Top Cybersecurity Jobs in Sao Paulo

Secure the product throughout its lifecycle by partnering with developers on security design and architecture reviews, threat modeling, penetration testing, secure code reviews, and security standards. Operate SAST, DAST, dependency, and supply-chain scanning tools; triage findings and guide remediation. Contribute security evidence to SOC 2 and ISO 27001 compliance efforts while improving developer security practices.

Drive growth of Thales application security solutions across major enterprise accounts in the Americas. The role develops strategic account plans, identifies and closes opportunities, aligns solutions with customer security strategies, creates enterprise licensing models, and leads team-based pursuits. Responsibilities include executive engagement, quarterly business reviews, partner collaboration with systems integrators and consultancies, coordinating internal resources, and achieving revenue and account growth targets.

Founding security engineer for Brazil responsible for application security, cloud (AWS/Kubernetes) assessments, detection engineering, incident response, vendor due diligence, and defining AI/agentic workflow guardrails. Lead security roadmap, harden CI/CD and APIs, design detection and alerting across Datadog/CrowdStrike/Cloudflare, and mentor engineers while collaborating with global security team.

Lead and establish ARQ's security function in Brazil across application security, security operations, and GRC. Drive threat modelling, secure code review, API and AI/agentic workflow assessments, SIEM detection and response (Datadog, CrowdStrike, Cloudflare), incident response readiness, cloud security (AWS, Kubernetes), and vendor security assessments.

Founding Security Engineer for ARQ Brazil responsible for application security, detection engineering, incident response, cloud (AWS/Kubernetes) assessments, vendor security reviews, and AI/agentic risk monitoring. Build SIEM detections, maintain alert pipelines, run IR playbooks, and support threat modeling, secure code review, and CI/CD checks.

Lead research and deliver high-impact insights on infrastructure cybersecurity (SASE, SSE, Zero Trust, cloud and endpoint security). Produce thought leadership, client advisories, presentations, and sales support; mentor junior analysts; analyze market trends, vendors, and regional (Brazil) cybersecurity strategy; collaborate across Gartner to drive research agenda and improve processes. Travel up to 25%.

Lead planning, installation, and integration of Akamai Guardicore segmentation in hybrid/complex environments. Design and enforce Zero Trust network segmentation across data centers, cloud, and OT. Manage customer engagements, deliver consulting, training, and configuration optimization. Provide architecture guidance, escalation support, and collaborate with Customer Success, Engineering, and Support.

Own security outcomes across product and infrastructure: identify high-impact risks and drive remediation; manage application security tooling for code, dependencies, and secrets; lead threat modeling, risk assessments, and architecture reviews; validate and triage bug bounty and pentest findings; and lead security monitoring, incident response, and investigations.

Design and implement enterprise identity-security architecture for workforce, privileged, machine, customer, and partner identities. Translate requirements into designs for authentication, authorization, lifecycle/IGA, federation, conditional access, governance, and identity threat detection. Prototype integrations (HRIS, directories, IdP, SIEM/UEBA), define role/entitlement models, and collaborate with HR, ITSM, infrastructure, cloud, and application teams to operationalize controls.

Plan and execute offensive security activities including penetration tests and Red Team operations across web, enterprise, cloud, and industrial systems. Produce technical reports with risk ratings and remediation guidance, present findings to stakeholders, and advise on secure design and mitigation strategies.

Lead development and maintenance of GRC programs and ISMS aligned with ISO 27001/27002, SOC 2, and NIST. Perform compliance assessments, audits, gap analyses, remediation tracking, vendor security assessments, policy development, audit readiness, and support security due diligence and secure development practices across teams.

Leads the organization’s global data operations, systems, infrastructure, integrations, governance, security, and data protection. Owns technology and data architecture, quality standards, roadmaps, risk management, vendor relationships, and change initiatives. Manages a multidisciplinary technical team and acts as Data Protection Officer, partnering with senior stakeholders to ensure reliable systems, effective data use, operational resilience, and continuous improvement.

Build and operate Kubernetes-based data security services across public cloud, private cloud, and on-premises environments. Develop deployment, infrastructure, configuration, observability, and operational automation; troubleshoot complex production issues across applications, networking, and cloud platforms; improve scalability and reliability; support on-call operations; and contribute to technical initiatives, tooling, runbooks, and engineering best practices.

Design, develop, and maintain secure, responsive web interfaces using modern TypeScript frameworks, preferably Svelte. Translate product requirements into design documents, collaborate with cross-functional teams, optimize application performance, mitigate web security risks, and produce clean, maintainable code. The role also involves debugging, staying current with frontend technologies, and potentially using testing frameworks or contributing to open source.

The Enterprise Account Executive will drive revenue in the LATAM region by managing distributor relationships, executing GTM strategies, and ensuring customer success through collaboration across teams.

Train enterprise security teams on the Vega cybersecurity platform through onboarding, advanced workshops, virtual sessions, and recorded content. Create customized courses, labs, exercises, and reference materials covering query language, detection engineering, threat hunting, investigations, attack simulation, and AI security workflows. Answer complex customer questions, publish technical content, organize community events, build CTFs, and relay customer feedback to product and content teams. The role requires customer-facing technical expertise and international travel.

Create and optimize B2B content across LinkedIn, blogs, email, landing pages, ebooks, and other digital channels. Support SEO and AI-driven content discovery, monitor performance, report insights, and collaborate with Product, Sales, and Customer Success to produce thought leadership, customer stories, and product assets while maintaining consistent tone and brand messaging.

The DevOps Engineer will manage AWS infrastructure, optimize serverless solutions, design CI/CD pipelines, ensure security compliance, and collaborate with teams successfully.

As a Staff Software Engineer, you will lead the API services' technical direction, mentor a team, collaborate on product features, manage releases, and ensure security best practices while developing in TypeScript.

Lead security engineering across web apps, APIs, cloud (AWS/OCI), Kubernetes, and on-prem systems. Build CI/CD security, secure genomic and PHI/PII pipelines (HIPAA), run monitoring and incident response, prepare for HIPAA/SOC2/ISO27001 audits, perform pentesting/vulnerability discovery, improve logging/SIEM, and drive remediation with engineering and DevOps while raising company-wide security awareness.

Serve as the security liaison to engineering, driving secure SDLC practices. Perform threat modeling, secure design and code reviews, triage vulnerabilities, implement SAST/DAST/SCA/IAST tooling, guide WAF and DDoS controls, support compliance and incident response, and mentor engineers.

Hands-on Security Analyst on the Threat and Vulnerability Management team responsible for application and AI/LLM security testing, DAST/SAST/SCA scanning, vulnerability triage and remediation, partnering with development to implement fixes, automating security workflows, and promoting secure SDLC and AI security practices.

Own and evolve cloud infrastructure across AWS/GCP/Azure, build CI/CD and containerized deployments, design multi-tenant environments, implement monitoring and IaC (Terraform/Ansible), lead data protection and threat detection, and support compliance and security audits.

Manage and optimize global LAN/WAN and network security infrastructure. Support Cisco ISE and SD-WAN, Palo Alto firewalls and Prisma Access SASE. Monitor performance, execute testing, document configurations, resolve incidents, and support M&A network integrations.

Lead detection and analytics research across cloud, identity, endpoint, network, and application environments. Embed security expertise into product and R&D, apply AI/LLM and ML techniques for scalable detections, analyze attacker techniques, measure detection quality, and contribute research outputs and tooling.