Senior Security Engineer – CloudSec

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Design and oversee cloud security measures across AWS and GCP utilizing Zero Trust principles.

• Integrate automated security testing and threat modeling within CI/CD pipelines.

• Foster a Shift-Left security mindset among development teams.

• Establish and implement runtime security, posture management, and compliance for Kubernetes/EKS/GKE and serverless structures.

• Create and enforce security boundaries and guardrails for AI/LLM deployments, including RAG, MCP, and Agentic AI workflows.

• Assess and mitigate risks in accordance with the OWASP Top 10 for LLMs and the MITRE ATLAS framework.

• Contribute to threat intelligence initiatives.

• Secure the cloud platform while ensuring that cloud-provider security controls are properly configured and integrated into the overall security strategy.

• Identify, examine, and report on vulnerabilities.

• Set up vulnerability management tools.

• Motivate and empower colleagues while cultivating a supportive, wellbeing-oriented environment.

⛳️ Requirements

• Extensive experience with multi-cloud architecture and security measures in AWS and GCP.

• Demonstrated experience in implementing Zero Trust frameworks, least-privilege identity architecture, and micro-segmentation techniques.

• Strong expertise in securing containerized environments utilizing Kubernetes and Docker.

• Familiarity with serverless technologies such as AWS Lambda, Cloud Run, and Cloud Functions.

• Proficient in leading Shift-Left initiatives using SAST, DAST, SCA, and IaC security tools within DevSecOps pipelines.

• Practical knowledge of AI security risks, including OWASP Top 10 for LLMs, MITRE ATLAS, prompt injection defenses, AI guardrails, MCP integrations, RAG data pipelines, and Agentic AI interactions.

• Excellent communication skills, capable of conveying information both synchronously and asynchronously in English as necessary.

• Experience with identity provider platforms such as Azure AD, Keycloak, and Okta.

• Knowledge of Cloud Security Posture Management (CSPM).

• Comprehensive understanding of cybersecurity frameworks like OWASP and MITRE ATT&CK.

• Capability to write scripts for automating security tasks.

• Familiarity with incident management and change management processes.

• Previous experience in Cloud Security and Infrastructure is essential.

🏝️ Benefits

• Complimentary Gold+ Wellhub membership providing access to onsite gyms and studios, digital fitness programs, and online wellness resources.

• Option to include up to three family members in the Wellhub plan.

• Wellz emotional wellbeing program offering personalized journeys, 52 individual therapy sessions annually, and on-demand content.

• Health, dental, and life insurance coverage.

• Hybrid and remote work possibilities.

• Reimbursement for home office expenses.

• Flexible working hours accommodating time zones, team requirements, and personal schedules.

• Vacation time commencing after 6 months of employment.

• Additional 3 days off each year.

• 1 day off for each year of service, up to a maximum of 5 extra days.

• Extra day off for your birthday.

• Fully paid parental leave for all new parents.

• Extended leave and ramp-back period for parents giving birth.

• Access to top-tier learning platforms and interactive sessions.

• Customized development roadmap.

• Opportunities for internal career advancement.

• Ongoing learning and feedback opportunities.

• Inclusive and collaborative work culture.

• Fair and equitable compensation practices.