Sênior Security Engineer (DataSecurity)

Location: Remote-first in Brazil, with the option to work from São Paulo offices or partner coworking spaces up to twice a week.

Company

hirify.global is a Latin American real estate technology ecosystem developing products and services across the housing journey, with a technology hub in Portugal.

What you will do

• Design and deploy data protection strategies across Databricks data lakes, AWS and GCP storage, and corporate SaaS environments.
• Implement and tune DSPM platforms to discover, classify, and continuously monitor sensitive PII and PCI data.
• Partner with Data Engineering and Machine Learning teams to embed masking, anonymization, and tokenization into ETLs and data pipelines.
• Architect and manage DLP capabilities, including Python and API automations for alert triage, false-positive reduction, and SOAR-based incident response.
• Enforce data sharing, encryption, and retention policies through Terraform and other Infrastructure as Code tools.
• Connect Cybersecurity, Data Governance, Legal, and IT requirements by translating LGPD and GDPR frameworks into technical controls.

Requirements

• Strong practical and conceptual knowledge of DLP, encryption at rest and in transit, tokenization, hashing, and dynamic data masking.
• Experience securing data lakes, data warehouses, and cloud-native storage in AWS or GCP, including technologies such as S3, RDS, BigQuery, or Databricks.
• Proficiency with Python or Bash, APIs, security-tool integrations, and Terraform or similar Infrastructure as Code tools.
• Ability to threat-model complex data flows, identify exposure risks, and design pragmatic mitigations.
• Fluency in Portuguese and advanced English are required.

Nice to have

• Experience implementing and scaling DSPM platforms such as Cyera, Wiz, Securiti.ai, or BigID.
• Background in Data Engineering or database administration, with knowledge of Airflow, Spark, or Kafka.
• Knowledge of applied cryptography and enterprise key management with AWS KMS or HashiCorp Vault.
• Experience using AI tools or LLMs for data classification, DLP false-positive reduction, or security automation.

Culture & Benefits

• Remote-first work model with home office and coworking flexibility.
• Competitive salary and profit sharing.
• Meal, home office, childcare, and atypical parenthood allowances.
• Health, dental, and life insurance, plus Wellhub and an employee assistance program.
• Extended parental leave and additional days off for birthdays, Mother’s Day, and Father’s Day.
• Educational discounts, a benefits club, and children’s reading kits.

Hiring process

• Application followed by a recruiter interview.
• Technical screening with architecture and security scenarios.
• Live technical case interviews followed by an offer.