RemoteLeaf Logo
Log in Sign up

[Job - 31023] Security Triage & Remediation Lead, Brazil

5 hours, 39 minutes ago
Brazil
Full-time
Lead
Security Engineer
Cybersecurity
AWS HashiCorp Vault PHP
Apply Now
CI&T

CI&T

CI&T is a global digital technology agency empowering agile growth for leading companies through advanced technologies with a team of 2000 experts worldwide.

Internet Software & Services
5K-10K
Founded 1995
View All Jobs 105

Description

  • Triage inbound vulnerabilities by validating, classifying, and prioritizing them based on exploitability and business impact.
  • Perform blast-radius and impact analysis across affected systems, services, and downstream consumers.
  • Own the secrets rotation strategy, including credential inventory, ownership mapping, and safe sequencing across production systems.
  • Coordinate remediation across multiple client delivery teams and unblock work that spans team boundaries.
  • Define and maintain the remediation playbook, including intake, severity criteria, SLAs, escalation paths, and closure criteria.
  • Report risk posture and backlog burn-down to VP-level stakeholders in business language.
  • Provide technical direction to remediation engineers, including scope review and validation that fixes close findings.
  • Upskill the client's internal engineering team on triage methodology and secure remediation practices.
  • Integrate security validation and evidence capture into the client's delivery pipeline.

Requirements

  • Bachelor's degree in Computer Science, Information Technology, or a related field.
  • Solid experience in application security, vulnerability management, or security engineering.
  • Excellent English communication skills, including reading, writing, and speaking.
  • Proven ownership of a vulnerability remediation program or triage function at enterprise scale.
  • Hands-on experience with secrets management and production credential rotation (AWS Secrets Manager, HashiCorp Vault, Parameter Store, or equivalent).
  • Strong AWS security fundamentals, including IAM, least privilege, network exposure, and logging.
  • Ability to read and assess PHP code well enough to validate a remediation approach.
  • Expertise in threat modeling and blast-radius analysis, with practical command of CVSS, CWE, and the OWASP Top 10.
  • Proven track record of coordinating technical work across teams without formal authority.
  • Experience in financial services, mortgage, or another regulated industry (preferred).
  • Incident response experience, including containment, investigation, and post-incident hardening (preferred).
  • Familiarity with SAST, DAST, and SCA tools such as Snyk, Veracode, Checkmarx, or Dependabot (preferred).
  • Exposure to legacy stacks, particularly IBM i / RPG or mainframe-adjacent systems (preferred).
  • Security certifications such as CISSP, OSCP, AWS Security Specialty, or GIAC (preferred).
  • Experience working with international clients in an embedded consulting role (preferred).

Benefits

  • Health and dental insurance.
  • Meal and food allowance.
  • Childcare assistance.
  • Extended paternity leave.
  • Gym and wellness partnerships through Wellhub (Gympass) and TotalPass.
  • Profit sharing and results participation (PLR).
  • Life insurance.
  • Continuous learning platform (CI&T University).
  • Discount club.
  • Free online platform for physical, mental, and overall well-being.
  • Pregnancy and responsible parenting course.
  • Partnerships with online learning platforms.
  • Language learning platform.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Unlimited Technology

Lead Traveling Security Technician

Unlimited Technology 51-250 Professional Services

Unlimited Technology is hiring a Traveling Security Technician for UT Government to install, service, test, and inspect access control and IP camera systems for customers across the U.S.

United States Full-time Lead Security Engineer
$65k-$90k
5 hours, 24 minutes ago
True Zero Technologies

Identity Management Engineer / Architect (R-00197)

True Zero Technologies 11-50 Internet Software & Services

True Zero Technologies is seeking an Identity Management Engineer / Architect to design and operate a secure enterprise identity platform across on-premises, cloud, SaaS, and hybrid environments in support of Zero Trust and regulated government use cases.

Anywhere Full-time Senior Cloud Engineer Security Engineer
Active Directory Cybersecurity DevSecOps OAuth OpenID Connect PowerShell Python SAML Terraform
5 hours, 24 minutes ago
Chainguard

Staff Vulnerability Management Engineer

Chainguard 51-250 Internet Software & Services

Chainguard is hiring a Staff Vulnerability Management Engineer to lead its AI-driven open source vulnerability disclosure and coordination efforts across internal teams, maintainers, and industry stakeholders.

United States Full-time Lead Security Engineer
$170k-$231k
Go Java JavaScript Penetration Testing Python
5 hours, 24 minutes ago
True Zero Technologies

PKI / Certificate Management Engineer (R-00198)

True Zero Technologies 11-50 Internet Software & Services

True Zero Technologies is hiring a PKI / Certificate Management Engineer to design and operate enterprise certificate infrastructure across cloud, government, and hybrid environments.

Anywhere Full-time Senior Infrastructure Engineer Security Engineer
Encryption Linux TLS
5 hours, 24 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers