FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Application Security Specialist, AppSec
LEO Learning Brasil. Ensure the security of Revvo’s applications and digital solutions .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in application security, including vulnerability assessment, secure coding practices, and integration of security controls within the development lifecycle. Proficient in assessing and mitigating risks associated with web applications, APIs, and artificial intelligence technologies.
Highest-signal resume keywords
PHP Application SecurityOWASP Top 10 KnowledgeSAST, DAST, SCA ProficiencyDevSecOps IntegrationCloud Security Expertise
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Vulnerability AssessmentSecurity TestingSource Code ReviewSecure ArchitectureThreat ModelingRisk AnalysisSecure Development Lifecycle (SSDLC)Authentication and AuthorizationData ProtectionAPI Security
Soft Skills
Technical GuidanceCollaboration with Development TeamsIncident Investigation Support
Tools & Technologies
CI/CD PipelinesBurp SuiteGitCloud ServicesWeb Application Firewalls (WAFs)
Certifications & Qualifications
ISC2 Certified in Cybersecurity (CC)CSSLPBurp Suite Certified Practitioner (BSCP)CompTIA Security+
Industry Keywords
Application SecurityArtificial Intelligence SecurityVulnerability RemediationCVE ManagementSecure Coding Best Practices
Tech Stack
Tools & technologiesCloudCyber SecurityPHP
About the role
Key responsibilities & impact- Ensure the security of Revvo’s applications and digital solutions
- Identify, analyze, classify, and track the remediation of vulnerabilities in PHP applications
- Conduct source code reviews focused on the OWASP Top 10
- Perform security testing (penetration testing) on web applications, APIs, integrations, and services
- Implement and operate SAST, DAST, and SCA tools
- Assess vulnerabilities in PHP libraries, frameworks, components, and third-party dependencies
- Support developers in implementing fixes and secure coding best practices
- Assess authentication, authorization, access control, session management, and data protection
- Integrate automated security controls into development processes and CI/CD pipelines
- Assess security risks in products that use artificial intelligence, including integrations with AI models, data exposure, prompt injection, and API misuse
- Support security incident analysis, vulnerability investigations, and the definition of preventive actions
- Assess security configurations for servers, applications, cloud services, and WAFs
- Prepare technical reports, document evidence, establish remediation priorities, and track security metrics
- Participate in architecture assessments and drive the continuous improvement of product security practices
- Respond to customer security questionnaires regarding digital products
- Partner with development teams to promote secure coding, data protection, API security, and the integration of controls throughout the development lifecycle
Requirements
What you’ll need- Bachelor’s degree in Computer Science, Software Engineering, Information Systems, Information Security, Computer Engineering, or a related field
- Relevant training in secure PHP development and web application security
- Knowledge of the OWASP Top 10 and OWASP API Security Top 10
- Knowledge of vulnerability assessment and security testing
- Knowledge of REST API security and OAuth 2.0/OpenID Connect authentication
- Knowledge of DevSecOps, Git, and security integration into CI/CD
- Knowledge of cloud security and application infrastructure
- Knowledge of security for artificial intelligence applications and LLMs
- Knowledge of dependency analysis, CVE management, and vulnerability remediation
- Solid experience in AppSec, PHP, secure architecture, and DevSecOps
- Ability to define corporate secure development standards and AppSec policies
- Proficiency in SAST, DAST, SCA, code review, and security control automation
- Advanced knowledge of cloud security, authentication, authorization, cryptography, and data protection
- Ability to assess critical vulnerabilities, support incident investigations, and define mitigation strategies
- Experience defining SSDLC processes and integrating security into the development lifecycle
- Knowledge of artificial intelligence security, including risks associated with LLMs, information leakage, prompt injection, and integrations with external services
- Ability to define security metrics, vulnerability indicators, remediation SLAs, and improvement roadmaps
- Experience providing technical guidance to developers and security professionals
- Experience with threat modeling, risk analysis, and secure architecture for applications and APIs
- Certifications such as ISC2 Certified in Cybersecurity (CC), CSSLP, Burp Suite Certified Practitioner (BSCP), CompTIA Security+, or cloud security certifications are desirable
Benefits
Comp & perks- Pharmacy benefits
- Workplace exercise program
- Discount club
- Wellhub (Gympass) membership
- Conexa healthcare benefit
- Psicologia Viva benefit
- Birthday day off
- Remote-work allowance