalPass
- Pet Club
- Flash
- Férias&Co
- Transportation voucher
- Allya
- Educational partnerships
Similar Jobs
Security Engineer II
Security Engineer securing Iovance’s cloud, identity, endpoint, email, and DevSecOps platforms. Supporting audit-ready security operations for a company developing TIL cancer therapies.
Application Security Developer III
Application security developer securing CareSource web, mobile, and service applications. Testing vulnerabilities, reviewing code, and automating security tools and processes.
Security Engineer – Agentic AI
Security Engineer securing agent gateways, tools, models, and data flows. Building production controls for BRAHMA AI’s enterprise media technology platform.
Senior Cybersecurity Specialist
Abbott Senior Cybersecurity Specialist conducting threat modeling and risk assessments. Securing healthcare product architectures and supporting regulatory cybersecurity activities.
Oracle Cloud Security Expert
Oracle Cloud Security Expert designing and implementing Oracle SaaS security controls for Highstreet. Managing roles, audits, access governance, patch testing, and compliance.
Security Specialist
Security Specialist conducting NIST-based vendor risk assessments for North Carolina government IT. Delivering inventories, risk registries, and assessment reports.
Senior Application Security Researcher
Senior Application Security Researcher advancing AI-driven application vulnerability detection. Building agentic penetration-testing capabilities with engineers, researchers, and AI/data scientists.
Senior Information Security Engineer
Senior Information Security Engineer building secure modules for Walrus’s B2B payment verification platform. Designing authentication, payments, and reputation capabilities with the core engineering team.
Security Engineer
Security Engineer securing Noxtua’s sovereign Legal AI cloud infrastructure, GPU systems, and AI workloads. Building DevSecOps controls and supporting ISO 27001, BSI C5, and TISAX compliance.
Cybersecurity Consultant
Part-time remote cybersecurity consultant securing Scopic’s software delivery, cloud environments and compliance. Building Secure SDLC practices and mentoring the internal Security Lead.
Senior Security Engineer
Senior Security Engineer protecting Technosylva’s cloud-hosted platform through cloud, AI, vulnerability, and incident security. Automating controls and advising infrastructure, platform, and IT teams.
Senior Strategic Security Advisor
Senior cybersecurity advisor guiding regulated organizations through CMMC, risk, and compliance. CIT delivers managed IT, cybersecurity, cloud, and custom technology solutions.
Senior Security Engineer – Identity & Endpoint
Senior Security Engineer designing identity, endpoint, and device-trust controls for Fortellar’s enterprise IT consulting clients. Leading high-risk Microsoft security remediation and change programs.
Offensive Cybersecurity Engineer – RL Environments for AI Evaluation
Offensive cybersecurity engineers building and hardening reinforcement-learning environments. Evaluating frontier AI models for Terac, a platform connecting vetted experts with AI researchers and labs.
Senior System & Information Security Administrator
Senior administrator owning global servers, networks, security, backups, and end-user support. Coordinating external IT providers for a Bulgaria-based company.
Cybersecurity & Information Assurance Specialist – Federal Health IT
Cybersecurity specialist maintaining DoD information assurance records and security compliance. Supporting federal healthcare technology readiness through STIG, ACAS, eMASS, and access reviews.
Information Security System Specialist – ATO Lead
ATO Lead preparing VA records application authority-to-operate packages under the Risk Management Framework. Supporting security controls, continuous monitoring, remediation, and Zero Trust governance remotely.
Chartered or Principal Enterprise Advisor – Security Architecture
Security architecture advisor assuring cloud, hybrid and on-premises environments for Intelance, a UK cybersecurity and advisory firm. Delivering threat models, design reviews and client-ready assurance reports.
Senior Baseline Security Engineer, CIS, STIGs
Senior security engineer building and validating CIS/STIG baselines for phia’s federal cybersecurity clients. Mapping configurations to NIST, FISMA, and agency security controls.
Senior Security Architect
Senior Security Architect advancing First Hawaiian Bank’s enterprise security architecture. Securing hybrid cloud, on-premises, and AI/ML technologies while supporting regulatory compliance.