Application Security Engineer

Description

Kenvue is currently recruiting for:

Application Security Engineer

This role is based in Brazil, part of a global team, and reports to the Director, Application & Cloud Security & xDLC.

Who We Are

At Kenvue, we realize the extraordinary power of everyday care.

Built on over a century of heritage and rooted in science, we're the house of iconic brands - including NEUTROGENA®, AVEENO®, TYLENOL®, LISTERINE®, JOHNSON'S® and BAND-AID® that you already know and love.

Science is our passion; care is our talent.

Our global team is made up of 22,000 diverse and brilliant people, passionate about insights, innovation and committed to deliver the best products to our customers.

With expertise and empathy, being a Kenvuer means to have the power to impact life of millions of people every day.

We put people first, care fiercely, earn trust with science and solve with courage - and have brilliant opportunities waiting for you! Join us in shaping our future-and yours.

What You Will Do

As an Application Security Engineer, you will be safeguarding digital assets and data through advanced cybersecurity solutions and processes.

We are seeking a highly motivated and talented Application Security Senior Engineer to join our dynamic team.

If you have a passion for identifying and mitigating security risks in applications, working with developers, we invite you to apply and be a part of our dedicated cybersecurity workforce.

Key Responsibilities:

• Conduct comprehensive architecture security reviews of applications to identify vulnerabilities and weaknesses.

• Secure cloud-native services, including container orchestration platforms like Kubernetes.

• Maintain and operate various security tools SAST, DAST, CWPP, CSPM, SSPM, CASB...

• Perform penetration testing, code reviews, and vulnerability scanning to ensure the security of web and mobile applications.

• Collaborate with development teams to provide guidance on secure coding practices and assist in the remediation of identified security issues, or misconfigurations.

• Develop and maintain security standards, policies, procedures, work instructions and requirements related to application security.

• Stay current with the latest security trends, threats, and vulnerabilities affecting application security.

• Participate in incident response and security incident investigations related to application security.

• Work closely with cross-functional teams to integrate security into the technology development lifecycle.

• Automate vulnerability scanning, and compliance checks into development workflows.

• Proficiency in cloud eco-systems such as AWS, GCP or Azure.

• Knowledge of DNS and IP management

• Develop, maintain and run security automation scripts using languages such as python or other software and scripting languages.

• Knowledge of source code systems such as Bitbucket or GitHub.

What We Are Looking For

Required Qualifications

• Bachelor'...