Senior Security Engineer | AppSec

Summary

Build and run the application-security program for a global wellness-subscription platform, driving secure SDLC, SAST/DAST, threat modeling, and vulnerability remediation across cloud-native stacks.

Your wellbeing, our mission. Join a company shaping a healthier world.

GET TO KNOW US

At Wellhub we're revolutionizing workplace wellness. Our platform connects employees worldwide to the best partners for fitness, mindfulness, therapy, nutrition, and sleep—all in one simple subscription. Headquartered in NYC with team members in Europe, North America and South America, we’re on a mission to make every company a wellness company.

We believe work should be fulfilling, inspiring, and balanced. Here, you’ll find a team that values wellbeing, collaboration, and different perspectives, where passion and creativity push boundaries to create real impact. Your contributions will help shape a healthier, more balanced world for you and millions of people globally.

Join us in redefining the future of wellbeing!

THE OPPORTUNITY

We are hiring a Senior Security Engineer| AppSec to our Information Security team in Brazil! This is a Remote – Brazil position, meaning you can work from anywhere within the country. Please note that this role is only open to candidates in Brazil.

The Information Security team is responsible for protecting our global subscription platform serving millions of users. As a Senior Security Engineer, you will drive software security across our product verticals — starting with application security (secure SDLC, SAST/DAST, secure design reviews) and expanding into adjacent domains like detection engineering, IAM, and vulnerability management. This is a unique opportunity to help build a security engineering program from the ground up in a high-growth environment. You will own a control domain end-to-end in a role that is deliberately generalist — we are looking for someone who reasons deeply about root causes and partners closely with engineering teams to embed security seamlessly into product delivery.

YOUR IMPACT

Own core application security services, security tooling (e.g., SAST/DAST, IAM, vulnerability management), and detection pipelines end-to-end.
Lead post-incident responses and post-mortems, transforming root-cause findings into concrete guardrails, automation, and policy improvements.
Drive security-by-design standards across product development by writing clear RFCs, threat models, and architectural design docs for high-risk projects.
Establish and enforce vulnerability remediation SLAs and security metrics, utilizing monitoring tools to hold engineering teams accountable.
Execute seamless security-critical migrations and platform updates while preserving data integrity and auditability throughout.
Partner with cross-functional teams (Engineering, Legal, Product) to deliver medium-to-large security initiatives while maintaining transparency as scope evolves.

Live the mission: inspire and empower others by genuinely caring for your own wellbeing and your colleagues. Bring wellbeing to the forefront of work, and create a supportive environment where everyone feels comfortable taking care of themselves, taking time off, and finding work-life balance.

WHO YOU ARE

An experienced security engineer with prior work experience delivering high-impact security tooling, detection logic, or secure SDLC mechanisms in modern cloud environments.
An adaptable and collaborative professional with a willingness to step outside your primary AppSec focus to support other InfoSec contexts—such as Cloud Security, GRC, or Detection—as team priorities evolve.
A proactive technical partner with extensive experience in modern cloud architectures and container ecosystems (e.g., AWS/EKS, GCP/GKE, Istio, ArgoCD).
A clear, empathetic communicator with fluency in English and Portuguese, able to translate complex technical security risks into actionable guidance for engineers and non-technical stakeholders alike.
A pragmatic problem-solver with the ability to balance rigorous security standards against product velocity, making data-informed trade-off decisions.
A developer at heart with in-depth knowledge of secure coding practices, proficient in writing clean, well-tested code for security automation.
A security champion with familiarity with key governance and compliance frameworks (e.g., SOC 2, ISO 27001, LGPD/GDPR) to inform daily engineering decisions.

We recognize that individuals approach job applications differently. We strongly encourage all aspiring applicants to go for it, even if they don't match the job description 100%. We welcome your application and will be delighted to explore if you could be a great fit for our team. For this specific role, please note that prior experience in security engineering is a mandatory requirement.

WHAT WE OFFER YOU

With thoughtful benefits, emotional wellbeing resources, and a culture that empowers you to take ownership of your role and your wellbeing, we create an environment where you can thrive in all dimensions of your life.

Our flexible benefits program allows you to customize some of the benefits, according to your needs!

Our benefits include:

WELLHUB: Free Gold+ membership with access to onsite gyms and studios, digital fitness programs, and online wellness resources for meditation, nutrition, mental wellbeing support, and more! Add up to three family members to your plan, ensuring access to wellness for those who matter most to you.

WELLZ: A complete emotional wellbeing program with a unique approach. It offers personalized journeys that combine individual therapy sessions (52 per year) and on-demand content.

HEALTHCARE: Health, dental, and life insurance.

FLEXIBLE WORK: As a Flexible First company, we offer hybrid and remote options to give you the freedom to work in a way that suits you. The model for this specific role can be discussed with your recruiter and hiring manager. When you join, use our home office reimbursement to set up your home office.

PAID TIME OFF: It’s important to take time away from work to recharge.Employees receive vacations after 6 months and additional 3 days off per year + 1 day off for each year of tenure (up to 5 additional days) + an extra holiday for your birthday!

PAID PARENTAL LEAVE: Welcoming a new child is one of the most special moments in your life. Take the time to be present and enjoy your growing family. We offer 100% paid parental leave to all new parents. Parents giving birth are eligible for an extended leave and a ramp-back period to return part-time while they get settled.

CAREER GROWTH: Access world-class platforms, participate in interactive sessions, build your personalized development roadmap, and explore internal opportunities. We focus on continuous learning and feedback to support your journey toward personal and professional success.

CULTURE: You’ll join a team of passionate people who come together to break boundaries, support each other, and create a meaningful impact in workplace wellness. We win together, building trust through open communication and a culture where every perspective matters. Learn more about our shared culture and values here.

And to get a glimpse of life at Wellhub… Follow us on Instagram @lifeatwellhub and LinkedIn!

Diversity, Equity, and Belonging at Wellhub

We aim to create a collaborative, supportive, and inclusive space where everyone knows they belong.

Wellhub is committed to creating a diverse work environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, sex, gender identity or expression, sexual orientation, age, non-disqualifying physical or mental disability, national origin, veteran status, or any other basis covered by appropriate law.

Our commitment to inclusion also extends to how we recognize and reward our people. We’re proud to be Syndio Fair Pay Certified, reflecting our ongoing dedication to equitable and fair pay practices across our global team. Read more about it here.

Questions on how we treat your personal data? See our Aviso de Privacidade para Candidatos.

#LI-REMOTE

#LI-CM1

Show

What this application asks

greenhouse

First Name, Last Name, Email, Phone, Resume/CV, Cover Letter, Location

Please select your Country Phone Code choose one
Personal pronoun (optional): choose any · optional
LinkedIn Profile
Where are you currently working? (please enter the full company name)
What is your current base salary? (in reais)
What benefits do you currently receive at your company?
Do you have variable compensation (bonus/commission)? choose one
What is your variable compensation (%)?
What is your expected base salary for this role? (in reais)
What is your expected total compensation (base + variable)? (in reais)
Do you now or in the future require sponsorship? choose one
If not, please describe the type of work authorization you have optional
How did you hear about this opportunity? choose any
If you selected "Other", please specify. optional
Our hiring model is Full-time (CLT). Are you comfortable with this model? choose one
Besides your primary job, do you have any other professional commitments (Including, but not limited to, serving as a board member, advisor, freelancer, consultant, entrepreneur, independent contractor, mentor, instructor, or any other similar activity)? choose one
If you answered yes, please describe this additional activity, including the name of the company or project, your role, the industry in which it operates, whether it is paid or unpaid, the estimated hours per week dedicated to it, and whether it is ongoing or temporary. written answer · optional
Do you have any close family members, relatives, romantic partners, or individuals with whom you have a close personal relationship working at a competitor or a business partner of Wellhub (e.g., gym, wellness app, or supplier, or direct competitor)? choose one
If you answered yes, please provide the following details: the person's full name; their position/title; the name of the company; the nature of your relationship with this person. written answer · optional
Do you, a family member, or a partner own, invest or have a financial interest in any company that works with or competes with Wellhub? Including, but not limited to, gym partners, wellness apps, suppliers, or other competitors. choose one
If you answered yes, please provide details, including the name of the company; the type of financial, interest or investment; your relationship to the company or the individual with the interest. written answer · optional
Are you aware of any contractual or statutory restrictions from a previous employer that could prohibit or limit your ability to be employed by Wellhub in this role (e.g., a non-compete, non-solicitation clauses)? choose one
If you answered yes, please provide details, including the nature of the restriction, the parties involved, the duration, and any relevant geographic or functional limitations. written answer · optional
Do you have any family members, romantic partners, relatives, or individuals with whom you have a close personal relationship currently working at Wellhub? choose one
If you answered yes, please provide the following details: the person's full name; the person's area or department at Wellhub (if known); and the nature of your relationship with this person. written answer · optional
Do you currently hold, or have you ever held, a position in a government or public entity? This includes serving as a public official, government employee, Politically Exposed Person (PEP), or holding any elected, appointed, advisory, or contractual position with a government entity, state-owned enterprise, public agency, political party, or international organization. choose one
If you answered yes, please provide details, including the name of the entity, your position/title, the nature of your role, and the dates of your involvement. written answer · optional
Do you have any family members, romantic partners or close relatives who currently hold, or have ever held, a position in a government or public entity? This includes serving as a public official, government employee, Politically Exposed Person (PEP), or holding any elected, appointed, advisory, or contractual position with a government entity, state-owned enterprise, public agency, political party, or international organization. choose one
If you answered yes, please provide details, including the individual’s full name, your relationship to them, the name of the entity, their position/title, the nature of their role, and whether they are currently in office (including dates of involvement, if applicable). written answer · optional
Declaration: I confirm that the information provided is true and complete, and I agree to update Wellhub if something changes during the hiring process. choose one
Do you self-identify as belonging to an underrepresented group? choose one · optional
If yes, which underrepresented group do you identify with? choose any · optional
If other, please describe below which underrepresented group you identify with: optional
Which gender do you self-identify with? choose one · optional
If other, please describe below the gender you identify with: optional
Which race do you self-identify with? choose one · optional
If other, please describe below the race you identify with: optional
Are you a person with a disability? choose one · optional
If yes, please describe your disability so that we can adapt our method of contact, if necessary. optional
What is your English proficiency level? choose one

Senior Security Engineer | AppSec

Summary

What this application asks

See also

Tailor your CV for this role?

A new version of freehire is available