X

XP

Democratiza investimentos com agentes autônomos

Application Security Architecture Specialist

Security Engineering & ArchitectureConfirmed live in the last 24 hours
Full-timeSão Paulo, State of São Paulo, BrazilNo salary listed

About the Job

Requirements

  • Solid experience in Application Security, defining secure architectures throughout the Software Development Lifecycle.
  • Experience with Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and secret-scanning tools and processes.
  • Strong knowledge of application-security references including the OWASP Top 10 and OWASP Application Security Verification Standard (ASVS).
  • Ability to translate security risks into actionable technical requirements for development and platform teams.
  • Experience with Security by Design in cloud-native environments, including containers, Kubernetes, and serverless; Azure experience is preferred.
  • Experience leading Security Champions programs.

Responsibilities

  • Define application-security architecture by establishing standards, guardrails, and secure libraries for adoption by development squads.
  • Structure and evolve the AppSec program, including Security Gate policies, vulnerability management using SAST, DAST, and SCA, and maturity metrics.
  • Conduct architecture and design reviews focused on API security, authentication and authorization, encryption, and sensitive-data protection.
  • Collaborate with DevOps and engineering teams to integrate security into CI/CD pipelines through automation and low-friction shift-left practices.
  • Guide developers through guidelines, training, and code reviews focused on secure-coding practices.
  • Stay current on emerging vulnerabilities, critical CVEs, new attack techniques, and software-security trends.

Desired Qualifications

  • Experience in Application Security within financial services, including BACEN, CVM, and PCI-DSS regulation.
  • Experience defining Security Gates in CI/CD pipelines using GitHub Actions, Azure DevOps, or Jenkins.
  • Knowledge of security applied to artificial-intelligence solutions and LLM applications.
  • Experience with SOX (Sarbanes-Oxley) and PQO (Operational Qualification Program) audits.
  • Relevant certifications such as CSSLP, CEH, or AWS/Azure Security Specialty.
  • Advanced English for communication with partners, suppliers, and global security communities.

About the Company

XP

Democratiza investimentos com agentes autônomos

XP helps people access and improve their financial lives by offering investment services that challenge the dominance of big banks. Since 2001, starting as a small group of autonomous investment agents in Porto Alegre, the company has grown through a culture of Big Dream, Open Mind, and Entrepreneurial Spirit, giving its team autonomy to reshape the financial market. The product suite focuses on empowering individuals with investment options and guidance that aim to broaden access beyond the 95% market share held by large banks in Brazil. XP’s goal is to expand financial opportunity for many people by creating a different kind of financial system that serves more customers rather than a few dominant institutions.

Company size
5,001-10,000
Company stage
IPO
Headquarters
São Paulo, Brazil
Founded
2001

Recently Posted Jobs

Explore more opportunities at XP

See more jobs