Cloud Security Engineer (Mid-Level)

IT Cardinal Partners LLC; Teletrabalho; BRL 385.000 - 496.000; Tempo integral

Resumo da oferta

A technology consulting firm is seeking a Cloud Security Engineer in a remote position from Brazil. This mid-level role focuses on supporting security operations across GCP and AWS environments. The ideal candidate has 4-6 years of experience and hands-on skills in cloud security tools, GCP Security Command Center, and compliance standards. Responsibilities include managing security controls, assisting with configuration tasks, and contributing to documentation. A solid foundation in AWS fundamentals is also required.

Qualificações

• 4-6 years of experience in cloud, infrastructure, or security engineering roles.
• Hands-on experience with GCP Security Command Center.
• Experience using Wiz for CSPM and risk identification.
• Exposure to Palo Alto security tools like Cortex XDR.
• Working knowledge of AWS and security fundamentals.
• Experience supporting compliance or regulated environments.

Responsabilidades

• Support implementation and management of cloud security controls in GCP.
• Assist with configuration and monitoring of Wiz for cloud posture management.
• Support Palo Alto security tools for monitoring and alert response.
• Help validate security controls tied to compliance requirements.
• Contribute to documentation and knowledge transfer.

Conhecimentos

Cloud security tools

GCP Security Command Center

AWS security fundamentals

Palo Alto security tools

Compliance (HIPAA, HITRUST, SOC2)

Monitoring and alert triage

Ferramentas

Wiz

Terraform

Python

PowerShell

Descrição da oferta de emprego

Cloud Security Engineer (Mid-Level) Location : Remote in Brazil (must)

Duration : 12+ Months

Seniority : Mid‑Level (4–6 years’ experience)

Summary

We are seeking a Cloud Security Engineer with hands‑on experience supporting cloud security tools and day‑to‑day security operations across GCP and AWS environments. This role will support our customers’ Cloud and Security teams by assisting with security monitoring, configuration, posture management, and compliance‑related activities.

This is a supporting engineering role. The focus is on maintaining and optimizing existing security tools and controls, not owning architecture design or leading net‑new initiatives.

Core Responsibilities (Support‑Focused)

• Supporting implementation and day‑to‑day management of cloud security controls in GCP using Security Command Center (SCC)
• Assisting with configuration, monitoring, and tuning of Wiz for cloud posture management and risk detection
• Supporting Palo Alto security tools, including cloud firewalls and Cortex XDR, with an emphasis on monitoring and alert response
• Assisting with AWS security support, including IAM configuration, logging, GuardDuty findings, and general security hygiene
• Supporting cloud security monitoring and incident response workflows in coordination with SOC and SecOps teams
• Helping validate security controls and configurations tied to HIPAA, HITRUST, and SOC2 requirements
• Assisting with policy enforcement, configuration reviews, and remediation activities based on established governance standards
• Contributing to documentation, runbooks, and knowledge transfer for cloud and security teams
• (Bonus) Assisting with M365 / O365 security configuration, identity controls, or conditional access policies

Required Skills & Experience

• 4–6 years of experience in cloud, infrastructure, or security engineering roles
• Hands‑on experience supporting GCP Security Command Center (SCC)
• Experience using Wiz for CSPM, risk identification, or posture management
• Exposure to Palo Alto security tools such as Prisma, Cortex XDR, or cloud firewalls
• Working knowledge of AWS security fundamentals (IAM, GuardDuty, logging, monitoring)
• Understanding of identity, access management, and cloud governance concepts
• Experience supporting compliance or regulated environments (HIPAA, HITRUST, SOC2, or similar)
• Familiarity with security monitoring, alert triage, and remediation workflows

Nice to Have

• Experience with M365 security features such as conditional access or identity protection
• Exposure to container or workload security in cloud environments
• Basic experience with infrastructure‑as‑code or scripting (Terraform, Python, or PowerShell)