Company Description
Experian is a global data and technology company that empowers people and businesses around the world. We operate in many markets, including financial services, healthcare, automotive, agribusiness, insurance, and more. Experian invests in people and in new advanced technologies to unlock the power of data. We have an amazing team of 25,200 employees in 32 countries.
Our uniqueness is valuing yours. Experian's culture, which is people-centred, inclusive, and purpose-driven, is recognised by several awards, including World’s Best Workplaces™ 2025 (Fortune Global Top 25) and Great Place To Work™ in 26 countries, among others. Check out Experian Life on social media or explore our careers site to understand why. Experian also takes pride in being an employer that promotes equal opportunity and affirmative action.
Job Description
We are looking for a Product Security Engineering Specialist to act as a technical reference in product security and digital platforms.
The role will work in partnership with Engineering, Architecture, Product, and Security teams, helping ensure that security principles and controls are built in from conception through to the operation of solutions.
As a Staff / Specialist II level position, we expect a high degree of autonomy, technical depth, and the ability to influence engineering and architecture decisions across different teams and contexts.
Main responsibilities
- Act as a technical reference for Product Security, supporting Engineering and Product teams in identifying and mitigating risks.
- Conduct Threat Modeling, Security Design Reviews, and architecture assessments for relevant systems and features.
- Promote Secure by Design practices and contribute to the evolution of the Secure Software Development Lifecycle (SSDLC).
- Define and evolve standards, requirements, and security guardrails that can be consistently adopted by engineering teams.
- Assess security aspects related to Identity & Access Management (IAM), authentication, authorization, APIs, tokens, and sessions.
- Perform technical assessments and support security reviews of components and implementations of highest criticality.
- Identify risks and vulnerabilities, recommending controls and technically following mitigation strategies.
- Work with Engineering to turn security requirements into scalable, reusable, and, whenever possible, automated solutions.
- Contribute to reducing vulnerabilities and security debt through structural engineering improvements.
- Work in partnership with other Security, Engineering, and Architecture areas to evolve security controls and practices.
- Share knowledge and best practices, helping increase teams' autonomy in security-related decision-making.
What we expect from a Specialist II / Staff
We expect a person able to go beyond individual execution, exercising leadership and technical influence on complex, broad-scope problems.
At this level, the person should:
- Act autonomously on complex, ambiguous, and highly critical problems.
- Be recognised as a technical reference in their area of expertise.
- Influence architecture and engineering decisions across multiple teams.
- Identify risk patterns and propose structural solutions, avoiding purely ad hoc or reactive approaches.
- Balance security requirements with scalability, user experience, operational complexity, and development speed.
- Technically lead initiatives involving different areas and stakeholders.
- Communicate complex technical risks clearly to both technical and non-technical audiences.
- Act as a mentor to other professionals and contribute to raising the organisation's technical maturity.
- Contribute to standards, practices, and technical direction with impact beyond a single product or team.
Qualifications
- Extensive professional experience in technology, including at least 5 years in Product Security, Application Security, Security Engineering, or related areas.
- Experience with application security and/or Identity & Access Management (IAM), including authentication, authorization, OAuth 2.0, OpenID Connect, API security, Threat Modeling, and Secure by Design.
- Experience working directly with Engineering and Architecture teams, evaluating architectures, technical risks, and implementations, and translating security requirements into scalable solutions.
- Experience exercising technical leadership, leading complex and cross-functional initiatives, defining technical standards, and influencing engineering decisions without direct hierarchical authority.
- Experience collaborating with global and multicultural teams, including interaction with stakeholders from different areas, geographies, and levels of seniority.
- Advanced or fluent English
Additional Information
Serasa Experian is much more than you imagine. With the purpose of creating a better future by expanding opportunities for people and businesses, in Brazil we are more than 4,000 people working across many teams and specialties. Here, every skill and diversity complements each other, and you can work on what you love most. We are committed to building an inclusive culture and an environment where people can balance their careers with their commitments and personal interests, valuing well-being.
We are deeply committed to being one of the best and most innovative companies to work for in the country, enabling amazing experiences and careers for our people. Our strong people-first approach is recognised externally through several market certifications: we were awarded by Great Place To Work™ in 24 countries and by the international Top Employers certification, and we are recognised as one of the best companies for young professionals and have a 4.6 rating on Glassdoor. Each recognition tells us we are on the right path, providing an increasingly better work environment for our talent.
Experian Careers - Creating a better tomorrow together
Find out what its like to work for Experian by clicking here