Security Engineer

Security Engineer Join to apply for the Security Engineer role at Avra . About Avra Avra is an AI‑powered platform based on a foundational model that transforms the complexity of SMEs into strategic decisions for large enterprises. Founded in 2024 by Viviane Meister and Bruno Alano (former OpenAI), Avra builds its own models from scratch to provide innovative insights that empower major Latin American enterprises. Investors include MAYA Capital, Norte Ventures, and Sequoia Scout Fund. Responsibilities Identity & Access Management: maintain robust IAM systems using SAML, OIDC, and modern authentication protocols. Risk & Vulnerability Management: conduct threat modeling, regular vulnerability assessments, and proactive risk mitigation for our AI infrastructure. Security Monitoring & Analysis: enhance and maintain SIEM, creating advanced detection rules to identify anomalies in workloads and infrastructure. Endpoint Security: implement and maintain endpoint protection. Secure Development Lifecycle: embed security best practices across SDLC, collaborating with engineering teams to build security into the AI platform from the start. Compliance & Policy Management: maintain and enforce ISO 27001, NIST CSF 2.0, and LGPD‑aligned security policies, including playbooks and runbooks, ensuring team‑wide adherence. Security Awareness: develop and maintain security awareness programs to promote a security‑first culture across the organization. Qualifications Required 3+ years as a Security Engineer or equivalent security‑focused role. Proficiency in at least two scripting languages (Bash, Python, or similar). Strong automation capabilities for security processes and tasks. Solid understanding of cryptography, networking, and Linux. Comfortable working with cloud platforms (AWS and GCP). Analytical mindset: excellent problem‑solving skills, commitment to continuous improvement and proactive security monitoring. Excellent written and verbal communication in Portuguese and English, with the ability to explain complex security concepts to diverse audiences. Deep understanding of modern security threats, attack vectors, and defense strategies in cloud‑native environments. Desired Experience with machine learning for anomaly detection automation. Hands‑on offensive security expertise to better defend systems. Experience building and maintaining Infrastructure as Code. Experience with SAST, DAST, SCA, and container security. Strong programming skills beyond scripting to build sophisticated security tools. Proficiency with OWASP WSTG, MITRE ATT&CK/D3FEND. Preferable experience in AI/ML security platforms or financial services infrastructure. Benefits & Culture Cutting‑edge technology: protect a deep‑tech AI platform processing data from millions of Brazilian companies. Competitive compensation: attractive salary, equity participation, and total compensation transparency. Direct impact: work closely with founders to shape security foundations for a fast‑growing AI startup. Technical challenges: solve complex security problems at the intersection of AI, big data, and financial services. Flexible working culture: fully remote with access to São Paulo office, unlimited vacation, comprehensive benefits including national health plan and generous parental leave. How to Apply If you are passionate about building secure and resilient AI systems and want to protect the future of data intelligence in Latin America, we would love to hear from you. Apply now to join Avra and help maintain the highest security standards as we push the boundaries of what AI can achieve. #J-18808-Ljbffr