Senior DevSecOps Engineer (São Paulo based)

1global; Belo Horizonte; On-site; BRL 180,000 - 360,000; Full time

Benefits offered by this job

Meal allowance (R$)

Health insurance with SulAmérica

Extended parental leave

Daycare allowance

Job summary

1GLOBAL is seeking a Senior DevSecOps/Cloud Security Engineer to strengthen and automate security across cloud and hybrid infrastructure. You will lead cloud security controls in AWS, harden Kubernetes environments, and drive best practices across CI/CD pipelines.

The role focuses on vulnerability management, network protection, and secure-by-default practices, working with DevOps, Platform, and IP teams to ensure comprehensive security.

Qualifications

• Minimum 3+ years in Cloud Security / DevSecOps / Infrastructure Security
• Strong AWS security fundamentals (IAM, KMS, GuardDuty, Config, Security Hub)
• Solid Linux security and cloud networking fundamentals
• Hands-on Kubernetes security (RBAC, NetworkPolicies, pod security, image scanning)
• Infrastructure as Code (Terraform) and Git-based workflows
• Scripting for automation (Python or Go or Bash)
• Experience with vulnerability management and container security
• Security-first mindset with strong Troubleshooting skills
• Experience with WAFs and cloud DDoS protection
• Comfortable with packet inspection, flow analysis, and traffic monitoring

Responsibilities

• Design, implement, and evolve scalable cloud security controls across AWS multi-account environments using security-as-code principles
• Own Kubernetes security architecture including workload isolation, RBAC, pod security standards, and network segmentation
• Embed security automation into CI/CD pipelines, including image scanning, IaC validation, and policy enforcement
• Continuously assess cloud and Kubernetes environments for vulnerabilities, misconfigurations, and emerging threats
• Design and maintain strong IAM and secrets management practices, enforcing least-privilege access
• Partner with DevOps, Platform, and IP/Network teams to deliver security controls as code and by design
• Analyze network traffic and security telemetry using flow logs, metrics, and targeted packet inspection where required
• Ensure alignment with internal security policies and external frameworks (CIS, NIST, ISO 27001, etc.)
• Produce and maintain clear documentation, including security architectures, runbooks, and incident response playbooks
• Act as a security champion, driving best practices, awareness, and secure engineering culture across teams

Skills

Cloud Security

DevSecOps

Infrastructure Security

AWS security fundamentals

Kubernetes security

Security automation

IAM & secrets management

Vulnerability management

Threat monitoring

Security mindset

Tools

AWS

Kubernetes

Terraform

Git workflows

CI/CD tooling

Python/Bash scripting

vulnerability scanners

Networking basics

tcpdump/Wireshark

Job description

1GLOBAL is a technology-driven global mobile communications provider helping enterprises and consumer brands deliver seamless connectivity worldwide. Powered by a best-in-class telecom platform, proprietary eSIM technology, and its own mobile core network across 15 countries, 1GLOBAL operates as a fully regulated telecommunications provider in 43 countries.

Founded in 2022, 1GLOBAL has rapidly become one of Europe's fastest-growing telecom technology companies, connecting more than 80 million people and devices globally. Our customers include leading banks, multinational enterprises, global retailers, travel companies, payment service providers, and digital-first businesses.

Headquartered in the Netherlands, with R&D hubs in Lisbon, Berlin, and São Paulo, 1GLOBAL employs over 550 professionals across 16 countries. With annual revenues exceeding US$200 million and a strong track record of profitability, we continue to invest in innovation, infrastructure, and international expansion as we redefine the future of global mobile connectivity.

About the Ideal Candidate

We are looking for a talentedSeniorDevSecOps/ Cloud Security Engineerto join our Technology Department, with a focus on strengthening and automating our security posture across cloud and hybrid infrastructure.

As aDevSecOps/Cloud SecurityEngineer, you willbe responsible forembedding security into every stage of our infrastructure lifecycle, from design to deployment. You will lead the implementation of cloud-native security controls in AWS, harden Kubernetes environments, and drive best practices across CI/CD pipelines. Your role includes continuous vulnerability management, network protection,monitoring forthreats, and working with development,DevOpsand IP teams to ensure secure-by-default practices.You'llalso proactivelyidentifyrisks, secure network perimeters, and automate remediation wherever possible.

About the Role

• Design, implement, and evolve scalable cloud security controls across AWS multi-account environments using security-as-code principles
• Own Kubernetes security architecture including workload isolation, RBAC, pod security standards, and network segmentation
• Embed security automation into CI/CD pipelines, including image scanning,IaCvalidation, and policy enforcement
• Continuously assess cloud and Kubernetes environments for vulnerabilities, misconfigurations, and emerging threats
• Design andmaintainstrong IAM and secrets management practices, enforcing least-privilege access
• Partner with DevOps, Platform, and IP/Network teams to deliver security controls as code and by design
• Analyze network traffic and security telemetry using flow logs, metrics, and targeted packet inspection whererequired
• Ensure alignment with internal security policies and external frameworks (CIS, NIST, ISO 27001, etc.)
• Produce andmaintainclear documentation, including security architectures, runbooks, and incident response playbooks
• Act as a security champion, driving best practices, awareness, and secure engineering culture across teams
  

About Us

1GLOBAL is a technology-driven global mobile communications provider helping enterprises and consumer brands deliver seamless connectivity worldwide. Powered by a best-in-class telecom platform, proprietary eSIM technology, and its own mobile core network across 15 countries, 1GLOBAL operates as a fully regulated telecommunications provider in 43 countries.

Founded in 2022, 1GLOBAL has rapidly become one of Europe's fastest-growing telecom technology companies, connecting more than 80 million people and devices globally. Our customers include leading banks, multinational enterprises, global retailers, travel companies, payment service providers, and digital-first businesses.

Headquartered in the Netherlands, with R&D hubs in Lisbon, Berlin, and São Paulo, 1GLOBAL employs over 550 professionals across 16 countries. With annual revenues exceeding US$200 million and a strong track record of profitability, we continue to invest in innovation, infrastructure, and international expansion as we redefine the future of global mobile connectivity.

About the Ideal Candidate

We are looking for a talentedSeniorDevSecOps/ Cloud Security Engineerto join our Technology Department, with a focus on strengthening and automating our security posture across cloud and hybrid infrastructure.

As aDevSecOps/Cloud SecurityEngineer, you willbe responsible forembedding security into every stage of our infrastructure lifecycle, from design to deployment. You will lead the implementation of cloud-native security controls in AWS, harden Kubernetes environments, and drive best practices across CI/CD pipelines. Your role includes continuous vulnerability management, network protection,monitoring forthreats, and working with development,DevOpsand IP teams to ensure secure-by-default practices.You'llalso proactivelyidentifyrisks, secure network perimeters, and automate remediation wherever possible.

About the Role

• Design, implement, and evolve scalable cloud security controls across AWS multi-account environments using security-as-code principles
• Own Kubernetes security architecture including workload isolation, RBAC, pod security standards, and network segmentation
• Embed security automation into CI/CD pipelines, including image scanning,IaCvalidation, and policy enforcement
• Continuously assess cloud and Kubernetes environments for vulnerabilities, misconfigurations, and emerging threats
• Design andmaintainstrong IAM and secrets management practices, enforcing least-privilege access
• Partner with DevOps, Platform, and IP/Network teams to deliver security controls as code and by design
• Analyze network traffic and security telemetry using flow logs, metrics, and targeted packet inspection whererequired
• Ensure alignment with internal security policies and external frameworks (CIS, NIST, ISO 27001, etc.)
• Produce andmaintainclear documentation, including security architectures, runbooks, and incident response playbooks
• Act as a security champion, driving best practices, awareness, and secure engineering culture across teams
  

Requirements

About You

• A minimum of3+yearsCloud Security /DevSecOps/ Infrastructure Security
• Strong AWS security fundamentals (IAM, KMS,GuardDuty, Config, Security Hub)
• Solid Linux security and cloud networking fundamentals
• Hands-on Kubernetes security (RBAC,NetworkPolicies, pod security, image scanning)
• Infrastructure as Code (Terraform) and Git-based workflows
• Scripting for automation (PythonorGoorBash)
• Experience with vulnerability management and container security
• Security-first mindset with strong troubleshooting skills
• Experience with WAFs and cloud DDoS protection
• Comfortable withpacket inspection, flow analysis,and traffic monitoring (tcpdump, Wireshark, Suricata, etc.)
  

Benefits

• CLT contract —enjoy job stability and reliable benefits that value your work
• Quarterly performance bonuses to reward your hard work and achievements
• Meal allowance paid into Caju card—R$100per working day
• Extended parental leave—180 days of maternity leave and 20 days of paternity leave
• Health insurance with SulAmérica —50% covered by the company
• Daycare allowance provided to mothers with children under 3 years old —R$500 per month per child

Why 1GLOBAL?

• Growth Opportunities:Advance your career in one of the fastest growing telecommunications companies, expanding over 50% year-on-year under the leadership of successful tech entrepreneurs.
• Major Transaction Exposure:Be in the driver's seat for transactions that will have an impact on the future telco industry.
• Work with a Talented Team:From the Board and the Founders to the Senior Management Team, you will collaborate daily with the most capable and renowned external advisors and constantly being exposed to talented and driven individuals.
• Dynamic Work Environment:Thrive in a collaborative, fast-paced workplace where innovation is encouraged, and every contribution counts.
• Professional Development:Work alongside industry experts to enhance your skills and knowledge in acutting-edgefield.
• International Experience:Gain opportunities to work in different 1GLOBAL offices around the world as you grow within the company.
• Open Communication Culture:Join a team where your ideas are heard, and open dialogue is encouraged, fostering a supportive and transparent work environment.
• Get Things Done Attitude:Be part of a results-driven team that values efficiency, creativity, and the drive to make a tangible impact in the industry.

1GLOBAL is an equal opportunity employer, we value your character as much as your talent. Diversity drives our innovation, and we offer a collaborative, dynamic, and international work environment. We are excited for you to join our mission to revolutionise connectivity globally.

Legal Notice

This job advert and its content are the property of 1GLOBAL and are protected by copyright and other intellectual property rights. Copying, reproducing, republishing or distributing this advert, in whole or in part, without 1GLOBAL's prior written consent is prohibited. 1GLOBAL reserves all rights and may take appropriate action against any unauthorised use.

Legitimate 1GLOBAL vacancies only redirect candidates to its official application channels, including LinkedIn and Workable, and 1GLOBAL never charges fees or request payments as part of our recruitment process. If you are unsure whether a vacancy is genuine, please refer to 1GLOBAL careers page at https://www.1global.com/vacancies or contact [e-mail].