Cloud Security Engineer

Bunge; São Paulo; Presencial; BRL 100 000 - 130 000; Tempo integral

Resumo da oferta

Bunge is seeking a Cloud Security Engineer in São Paulo, Brazil. This role focuses on cloud security principles and the implementation of security controls across various cloud platforms. The ideal candidate will have over 5 years of experience in cybersecurity engineering with a strong emphasis on cloud security.

Responsibilities include conducting risk assessments, monitoring cloud environments for vulnerabilities, and working closely with engineering teams to embed security practices. A Bachelor's degree in Information Security or related field is required, along with hands-on experience with AWS, Azure, and GCP.

Qualificações

• 5+ years of experience in cybersecurity engineering with strong focus on cloud security.
• Hands-on experience securing major cloud platforms (GCP, Azure, and/or AWS).
• Strong knowledge of cloud identity, networking, encryption, logging, and monitoring services.

Responsabilidades

• Design, implement, and maintain security controls across cloud platforms.
• Conduct cloud security risk assessments and architecture reviews.
• Monitor cloud environments for misconfigurations and vulnerabilities.

Conhecimentos

Cloud security principles

Cloud security tools

Scripting/automation for cloud environments

Network security

Excellent communication skills

Formação académica

Bachelor’s degree in Information Security, Computer Science, Engineering, or a related field

Ferramentas

Terraform

Python

AWS

Azure

GCP

Descrição da oferta de emprego

Role Purpose

The Cloud Security Engineer demonstrates a high level of professionalism, leveraging in-depth knowledge in cloud security and a basic understanding of related cybersecurity disciplines to adapt departmental plans and recommend optimal solutions and best practices within the Cyber Security Engineering & Automation department. This individual contributor role manages cloud security projects and processes independently with limited supervision, allowing for tactical choices within established functional policies and broad procedures to achieve security goals. They are responsible for the execution of main cloud security activities to achieve important security outcomes, actively participating in small to medium-sized projects of moderate complexity and contributing to process improvements. The Engineer performs a variety of complex tasks, requiring detailed analysis to understand problems and supporting the delivery of solutions to intricate cloud security challenges where clear precedents may not exist.

Main Accountabilities

• Design, implement, and maintain security controls across cloud platforms (IaaS, PaaS, and SaaS).
• Define and enforce cloud security standards, guardrails, and reference architectures.
• Secure cloud networking, identity, access management, and data protection services.
• Implement and manage cloud security tooling such as CSPM, CWPP, CIEM, and WAF solutions.
• Partner with cloud engineering and application teams to embed security into CI/CD and IaC pipelines (DevSecOps).
• Conduct cloud security risk assessments, architecture reviews, and threat modeling.
• Monitor cloud environments for misconfigurations, vulnerabilities, and security events, coordinating response with global SOC and IR teams.
• Support regulatory, audit, and compliance requirements and global security standards.
• Provide regional cloud security expertise and support global cloud security initiatives.

Knowledge & Skills

• In-depth knowledge of cloud security principles, architectures, and best practices across major cloud providers (e.g., AWS, Azure, GCP).
• Experience with cloud security tools and technologies (e.g., CASB, CSPM, CIEM, WAF).
• Proficiency in scripting/automation for cloud environments (e.g., Python, PowerShell, Terraform, CloudFormation).
• Strong understanding of network security, identity and access management, data protection, and compliance in cloud contexts.
• Ability to perform complex analysis and support the delivery of solutions to intricate cloud security problems.
• Excellent communication skills, capable of providing leadership and guidance to technical teams and stakeholders.

Education & Experience

• Bachelor’s degree in Information Security, Computer Science, Engineering, or a related field.
• 5+ years of experience in cybersecurity engineering with strong focus on cloud security.
• Hands‑on experience securing major cloud platforms (GCP, Azure, and/or AWS).
• Strong knowledge of cloud identity, networking, encryption, logging, and monitoring services.
• Experience with infrastructure‑as‑code (Terraform, ARM, Cloud Deployment Manager, or similar).
• Understanding of cloud threat models and security frameworks (NIST, CSA, MITRE).