{"id":172742,"url":"https://alion.io/job/ebanx-application-security-specialist-appsec","title":"Application Security Specialist | AppSec","company":{"id":60866,"name":"EBANX","domain":"ebanx.com","url":"https://alion.io/company/ebanx","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":86,"open_postings":11,"ghost_share":0,"stale_share":0.545,"repost_share":0,"time_to_fill_p50_days":59,"computed_at":"2026-10-21T05:46:15Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Curitiba, Brazil"],"countries":["BR"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"GraphQL","optional":false},{"name":"HashiCorp Vault","optional":false},{"name":"Java","optional":false},{"name":"Node JS","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"Threat Modeling","optional":false},{"name":"JavaScript","optional":true},{"name":"OWASP","optional":true}],"status":"live","first_seen_at":"2026-03-10T13:22:11Z","employer_posted_date":"2026-09-17","last_verified_at":"2026-10-21T07:42:52Z","board_verified":true,"closed_at":null,"days_open":224,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":224},"description":"EBANX is one of the most successful fintechs to emerge from Latin America - and today, we are building a truly global payments company. Our mission has remained constant from day one: to unlock access and enable companies and consumers to participate in the digital economy, no matter where they are.\nWhat started as a bold vision has grown into a platform that connects some of the world’s largest digital businesses with customers across 21 of the fastest-growing markets. We operate where complexity exists - turning local challenges into global opportunities, and building the infrastructure that allows payments to move further, faster, and smarter.\nWe are a team of builders and problem-solvers. We think globally, act with curiosity, and believe diversity of thought is a competitive advantage.\nAs EBANX enters its next phase of hyper growth, we are looking for people who want to shape the future of payments, expand what’s possible, and help connect businesses and consumers across borders.\nLet’s build what’s next - together.\nAt EBANX’s IT team you don’t just manage systems and infrastructure. You ensure that our technology, which connects millions of people to global companies, runs flawlessly every day. Here, every solution you create has a direct impact on the revolution of digital payments, making our work truly Out Of The Ordinary.\nWhat your day-to-day will look like\nLead the AppSec strategy and technical mentorship,guiding Junior,Mid-level,and Senior analysts in performing deep-dive security assessments and complex remediation;\nArchitect and oversee Threat Modeling sessionsacross diverse product squads to identify architectural flaws and security requirements early in the design phase;\nDrive global security projectsand communicate risk effectively in English to international stakeholders,ensuring that security initiatives align with business velocity;\nManage the lifecycle of security vulnerabilitiesdiscovered through SAST, DAST, and SCA,providing actionable insights and polyglot code-fix guidance to engineering teams.\nWhat you need to shine in this role\nDeep expertise in the AppSec Tooling ecosystem, including hands-on experience configuring and tuning SAST (Static Analysis), DAST (Dynamic Analysis), and SCA (Software Composition Analysis) within CI/CD pipelines;\nStrong command of API Security and Secret Management, with a proven track record of securing REST/GraphQL APIs and implementing robust policies for tokens, certificates, and secrets (e.g., HashiCorp Vault, AWS Secrets Manager);\nMulti-language coding proficiency, capable of reviewing and securing code across various stacks (such as Java, Python, Go, Node.js, or .NET) to support diverse development teams;\nAdvanced to Fluent English communication, enabling you to lead technical discussions, document global standards, and collaborate with distributed teams worldwide.\nBonus points if you have\nAdvanced Security Certifications such as OSWE, CASE, CSSLP, or CISSP, demonstrating a high level of professional dedication;\nExperience automating custom security \"guardrails\" or building internal tools to automate the triaging of secrets and vulnerabilities at scale;\nActive participation in the security community, whether through Bug Bounty programs, open-source security projects, or speaking at conferences like OWASP Global AppSec.\nEBANX offers:\nPerformance Bonus: Annual bonus program based on company results.\nMeal Allowance: Monthly allowance to support your meals.\nEBANX Education: Financial assistance for undergraduate, graduate, and MBA programs to support your professional growth.\nEBANX Skills: Dedicated budget for courses, certifications, and workshops to encourage continuous learning.\nLanguage Classes: Language classes to support your personal and professional development.\nHealth & Well-being: Medical and dental plans with extensive coverage, including support for dependents and wellness programs.Flexible Work Culture: Semi-flexible hours, additional day off on your birthday, and year-end break to support work-life balance.\n\nWell-being Program: Access to activities and resources that promote physical and mental health.\nLearn more about our #ebanxlife on LinkedIn and Instagram, and see what it’s like to be part of a global team that breaks barriers, creates opportunities, and celebrates every achievement together.\nAn Out Of The Ordinary career is waiting for you here!","description_format":"text","description_chars":4398,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"master","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Continuous learning","Flexible schedule","Professional development","Wellness"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Payment Processing & Gateways","Currency Exchange & FX Payments"],"lifecycle":[{"event":"open","at":"2026-08-30T02:57:46Z"}],"visa":[],"liveness":{"score":5,"band":"cold","label":"Long shot","p_open":1,"p_active":0.17,"p_room":0.28,"age_days":224,"expected_fill_days":59,"reasons":["conf:1","stale_co","velocity","win:tail","crowd:"],"computed_at":"2026-10-21T05:46:15Z"},"pay":null,"html_url":"https://alion.io/job/ebanx-application-security-specialist-appsec","json_url":"https://alion.io/job/ebanx-application-security-specialist-appsec.json","meta":{"generated_at":"2026-10-21T07:46:55Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10991,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":60866},"rest":"https://alion.io/mcp/rest/get_company?id=60866"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Febanx-application-security-specialist-appsec"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Febanx-application-security-specialist-appsec"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Febanx-application-security-specialist-appsec"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ebanx-application-security-specialist-appsec\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Febanx-application-security-specialist-appsec"}]}