<p><strong>Your wellbeing, our mission. Join a company shaping a healthier world.</strong></p> <p><strong>GET TO KNOW US</strong></p> <p>At Wellhub we're revolutionizing workplace wellness. Our platform connects employees worldwide to the best partners for fitness, mindfulness, therapy, nutrition, and sleep—all in one simple subscription. Headquartered in NYC with team members in Europe, North America and South America, we’re on a mission to make every company a wellness company.</p> <p>We believe work should be fulfilling, inspiring, and balanced. Here, you’ll find a team that values wellbeing, collaboration, and different perspectives, where passion and creativity push boundaries to create real impact. Your contributions will help shape a healthier, more balanced world for you and millions of people globally. </p> <p><strong>Join us in redefining the future of wellbeing!</strong></p> <p> </p> <p><strong>THE OPPORTUNITY</strong></p> <p>We are hiring a <strong>Senior Security Engineer| AppSec</strong> to our <strong>Information Security team</strong> in <strong>Brazil</strong>! This is a<strong> Remote – Brazil</strong> position, meaning you can work from anywhere within the country. Please note that this role is only open to candidates in Brazil. </p> <p>The Information Security team is responsible for protecting our global subscription platform serving millions of users. As a Senior Security Engineer, you will drive software security across our product verticals — starting with application security (secure SDLC, SAST/DAST, secure design reviews) and expanding into adjacent domains like detection engineering, IAM, and vulnerability management. This is a unique opportunity to help build a security engineering program from the ground up in a high-growth environment. You will own a control domain end-to-end in a role that is deliberately generalist — we are looking for someone who reasons deeply about root causes and partners closely with engineering teams to embed security seamlessly into product delivery. </p> <p> </p> <p><strong>YOUR IMPACT</strong></p> <p> </p> <ul> <li data-path-to-node="7,0,0"><strong data-path-to-node="7,0,0" data-index-in-node="0">Own</strong> core application security services, security tooling (e.g., SAST/DAST, IAM, vulnerability management), and detection pipelines end-to-end.</li> <li data-path-to-node="7,0,0"><strong data-path-to-node="7,1,0" data-index-in-node="0">Lead</strong> post-incident responses and post-mortems, transforming root-cause findings into concrete guardrails, automation, and policy improvements.</li> <li data-path-to-node="7,2,0"><strong data-path-to-node="7,2,0" data-index-in-node="0">Drive</strong> security-by-design standards across product development by writing clear RFCs, threat models, and architectural design docs for high-risk projects.</li> <li data-path-to-node="7,3,0"><strong data-path-to-node="7,3,0" data-index-in-node="0">Establish</strong> and enforce vulnerability remediation SLAs and security metrics, utilizing monitoring tools to hold engineering teams accountable.</li> <li data-path-to-node="7,4,0"><strong data-path-to-node="7,4,0" data-index-in-node="0">Execute</strong> seamless security-critical migrations and platform updates while preserving data integrity and auditability throughout.</li> <li data-path-to-node="7,5,0"><strong data-path-to-node="7,5,0" data-index-in-node="0">Partner with</strong> cross-functional teams (Engineering, Legal, Product) to deliver medium-to-large security initiatives while maintaining transparency as scope evolves.</li> </ul> <p> </p> <p><em>Live the mission: inspire and empower others by genuinely caring for your own wellbeing and your colleagues. Bring wellbeing to the forefront of work, and create a supportive environment where everyone feels comfortable taking care of themselves, taking time off, and finding work-life balance.</em></p> <p><strong>WHO YOU ARE</strong></p> <p> </p> <ul> <li data-path-to-node="9,0,0">An experienced security engineer with <strong data-path-to-node="9,0,0" data-index-in-node="38">prior work experience</strong> delivering high-impact security tooling, detection logic, or secure SDLC mechanisms in modern cloud environments.</li> <li data-path-to-node="9,1,0">An adaptable and collaborative professional with a <strong data-path-to-node="9,1,0" data-index-in-node="51">willingness to</strong> step outside your primary AppSec focus to support other InfoSec contexts—such as Cloud Security, GRC, or Detection—as team priorities evolve.</li> <li data-path-to-node="9,2,0">A proactive technical partner with <strong data-path-to-node="9,2,0" data-index-in-node="35">extensive experience in</strong> modern cloud architectures and container ecosystems (e.g., AWS/EKS, GCP/GKE, Istio, ArgoCD).</li> <li data-path-to-node="9,3,0">A clear, empathetic communicator with <strong data-path-to-node="9,3,0" data-index-in-node="38">fluency in</strong> English and Portuguese, <strong data-path-to-node="9,3,0" data-index-in-node="73">able to</strong> translate complex technical security risks into actionable guidance for engineers and non-technical stakeholders alike.</li> <li data-path-to-node="9,4,0">A pragmatic problem-solver with the <strong data-path-to-node="9,4,0" data-index-in-node="36">ability to</strong> balance rigorous security sta