Information Security Coordinator (AppSec)

Responsibilities

• Lead the security team, distributing demands and removing technical or organizational blockers
• Act as a technical reference and mentor for team career development
• Translate the security roadmap into an executable plan covering governance, offensive security, and incident response
• Implement and evolve control programs based on NIST CSF, NIST SP 800-53, and CIS Controls
• Coordinate pentests, red team exercises, and threat hunting activities
• Support engineering teams with shift-left practices, CI/CD security, IaC, and cloud security (AWS/GCP/Azure)
• Operate CSPM tools (Wiz) and SAST/SCA pipelines to investigate vulnerabilities
• Plan and conduct tabletop exercises for incident response maturity
• Manage relationships with pentest partners and security vendors
• Elaborate technical reports and indicators using Looker for business stakeholders

Requirements

• Degree in Technology, Information Security, Engineering, or related fields
• 5 to 7 years of experience in information security
• Proven experience leading or coordinating technical teams
• Strong technical background in offensive security (Red or Yellow Team)
• Mastery of NIST CSF, NIST SP 800-53, or CIS Controls
• Proficiency in pentesting, red teaming, and MITRE ATT&CK
• Basic to intermediate SQL skills for data auditing and PII hunting
• Practical DevSecOps experience (CI/CD, SAST/DAST/SCA, IaC, Containers, Cloud)
• Knowledge of data discovery, classification, and LGPD compliance
• Understanding of Generative AI security risks and frameworks (NIST AI, ISO 42001)

Preferred Qualifications

• Experience building security programs from scratch
• Experience with bug bounty or responsible disclosure programs
• Knowledge of IOC and threat hunting
• Experience with AI applied to Information Security
• Familiarity with GitHub Actions, Vercel AI, Vertex AI, and JumpCloud
• Certifications such as CISSP, OSCP, CEH, GCIH, or CRISC

About the Company

Arcotech is the technology arm of Arco Educação, developing digital solutions to enhance the learning experience for students, parents, and schools through innovation and Artificial Intelligence.