Information Security Consultant

MTP Brasil

. Partner with technology delivery teams to ensure security is incorporated from the design phase.

Posted 9/22/2026full-timeRemote • BrazilMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Application Security, Cloud Infrastructure, and secure software development practices, with a strong focus on risk assessment and vulnerability remediation. Proficient in collaborating with cross-functional teams to implement security best practices and compliance standards.

Highest-signal resume keywords

Application Security EngineeringCloud InfrastructureSource Code Analysis ToolsOWASP Top 10Application Architecture Patterns

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Software DevelopmentSoftware ArchitectureSoftware QAVulnerability IdentificationMitigation StrategiesRisk AssessmentSecure Design PracticesCode ReviewsPenetration TestingContainer-Based Deployment

Soft Skills

Business AcumenCollaborationCommunication

Tools & Technologies

MetasploitBurp SuiteJenkinsCI/CDAzureAWSGCP

Certifications & Qualifications

ISO 27002:2005/2013

Industry Keywords

Information Security PolicyNISCybersecurity OperationsIdentity and Access ManagementData Protection

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud PlatformJenkins

About the role

Key responsibilities & impact

Partner with technology delivery teams to ensure security is incorporated from the design phase.
Engage with development teams to guide them on secure design practices and compliance with the Information Security Policy.
Champion the use of security best practices (NIS) and approved tools.
Conduct security reviews as part of the Application Readiness Review (ARR) process.
Provide consulting on a range of information security topics.

Requirements

What you’ll need

Experience in software development areas, such as Software Development, Architecture, Software QA, or Application Security Engineering.
Experience with Cloud Infrastructure.
Experience with commercial source code analysis tools (Source Code Analysis/Static Application Security Testing).
Strong understanding of application architecture patterns (MVC, Microservices, Event-Driven, etc.).
Strong business acumen and the ability to work with development, QA, and security teams.
Knowledge of the OWASP Top 10.
Hands-on software development experience (web, mobile, and multiple programming languages).
Understanding of source code vulnerability remediation processes.
Ability to identify risk and acceptance factors that impact business and security decisions.
Ability to analyze application security vulnerabilities and implement mitigation strategies.
Experience with scanning tools, code reviews, and vulnerability identification processes.
Ability to assess mitigation plans based on current vulnerabilities, threats, and security recommendations.
Knowledge of effective controls in Application Security, Cloud & Hosting, Identity and Access Management, Data Protection, Connectivity, Endpoint Security, and Cybersecurity Operations.
Familiarity with the ISO 27002:2005/2013 information security standard.
Knowledge of cloud application architecture and container-based deployment.
Advanced/Fluent English.
Preferred: knowledge of and interest in Agile, XP, Scrum, and Kanban.
Preferred: understanding of User Story-based TDD.
Preferred: familiarity with CI/CD.
Preferred: knowledge of Azure, AWS, and GCP.
Preferred: familiarity with Metasploit, Burp Suite, Fuzzing, and Jenkins.
Preferred: experience with code reviews and penetration testing (pentests).

Benefits

Comp & perks

Health insurance
Dental insurance
Meal voucher
Mobility allowance
Culture voucher
Education allowance
Life insurance
Mental health and well-being program
Childcare assistance
Partner discounts
Remote work model
CLT employment contract