Product Security Engineer (Remote) (Fluent in English)

Brazilmid

Product Security EngineerCybersecurity

0 views0 saves0 applied

Apply Now

Quick Summary

Key Responsibilities

Application Security Testing & Pentesting: Conduct automated and manual security assessments and penetration tests across web, mobile, and traditional applications.

Requirements Summary

Experience in Application Security, Penetration Testing, or Red Teaming. Pentesting Expertise: Strong hands-on experience with both automated and manual web, mobile,

Technical Tools

Product Security EngineerCybersecurity

KnowBe4 empowers the modern workforce to make smarter security decisions every day. Trusted by more than 70,000 organizations worldwide, KnowBe4 is the pioneer of digital workforce security, securing both AI agents and humans. The KnowBe4 Platform provides attack simulation and training, collaboration security, and agent security powered by AIDA (Artificial Intelligence Defense Agents) and a proprietary Risk Score. The platform leverages 15-years of behavioral data to combat advanced threats including social engineering, prompt injection, and shadow AI. By securing humans and agents, KnowBe4 leads the industry in workforce trust and defense.

Please submit your resume in English.

Responsibilities

~1 min read

→Application Security Testing & Pentesting: Conduct automated and manual security assessments and penetration tests across web, mobile, and traditional applications.
→Code Security Reviews: Analyze source code across multiple programming languages to identify vulnerabilities and guide remediation before and after production deployment.
→Vulnerability Triage & Remediation: Work closely with engineering teams to assess, prioritize, and resolve application vulnerabilities.
→Threat Modeling & Automation: Maintain threat models and build security automations to streamline security testing workflows.
→Security Engagement: Partner with product and development teams to embed secure coding practices throughout the software development lifecycle (SDLC).

Requirements

~1 min read

Experience in Application Security, Penetration Testing, or Red Teaming.
Pentesting Expertise: Strong hands-on experience with both automated and manual web, mobile, and traditional application pentesting
Code Comprehension: Proven ability to read and analyze source code in multiple languages (such as Ruby, PHP, Go, JavaScript, or Python)
Security Fundamentals: Broad understanding of web application vulnerabilities (e.g., OWASP Top 10, CWE) and core information security concepts
Language & Communication: Strong technical English communication skills (written and spoken) to collaborate smoothly across international teams
Cultural Fit: Collaborative, open mindset with a strong focus on teamwork and positive team dynamics

Nice to Have

~1 min read

Experience with cloud computing environments (AWS, Terraform)
Familiarity with security tools (e.g., Burp Suite, SAST/DAST, dependency scanning)
Experience with Python scripting or leveraging AI tools in security workflows
Relevant industry certifications (e.g., OSCP, OSWE, GPEN, CISSP)

What We Offer

~1 min read

We offer company-wide bonuses based on monthly sales targets, employee referral bonuses, adoption assistance, tuition reimbursement, certification reimbursement, and certification completion bonuses - all in a modern, high-tech, and fun work environment. For more details about our benefits in each office location, please visit www.knowbe4.com/careers/benefits.

Note: An applicant assessment and background check may be part of your hiring procedure.

No recruitment agencies, please.