Information Security Analyst III - Focus on AppSec

If you want to expand your talent, embark with us on this journey of opportunities, development, and high cooperation to move you toward a universe to be explored! Evaluate vulnerabilities in applications, APIs, libraries, components, and pipelines. Support squads in remediating vulnerabilities and adopting secure development practices. Operate and evolve SAST, DAST, SCA, API security, and bot protection tools. Support vulnerability management, prioritizing risks based on criticality and exposure. Perform technical risk analysis in applications, integrations, and digital journeys. Contribute to secure development standards, technical guides, checklists, and training. Support automation initiatives, shift-left, and continuous security improvement within the SDLC. The selection process for this vacancy may take longer to complete, with an expected finalization by the end of 2026. Experience in AppSec, DevSecOps, secure development, or vulnerability analysis. Knowledge of OWASP Top 10, API security, and authentication and authorization fundamentals. Experience with code analysis tools (SAST), dependencies (SCA), and dynamic testing (DAST). Ability to interpret vulnerabilities and guide practical remediation. Familiarity with API security (e.g., OAuth2, JWT) and abuse protection. Familiarity with cloud environments, containers, CI/CD pipelines, or IaC. Certifications or courses in security are desirable.