Cybersecurity Engineer

We are looking for a Senior Cybersecurity Engineer to join the team of one of our international clients.

The main objective of this role is to conduct ongoing cybersecurity assessments of the company's products, ensuring compliance with cybersecurity standards, technical controls, and best practices while supporting engineering teams in delivering secure, high-quality products.

Main responsibilities:

Conduct cybersecurity assessments, including threat modeling and application security reviews.

Evaluate products for Cybersecurity Authorization to Operate (CATO) based on company policies and security standards.

Review source code, vulnerability reports, and security scans to identify risks and recommend remediation.

Support engineering teams in threat and risk assessments to identify attack surfaces and potential vulnerabilities.

Provide technical guidance on secure software design, hardening strategies, and risk mitigation.

Collaborate with cross-functional teams to improve product security across cloud, embedded, and connected environments.

Support root cause analysis and corrective actions related to cybersecurity findings.

Develop and deliver cybersecurity training for engineers, managers, and other stakeholders.

Create and maintain security documentation, procedures, and technical guidelines.

Communicate cybersecurity concepts effectively to both technical and non-technical audiences.

Requirements:

Proven experience as a Cybersecurity Engineer, Application Security Engineer, or similar role.

Advanced English proficiency (required).

6+ years of experience in cybersecurity engineering, application security, or software development.

Strong coding background with experience reviewing source code.

Hands-on experience with:

Threat Modeling

Application Security Assessments

Vulnerability Analysis and Remediation

Experience working with cloud security and containerized environments.

Strong documentation and technical communication skills.

Nice to have:

Knowledge of IEC 62443-4-1 and IEC 62443-4-2 cybersecurity standards.

Experience with embedded or industrial systems security.

Experience with connected vehicle security and real-time operating systems (RTOS).

Industry experience in Railroad (preferred), Mining, or Automotive.

Experience across both cloud security and embedded security environments.

Soft skills:

Strong communication skills.

Accountability and ownership.

Self-starter with a proactive mindset.

Analytical thinking and problem-solving abilities.

Ability to collaborate with multidisciplinary teams.

Location: Contagem, Minas Gerais, Brazil

Work mode: 100% On-site

Position: Full-time

If you are interested in this opportunity, feel free to share your CV with us.