Infrastructure Security Engineer (AWS)

Cibernos; Brasil; Hybrid; BRL 180,000 - 280,000; Full time

Job summary

Cibernos is seeking an experienced Infrastructure Security Engineer to own security across global cloud (AWS) and on-prem environments. You will drive vulnerability management, security hardening, and incident response while collaborating with DevOps and IT teams to ensure secure-by-design systems.

The role requires 5+ years in security with strong AWS, networking, and EDR/SIEM experience, and a professional English level.

Qualifications

• 5+ years in Infrastructure Security / Cybersecurity roles.
• Strong hands-on experience with AWS security.
• Solid understanding of networking principles and common vulnerabilities.
• Experience with SIEM tools and incident response.
• Experience with vulnerability scanning tools (e.g., Nessus, Nmap).
• Experience with EDR solutions (Microsoft Defender, CrowdStrike, SentinelOne).

Responsibilities

• Secure and monitor AWS environments, ensuring best practices and proactive risk mitigation.
• Manage and protect on-premise infrastructure, including Linux servers and network environments.
• Own and drive the vulnerability management lifecycle (identification, prioritization, remediation).
• Implement security hardening, patch management, and configuration standards.
• Collaborate with DevOps and Engineering teams to embed security into system design.
• Coordinate and review penetration testing activities, translating findings into actionable improvements.
• Investigate and respond to security incidents in collaboration with an external SOC using SIEM tools (Microsoft Sentinel).
• Manage endpoint security using EDR tools (Defender, CrowdStrike, SentinelOne).
• Support compliance initiatives (ISO 27001, SOC 2, Cyber Essentials+)
• Communicate risks, findings, and progress to technical and non-technical stakeholders

Skills

Cloud Security (AWS)

Vulnerability Management

Infrastructure & Network Security

SIEM & Incident Response

Endpoint Security (EDR)

Compliance & Risk Management

Education

CISSP certification (preferred)

Job description

We are looking for an experienced Infrastructure Security Engineer to take ownership of securing a global technology environment across cloud (AWS) and on-premise infrastructure. This role sits at the core of the security function, leading vulnerability management, strengthening infrastructure security, and working closely with DevOps, Engineering, and IT teams to ensure systems are secure by design.

Key Responsibilities

• Secure and monitor AWS environments, ensuring best practices and proactive risk mitigation
• Manage and protect on-premise infrastructure, including Linux servers and network environments
• Own and drive the vulnerability management lifecycle (identification, prioritization, remediation)
• Implement security hardening, patch management, and configuration standards
• Collaborate with DevOps and Engineering teams to embed security into system design
• Coordinate and review penetration testing activities, translating findings into actionable improvements
• Investigate and respond to security incidents in collaboration with an external SOC using SIEM tools (Microsoft Sentinel)
• Manage endpoint security using EDR tools (Defender, CrowdStrike, SentinelOne)
• Support compliance initiatives (ISO 27001, SOC 2, Cyber Essentials+)
• Communicate risks, findings, and progress to technical and non-technical stakeholders

Requirements

• 5+ years of experience in Infrastructure Security / Cybersecurity roles
• Strong hands-on experience with AWS security
• Solid understanding of networking principles and common vulnerabilities
• Experience with SIEM tools and incident response
• Experience with vulnerability scanning tools (e.g., Nessus, Nmap)
• Experience with EDR solutions (Microsoft Defender, CrowdStrike, SentinelOne)
• Familiarity with security frameworks (ISO 27001, SOC 2)
• CISSP certification (preferred)
• Strong problem-solving and communication skills
• Professional level of English

Key Skills

• Cloud Security (AWS)
• Vulnerability Management
• Infrastructure & Network Security
• SIEM & Incident Response
• Endpoint Security (EDR)
• Compliance & Risk Management

Why Join?

• High-impact role with ownership over infrastructure security
• Work in a global, security-driven organization
• Exposure to modern cloud environments and enterprise-grade security practices
• Collaborative environment across engineering, DevOps, and security teams