Application Security Engineer III – InComm Payments

Titulo da Vaga: Application Security Engineer III

Localização: Brasil

Descrição da Vaga: Job Description:OverviewWhen you think of InComm Payments, think of Innovative Payments Technology. We were founded over 30 years ago and continue to be a pioneer in the payment (FinTech) industry. Since our inception, we have grown to be a team of over 3,000 employees in 35 countries around the world. We own over 400 global technical patents and a network that includes over 525,000 points of retail distribution that points to our industry expertise.InComm Payments is highly focused on our people and their growth, and we work hard to make a career at InComm Payments meaningful and rewarding. We value innovation, quality, passion, integrity and responsibility in all that we do, and we are looking for great people to join our team as we move forward towards a very bright future. We anticipate developing future leaders for our teams in Brazil!Benefits include health and dental insurance, meal and restaurant vouchers, fixed monthly stipend for internet and mobile expenses, InComm hardware/software, and annual bonuses! All positions are CLT.You can learn more about InComm Payments by visiting our or connecting with us on , , , , or .About This OpportunityOur Global Enterprise Security Team is growing in Brazil and we are seeking a dedicated and experienced Senior Application Security Engineer to join our growing team! You will work with a dynamic group of professionals dispersed across North and South America supporting our global business that spans 5 continents. You will play a crucial part in safeguarding our applications from potential threats and vulnerabilities. With a few years of hands-on experience, you will conduct thorough security assessments, implement robust security measures, and ensure compliance with industry standards. Your strong analytical skills and deep understanding of modern security protocols and tools will be essential in identifying and mitigating risks early in the development lifecycle. You will report to the Enterprise Application Security group which works closely with software development and application ownership teams across various business units to help develop more secure applications and products. Join us as we secure applications and products across the entire InComm Payments enterprise!CLT and fully remote position. Must reside in Brazil. Benefits include:

• Health and dental insurance
• Meal and restaurant vouchers
• Fixed monthly stipend for internet and mobile expenses
• Company-issued device

Responsibilities

• Integrate SAST tooling into CI/CD pipelines, ensuring compatibility and efficient scanning within development workflows.
• Provide tailored SAST integration support for development teams at varying maturity levels with diverse toolsets and security requirements.
• Analyze application logs for anomalous patterns, communicate findings to leadership, and persuade them to take appropriate action.
• Participate in on-call rotation in support of WAF incidents.
• Validate security vulnerabilities identified by automated tools and fine-tune configurations to minimize false positives and reduce noise.
• Develop threat models with development teams to help expose risks in their deliverables.
• Participate in application design and architectural reviews.
• Facilitate activities such as blue/red team events and bug bounty programs.
• Lead prioritization discussions to gain traction on important security issues
• Act as a liaison with 3rd parties performing vulnerability scans and penetration testing to validate findings and inform priorities and strategies for remediation.
• Draft, evaluate, and monitor compliance with application and development security standards.
• Ensure development teams are validating for OWASP Top 10 and performing industry leading application security practices.

Qualifications

• 5+ years of application security experience.
• Strong background with CI/CD processes and associated tooling, such as Jenkins, GitHub Actions, Azure Pipelines, or similar.
• Strong scripting experience – PowerShell, Python, etc.
• Extensive experience with SAST & DAST application scanning tools and knowledge of OWASP methodologies
• Application security experience with high level programming languages (e.g., Java, C, C++, C#, VB, .NET, ASP.NET, ASP, PHP, J2EE, JSP)
• Experience with Container technologies – Docker, Docker Swarm, Kubernetes
• Experience with Cloud Service Providers (Azure and/or AWS)
• Knowledge of Web Application Firewalls (WAF)
• Experience with performing web, API, and mobile manual penetration testing; preparing reports to document findings; and presenting the report to development teams.
• Familiarity with regulatory controls and industry best practices such as HIPAA, PCI, HiTrust, NIST etc.
• Communication skills to create documentation, videos and conduct training classes
• Ability to manage multiple tasks simultaneously and meet established deadlines.
• Ability to collaborate with IT teams on security-related tasks and projects.
• Ability to work productively while remote and communicate effectively in a virtual team environment.
• Ability to stay current with new technology.

Education & Certifications

• Education: Associate Degree, or, Technologo (Technologist) Degree, or higher is required.
• A CISSP certification is preferred, but not required. Career development plan to include certifications upon hire.

InComm Payments provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, sexual orientation, gender identity or national origin, citizenship, veteran’s status, age, disability status, genetics or any other category protected by federal, state, or local law.*This position is eligible for the Employee Referral Bonus Program – Tier 4 – #LI-Remote #LI-SO1

Nome da Empresa: InComm Payments

Salário:

Candidatar-se a vaga!