Senior Application Security Manager

About the Company

Transform your career with iFood! We are a Brazilian technology company and a reference in Latin America. Through innovative solutions, we connect thousands of restaurants to millions of consumers daily with an average of 100 million monthly orders. Beyond food delivery, we also operate in Market, Pharmacy, and Pet sectors. We also have iFood Pago, our Fintech, which includes iFood Benefits and our restaurant bank.

Responsibilities

• Define the vision, roadmap, and OKRs for Application Security aligned with engineering and business goals
• Build, develop, and retain a team of AppSec engineers and security architects through hiring, performance calibration, and career planning
• Manage budgets, contracts, and vendor relationships
• Report security posture to executive leadership
• Create and manage automated controls (SAST, DAST, SCA, secret scanning, IaC scanning, container scanning) in CI/CD pipelines
• Implement policy-as-code and admission controls in Kubernetes; ensure supply chain traceability (SBOM)
• Conduct and scale threat modeling and secure design reviews for new systems
• Define architecture standards for authentication, authorization, encryption, API security, and multi-tenant isolation
• Manage the Security Champions program across product teams
• Act as technical escalation for application security incidents and conduct blameless post-mortems
• Support compliance and privacy demands (PCI-DSS, SOC 2, ISO 27001, LGPD)

Requirements

• Technical experience in DevSecOps, Offensive Security, and Application Security Architecture
• Experience in AI risk governance applied to cybersecurity
• Ability to define and execute security strategies aligned with business objectives