Stefanini North America and APAC

About the Company

Stefanini Group is a multinational company with a broad portfolio of technological solutions. Our global presence spans 41 countries and 44 languages. Motivated by a shared entrepreneurial spirit, we help our clients transform their business through digital innovation, working in an agile manner and co-creating for a better future.
We believe technology can revolutionize a company and that innovation is essential to foster development and competitiveness. We also value new ideas and the power of an open mind, so we recognize every talent is essential to the quality of our projects and especially to our progress. We are big enough to invest in new technology while small enough to be both flexible and adapt to our clients’ needs. Driven by our entrepreneurial mindset, we help customers transform their business through digital innovations by working in an agile mode and co-creating for a better future.


We offer a broad portfolio of solutions, combining innovative consulting, marketing, mobility, personalized campaigns and artificial intelligence services with traditional solutions such as service desk, field service, and outsourcing (BPO). We maintain our excellence by investing in technological innovations, the best partnerships, acquisitions of companies worldwide, and the hiring of highly trained professionals.

Listed Jobs

Company Name

Stefanini North America and APAC

Job Title

Application Security Engineer

Job Description

Job title: Application Security Engineer Role Summary: Lead and execute penetration‑testing engagements for enterprise‑scale web applications and APIs, while facilitating threat‑modeling workshops and security‑design reviews to uncover weaknesses, prioritize remediation, and guide long‑term security strategy. Expactations: Deliver clear, actionable vulnerability reports; demonstrate exploitation paths and proof‑of‑concepts; retest remediations; manage end‑to‑end engagement lifecycle; collaborate closely with engineering, product, and cross‑functional stakeholders; advocate secure‑by‑default practices and contribute to security tooling and CI/CD guardrails. Key Responsibilities: - Plan, execute, and document manual and automated penetration tests for web, REST, GraphQL, and gRPC APIs. - Demonstrate exploitation of authentication, logic, and data‑exposure flaws; develop proofs‑of‑concept. - Retest remediations and provide prioritized, concise reports. - Facilitate threat‑modeling sessions (STRIDE, attack‑tree) for new or modified services; produce risk artefacts and track mitigation closure. - Promote secure‑by‑default patterns (least privilege, IaC hardening, SDL best practices) across the SDLC. - Contribute to internal security tooling and CI/CD guardrails. Required Skills: - 4+ years of product/application security engineering with hands‑on web/API penetration testing. - Expertise with leading pentest tools (Burp Suite Pro, OWASP ZAP, Nuclei, etc.). - Scripting/automation proficiency in Python, Go, or similar; rapid codebase comprehension. - Practical experience with STRIDE or comparable threat‑model frameworks. - Familiarity with cloud‑native environments (microservices, Kubernetes, serverless). - Excellent written and verbal communication for technical and non‑technical audiences. Required Education & Certifications: - Bachelor’s degree in Computer Science, Engineering, or equivalent practical experience. - Offensive‑security certifications (OSCP, OSWE, OSWA, BSCP) preferred. - Secure‑coding experience in Java, Node.js, C#, Python, or Rust. - Experience with security controls for AWS, Azure, or Google Cloud.

Atlanta, United states

Hybrid

10-09-2025

Company Name

Stefanini North America and APAC

Job Title

Penetration Tester

Job Description

**Job Title:** Penetration Tester **Role Summary:** Lead end‑to‑end penetration‑testing engagements for large‑scale web applications and APIs, conduct threat‑modeling workshops, and perform security‑design reviews. Collaborate with engineering and cross‑functional teams to identify, validate, and remediate security weaknesses, influencing the organization’s security roadmap. **Expectations:** - Deliver high‑quality, reproducible findings and clear remediation guidance. - Communicate technical concepts effectively to both technical and non‑technical stakeholders. - Drive continuous improvement of security processes, tooling, and secure‑by‑default practices. - Operate proactively, manage multiple engagements, and follow up on remediation verification. **Key Responsibilities:** - Plan, execute, and document manual and tool‑assisted penetration tests on enterprise web apps and REST/GraphQL/gRPC APIs. - Develop proofs‑of‑concept and demonstrate exploitation paths (authentication, business logic, data exposure). - Retest remediated issues and produce prioritized, actionable reports. - Facilitate threat‑modeling sessions (STRIDE, attack‑tree) for new or modified services; produce risk artefacts and track mitigation closure. - Advocate secure design patterns (least privilege, IaC hardening, SDL best practices) throughout the SDLC. - Contribute to internal security tooling and CI/CD guardrails. **Required Skills:** - Proficiency with leading pentest platforms (e.g., Burp Suite Pro, OWASP ZAP, Nuclei). - Strong scripting/automation abilities in Python, Go, or similar languages. - Experience applying STRIDE or comparable threat‑model frameworks. - Familiarity with cloud‑native environments (microservices, Kubernetes, serverless). - Excellent written and verbal communication for diverse audiences. **Required Education & Certifications:** - Bachelor’s degree in Computer Science, Engineering, or equivalent practical experience. - Minimum 4 years of product/application security engineering with hands‑on web/API penetration testing. - Preferred: Offensive‑security certifications (OSCP, OSWE, OSWA, BSCP); secure‑coding experience (Java, Node.js, C#, Python, Rust); cloud security experience (AWS, Azure, GCP); open‑source or bug‑bounty contributions; mobile/desktop security exposure; interest in AI security testing.

Atlanta, United states

Hybrid

12-09-2025

Company Name

Stefanini North America and APAC

Job Title

F5 LTM Engineer

Job Description

**Job Title:** F5 LTM Engineer **Role Summary:** Design, configure, and maintain F5 BIG‑IP Local Traffic Manager (LTM) and Global Traffic Manager (GTM) solutions to support high‑availability, performance, and security requirements for enterprise applications. **Expectations:** - Execute end‑to‑end F5 architecture design consistent with business and security standards. - Provide 24/7 support for F5 environments, including troubleshooting, upgrades, and patch management. - Automate routine tasks and integrate F5 configuration into CI/CD pipelines. **Key Responsibilities:** - **Architecture Design** – Draft F5 LTM/GTM designs, align with best practices, and recommend HA/DR topologies. - **Configuration & Management** – Provision BIG‑IP devices, set up virtual servers, SSL/TLS profiles, persistence, health checks, and r/w maps. - **Automation** – Develop scripts (Bash, PowerShell, Python) for configuration, deployment, and management; integrate with CI/CD tools. - **Monitoring & Alerts** – Configure SNMP, local monitoring, and external tools (Nagios, Prometheus); create alerting thresholds and escalation paths. - **Troubleshooting & Incident Response** – Diagnose load balancing, session, and SSL issues; conduct root‑cause analysis, document findings, and apply preventive measures. - **Upgrades & Patching** – Plan and execute BIG‑IP software upgrades, apply patches, and ensure minimal downtime. - **Security & Compliance** – Implement SSL/TLS, global security policies, and optionally ASM features; maintain compliance with security standards. - **Documentation** – Produce clear, up‑to‑date technical docs, runbooks, and incident reports. - **Collaboration** – Work with application, network, and DevOps teams to guarantee seamless integration and performance. **Required Skills:** - 5–7 years’ hands‑on experience with F5 BIG‑IP LTM/GTM. - Proficient in TCP/IP, DNS, HTTP/HTTPS, SSL/TLS, and load‑balancing algorithms. - Strong scripting background (Bash, PowerShell, Python) and automation tools experience. - Familiarity with high‑availability (HA), disaster recovery (DR), and health‑check implementation. - Experience using monitoring tools (Nagios, Zabbix, Prometheus) and log analytics (Splunk). - Ability to integrate F5 solutions into cloud environments (AWS, Azure, GCP) is advantageous. - Excellent problem‑solving, communication, and teamwork skills. **Required Education & Certifications:** - Bachelor’s degree in Computer Science, IT, Engineering, or related field. - *F5 Certifications* – at minimum one of: - F5 Certified Technician: BIG‑IP 101/201 - F5 Certified Implementation Specialist: Local Traffic Manager 201/301 - F5 Certified Implementation Specialist: Global Traffic Manager 201/301 - F5 Certified Solutions Expert: Application Delivery Fundamentals 301/401 (preferred) - Master’s degree or additional relevant certifications are a plus.

Richmond, United states

On site

Mid level

17-09-2025

Company Name

Stefanini North America and APAC

Job Title

Java FullStack Developer

Job Description

Job Title: Java FullStack Developer Role Summary: Design, develop, test, and maintain end‑to‑end software solutions that meet client needs. Lead architecture decisions, implement UI and server components, and ensure delivery through Agile, TDD, and CI/CD pipelines. Expectations: - 10+ years in IT, 8+ years in software development. - Senior engineer with advanced expertise in at least one programming language (Java, Angular). - Proven ability to mentor peers and guide technical decisions. - Strong customer‑centric mindset with empathy for user pain points. Key Responsibilities: - Engage clients to capture use‑cases, pain points, and requirements. - Design high‑level software architecture, select appropriate technology stack, and plan deployment strategy. - Build user‑friendly, interactive UIs with Angular; develop APIs, microservices, and backend logic in Java. - Create and enforce test strategy, including unit, integration, and security testing. - Implement continuous integration and continuous delivery pipelines (e.g., Tekton). - Optimize performance, apply best practices, and adopt emerging technologies. - Collaborate with product owners, designers, architects, and cross‑functional teams. - Support security measures such as encryption and data anonymization. Required Skills: - Java (backend development, microservices, REST APIs) - Angular (frontend development) - MongoDB (NoSQL database) - BigQuery (data analysis) - Tekton or similar CI/CD tools - Test‑driven development, continuous integration, continuous delivery - Agile methodologies (Scrum, Kanban) - Performance tuning & optimization - Security best practices (encryption, anonymization) - Strong communication, empathy, and leadership abilities Required Education & Certifications: - Bachelor’s degree in Computer Science, Software Engineering, or related field.

Dearborn, United states

On site

18-09-2025