Top Cybersecurity Jobs in Sao Paulo

Partner with sales to provide technical expertise, deliver demos and tailored presentations, support evaluations/POVs, own technical engagement during trials, resolve customer issues, escalate bugs, and relay product feedback to prioritize features. Engage across technical and executive stakeholders to qualify and close mid-market opportunities.

Manage relationships with channel partners in the LATAM region, focusing on Brazil and Mexico. Build partnerships, generate customer acquisition strategies, assist partners with sales strategies, and ensure compliance with partner programs.

Protect Braze employees and assets by investigating malware/advanced threats, implementing DLP, securing SaaS and email, hardening configurations, enhancing SIEM, reviewing third-party SaaS, automating controls, mentoring juniors, participating in on-call rotations, and responding to incidents.

The Enterprise Account Executive will manage enterprise customers in Brazil, driving new business and expanding existing accounts while meeting revenue targets.

Hands-on cloud security engineer responsible for incident response, security reviews, IAM management, operating and tuning security tooling (EDR, SIEM, CSPM, vulnerability scanners), running vulnerability scans, driving remediation with engineering teams, and writing Python scripts to automate repetitive security tasks.

Responsible for building and managing strategic alliances, recruiting new partners, and driving revenue growth through effective partner management and collaboration with internal teams.

Drive new business in LATAM commercial and mid-market accounts: source and close net-new logos, build executive relationships, execute value-driven sales cycles, run POCs, collaborate with cross-functional teams, and meet ARR targets using data-driven strategies and repeatable territory plans.

Lead and mentor a software engineering team, define roadmaps with product, drive technical architecture for distributed systems, ensure delivery quality, on-call reliability, security, and stakeholder alignment across Brazil and France.

Lead adoption and positioning of CrowdStrike Horizon and Falcon platform across sales theaters. Partner with sellers, engage customers during evaluations and post-sale, drive pipeline through marketing and outreach, assist closing large deals, train internal teams, provide product feedback, and represent cloud security strategy. May require up to 50% travel.

Lead global PCI DSS assessments, scoping, evidence collection, attestations, and third-party QSA relationships. Advise teams on secure payment solutions, manage compliance data in Archer, deliver PCI awareness training, integrate acquisitions, and improve testing, reporting, and enterprise compliance processes. Partner with business leaders, Treasury, CFOs, development teams, and GRC stakeholders to maintain compliance across worldwide cardholder data environments.

Administer and support IAM, IGA, PAM, Active Directory, Entra ID, MFA, Intune, and related platforms across cloud and hybrid environments. Manage identity lifecycle operations, access reviews, governance controls, troubleshooting, compliance activities, and privileged access processes. Develop PowerShell automation, maintain device compliance, conduct system health checks, and improve authentication, authorization, security, and operational stability.

Supports penetration tests and security assessments across web applications, enterprise infrastructure, cloud environments, and industrial systems. Conducts vulnerability validation, attack surface analysis, and security testing; documents findings, risk assessments, and remediation recommendations; presents results to stakeholders; and researches emerging threats, attack techniques, and security tools.

Lead product security initiatives across the software development lifecycle. Integrate and operate SAST, DAST, SCA, WAF, and CNAPP tools in CI/CD pipelines; triage vulnerabilities, drive remediation, and validate fixes. Build automation and LLM-assisted security tooling for vulnerability discovery and remediation. Partner with engineering and platform teams on cloud and application security, conduct testing, define security requirements, measure security outcomes, and lead cross-functional initiatives.

Own full sales cycle for Tenchi's TPCRM SaaS, identifying and qualifying prospects, delivering demos, collaborating with marketing/product, building client relationships, and meeting revenue targets.

Secure the product throughout its lifecycle by partnering with developers on security design and architecture reviews, threat modeling, penetration testing, secure code reviews, and security standards. Operate SAST, DAST, dependency, and supply-chain scanning tools; triage findings and guide remediation. Contribute security evidence to SOC 2 and ISO 27001 compliance efforts while improving developer security practices.

Drive growth of Thales application security solutions across major enterprise accounts in the Americas. The role develops strategic account plans, identifies and closes opportunities, aligns solutions with customer security strategies, creates enterprise licensing models, and leads team-based pursuits. Responsibilities include executive engagement, quarterly business reviews, partner collaboration with systems integrators and consultancies, coordinating internal resources, and achieving revenue and account growth targets.

Curate, triage, validate, and assess vulnerability submissions for managed bug bounty programs. Evaluate validity, accuracy, and severity; communicate with clients and security researchers; escalate critical vulnerabilities through incident response; and contribute to scripting or tooling that improves the triage and validation process.

Founding security engineer for Brazil responsible for application security, cloud (AWS/Kubernetes) assessments, detection engineering, incident response, vendor due diligence, and defining AI/agentic workflow guardrails. Lead security roadmap, harden CI/CD and APIs, design detection and alerting across Datadog/CrowdStrike/Cloudflare, and mentor engineers while collaborating with global security team.

Lead and establish ARQ's security function in Brazil across application security, security operations, and GRC. Drive threat modelling, secure code review, API and AI/agentic workflow assessments, SIEM detection and response (Datadog, CrowdStrike, Cloudflare), incident response readiness, cloud security (AWS, Kubernetes), and vendor security assessments.

Founding Security Engineer for ARQ Brazil responsible for application security, detection engineering, incident response, cloud (AWS/Kubernetes) assessments, vendor security reviews, and AI/agentic risk monitoring. Build SIEM detections, maintain alert pipelines, run IR playbooks, and support threat modeling, secure code review, and CI/CD checks.

Lead research and deliver high-impact insights on infrastructure cybersecurity (SASE, SSE, Zero Trust, cloud and endpoint security). Produce thought leadership, client advisories, presentations, and sales support; mentor junior analysts; analyze market trends, vendors, and regional (Brazil) cybersecurity strategy; collaborate across Gartner to drive research agenda and improve processes. Travel up to 25%.

Lead planning, installation, and integration of Akamai Guardicore segmentation in hybrid/complex environments. Design and enforce Zero Trust network segmentation across data centers, cloud, and OT. Manage customer engagements, deliver consulting, training, and configuration optimization. Provide architecture guidance, escalation support, and collaborate with Customer Success, Engineering, and Support.

Lead SAP Security strategy and architecture for S/4HANA, Fiori, and SAP BTP. Own role-based access control, SoD/GRC, compliance (SOX/ITGC), and security design for transformations. Lead global teams, drive security operations, automation with GRC/IGA tools, vendor management, and audit readiness while mentoring staff and aligning stakeholders.

Own security outcomes across product and infrastructure: identify high-impact risks and drive remediation; manage application security tooling for code, dependencies, and secrets; lead threat modeling, risk assessments, and architecture reviews; validate and triage bug bounty and pentest findings; and lead security monitoring, incident response, and investigations.

Design and implement enterprise identity-security architecture for workforce, privileged, machine, customer, and partner identities. Translate requirements into designs for authentication, authorization, lifecycle/IGA, federation, conditional access, governance, and identity threat detection. Prototype integrations (HRIS, directories, IdP, SIEM/UEBA), define role/entitlement models, and collaborate with HR, ITSM, infrastructure, cloud, and application teams to operationalize controls.