Ebury is an SME-focused cross-border payments platform.
<div class="content-intro"><p>Ebury helps ambitious businesses unlock global growth, and we take the same approach with our people. We encourage innovation and movement, collaboration and problem-solving, and foster an environment where everyone can feel they belong, are valued, supported and empowered to succeed.</p> <p>If you’re a collaborator who wants to help transform how businesses operate globally, get in touch - we’d love to discuss how Ebury can accelerate your career so you can shape the future.</p></div><p><strong><u>Senior Security Engineer</u></strong></p> <p><strong>Ebury São Paulo Office - Hybrid: 4 days in the office, 1 day working from home per week</strong></p> <p><strong>Role Overview:</strong></p> <p>Ebury is rapidly expanding its footprint in Brazil, and we are looking for a Senior Security Engineer to join our São Paulo hub. As a member of the Security Engineering team, you will work closely with other engineering teams to improve the technical security of our applications, our software development lifecycle and our infrastructure. For this role, you will serve as a technical executor and auxiliary decision-maker alongside our Brazilian and global teams, and be responsible for: handling remediation projects in EBB; discovering, reviewing and prioritizing vulnerabilities; creating guardrails, guidelines and tooling to aid developers and platform engineers in delivering safe applications; and more, helping EBB achieve a high security level along all of its application and infrastructure stacks.</p> <div id="page-1" class="_kqswh2mm _bfhku67f _18u01wug _2hwx1wug" data-testid="page-0"><strong>Key Responsibilities:</strong></div> <div class="_kqswh2mm _bfhku67f _18u01wug _2hwx1wug" data-testid="page-0"> </div> <div class="_kqswh2mm _bfhku67f _18u01wug _2hwx1wug" data-testid="page-0"><strong>Hardening Efforts:</strong> Partner with other team members in Brazil to identify and remedy existing security gaps and implement the future workload for Ebury Brazil. Own the end-to-end delivery of technical security projects within the region, which involves performing technical modifications on business-critical systems. These include, for example: Backup configuration for disaster recovery efforts;</div> <div id="page-2" class="_kqswh2mm _bfhku67f _18u01wug _2hwx1wug" data-testid="page-1">IAM projects to centralize system authentication, guarantee RBAC usage; Modification of existing systems and technologies to meet recommended security best practices.</div> <div class="_kqswh2mm _bfhku67f _18u01wug _2hwx1wug" data-testid="page-1"> </div> <div class="_kqswh2mm _bfhku67f _18u01wug _2hwx1wug" data-testid="page-1"><strong>Vulnerability Lifecycle assistance: </strong>Aid in the implementation and maintenance of vulnerability discovery systems. Evaluate and enrich discovered vulnerabilities, ensuring responsible teams have the necessary guidance to fix them.</div> <div class="_kqswh2mm _bfhku67f _18u01wug _2hwx1wug" data-testid="page-1"> </div> <div class="_kqswh2mm _bfhku67f _18u01wug _2hwx1wug" data-testid="page-1"><strong>Regional Cloud Infrastructure Hardening:</strong> Design and implement security controls for our GCP and AWS footprints in the South America (São Paulo) regions, meeting best practices for network segmentation, IAM, and encryption.</div> <div class="_kqswh2mm _bfhku67f _18u01wug _2hwx1wug" data-testid="page-1"> </div> <div class="_kqswh2mm _bfhku67f _18u01wug _2hwx1wug" data-testid="page-1"><strong>Brazilian Regulatory & Compliance Alignment: </strong>As necessary, handle technical efforts to ensure compliance with local regulations, including LGPD (Lei Geral de Proteção de Dados) and BACEN (Central Bank of Brazil) security requirements.</div> <div class="_kqswh2mm _bfhku67f _18u01wug _2hwx1wug" data-testid="page-1"> </div> <div class="_kqswh2mm _bfhku67f _18u01wug _2hwx1wug" data-testid="page-1"><strong>Technical Guidance:</strong> Help promote a strong security culture within the local Engineering and Product squads, advocating for DevSecOps practices across the Brazilian tech stack with a strong focus on developer experience through security tooling and technical documentation.</div> <div class="_kqswh2mm _bfhku67f _18u01wug _2hwx1wug" data-testid="page-1"> </div> <div class="_kqswh2mm _bfhku67f _18u01wug _2hwx1wug" data-testid="page-1"><strong>About the Candidate </strong></div> <div class="_kqswh2mm _bfhku67f _18u01wug _2hwx1wug" data-testid="page-1"> </div> <div class="_kqswh2mm _bfhku67f _18u01wug _2hwx1wug" data-testid="page-1"> <ul> <li>You are a seasoned security professional with deep technical expertise and a history of tackling technical projects from end-to-end, delivering tangible results without unnecessarily impacting uptime or performance.</li> <li>You have an excellent understanding of cybersecurity fundamentals, while also having a general grasp on important concepts from software and platform engineering.</li> <li>You think holistically about security, from low-level network protocols to high level data privacy regulations.</li> <li>You communicate effectively in both English and Portuguese, within and outside of security, translating complex security concepts for technical and non-technical stakeholders.</li> </ul> <div id="page-2" class="_kqswh2mm _bfhku67f _18u01wug _2hwx1wug" data-testid="page-1"><strong>Experience and Qualifications </strong></div> <div class="_kqswh2mm _bfhku67f _18u01wug _2hwx1wug" data-testid="page-1"> </div> <div class="_kqswh2mm _bfhku67f _18u01wug _2hwx1wug" data-testid="page-1"><strong>Required: </strong></div> <div class="_kqswh2mm _bfhku67f _18u01wug _2hwx1wug" data-testid="page-1"> <ul> <li>5+ years of experience in security engineering.</li> <li>Solid understanding of network security, identity management (IAM), operating systems and other cybersecurity fundamentals.</li> <li>Deep technical expertise in GCP, AWS or other cloud providers.</li> <li>Knowledge of Infrastru