Staff Cybersecurity Engineer

Shape Digital; São Paulo; Híbrido; BRL 180 000 - 300 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Profit Sharing

Health and Dental Plan

Flexible Benefit

Flexible Hours

Massages and Manicure in the Office

TotalPass

Zenklub

Inclusive Environment

Day off in Your Birthday Month

Extended Maternity/Paternity Leave

Childcare Assistance

Continuous Individualized Development

Culture and Well-being

Resumo da oferta

Shape Digital is seeking a Staff Cybersecurity Engineer to drive security architecture, strategy, and scalable protections across cloud environments in Brazil. You will identify risks, implement controls, and collaborate with architects, engineers, and leadership to secure cloud platforms.

Key focus areas include IAM, encryption, SIEM, threat modeling, and DevSecOps across AWS, Azure, and Google Cloud. The role supports a hybrid work model in São Paulo and requires strong regulatory knowledge.

Qualificações

• Experience protecting cloud infrastructures and knowledge of GDPR, HIPAA, and other frameworks.
• Identity management and access control experience, including MFA and IAM solutions like AWS IAM, Azure AD.
• Data encryption and key/certificate management expertise.
• Cloud network security, including firewalls, VPNs, segmentation, and Zero Trust.
• Experience with SIEM tools (e.g., Splunk, LogRhythm) for monitoring and incident response.
• Ability to perform threat modeling and risk assessments.
• Proficiency in integrating security into the development lifecycle (DevSecOps).
• Experience in incident response and forensic analysis.
• Knowledge of automated security testing and auditing tools (OWASP ZAP, Nessus).
• Security for cloud-native apps on AWS, Azure, GCP, Kubernetes, and Docker.
• Location: São Paulo, Brazil — Hybrid work model.

Responsabilidades

• Threat identification and mitigation in cloud systems.
• Development of security solutions and controls.
• Collaborate with technical teams and executives to align security requirements.
• Oversee implementation of security measures from design to deployment.
• Post-deployment monitoring and rapid incident response.
• Ensure cloud platforms meet GDPR, HIPAA, and other regulations.
• Support cloud-native app security from design to operation.

Conhecimentos

Cloud security

IAM

Encryption

Network security

SIEM

Threat modeling

DevSecOps

Incident response

Automated testing

Cloud-native security

Location: São Paulo

Ferramentas

AWS IAM

Azure AD

Jenkins

GitLab CI

Terraform

Docker

Kubernetes

Descrição da oferta de emprego

The Staff Cybersecurity Engineer is responsible for driving the security architecture, strategy, and continuous improvement of cloud-based systems and platforms. The professional will identify and mitigate security risks, define security standards and controls, and work closely with system architects, engineers, and leadership to develop scalable and comprehensive security solutions across cloud environments.

Responsibilities:

• Threat Identification and Mitigation: Analyze cloud systems, identify vulnerabilities, and implement security solutions to mitigate risks.
• Development of Security Solutions: Create and implement security tools such as encryption and access control to protect data and infrastructure in the cloud.
• Collaboration with Technical Teams and Executive Leadership: Work with architects, engineers, and senior leadership to define and align security requirements and solutions with organizational strategies.
• Implementation of Security Measures: Oversee the implementation of security measures from design to deployment in cloud systems.
• Post-Deployment Monitoring: Monitor cloud systems for malicious activity or security incidents and respond quickly to mitigate risks.
• Compliance Assurance: Ensure cloud platforms meet security regulations such as GDPR, HIPAA, and others.
• Support for Cloud-Native Application Security: Secure cloud-native applications (microservices, containers, serverless functions) and ensure their security from design to operation.

Requirements:

• Cloud Infrastructure Security and Compliance: Experience in protecting cloud infrastructures and knowledge of security regulations such as GDPR, HIPAA, and other frameworks.
• Identity and Access Management (IAM): Experience in identity management and access control, including multi-factor authentication (MFA) and IAM solutions like AWS IAM, Azure AD.
• Encryption and Key Management: Expertise in data encryption and key and certificate management.
• Network Security and Segmentation: Knowledge of cloud network security, including firewalls, VPNs, segmentation, and practices like Zero Trust.
• Security Information and Event Management (SIEM): Experience with SIEM tools (e.g., Splunk, LogRhythm) for monitoring and incident response.
• Threat Modeling and Risk Assessment: Ability to perform threat modeling and risk assessments to mitigate vulnerabilities.
• DevSecOps Practices and Tools: Proficiency in integrating security into the development lifecycle (DevSecOps) using tools such as Jenkins, GitLab CI, Terraform, Docker, Kubernetes.
• Incident Response and Forensic Analysis: Experience in incident response and forensic analysis for preventing future incidents.
• Automated Security Testing and Auditing: Knowledge of automated security testing and auditing with tools like OWASP ZAP, Nessus.
• Cloud-Native Application Protection: Security for cloud-native applications (microservices, containers, serverless) on platforms such as AWS, Azure, Google Cloud, Kubernetes, and Docker.
• Location & Work Model: São Paulo, Brazil — Hybrid work model.

Desirable Skills:

• Security Certifications: Certifications such as CISSP, CCSP, AWS Certified Security Specialty, Azure Security Engineer, Google Cloud Professional Cloud Security Engineer are a plus.
• Cloud Platform Experience: Experience with public cloud platforms such as AWS, Microsoft Azure, Google Cloud Platform (GCP), or hybrid/private solutions.
• Ability to Work Under Pressure: Ability to handle critical incidents and make quick decisions.
• Effective Communication: Ability to communicate complex security issues to various audiences, including technical teams and executives.

Benefits:

• PPR (Profit Sharing): Possibility of extra compensation based on the company’s results, according to your performance.
• Health and Dental Plan: To ensure your care and well-being!
• Flexible Benefit: Receive an amount that can be used according to your needs, including food, transportation, education, culture, and health. You decide how to use it!
• Flexible Hours: Work at the best time for you and have a better quality of life.
• Massages and Manicure in the Office: So you can relax and feel good about yourself.
• TotalPass: To keep your health in check and take care of your body.
• Zenklub: Access to mental health and emotional well-being support.
• Inclusive Environment: We value diversity and always strive to create a space where everyone can be authentic, respected, and feel part of something bigger.
• Day off in Your Birthday Month: A day off in your birthday month to celebrate in any way you prefer
• Extended Maternity/Paternity Leave: So you can enjoy this important time with your family, with peace of mind that your professional life will remain well-supported.
• Childcare Assistance: To support you with the care of your young children.
• Continuous Individualized Development Support: We offer support for your professional growth, respecting your personal needs and goals.
• Culture and Well-being: We create an environment that values mental health, work-life balance, and encourages connection with culture.

The benefits provided with this position are not deducted from your paycheck!