13 часов назад
Security Lead (AI)
Вакансия из Hirify Global, списка международных tech-компанийДля мэтча и отклика нужен Plus
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Security Lead (AI) (AWS, Application Security, Compliance): Building and scaling LawnStarter's security function across a PHP/Laravel and TypeScript/React marketplace with an accent on application security, cloud infrastructure, payments, customer data, and compliance. Focus on automating security controls for AI-agent-authored code, mapping PCI/SOC 2/LGPD requirements, improving detection and response, and establishing the foundation for a future security team.
Location: Remote within Brazil, including São Paulo, Belo Horizonte, Florianópolis, Curitiba, and Recife.
Company
operates an on-demand marketplace for lawn care and outdoor services and is expanding into a broader home-services platform across three brands.
What you will do
- Lead security across the PHP/Laravel and TypeScript/React applications, AWS infrastructure, payment flows, and customer and professional data.
- Build application-security practices including threat modeling, secure SDLC controls, code and design reviews, SAST, secret scanning, dependency scanning, and vulnerability management.
- Strengthen AWS and Kubernetes security through IAM, network security, encryption, secrets management, and EKS hardening.
- Drive PCI scoping, SOC 2 and LGPD readiness, vendor risk management, and security questionnaire responses.
- Improve detection and incident response using Datadog, Sentry, and AWS signals, including incident runbooks and MTTD/MTTR baselines.
- Establish security standards, playbooks, and a hiring plan for a small team expected to grow within approximately 12–18 months.
Requirements
- Hands-on expertise across at least three of application security, cloud security, compliance, and incident response.
- Experience building and operating technical security controls rather than working only with policies, audits, or presentations.
- Ability to prioritize risks pragmatically and automate security controls without becoming a delivery bottleneck.
- Experience collaborating closely with engineering delivery teams and Cloud & DevOps.
- Strong understanding of security risks in payments, marketplaces, customer data, and production AWS environments.
- Daily use of AI tools for security work and willingness to secure AI-agent-authored code.
Culture & Benefits
- Fully remote work from Brazil with a US-distributed engineering organization.
- Asynchronous work and autonomy over the working environment.
- AI security tooling, including Claude Code and the engineering agent stack.
- Above-senior-market cash compensation for the lead scope.
- Brazil-based independent contractor (PJ) engagement with no equity.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →