{"id":3567585,"url":"https://alion.io/job/ciklum-senior-application-security-engineer","title":"Senior Application Security Engineer","company":{"id":181259,"name":"Ciklum","domain":"ciklum.com","url":"https://alion.io/company/ciklum","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"inferred_payroll_markers","remote_working_hours":{"label":"US time zones","utc_offset_min":-8,"utc_offset_max":-5},"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["BR"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":101000,"max_usd":209000,"period":"year","method":"global_role_seniority_cell","sample_n":2372},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"Go","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false}],"status":"live","first_seen_at":"2026-10-13T11:57:17Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-11-01T16:03:52Z","board_verified":true,"closed_at":null,"days_open":19,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":19},"description":"Ciklum is looking for a Senior Application Security Engineer to join our team full-time in Brazil.\nWe are a custom product engineering company that supports both multinational organizations and scaling startups to solve their most complex business challenges. With a global team of over 4,000 highly skilled developers, consultants, analysts and product owners, we engineer technology that redefines industries and shapes the way people live.\nAbout the role:\nAs a Senior Application Security Engineer, become a part of a cross-functional development team engineering experiences of tomorrow.\nYou will be responsible for fixing application security issues hands-on, not just reporting them. You will read the code, write the fix, and open the PR. Alongside remediation, you will deploy, configure, and tune our SAST and SCA tooling across our CI/CD pipelines and repositories, triage findings from scanners and penetration tests, and drive them to closure together with the engineering teams that own the code. You will also review pull requests and designs for security issues and help build practical secure coding guidance for developers.\nThis is a developer-facing role rather than a ticket-filing one, so the ideal candidate is a software engineer who moved into security, or a security engineer who never stopped writing production code. You should be comfortable working in Python and Go, able to explain a finding in plain language to the developer who needs to act on it, and happy to operate the security tooling yourself rather than only consuming its output.\nResponsibilities:\nRemediate application security findings hands-on: read the code, write the fix, open the PR. This is a dev-facing role, not a ticket-filing role\nDeploy, configure, and tune SAST and SCA tooling in our CI/CD pipelines and repos, including rule tuning and false positive cleanup\nTriage findings from SAST, SCA, and pen tests, prioritize them, and drive them to closure with engineering teams\nReview PRs and designs for security issues and help build secure coding guidance for developers\nRequirements:\nSoftware development background in Python and Go. Must be comfortable writing production code and opening PRs\nHands-on AppSec experience, especially vulnerability remediation (OWASP Top 10, dependency vulns, secrets, auth/session issues)\nDirect experience deploying and operating SAST and SCA tools in CI/CD, not just consuming their output\nWorks well with developers and can explain findings in plain language\nAvailable during US business hours\nDesirable:\nHealthcare or other regulated-industry experience\nWhat’s in it for you?\nCare: your mental and physical health is our priority. We ensure comprehensive company-paid medical insurance and mental health programs, 5 undocumented sick-leave days per year\nTailored education path: boost your skills and knowledge with our regular internal events (meetups, conferences, workshops), Udemy license, language courses and company-paid certifications\nGrowth environment: share your experience and level up your expertise with a community of skilled professionals, locally and globally\nLong-term employment with 20 working-days paid vacation and local bank holidays\nFlexibility: 100% remote work mode\nOpportunities: we value our specialists and always find the best options for them. Our Internal Mobility Program helps change a project if needed to help you grow, excel professionally and fulfill your potential\nGlobal impact: work on large-scale projects that redefine industries with international and fast-growing clients\nWelcoming environment: feel empowered with a friendly team, open-door policy, informal atmosphere within the company and regular team-building events\nAbout us:\nAt Ciklum, we are always exploring innovations, empowering each other to achieve more, and engineering solutions that matter. With us, you’ll work with cutting-edge technologies, contribute to impactful projects, and be part of a One Team culture that values collaboration and progress.\nAs we expand into Latin America, every Ciklumer is helping to shape our story. Collaborate with seasoned experts and make a global impact backed by two decades of industry leadership.\nExplore, empower, engineer with Ciklum!\nInterested already? We would love to get to know you! Submit your application. We can’t wait to see you at Ciklum.","description_format":"text","description_chars":4343,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Health insurance"],"hiring_locations":[{"name":"Brazil","iso":"BR","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","IT Outsourcing & Dedicated Teams","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-10-31T12:55:39Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"evidence":"Licensed UK visa sponsor (Senior or Specialist Worker, Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Global Business Mobility: Senior or Specialist Worker; Skilled Worker","cap_exempt":false,"checked_at":"2026-10-31T06:23:40+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":59,"band":"ok","label":"Likely open","p_open":1,"p_active":0.787,"p_room":0.75,"age_days":18,"expected_fill_days":22,"reasons":["conf:2","velocity","win:late","comp:brand"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/ciklum-senior-application-security-engineer","json_url":"https://alion.io/job/ciklum-senior-application-security-engineer.json","meta":{"generated_at":"2026-11-01T21:31:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":32820,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":181259},"rest":"https://alion.io/mcp/rest/get_company?id=181259"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fciklum-senior-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fciklum-senior-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fciklum-senior-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ciklum-senior-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fciklum-senior-application-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3567585}},{"tool":"search_jobs","arguments":{"company":"ciklum.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3567585},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}