We are looking for a Cloud Security Engineer to help monitor, improve, and automate the organisation’s cloud security posture, with a strong focus on GCP environments. The role involves identifying risks, vulnerabilities, and misconfigurations, operating CNAPP tools, supporting incident response, and defining cloud security policies aligned with industry standards.

What will you do?

• Monitor and analyse cloud security posture across the organisation's environments (primarily GCP), identifying risks, misconfigurations, and vulnerabilities.
• Automate remediation of cloud security findings, reducing manual effort and accelerating response times, through solutions using Terraform (IaC), GitHub Actions and scripts using languages like Python or Bash.
• Manage and operate CNAPP tools (e.g., Wiz) to continuously assess cloud workloads, containers, and infrastructure for threats and compliance gaps.
• You will integrate third-party tools with Cloud providers through Identity Providers (IdP such as EntraID or Okta).
• Conduct Attack Surface Management (ASM) activities, mapping and reducing the organisation's external exposure.
• Respond to cloud security incidents, supporting investigation, containment, and post-incident reviews.
• Define and enforce cloud security policies and guardrails, aligned with industry frameworks (e.g., CIS Benchmarks, NIST, ISO 27001).
• Produce clear security reports and dashboards for technical and non-technical stakeholders.
• Stay up to date with the latest cloud threats, vulnerabilities, and security tooling.

What are we looking for?

• Student background of Computer Science Engineering or similar
• Up to 3 years of hands-on experience in a Cloud Security, Cloud Engineering, or Cybersecurity role (preferably using Google Cloud).
• Proficiency in Terraform for infrastructure provisioning and security policy enforcement.
• Ability to automate repetitive tasks (scripting skills in Bash/PowerShell/Python)
• Solid understanding of modern information implementation methodologies and standards, especially in cloud environments.
• Strong foundations in cybersecurity principles: threat modelling, vulnerability management, incident response
• Good understanding of networking concepts: firewalls, VPNs, DNS, TLS/mTLS, Zero Trust architecture
• Experience with git practices and patterns.
• Strong Linux knowledge (administration, hardening, scripting).
• Willingness to explore the benefits of AI to improve our productivity.
• Fluency in Portuguese and English (speaking, reading and writing).

• Professional Cloud Security Engineer certification on Google Cloud Platform (GCP)
• Hands-on experience with CNAPP tools (e.g., Wiz, Prisma Cloud, or equivalent) for cloud workload protection.
• Familiarity with Attack Surface Management (ASM) tools and methodologies.
• Terraform certification or Experience with Infrastructure-as-Code (IaC) practices and patterns – Terraform, Ansible, etc.
• Experience with Apigee - API Management platform
• Kubernetes certifications (CKA, CKAD or CKS) or knowledge of Kubernetes security (pod security policies, network policies, RBAC).