Product Security Engineering Specialist

About the company

Experian is a global data and technology company that drives opportunities for people and businesses around the world. We operate in various markets, such as financial services, healthcare, automotive, agribusiness, insurance, among others. Experian invests in people and in new advanced technologies to unlock the power of data. We have an incredible team of 25,200 employees in 32 countries.

Our uniqueness is valuing yours. Experian's culture, which is people-centered, inclusive, and purpose-driven, is recognized by several awards — including World’s Best Workplaces™ 2025 (Fortune's Top 25 global) and Great Place To Work™ in 26 countries, among others. Check out Experian Life on social media or explore our careers website to understand why. Experian is also proud to be an employer that promotes equal opportunity and affirmative action.

Serasa Experian is much more than you imagine. With the purpose of creating a better future, expanding opportunities for people and businesses, in Brazil we are more than 4 thousand people working in various teams and specialties. Here, every knowledge and diversity complements each other and you can work on what you love most; we are committed to building an inclusive culture and an environment in which people can balance their careers with their personal commitments and interests, prioritizing well-being.

We dedicate ourselves to being one of the best and most innovative companies to work for in the country, enabling incredible experiences and careers for our people. Our strong people-first approach is externally recognized through various market certifications: we were awarded by Great Place To Work™ in 24 countries and by the international Top Employers certification, in addition to being recognized as one of the best companies for young professionals and having a 4.6 rating on Glassdoor. Each recognition indicates to us that we are on the right track, providing an increasingly better work environment for our talents.

Your tasks

We are looking for a Product Security Engineering Specialist to act as a technical reference in product security and digital platforms.

The position will work in partnership with Engineering, Architecture, Product, and Security teams, contributing so that security principles and controls are incorporated from conception to the operation of solutions.

Main responsibilities

• Act as a technical reference in Product Security, supporting Engineering and Product teams in identifying and mitigating risks.
• Conduct Threat Modeling, Security Design Reviews, and architecture assessments for relevant systems and functionalities.
• Promote Secure by Design practices and contribute to the evolution of the Secure Software Development Lifecycle (SSDLC).
• Define and evolve standards, requirements, and security guardrails that can be adopted consistently by engineering teams.
• Evaluate security aspects related to Identity & Access Management (IAM), authentication, authorization, APIs, tokens, and sessions.
• Perform technical assessments and support security reviews of high-criticality components and implementations.
• Identify risks and vulnerabilities, recommending controls and technically monitoring mitigation strategies.
• Work with Engineering to transform security requirements into scalable, reusable, and, whenever possible, automated solutions.
• Contribute to the reduction of vulnerabilities and security debt through structural engineering improvements.
• Act in partnership with other Security, Engineering, and Architecture areas in the evolution of security controls and practices.
• Disseminate knowledge and best practices, contributing to increasing the autonomy of teams in making security-related decisions.

Requirements

Since this is a Staff / Specialist II level position, we expect a high degree of autonomy, technical depth, and the ability to influence engineering and architecture decisions across different teams and contexts.

What we expect from a Specialist II / Staff

We expect a person capable of acting beyond individual execution, exercising technical leadership and influence in complex and broad-reaching problems.

At this level, the person shall

• Act with autonomy in complex, ambiguous, and high-criticality problems.
• Be recognized as a technical reference in their area of expertise.
• Influence architecture and engineering decisions across multiple teams.
• Identify risk patterns and propose structural solutions, avoiding exclusively one-off or reactive approaches.
• Balance security requirements with scalability, user experience, operational complexity, and development speed.
• Technically lead initiatives involving different areas and stakeholders.
• Communicate complex technical risks clearly to both technical and non-technical audiences.
• Act as a mentor to other professionals and contribute to raising the technical maturity of the organization.
• Contribute to standards, practices, and technical directions with impact beyond a single product or team.

• Extensive professional experience in technology, with at least 5 years in Product Security, Application Security, Security Engineering, or related areas.
• Experience with application security and/or Identity & Access Management (IAM), including authentication, authorization, OAuth 2.0, OpenID Connect, API security, Threat Modeling, and Secure by Design.
• Experience working directly with Engineering and Architecture teams, evaluating architectures, technical risks, and implementations, and translating security requirements into scalable solutions.
• Experience exercising technical leadership, leading complex and cross-functional initiatives, defining technical standards, and influencing engineering decisions without the need for direct hierarchical authority.
• Experience collaborating with global and multicultural teams, including interaction with stakeholders from different areas, geographies, and seniority levels.
• Advanced or fluent English