Senior Cloud Security

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Design and sustain Terraform modules aimed at enhancing security within AWS environments

• Execute IAM hardening, manage AWS KMS keys, oversee secrets management, and implement additional risk and compliance controls

• Take ownership of CI/CD operations associated with security tools

• Contribute to the advancement and growth of the program’s security services

• Evaluate, prioritize, and address vulnerabilities detected in code and infrastructure

• Facilitate structured vulnerability transitions to other engineers when required

• Create and maintain threat models for the services you oversee

• Aid in Disaster Recovery and Resilience strategies for highly available AWS environments

• Engage in the evolution of the architecture towards future multi-region resilience strategies

• Implement and sustain observability frameworks for security and compliance services and controls

• Utilize CloudWatch, CloudTrail, AWS Config, Security Hub, and GuardDuty

• Support formal security evaluations and the client’s internal security assessment procedures

• Participate in organizational audits and certifications for services and applications, including SOC 2 and ISO 27001 or equivalent standards

• Generate client-facing documentation regarding security controls, vulnerabilities, and remediation suggestions

• Lead knowledge transfers and handoffs to client teams

• Collaborate with delivery and platform teams, alongside client stakeholders

• Balance security and compliance needs with program timelines, priorities, and goals

⛳️ Requirements

• Advanced or fluent English proficiency

• Extensive hands-on experience in developing and maintaining Terraform modules in AWS

• Advanced understanding of IAM, AWS KMS, networking and VPCs, secrets management, and cloud environment hardening

• Demonstrated success in implementing security and compliance controls within highly regulated environments

• Experience in handling and safeguarding regulated data

• Practical familiarity with compliance frameworks

• Experience participating in audits, formal security evaluations, and organizational certification processes

• Ability to directly engage with the client’s Risk, Compliance, and Audit functions

• Experience in analyzing, prioritizing, and addressing vulnerabilities in code and infrastructure

• Experience in creating and utilizing threat models

• Hands-on experience with application and legacy infrastructure migration projects to AWS

• Background in replatforming workloads from on-premises or VMware environments

• Experience in designing and implementing resilient, highly available AWS architectures

• Knowledge of Disaster Recovery strategies and multi-region architectures

• Familiarity with formal security review processes

• Understanding of enterprise risk and compliance assessment cycles

• Proven capability to coordinate multiple teams and stakeholders across complex programs

• Experience in preparing client-focused documentation

• Ability to lead security and compliance discussions with a consultative approach

• Prior experience in the financial services sector is a significant advantage

• Previous experience in consulting, Professional Services, or similar environments is a plus

🏝️ Benefits

• Multi-benefit card – choose how and where to use it.

• Educational grants for undergraduate, graduate, MBA, and language courses.

• Certification incentive programs.

• Flexible working hours.

• Competitive salaries.

• Annual performance review with a structured career development plan.

• International career opportunities.

• Wellhub and TotalPass.

• Private pension plan.

• Childcare assistance.

• Health insurance.

• Dental insurance.

• Life insurance.