Senior Application Security Engineer

Wellhub (formerly Gympass) is a corporate wellness platform connecting employees to fitness, mindfulness, therapy, nutrition, and sleep partners. Founded in 2012 and headquartered in NYC, we have a growing global team in 11 countries. We're seeking a Senior Application Security Engineer to join our Information Security team in Brazil.

Your role will involve:

• Defining DevSecOps strategy and security architecture
• Ensuring secure software delivery and long-term technical health
• Implementing security practices throughout the software development process
• Developing tools for collaboration between developers, security experts, and operations teams
• Sharing knowledge within Wellhub

Requirements:

• Experience with CI/CD pipeline security and micro-services infrastructure
• Proficiency in SAST, DAST, and Vulnerability Scanners
• Code Review experience
• Software Development background
• Public Cloud infrastructure experience (preferably AWS)
• Linux, containers, and networking knowledge
• Proficiency in modern languages (Java, Go, Python, etc.)
• Understanding of cybersecurity frameworks (OWASP, Mitre's ATT&CK)
• Knowledge of Security Champions programs
• Infrastructure as Code experience
• Fluency in English and Portuguese

We offer:

• Health, dental, and life insurance
• Flexible work options (hybrid or full remote)
• Flexible schedule
• Access to wellness resources and programs
• Paid time off and parental leave
• Career growth opportunities
• An exciting, supportive atmosphere with global colleagues

Join us in our mission to make every company a wellness company and contribute to making the world a healthier place!