Application Security Specialist

Come Make an Impact on Millions of BraziliansAt RecargaPay, we're on a mission to deliver the best payment experience for Brazilian consumers and small businesses — by building a powerful digital ecosystem where the banked and unbanked connect, and where consumers and merchants have a one-stop shop for all their financial needs.We serve over 10 million users and process more than USD 4 billion annually. We've been profitable since 2022 and operate our own credit business. We are an AI-first, 100% remote team, scaling in the rapidly changing Brazilian financial market.Our goal? Deliver the best payment experience in Brazil for people and small businesses alike.We value autonomy, ownership, and a bias for action. We're looking for people who are curious, hands-on, and driven by impact — who want to solve real problems, work with strong teams, and rethink what's possible.If you're ready to do your best work, at scale, with purpose — this is your place.We are looking for a qualified AppSec Specialist to implement secure development processes and analyze application security through methodologies. In addition, will guide the development team on vulnerability remediation, integration of security testing into the SDLC/DevOps cycle. Finally, you will seed the application security culture for the entire company.Responsibilities:
Responsible for the implementation of Secure Development and Application Security Analysis processes in large corporate clients, including:
source code security review using SAST solution, validation of vulnerabilities found in source code, discussion of false positive cases, guidance to developers on vulnerability remediation, development and execution of training and support in application security operation with SAST solution;
Work with development teams to ensure that security is integrated into the software development life cycle;
Provide technical recommendations and remediation to teams;
Accompany meetings withbusiness and development areas, providing appropriate advice;
Develop and apply security training and coding best practices;
Promote the Applicationsecurity culture to several areas of the company;
Developing and maintaining documentation of application security controls;
Perform regularsecurityaudits of applications and systems;
Stay up-to-dateon new security technologies and approaches;
Drive initiatives whichscale application security and holistically address multiple vulnerabilities.Requirements:
Experience in development using Java and Spring Boot;
Experience identifying security issues through code review.Education in information technology or related field;
Understanding of modernweb application structure;
Experience in codereview and applying SSDLC technique;
Familiarity with web and mobile internet related technologies (web applications, mobile applications, API oriented architecture) and network related protocols;
Feeling comfortable in Agile / DevOps environment;
Familiarity with securedevelopment practicesProficiency with security tools and technologiesStrong development or scripting experience and skills. Python is a must.BenefitsCompetitive and market-aligned salary.Remote work — wherever you are, you're part of the teamHome office allowance through a monthly deposit in the RecargaPay app.Health and dental plans with no co-pay.Life insurance.Flexible meal allowance (via Flash).TotalPass membership to take care of your health.Spanish classes.Diversity & Inclusion at RecargaPayAt RecargaPay, you'll have the freedom to be who you are because we believe that diverse perspectives and experiences make us more creative and stronger. Here, everyone is welcome to express themselves authentically. We value the richness of each journey and the multiple ways of seeing the world, without distinctions of gender, race, sexual orientation, age, religion, or any other characteristic that makes us unique.About the use of your DataBy sharing your resume with us, you authorize the use of your data for analysis during the selection process and possibly for other opportunities within the RecargaPay group. You can request the update or deletion of your information at any time, in accordance with LGPD (General Data Protection Law).

---