Cloud Security Engineer

This position is posted by Jobgether on behalf of a partner company. We are currently looking for a Cloud Security Engineer in Brazil.

This role is focused on building and maturing cloud security foundations within a fast-scaling fintech environment operating on AWS at enterprise scale. You will take ownership of cloud security architecture, helping design and implement a modern security program that enables rapid innovation while reducing risk. The position combines hands-on engineering with strategic security leadership, covering everything from infrastructure hardening to compliance and continuous monitoring. You will play a key role in building CNAPP capabilities from the ground up, establishing secure infrastructure-as-code practices, and strengthening overall cloud resilience. Working closely with engineering and platform teams, you will ensure security is embedded into every layer of the cloud ecosystem. This is a high-impact role where your work directly influences platform trust, regulatory readiness, and system reliability. The environment is fast-paced, product-driven, and highly collaborative.

• Lead cloud security initiatives across AWS environments, including assessment, hardening, and continuous improvement of security posture
• Conduct comprehensive security assessments across AWS accounts and define remediation roadmaps for identified risks
• Design, deploy, and operate CNAPP/CSPM solutions to ensure full visibility, detection, and protection of cloud workloads
• Establish and enforce secure Infrastructure-as-Code (IaC) standards using Terraform, including policy-as-code and least privilege principles
• Own cloud security controls required for compliance frameworks such as ISO 27001, ensuring audit readiness and evidence management
• Build and maintain continuous monitoring and alerting systems for cloud security events using SIEM and cloud-native tools
• Partner with engineering and platform teams to remediate vulnerabilities and improve cloud security practices
• Translate complex cloud risks into clear, actionable recommendations for technical and non-technical stakeholders

Requirements:

• Strong hands-on experience securing AWS environments (IAM, VPC, S3, CloudTrail, GuardDuty, Security Hub, KMS, etc.)
• Deep understanding of cloud security principles, including AWS shared responsibility model and attack surface management
• Experience operating CNAPP/CSPM tools such as CrowdStrike, Wiz, Prisma Cloud, or equivalent platforms in production
• Proven ability to manage cloud security risks end-to-end, including identification, prioritization, and remediation tracking
• Strong knowledge of cloud security frameworks such as CIS Benchmarks, AWS Well-Architected Security Pillar, and ISO 27001
• Experience working with Infrastructure-as-Code (Terraform) and securing CI/CD pipelines is highly desirable
• Familiarity with security tooling such as static analysis, secrets detection, and IAM policy validation
• Strong collaboration and communication skills with the ability to influence engineering teams
• Ability to work in fast-paced, product-driven environments as an individual contributor within a security team
• Experience supporting audit and compliance processes in cloud environments is a plus

Benefits:

• Competitive compensation with equity participation
• Opportunity to work in a high-growth fintech environment with real-world impact
• Strong ownership over cloud security strategy and architecture
• Exposure to modern cloud-native security technologies and practices
• Fast-paced, innovation-driven engineering culture
• Collaborative environment with high-performing global teams
• Significant professional growth opportunities in cloud security and platform engineering
• Meaningful role in shaping security foundations at scale