Senior Security Engineer | InfoSec

At Wellhub we're revolutionizing workplace wellness. Our platform connects employees worldwide to the best partners for fitness, mindfulness, therapy, nutrition, and sleep—all in one simple subscription. Headquartered in NYC with team members in Europe, North America and South America, we’re on a mission to make every company a wellness company.

We believe work should be fulfilling, inspiring, and balanced. Here, you’ll find a team that values wellbeing, collaboration, and different perspectives, where passion and creativity push boundaries to create real impact. Your contributions will help shape a healthier, more balanced world for you and millions of people globally. 

We are hiring a Senior Security Engineer in our InfoSec area in Brazil! This is a Remote – Brazil position, meaning you can work from anywhere within the country. Please note that this role is only open to candidates in Brazil. 

The mission of the Infosec team is to make Wellhub  a safer company for its customers, partners, end users, and employees by protecting the entire ecosystem from internal and external threats and contributing to the creation of safe and secure products. This role is focused on investigating and responding to security incidents and threat attempts to protect our cloud-based environment. You will collaborate closely with IT, Cloud Security, and engineering teams to develop projects, mitigation plans, enhance our cybersecurity observability, and help deliver a product our customers can trust.

• Lead the hands-on investigation, triage, and response to security incidents and threat attempts, directly protecting our cloud-based environment;
• Drive the development and execution of cybersecurity projects and mitigation plans in close collaboration with IT, Cloud Security, and engineering teams;
• Actively enhance our cybersecurity observability, refining tools and processes to detect and counter internal and external threats more effectively;
• Serve as a first line responder during incident response activities, ensuring rapid triage, containment, and timely communication to all relevant stakeholders;
• Help build and maintain customer trust by contributing directly to the creation and delivery of safe, secure, and resilient products;
• Organize and manage interdependencies between security initiatives and other technology areas to ensure cohesive, comprehensive protection for the entire ecosystem;
• Develop, update, and maintain automations to accelerate security ticket triage and enhance the efficiency of incident response workflows;
• Design, evaluate, and operate AI-assisted workflows (LLMs and agents) for alert triage, enrichment, and incident response, with human-in-the-loop controls;
• Contribute to detection and response coverage for AI-related risks, including LLM applications, AI agents, and employee use of AI tools;
• Live the mission: inspire and empower others by genuinely caring for your own wellbeing and your colleagues. Bring wellbeing to the forefront of work, and create a supportive environment where everyone feels comfortable taking care of themselves, taking time off, and finding work-life wellness.

• Bachelor's Degree in Computer Science or Engineering, Information Technology, or related areas;
• Experience with AWS, with a track record of deploying medium to large-scale projects;
• Detect, analyze and clarify hacking attempts, security incidents, and alerts from our monitoring stack;
• Experience with a SIEM and monitor alarms, indicators of compromise, and use cases;
• Experience with programming languages for automations;
• You discuss with security engineers and colleagues security challenges and improvements;
• You proactively work on solving and preventing incidents, and you regularly present your findings to the leadership;
• You help to keep our threat intelligence initiatives at a high level;
• You can identify, manage and communicate with all project stakeholders;
• You understand information security frameworks, standards, and best practices;
• You know information security certifications (GPDR, PCI-DSS, ISO27001, SOC 2, HIPAA etc.);
• You have the ability to speak English and Portuguese fluently and idiomatically;
• You use AI tools and LLM-based automation to speed up investigation, triage, and detection engineering, and you validate their output critically;
• You understand the security risks of AI systems, such as prompt injection, data leakage, insecure agent/tool access, and shadow AI.

We recognize that individuals approach job applications differently. We strongly encourage all aspiring applicants to go for it, even if they don't match the job description 100%. We welcome your application and will be delighted to explore if you could be a great fit for our team. For this specific role, please note that prior experience in Security Engineering and with cloud are mandatory requirements.

We aim to create a collaborative, supportive, and inclusive space where everyone knows they belong. 

Wellhub is committed to creating a diverse work environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, sex, gender identity or expression, sexual orientation, age, non-disqualifying physical or mental disability, national origin, veteran status, or any other basis covered by appropriate law.

Our commitment to inclusion also extends to how we recognize and reward our people. We’re proud to be Syndio Fair Pay Certified, reflecting our ongoing dedication to equitable and fair pay practices across our global team. Read more about it here.

Questions on how we treat your personal data? See our Aviso de Privacidade para Candidatos. 

#LI-REMOTE