{"id":1138917,"url":"https://alion.io/job/legrand-north-america-security-engineer-iii","title":"Security Engineer III","company":{"id":1052962,"name":"Legrand Canada","domain":"legrand.ca","url":"https://alion.io/company/legrand-ca","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"A","score":88,"open_postings":6,"ghost_share":0,"stale_share":0.5,"repost_share":0,"time_to_fill_p50_days":41,"computed_at":"2026-10-31T05:58:55Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Blumenau, Brazil"],"countries":["BR"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":34000,"max_usd":82000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":854},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"CVE","optional":false},{"name":"ISO 27001","optional":false},{"name":"SBOM","optional":false},{"name":"SOC 2","optional":false},{"name":"Threat Modeling","optional":false},{"name":"ArgoCD","optional":true},{"name":"GCP","optional":true},{"name":"GitHub Actions","optional":true},{"name":"GitLab CI","optional":true},{"name":"Go","optional":true},{"name":"Jenkins","optional":true},{"name":"Kubernetes","optional":true},{"name":"MITRE ATT&CK","optional":true},{"name":"NIST CSF","optional":true},{"name":"OWASP","optional":true},{"name":"OWASP ASVS","optional":true},{"name":"OWASP Top 10","optional":true},{"name":"PKI","optional":true},{"name":"Python","optional":true},{"name":"STRIDE","optional":true}],"status":"live","first_seen_at":"2026-08-11T20:37:08Z","employer_posted_date":"2026-08-11","last_verified_at":"2026-10-31T05:31:49Z","board_verified":true,"closed_at":null,"days_open":80,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":80},"description":"At a Glance\nLegrand has an exciting opportunity for a Security Engineer III to join the ZPE Systems Team in Blumenau, BR.\nWe are seeking a Security Engineer III to drive application and product security across the ZPE Cloud and Nodegrid product lines. Based in Blumenau and working with engineering teams in Brazil, the United States, and Europe, this role embeds security into the software development lifecycle, facilitates threat modeling and secure design review, and works directly with development teams to identify and remediate vulnerabilities before they reach customers. The primary focus is cloud and web application security, with growing exposure to embedded product security.\n Main Responsibilities:\nApplication & Product Security\nConduct security code reviews and provide practical remediation guidance to development teams\nBuild out, tune, and maintain the SAST, DAST, SCA, and secrets scanning toolchain within CI/CD pipelines\nTriage vulnerability findings, assign severity, and drive remediation to closure with owning teams\nDevelop secure coding guidelines, reusable patterns, and developer security training material\nManage software supply chain risk, including SBOM generation and CVE triage and response\nScope and coordinate third-party penetration tests; perform targeted internal assessments\nSecure Design & Architecture\nFacilitate threat modeling for new features, services, and system designs\nPerform security design reviews and document mitigations and accepted risks\nDevelop and maintain security reference architectures and reusable design patterns for product teams\nContribute to the design of authentication, authorization, and secrets management for product services\nDefine encryption and key management requirements for product data at rest and in transit\nEvaluate and recommend application and cloud security tooling\nCompliance Support\nImplement and evidence the technical controls required by ISO 27001, SOC 2, and the EU Cyber Resilience Act\nProvide technical input to customer security questionnaires and RFI/RFP responses\nLeadership & Collaboration\nMentor engineers on secure development practices and help establish a security champions program\nContribute to the product security roadmap with Product and Engineering leadership\nAct as the security point of contact in design and architecture discussions\nConduct regular Knowledge Sharing Sessions (KSS) on security topics and emerging threats\nCommunicate effectively across Brazil, US, and EU time zones, in English, written and verbal\n Profile:\n5+ years in security engineering or software engineering, with at least 2 years focused on application or product security\nProfessional working proficiency in English, written and spoken, sufficient for customer-facing documentation and cross-region collaboration; fluent Portuguese\nDemonstrated experience performing security code review across more than one language\nProven experience integrating and tuning security tooling within CI/CD pipelines\nExperience with threat modeling and secure design review\nFamiliarity with at least one major compliance framework (ISO 27001 or SOC 2) from a control implementation perspective\nExperience producing technical security documentation for internal and customer audiences\nAvailability for occasional international travel\nDesirable (not required)\nExperience helping establish or mature an application security practice\nExperience with embedded or hardware product security: secure boot, TPM, firmware signing, SBOM\nFamiliarity with EU Cyber Resilience Act, FIPS 140-3, or Common Criteria obligations\nCertifications such as CompTIA Security+, CISSP, OSCP, CKS, or a cloud security certification; sponsorship available\nContributions to open-source security projects, security research, or conference speaking\nSkills/Knowledge/Abilities:\nTechnical Skills\nReading and reviewing application code in Go, Python, or similar; scripting for security automation\nCloud security controls and architecture on at least one major provider; GCP preferred\nApplication authentication and authorization: OAuth 2.0, OIDC, SAML, RBAC\nApplied cryptography: TLS, encryption, hashing, PKI, certificate and key management\nContainer and Kubernetes security, IaC scanning, and policy as code\nCI/CD platforms such as GitLab CI, Jenkins, GitHub Actions, or ArgoCD\nPractical experience with SAST, DAST, SCA, and secrets scanning tooling\nKnowledge Areas\nOWASP Top 10, OWASP ASVS, and common web and API vulnerability classes\nThreat modeling frameworks: STRIDE, PASTA, MITRE ATT&CK\nSecure SDLC practices and DevSecOps methodologies\nSoftware supply chain security: SBOM, dependency management, CVE triage\nSecurity compliance and regulatory requirements: NIST CSF, CIS Controls, ISO 27001, SOC 2, LGPD\nAbilities\nExplain complex security concepts clearly to technical and non-technical audiences\nInfluence engineering teams and drive remediation without direct authority\nBalance security requirements against business needs and delivery timelines\nWork autonomously across distributed teams and time zones with strong ownership","description_format":"text","description_chars":5070,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"Portuguese","level":"Advanced (C1)","optional":false},{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"Germany","iso":"DE","kind":"region"},{"name":"France","iso":"FR","kind":"region"},{"name":"United Kingdom","iso":"GB","kind":"region"},{"name":"Austria","iso":"AT","kind":"region"},{"name":"Belgium","iso":"BE","kind":"region"},{"name":"Brazil","iso":"BR","kind":"country"},{"name":"Bulgaria","iso":"BG","kind":"region"},{"name":"Croatia","iso":"HR","kind":"region"},{"name":"Czech Republic","iso":"CZ","kind":"region"},{"name":"Denmark","iso":"DK","kind":"region"},{"name":"Finland","iso":"FI","kind":"region"},{"name":"Hungary","iso":"HU","kind":"region"},{"name":"Ireland","iso":"IE","kind":"region"},{"name":"Italy","iso":"IT","kind":"region"},{"name":"Netherlands","iso":"NL","kind":"region"},{"name":"Norway","iso":"NO","kind":"region"},{"name":"Poland","iso":"PL","kind":"region"},{"name":"Romania","iso":"RO","kind":"region"},{"name":"Spain","iso":"ES","kind":"region"},{"name":"Sweden","iso":"SE","kind":"region"},{"name":"Switzerland","iso":"CH","kind":"region"},{"name":"Estonia","iso":"EE","kind":"region"},{"name":"Greece","iso":"GR","kind":"region"},{"name":"Iceland","iso":"IS","kind":"region"},{"name":"Latvia","iso":"LV","kind":"region"},{"name":"Liechtenstein","iso":"LI","kind":"region"},{"name":"Lithuania","iso":"LT","kind":"region"},{"name":"Luxembourg","iso":"LU","kind":"region"},{"name":"Malta","iso":"MT","kind":"region"},{"name":"Portugal","iso":"PT","kind":"region"},{"name":"Slovakia","iso":"SK","kind":"region"},{"name":"Slovenia","iso":"SI","kind":"region"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Electrical Equipment & Cables","Building Automation & Controls"],"lifecycle":[{"event":"open","at":"2026-09-23T09:33:42Z"}],"visa":[],"liveness":{"score":23,"band":"cold","label":"Long shot","p_open":1,"p_active":0.649,"p_room":0.36,"age_days":80,"expected_fill_days":41,"reasons":["conf:0","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-31T05:58:55Z"},"pay":null,"html_url":"https://alion.io/job/legrand-north-america-security-engineer-iii","json_url":"https://alion.io/job/legrand-north-america-security-engineer-iii.json","meta":{"generated_at":"2026-10-31T14:40:54Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":22862,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1052962},"rest":"https://alion.io/mcp/rest/get_company?id=1052962"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Flegrand-north-america-security-engineer-iii"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Flegrand-north-america-security-engineer-iii"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Flegrand-north-america-security-engineer-iii"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/legrand-north-america-security-engineer-iii\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Flegrand-north-america-security-engineer-iii"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1138917}},{"tool":"search_jobs","arguments":{"company":"legrand.ca","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1138917},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}