Senior Application Security Engineer

1 semana atrás

Atibaia, São Paulo, Brasil Rain Tempo inteiro
Overview

Join to apply for the Senior Application Security Engineer role at Rain

Rain is the fastest-growing earned wage access (EWA) fintech in the U.S., serving 3.5 million employees and backed by top investors like QED and Prosus. We have raised nearly $400M in funding—including the largest Series A in fintech history—and recently closed our Series B to fuel our next stage of hypergrowth. This role is technically grounded and involves direct engagement in application-layer matters and security reviews, while contributing to cloud security automation, awareness initiatives, and secure engineering practices across the SDLC.

You will partner closely with engineering and development squads, and work alongside our Cloud Security and GRC teams to improve Rain's application and platform security posture.

This position is focused on securing software development and cloud-native defense, with involvement in runtime security, security automation, and secure engineering practices across the SDLC.

Key Responsibilities
  • Collaborate with development squads to validate vulnerabilities and provide actionable remediation guidance aligned with business risk.
  • Drive threat modeling sessions (e.g., STRIDE, PASTA) for critical systems and APIs.
  • Design, implement, and oversee automated processes for securely updating application and code dependencies, mitigating issues and ensuring timely vulnerability remediation.
  • Integrate security checks into CI/CD pipelines (SAST, DAST, SCA, IaC) using tools like Semgrep, Snyk, Trivy, and Burp Suite.
  • Contribute to runtime security initiatives, such as container/Kubernetes hardening, RASP, and eBPF-based detection.
  • Build and maintain a security issues dashboard to track remediation status and metrics.
  • Provide real-time support in cybersecurity incidents impacting applications or cloud infrastructure (e.g., exploited vulnerabilities, credential stuffing, web/API attacks).
  • Partner with the Cloud Security team on security automation tasks and monitoring improvements (e.g., Security Hub remediation automations, DLP monitoring).
  • Conduct proactive research on new threats, vulnerabilities, and attack techniques relevant to Rain's architecture.
  • Collaborate with the GRC team to develop and deliver internal security awareness initiatives, phishing campaigns, and developer training (e.g., secure coding, API security).
  • Participate in the continuous improvement of AppSec maturity (e.g., aligning with OWASP SAMM, ISO 27001, or SOC 2 frameworks).
Required Qualifications
  • Fluent English, including strong verbal and written skills.
  • Strong problem-solving and analytical mindset.
  • Excellent communication skills to convey security risks to technical and non-technical stakeholders.
  • 3–5+ years of experience in application security, penetration testing roles, and/or secure code development, including work with QA teams.
  • Hands-on experience with SAST, DAST, and SCA tools (e.g., Semgrep, Burp, Snyk).
  • Deep understanding of web, mobile, and API vulnerabilities (OWASP Top 10, API Top 10, MITRE CWE).
  • Proven expertise in performing code reviews or security assessments and writing clear reports.
  • Proficiency in at least one backend language (e.g., Go, Python, Node.js) and understanding of React/React Native front-ends.
  • Familiarity with secure architecture of microservices, event-driven systems, and REST APIs using OAuth2/OpenID Connect.
  • Experience securing CI/CD pipelines and integrating AppSec tooling into SDLC.
  • Solid knowledge of containerization and Kubernetes security fundamentals.
  • Understanding of cloud security (preferably AWS), including IAM principles, cloud-native service configurations, and network segmentation.
  • Comfortable with Agile development methodologies and working within cross-functional squads.
  • Software supply chain security (e.g., SBOM, artifact signing).
Preferred Qualifications
  • Certifications such as OSCP, OSWE, GWAPT, CPTE, or CSSLP.
  • AWS, GCP, or Azure Security Specialty certification.
  • Familiarity with bug bounty triage and vulnerability management platforms (e.g., DefectDojo).
  • Experience implementing RASP or eBPF runtime protection tools.
  • Exposure to LLM/AI security considerations and secure code generation practices.
  • Familiarity with logging and monitoring tools (e.g., CloudWatch, Datadog, Grafana).
Who We Are

Rain is filled with people who are passionate about our mission, embrace diversity, and grow personally and professionally. We own what we do and let data guide our actions while working quickly and adapting to new challenges every day.

Rain is committed to Equal Employment Opportunity and does not discriminate based on race, religion, color, national origin, ethnicity, gender, sex (including pregnancy), protected veteran status, age, disability, sexual orientation, gender identity, gender expression, or any unlawful criterion existing under applicable federal, state, or local laws. If you need assistance or accommodation due to a disability, you may contact us at ******.

#J-18808-Ljbffr

  • Field Service Engineer, MALDI Biotyper

    3 semanas atrás

    Atibaia, São Paulo, Brasil Bruker Tempo inteiro

    Join to apply for the Field Service Engineer, MALDI Biotyper role at Bruker 1 day ago Be among the first 25 applicants Join to apply for the Field Service Engineer, MALDI Biotyper role at Bruker Get AI-powered advice on this job and more exclusive features. visão globalBruker is one of the world's leading analytical instrumentation companies enabling...

  • Azure Devops Engineer

    2 semanas atrás

    Atibaia, São Paulo, Brasil Decskill Tempo inteiro

    Overview Join to apply for the Azure Devops Engineer role at Decskill Decskill was founded in 2014 as an IT Consulting Company and their main mission is to delivery value through the knowledge. We enable companies to meet the chalenges of digital world by providing our clients with business models that ensure technological capacity, flexibility and...

  • Field Service Engineer, MALDI Biotyper

    2 semanas atrás

    Atibaia, São Paulo, Brasil BRUKER Tempo inteiro US$80.000 - US$120.000 por ano

    visão global:Bruker is one of the world's leading analytical instrumentation companies enabling scientist to make breakthrough discoveries and develop new application that improve the quality of human life. Our high-performance products and high-value life science and diagnostic solutions are trusted by leading businesses, institutes, and scientists...

  • Field Service Engineer, MALDI Biotyper

    2 semanas atrás

    Atibaia, São Paulo, Brasil Bruker Tempo inteiro R$80.000 - R$100.000 por ano

    visão globalBruker is one of the world's leading analytical instrumentation companies enabling scientist to make breakthrough discoveries and develop new application that improve the quality of human life. Our high-performance products and high-value life science and diagnostic solutions are trusted by leading businesses, institutes, and scientists...

  • Senior Application Security Engineer

    Há 2 dias

    Atibaia, Brasil Rain Tempo inteiro

    OverviewJoin to apply for the Senior Application Security Engineer role at RainRain is the fastest-growing earned wage access (EWA) fintech in the U.S., serving 3.5 million employees and backed by top investors like QED and Prosus.We have raised nearly $400M in funding—including the largest Series A in fintech history—and recently closed our Series B to...

  • Field Service Engineer, Maldi Biotyper

    Há 2 dias

    Atibaia, Brasil Bruker Tempo inteiro

    Join to apply for the Field Service Engineer, MALDI Biotyper role at Bruker1 day ago Be among the first 25 applicantsJoin to apply for the Field Service Engineer, MALDI Biotyper role at BrukerGet AI-powered advice on this job and more exclusive features.visão globalBruker is one of the world's leading analytical instrumentation companies enabling scientist...

  • Field Service Engineer, MALDI Biotyper

    Há 2 dias

    Atibaia, Brasil Bruker Tempo inteiro

    Join to apply for the Field Service Engineer, MALDI Biotyper role at Bruker 1 day ago Be among the first 25 applicants Join to apply for the Field Service Engineer, MALDI Biotyper role at Bruker Get AI-powered advice on this job and more exclusive features. visão global Bruker is one of the world’s leading analytical instrumentation companies enabling...

  • Field Service Engineer, MALDI Biotyper

    Há 3 dias

    Atibaia, Brasil Bruker Tempo inteiro

    Join to apply for the Field Service Engineer, MALDI Biotyper role at Bruker 1 day ago Be among the first 25 applicants Join to apply for the Field Service Engineer, MALDI Biotyper role at Bruker Get AI-powered advice on this job and more exclusive features. visão globalBruker is one of the world’s leading analytical instrumentation companies enabling...

  • Field Service Engineer- MALDI Biotyper

    Há 8 horas

    Atibaia, Brasil Bruker Corporation Tempo inteiro

    Overview Bruker is one of the world’s leading analytical instrumentation companies enabling scientist to make breakthrough discoveries and develop new application that improve the quality of human life. Our high-performance products and high-value life science and diagnostic solutions are trusted by leading businesses, institutes, and scientists worldwide....

  • Field Service Engineer- MALDI Biotyper

    Há 5 horas

    Atibaia, Brasil Bruker Corporation Tempo inteiro

    OverviewBruker is one of the world’s leading analytical instrumentation companies enabling scientist to make breakthrough discoveries and develop new application that improve the quality of human life. Our high-performance products and high-value life science and diagnostic solutions are trusted by leading businesses, institutes, and scientists worldwide....

  • Data Prevention Analyst

    Há 7 horas

    Atibaia, Brasil Collinson Tempo inteiro

    Overview Collinson Group is a global leader in driving loyalty and engagement for many of the world’s largest companies, primarily through travel-related benefits within a market-leading digital travel ecosystem. The group delivers products and services across four core capabilities: Loyalty, Lifestyle Benefits and Insurance, serving over 400 million end...

  • Data Prevention Analyst

    Há 4 horas

    Atibaia, Brasil Collinson Tempo inteiro

    OverviewCollinson Group is a global leader in driving loyalty and engagement for many of the world’s largest companies, primarily through travel-related benefits within a market-leading digital travel ecosystem. The group delivers products and services across four core capabilities: Loyalty, Lifestyle Benefits and Insurance, serving over 400 million end...

  • Sap Sd It Senior Consultant, Order Management Team

    Há 3 dias

    Atibaia, Brasil Danfoss Gmbh Tempo inteiro

    Select how often (in days) to receive an alert: Create AlertSAP SD IT Senior Consultant, Order Management TeamRequisition ID: 44883Job Location(s): Multiple locationsOsasco, BR / Caxias do Sul, BR / Jardim Jaragua, BR / Embu Das Artes, BR / Carapicuiba, BR / Guaratingueta, BR / Ribeirao Preto, BR / Rio de Janeiro, BR / Belo Horizonte, BREmployment Type: Full...

  • Data Insights Analyst Brazil

    Há 4 horas

    Atibaia, Brasil Collinson Tempo inteiro

    OverviewCollinson Group is a global leader in driving loyalty and engagement for many of the world’s largest companies. Predominantly through the provision of travel related benefits within a market leading digital travel ecosystem. The group offers a unique blend of industry and sector specialists who together provide market-leading experience in...