{"id":57388,"url":"https://alion.io/job/abcfitness-application-security-engineer-secure-sdlc","title":"Application Security Engineer (Secure SDLC)","company":{"id":19166,"name":"ABC Fitness","domain":"abcfitness.com","url":"https://alion.io/company/abcfitness","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":100,"open_postings":3,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":28,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Brazil"],"countries":["BR"],"hiring_countries":["BR"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":24000,"max_usd":69000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":528},"experience_years_min":1,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"C#","optional":false},{"name":"CI/CD","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab CI","optional":false},{"name":"Go","optional":false},{"name":"JavaScript","optional":false},{"name":"Jenkins","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP ASVS","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Python","optional":false},{"name":"STRIDE","optional":false},{"name":"TypeScript","optional":false},{"name":"Bicep","optional":true},{"name":"CloudFormation","optional":true},{"name":"CWE","optional":true},{"name":"Docker","optional":true},{"name":"GDPR","optional":true},{"name":"Ignite","optional":true},{"name":"ISO 27001","optional":true},{"name":"Kubernetes","optional":true},{"name":"LLM","optional":true},{"name":"OWASP Top 10","optional":true},{"name":"PCI DSS","optional":true},{"name":"PyTorch","optional":true},{"name":"Rest API","optional":true},{"name":"Terraform","optional":true},{"name":"Threat Modeling","optional":true}],"status":"live","first_seen_at":"2026-07-29T00:00:00Z","employer_posted_date":"2026-07-29","last_verified_at":"2026-10-17T04:01:20Z","board_verified":true,"closed_at":null,"days_open":80,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":80},"description":"Join ABC Fitness and become part of a culture that’s as ambitious as it is authentic. Let’s transform the future of fitness-together!\nOur Values\nBest Life\nWe believe great work begins with great people. That’s why our culture is built on respect, trust, and belonging. We create an inclusive environment where every team member can bring their authentic self to work-because diverse perspectives drive innovation and meaningful impact.\nGrowth Mindset\nWe are doers, thinkers, and dreamers. At ABC Fitness, your growth is our investment. Through continuous learning, mentorship, and professional development opportunities, we empower you to reach new heights-personally and professionally.\nOne Team\nFrom day one, you’ll be part of a team that collaborates, celebrates, and cares. We move fast, support one another, and have fun along the way. Because when you thrive, we all thrive.\nROLE INTRODUCTION\nAs an Application Security Engineer II, you will partner with software engineering teams to embed security throughout the software development lifecycle. You will help developers build secure applications by helping integrate security into CI/CD pipelines, improving code practices, implementing application security tooling, and supporting cloud-native security across AWS and Azure environments.\nThis role is ideal for someone with a background in software engineering, DevSecOps, cloud engineering or application security who enjoys solving security challenges through collaboration, automation, and engineering rather than offensive security testing.\nWHAT YOU'LL DO\nPartner with software engineering teams to identify, prioritize, and help remediate application security risks throughout the Secure Software Development Lifecycle (SSDLC).\n\nImplement and maintain application security tooling including SAST, DAST, Software Composition Analysis (SCA), and secret scanning within CI/CD pipelines to enable secure software delivery.\n\nSupport secure code reviews, provide secure coding guidance, and help development teams remediate identified vulnerabilities.\n\nReview penetration testing findings and work with engineering teams to prioritize, validate, and remediate identified issues.\n\nContributes to security automation, reusable security controls, and developer enablement resources to improve secure software delivery.\n\nCollaborate with DevOps teams to integrate security into CI/CD pipelines and Infrastructure as Code (IaC) workflows.\n\nAssist with application security reviews for applications deployed in AWS and Azure cloud environments, including cloud-native services, APIs, and containerized workloads.\n\nAssist in evaluating emerging technologies, including AI-enabled applications and Large Language Models (LLMs), for potential security risks.\n\nContribute to application security governance activities by contributing to secure coding standards, technical guidance, and security documentation.\n\nAssist in maintaining security monitoring, logging, and vulnerability reporting processes in collaboration with cloud operations and security teams.\n\nCollaborate with Privacy, Compliance, Legal, and IT teams on initiatives related to data protection, regulatory compliance, and application security.\n\nStay informed on emerging application security threats, vulnerabilities, and industry best practices and contribute to continuous improvement initiatives.\n\nWHAT YOU'LL NEED\nBachelor's degree in Computer Science, Information Security, or a related field, or equivalent work experience.\n\nProfessional proficiency in both Portuguese and English (written and verbal) is required.\n\n1-5 years of experience in Application Security, Software Engineering, DevSecOps, Platform Engineering or Cloud Engineering\n\nExperience applying security throughout the Secure Software Development Lifecycle (SSDLC), including secure design, code review, automated security testing, and vulnerability remediation.\n\nFamiliarity with application security testing methodologies, including SAST, DAST, Software Composition Analysis (SCA), vulnerability assessments, and basic penetration testing concepts.\n\nFamiliarity of threat modelling methodologies such as OWASP ASVS and STRIDE.\n\nBasic understanding of AWS and/or Azure cloud security concepts and cloud-native application security.\n\nFamiliarity with CI/CD pipelines and integrating security tools using platforms such as GitHub Actions, Azure DevOps, GitLab CI, Jenkins or similar.\n\nExperience developing software or the ability to read, understand, and troubleshoot code in one or more modern programming languages (Java, C#, Python, JavaScript/TypeScript, Go, etc.).\n\nExcellent analytical, problem-solving, and communication skills, with the ability to work collaboratively across cross-functional teams.\n\nRelevant industry certifications such as Security+, SSCP, CSSLP Associate, Azure Security Engineer Associate, AWS Security Specialty, or similar certifications are considered an asset\n\nWe're looking for someone who is curious, collaborative, and eager to grow their application security expertise. If you don't meet every qualification but believe you'd be a great fit, we encourage you to apply.\n\nAND IT’S GREAT TO HAVE:\nExperience supporting developer security training or security champion programs.\n\nExperience with Infrastructure as Code (Terraform, CloudFormation, Bicep).\n\nExperience with container security (Docker, Kubernetes).\n\nFamiliarity with OWASP Top 10, OWASP ASVS, CWE, and threat modeling methodologies.\n\nExperience securing AI-enabled applications or Large Language Model (LLM) integrations.\n\nContributions to open-source projects or security automation initiatives.\n\nFamiliarity with security and privacy standards such as LGPD, GDPR, PCI DSS, or ISO 27001 is desirable\n\nUnderstanding modern authentication and API security concepts (OAuth 2.0, OpenID Connect, JWT, REST API security) is desirable.\n\nFamiliarity with Kubernetes, containers, and container security concepts is desirable.\n\nWHAT WE OFFER YOU:\nA purpose-driven company committed to helping change people's lives through technology, with a values-based culture focused on Better Life (#bestlife), One Team (#oneteam), and Growth Mindset (#growthmindset).\n\n4 Days Off - once a quarter, we take a collective break and enjoy a day off together around the world. #oneteam\n\nHealth, dental, and life insurance plans.\n\nMeal allowance - to be used in supermarkets and restaurants.\n\nHome office allowance - you may need help with your internet bills.\n\nGym access subscription app.\n\nEducational partnership with great discounts at universities, English schools, and more.\n\nPayroll-deducted loan - payment directly from your salary.\n\nEAP - providing psychological, legal, and financial assistance when you need it. Always.\n\nAccess discounts with our partners, such as Dell, Microsoft, and many others.\n\nAnd more! - so many benefits we couldn't even list them all here!\n\nAt ABC Fitness, we don’t just build technology-we build communities and transform lives. Your work matters here, your growth is supported, and your voice is heard. We welcome diverse talent and encourage you to apply, even if you don’t meet every requirement.\nABC’S COMMITMENT TO DIVERSITY, EQUALITY, BELONGING AND INCLUSION: \nABC is an equal opportunity employer committed to diversity, equity, and inclusion. We strive to create a workplace where every employee, client, and partner feels valued, inspired, and empowered to reach their full potential. For us, inclusion isn’t just the right thing to do-it’s a business imperative. Learn more at abcfitness.com.\nAbout ABC Fitness\nABC Fitness is the #1 software provider for fitness businesses of any size, all around the world. Supporting 30K clubs, 650K coaches, 40M members, and processing more than $12B in payments every year, ABC Fitness provides scalable, data-driven solutions to simplify club management and engage members and clients.\nFrom personal trainers, boutique studios, and gyms, to international franchise health clubs, ABC Fitness will move your business forward through technology and industry insights. Innovation is at the center of everything we do, across ABC Glofox, ABC Ignite, ABC Trainerize, and ABC Evo. Let's make your fitness vision a seamless reality, together.\nLearn more at abcfitness.com\n#LI-REMOTE","description_format":"text","description_chars":8269,"description_truncated":false,"requirements":{"experience_years_min":1,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false},{"language":"Portuguese","level":"All levels","optional":false}]},"benefits":["Continuous learning","Equity","Home office","Life insurance","Professional development"],"hiring_locations":[{"name":"Brazil","iso":"BR","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Fitness","Club Management"],"lifecycle":[{"event":"open","at":"2026-07-29T00:00:00Z"}],"visa":[],"liveness":{"score":15,"band":"cold","label":"Long shot","p_open":1,"p_active":0.546,"p_room":0.28,"age_days":80,"expected_fill_days":28,"reasons":["conf:1","velocity","win:tail","crowd:junior"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/abcfitness-application-security-engineer-secure-sdlc","json_url":"https://alion.io/job/abcfitness-application-security-engineer-secure-sdlc.json","meta":{"generated_at":"2026-10-17T13:14:01Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17740,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":19166},"rest":"https://alion.io/mcp/rest/get_company?id=19166"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fabcfitness-application-security-engineer-secure-sdlc"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fabcfitness-application-security-engineer-secure-sdlc"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fabcfitness-application-security-engineer-secure-sdlc"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/abcfitness-application-security-engineer-secure-sdlc\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fabcfitness-application-security-engineer-secure-sdlc"}]}