Your browser does not support javascript! Please enable it, otherwise web will not work for you.

Product Security Engineer

Home > Ruby programming jobs

Product Security Engineer in Others

  • KnowBe4
  • Full time
  • Email
  • São Paulo, Brazil

Responsibilities

  • Conduct security assessments and code reviews to identify vulnerabilities and support compliance with security standards.
  • Develop and maintain product threat models and risk management strategies.
  • Integrate security practices into the software development lifecycle and advise engineering teams on secure application and product design.
  • Identify, assess, triage, and coordinate remediation of product vulnerabilities.
  • Implement and maintain product security tools and automation systems.
  • Participate in incident response activities related to products.
  • Provide secure coding and product security training and guidance to development teams.
  • Ensure products comply with applicable security standards and regulations.
  • Collaborate with engineering, product management, IT, and other teams to incorporate security into product development and deployment.
  • Develop and enforce security policies and procedures for product development and maintenance.

Requirements

  • Bachelor’s degree in information security, information systems, or a similar field, or similar experience; the degree is preferred.
  • Relevant information technology and information security experience.
  • Experience with AWS and Terraform.
  • Broad exposure to cloud infrastructure, systems analysis, application development, vulnerability scanning, security policies and procedures, and audits.
  • Experience with cloud computing environments, infrastructure as code, containers, and functions.
  • Strong knowledge of CWE Top 25, OWASP Top 10, and the MITRE ATT&CK matrix.
  • Ability to read and understand source code in Ruby, PHP, Go, JavaScript, and Python.
  • Experience with automated and manual web, mobile, and traditional application penetration testing.
  • Experience building security automations with Python and tools such as Claude Code.
  • Experience leveraging AI in security testing workflows and processes.
  • Strong networking and information security knowledge.
  • Understanding of MVC, JWT, and GraphQL.
  • Experience with Burp Suite, SAST, DAST, container scanning, and dependency scanning tools.
  • Security certifications such as OSWE, OSCP, CISSP, GPEN, CEH, or CCSP are desired.
  • Strong verbal and written communication, analytical, organizational, time-management, problem-solving, and root-cause-analysis skills.

Benefits

  • Company-wide bonuses based on monthly sales targets.
  • Employee referral bonuses, adoption assistance, tuition reimbursement, certification reimbursement, and certification completion bonuses.
  • Modern, high-tech, and fun work environment in the São Paulo, Brazil office.
  • An applicant assessment and background check may be part of the hiring procedure.

KnowBe4

KnowBe4 builds a SaaS platform for security awareness training, phishing/attack simulation, human risk management, collaboration security, and cloud email security for organizations. Its subscription products include AI-driven protection for humans and agents (AIDA) with a proprietary risk score,...

Similar positions

Senior Backend Engineer (Ruby)

  • GitLab
  • Full time
  • Remote
  • 09/12/2026
  • Salary: $139k-$235k
  • Canada, USA

Software Engineer, Online Database Infrastructure

  • Stripe
  • Full time
  • USA
  • 09/12/2026
  • Salary: $206k - $286k/yr
  • Seattle, WA

Backend Engineer (Ruby)

  • GitLab
  • Full time
  • Canada
  • 09/11/2026
  • Remote

Integration Reliability Engineer, Payments

  • Stripe
  • Full time
  • Canada
  • 09/11/2026
  • Salary: C$120k-C$180k
  • Remote

Senior Backend Engineer, Database Excellence

  • GitLab
  • Full time
  • UK
  • 09/10/2026
  • Remote