Sr Product Security Engineer

Employment Type (Brazil): This position is offered as a CLT (Consolidação das Leis do Trabalho) employee role. Candidates must be comfortable being hired under a CLT employment arrangement.

Who we are

 We are a dedicated team of product security engineers committed to developing and supporting ground-breaking software products. Together we will work to safeguard the future, enabling wellness businesses worldwide to empower their customers to lead healthy lives. Driven by a higher purpose, we continuously challenge ourselves and our organization to excel, recognizing the strength that comes from collaborative efforts toward a common objective. We are strong advocates for a diverse workplace, fostering an environment where individuals can bring their authentic selves to contribute to our shared success. At the core of our achievements is a deep belief in the value of our people. If you share our passion and vision, we invite you to consider joining our team. Together, we can explore remarkable feats and make a lasting impact! 

Your role 

• As a Senior Security Engineer, you will be responsible for contributing to the success of the Product Security team in several key areas.  You’ll work to reduce security friction across engineering by fostering partnership and collaboration to enhance our security posture.  Security enablement will be a crucial aspect of your responsibilities, spanning devsecops integration, automation, vulnerability identification, and remediation, and hands-on tooling development. You will own the integration and operation of SAST, DAST, SCA, and CNAPP solutions within synchronous and asynchronous pipelines — identifying issues, submitting remediation PRs, and validating fixes through automated retesting. You will also build, maintain, and continuously improve agentic security tooling that scales the team’s capabilities across all phases of the SDLC.
• You’ll play a vital role to ensure software solutions are secure by default.  You will facilitate continuous security testing, measurability, and reporting on the impact of security initiatives.  
• You’ll pursue continuous improvement to help Playlist achieve its mission: Powering the world’s fitness and wellness businesses and connecting them with more consumers, more effectively, than anyone else. 
  

You will

• Partner with software engineering and platform teams to identify and solve complex security problems.
• Operate, integrate, and continuously tune SAST, DAST, SCA, and CNAPP tooling within pipelines — supporting engineering, triaging findings, driving remediation, and measuring coverage and effectiveness over time.
• Design, build, and maintain agentic security tools — including LLM-assisted workflows for exploitable code identification, vulnerability triage, and remediation guidance — deployed across planning, development, testing, and production phases of the SDLC.
• Identify security gaps and demonstrate strategic recommendations for remediation.
• Address security issues identified throughout the secure software development lifecycle.
• Conduct security testing, beginning with the product planning phase continuing through production deployment.
• Define and integrate security requirements ensuring alignment with industry standards and best practices.
• Ability to work independently, and lead both cyber security and cross functional security initiatives.
• Stay abreast of emerging security threats, vulnerabilities and controls.

About the right team member

You are an intellectually curious senior engineer who is passionate about creating impactful security solutions and who communicates those solutions clearly to both technical and non-technical audiences. You bring deep expertise in devsecops, cloud security, and application security — and you write code to solve security problems, not just identify them. You are fluent in one or more modern languages (Python, .NET, or TypeScript preferred) and comfortable building automation, integrations, and agentic tooling. You have a software engineering background and are eager to apply it to grow the Product Security function while working closely with security champions, engineering teams, and company leadership. 

You will thrive in this role with experience

• 4+ year experience across multiple security domains with an emphasis on product security and cloud-native security.
• Possess verifiable software engineering and penetration testing skills.
• 2+ year senior security experience leading and executing product security initiatives (i.e. devsecops, security consulting, and penetration testing).
• Proficiency with modern languages including Python, .NET, or TypeScript, with hands-on experience building security automation, integrations, and agentic tooling.
• Hands-on experience operating and integrating SAST, DAST, SCA, WAF, and CNAPP solutions (e.g., Semgrep, Checkmarx, Snyk, Wiz, or equivalents) within CI/CD pipelines.
• Hands-on experience with design, code review, and securing products and solutions for public cloud-based applications and infrastructure.
• Experience with offensive testing tools like Burp Suite and Kali Linux.
• Experience securing applications deployed using Docker, Kubernetes, and public cloud environments.
• Product Security experience working for a SaaS-based organization or within a consulting firm.
• Excellent leadership skills with a track record of driving security initiatives within software development teams.
• Excellent communication skills (both written and verbal).
• Self-motivated, self-directed, and self-organized.