Application Security Specialist | AppSec (Fintech)

Location: Curitiba, Brazil — on-site

Company

hirify.global is a fintech building global payment infrastructure that connects digital businesses with consumers across 21 emerging markets.

What you will do

• Lead the Application Security strategy and provide technical mentorship to junior, mid-level, and senior security analysts.
• Architect and oversee threat modeling sessions across product squads to identify architectural flaws and security requirements early.
• Drive global security projects and communicate security risks and standards in English to international stakeholders.
• Manage vulnerabilities identified through SAST, DAST, and SCA, providing actionable remediation guidance and code-fix support.

Requirements

• Hands-on experience configuring and tuning SAST, DAST, and SCA tooling within CI/CD pipelines.
• Strong expertise in API security and secret management, including REST/GraphQL APIs, tokens, certificates, and secrets.
• Experience with tools such as HashiCorp Vault or AWS Secrets Manager.
• Ability to review and secure code in multiple stacks, including Java, Python, Go, Node, or .NET.
• Advanced to fluent English communication is required for technical discussions, documentation, and collaboration with distributed teams.

Nice to have

• Advanced security certifications such as OSWE, CASE, CSSLP, or CISSP.
• Experience automating security guardrails or internal tools for secrets and vulnerability triage.
• Participation in bug bounty programs, open-source security projects, or security conferences such as OWASP Global AppSec.

Culture & Benefits

• Annual performance bonus based on company results.
• Monthly meal allowance and medical and dental plans with dependent coverage.
• Financial assistance for undergraduate, graduate, and MBA programs.
• Budgets for courses, certifications, and workshops, plus language classes.
• Semi-flexible hours, a birthday day off, a year-end break, and physical and mental well-being programs.