Cloud Security Engineer

This position is posted by Jobgether on behalf of a partner company. We are currently looking for a Cloud Security Engineer in Brazil.

This role is focused on building and maturing cloud security foundations within a fast-scaling fintech environment operating on AWS at enterprise scale. You will take ownership of cloud security architecture, helping design and implement a modern security program that enables rapid innovation while reducing risk. The position combines hands-on engineering with strategic security leadership, covering everything from infrastructure hardening to compliance and continuous monitoring. You will play a key role in building CNAPP capabilities from the ground up, establishing secure infrastructure-as-code practices, and strengthening overall cloud resilience. Working closely with engineering and platform teams, you will ensure security is embedded into every layer of the cloud ecosystem. This is a high-impact role where your work directly influences platform trust, regulatory readiness, and system reliability. The environment is fast-paced, product-driven, and highly collaborative.

Accountabilities

• Lead cloud security initiatives across AWS environments, including assessment, hardening, and continuous improvement of security posture
• Conduct comprehensive security assessments across AWS accounts and define remediation roadmaps for identified risks
• Design, deploy, and operate CNAPP/CSPM solutions to ensure full visibility, detection, and protection of cloud workloads
• Establish and enforce secure Infrastructure-as-Code (IaC) standards using Terraform, including policy-as-code and least privilege principles
• Own cloud security controls required for compliance frameworks such as ISO 27001, ensuring audit readiness and evidence management
• Build and maintain continuous monitoring and alerting systems for cloud security events using SIEM and cloud-native tools
• Partner with engineering and platform teams to remediate vulnerabilities and improve cloud security practices
• Translate complex cloud risks into clear, actionable recommendations for technical and non-technical stakeholders
  
  

Requirements

• Strong hands-on experience securing AWS environments (IAM, VPC, S3, CloudTrail, GuardDuty, Security Hub, KMS, etc.)
• Deep understanding of cloud security principles, including AWS shared responsibility model and attack surface management
• Experience operating CNAPP/CSPM tools such as CrowdStrike, Wiz, Prisma Cloud, or equivalent platforms in production
• Proven ability to manage cloud security risks end-to-end, including identification, prioritization, and remediation tracking
• Strong knowledge of cloud security frameworks such as CIS Benchmarks, AWS Well-Architected Security Pillar, and ISO 27001
• Experience working with Infrastructure-as-Code (Terraform) and securing CI/CD pipelines is highly desirable
• Familiarity with security tooling such as static analysis, secrets detection, and IAM policy validation
• Strong collaboration and communication skills with the ability to influence engineering teams
• Ability to work in fast-paced, product-driven environments as an individual contributor within a security team
• Experience supporting audit and compliance processes in cloud environments is a plus
  
  

Benefits

• Competitive compensation with equity participation
• Opportunity to work in a high-growth fintech environment with real-world impact
• Strong ownership over cloud security strategy and architecture
• Exposure to modern cloud-native security technologies and practices
• Fast-paced, innovation-driven engineering culture
• Collaborative environment with high-performing global teams
• Significant professional growth opportunities in cloud security and platform engineering
• Meaningful role in shaping security foundations at scale
  
  

How Jobgether Works

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.