• Lead the technical security strategy for product and application security • Architect and implement a comprehensive DevSecOps pipeline • Drive threat modeling practices and collaborate with engineering leads • Design and implement a centralized security telemetry architecture • Lead technical evaluation and implementation of security tools • Establish and mentor a team of DevSecOps engineers • Own the technical roadmap for improving detection times and fraud detection

• Lead the technical security strategy for product and application security, defining architecture standards, security baselines, and secure coding guidelines aligned with OWASP ASVS, NIST SSDF, and BSIMM frameworks. • Architect and implement a comprehensive DevSecOps pipeline, integrating SAST, DAST, SCA, and container scanning across all CI/CD pipelines serving 10 product verticals. • Drive threat modeling practices across critical product flows, partnering with engineering leads to identify and mitigate security risks before they reach production. • Design and implement a centralized security telemetry architecture, connecting application logs, WAF events, and fraud signals into a unified SIEM platform for real-time detection. • Lead the technical evaluation, selection, and implementation of security tools (SAST/DAST, SIEM/SOAR, PAM, API Gateway security, container security scanners). • Establish and mentor a team of 7-8 embedded DevSecOps engineers across product verticals, providing technical guidance and ensuring consistent security standards. • Own the technical roadmap for reducing MTTD from >48h to <1h and fraud detection from D+1 to real-time through security engineering and automation. • Live the mission: inspire and empower others by genuinely caring for your own wellbeing and your colleagues. Bring wellbeing to the forefront of work, and create a supportive environment where everyone feels comfortable taking care of themselves, taking time off, and finding work-life balance.

• Be highly organized - Drive revenue impact by leading 8–14 project deployments per quarter, contributing an average of $500K–$1M in deployed eARR once fully ramped (expected within 90 days). • Execute and optimize deployments by owning end-to-end implementation processes and collaborating with internal teams to ensure timely delivery. • Enhance operational efficiency by identifying and implementing process improvements, tooling enhancements, and automation. • Partner across teams by working closely with Engineering and Product to stay current on product updates, provide feedback, and contribute to roadmap alignment. • Contribute to knowledge sharing by documenting deployment processes, updates, and best practices. • Support strategic scalability by helping address high pipeline demand, ensuring future quarters maintain delivery velocity while mitigating at-risk eARR. • Maintain a habit of using AI tools to think, build, and ship faster—it’s your default, not an afterthought.

• Liderança Técnica: Ser a referência técnica para o time em decisões de arquitetura, revisão de código de infraestrutura (IaC) e disseminação de boas práticas. • Engenharia de Plataforma: Desenhar e evoluir o ambiente em AWS e on-premises, sustentando o backend primário baseado em EC2 (com ALB/NLB e API Gateway) e RDS, além de gerenciar ferramentas críticas em containers (ECS) e arquiteturas Serverless. • Observabilidade: Consolidar a estratégia de monitoramento 360º usando Zabbix/Grafana e DataDog, garantindo visibilidade ponta a ponta. • Automação: Reduzir o trabalho manual através de Terraform, Ansible e automações via AWS Lambda e EventBridge. • Conectividade Híbrida: Garantir a estabilidade da malha de conectividade (VPNs, roteamento e links) entre as unidades escolares e a nuvem. • FinOps & Eficiência: Liderar iniciativas técnicas de otimização de custos (rightsizing de instâncias EC2/RDS, instâncias reservadas e limpeza automatizada). • Segurança: Atuar em parceria com SecOps para garantir que a arquitetura considere C.I.D. e padrões de mercado.