Application Security Analyst II

Responsibilities

• Act directly with Cloudflare WAF, leading domain migrations and creating custom security rules
• Collaborate with Engineering and Product teams to ensure Security by Design practices
• Implement and optimize security tools in the pipeline (SAST, SCA, DAST, and Secret Detection)
• Support developers in technical understanding, triage, and remediation of vulnerabilities
• Automate security tasks and create scripts using programming languages
• Ensure security compliance in containerized environments and Infrastructure as Code (IaC)
• Disseminate secure coding best practices across the company

Requirements

• Consolidated experience as an Application Security (AppSec) or DevSecOps Engineer
• Practical knowledge of Cloudflare WAF (rule configuration, log analysis, and tuning)
• Proficiency in at least one programming language (Go, Python, JavaScript, or TypeScript)
• Experience managing Security Scanning tools (SAST, SCA, DAST, IAST)
• Knowledge of modern infrastructure and IaC (Terraform, Helm, Docker, and Kubernetes)
• Familiarity with security frameworks like OWASP Top 10, ASVS, and SANS

Preferred Qualifications

• Familiarity with using AI (LLMs) applied to security automation and triage
• Certifications such as EHT or OSCP

About the Company

Arcotech is the technology arm of Arco Educação, developing digital solutions to empower students, parents, and schools through dynamic and effective learning experiences.