Senior Cyber Security Analyst – CloudSec

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Assist in enhancing the security framework of the AWS environment that supports RecargaPay’s financial services.

• Oversee the security posture of AWS accounts utilizing Control Tower, Organizations, SCPs, Security Hub, Config, and GuardDuty.

• Identify critical issues and coordinate with engineering teams to ensure prompt resolution.

• Assess and strengthen IAM policies, roles, and cross-account access by implementing least privilege principles and removing static credentials and unnecessary permissions.

• Analyze and respond to cloud security alerts and incidents through CloudTrail, GuardDuty, and VPC Flow Logs.

• Spearhead incident triage, containment, and review processes.

• Integrate security controls into infrastructure as code using Terraform and within CI/CD workflows.

• Perform change assessments, implement policy-as-code, and conduct IaC and image scanning.

• Safeguard containerized and serverless applications, including EKS/ECS and Lambda.

• Establish image baselines, manage secrets, and enforce network segmentation.

• Generate and sustain control documentation for audits and regulatory compliance, including PCI DSS, Central Bank, and LGPD, in collaboration with the Compliance team.

• Automate recurring detection and remediation processes to minimize manual effort and expedite resolution times.

• Document AWS security standards and guidelines.

• Mentor engineers in adopting secure methodologies.

• Collaborate closely with infrastructure and engineering teams to enhance secure delivery.

⛳️ Requirements

• Completed Bachelor's degree; graduate-level education is preferred.

• Over 4 years of experience in Information Security.

• Demonstrated success in executing impactful initiatives.

• Extensive information security experience, including at least 3 years in securing production AWS environments.

• Strong proficiency in AWS IAM, encompassing policies, roles, SCPs, and cross-account access.

• In-depth knowledge of GuardDuty, Security Hub, CloudTrail, Config, and KMS.

• Familiarity with AWS Control Tower, including landing zones, preventive and detective controls, Account Factory, and multi-account governance.

• Understanding of the CIS AWS Foundations Benchmark and the AWS Security Maturity Model.

• Practical experience with Terraform or similar Infrastructure as Code tools.

• Experience in securing CI/CD pipelines.

• Experience in investigating and responding to incidents within cloud environments.

• Ability to automate security tasks using Python, Bash, or comparable programming languages.

• Preferred: Experience in fintech, payments, or other regulated sectors, including compliance with PCI DSS and Central Bank standards.

• Preferred: Experience with Kubernetes/EKS and container security.

• Preferred: Familiarity with SIEM and the creation of detection rules.

• Preferred: Relevant certifications such as AWS Certified Security – Specialty or CCSP.

• Preferred: Intermediate proficiency in English and Spanish.

🏝️ Benefits

• Competitive salary aligned with the market.

• Remote work — be part of the team from anywhere!

• Monthly home office allowance provided via the RecargaPay app.

• Health and dental insurance with no co-payments.

• Life insurance coverage.

• Flexible meal allowance through Flash.

• TotalPass to promote your health and wellness.

• An inclusive environment that celebrates diversity and allows you to be yourself.

• Opportunities for consideration in other positions within the RecargaPay group.

• Option to request the modification or deletion of personal data in accordance with LGPD.