Cloud Security Engineer — Policy-as-Code & Automation

Empleora; Colombia; A distancia; COP 515.848.000 - 574.891.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Open Paid Time Off

Parental leave

Professional development

Wellness stipend

Employee stock option awards

Descripción de la vacante

Qventus is hiring a Security Engineer to own the design and buildout of cloud and data security tooling. You will drive security policy, collaborate with internal teams, and implement preventative controls to improve overall security posture.

You will work with CNAPP/CSPM tooling, automate guardrails, and ensure secure access to sensitive data while partnering with engineering for security ownership across projects.

Formación

• Cloud security fundamentals including IAM, encryption, threat models and access controls.
• Experience with policy-as-code in CI/CD or Kubernetes (OPA) workflows.
• Familiarity with CNAPP/CSPM tools such as Orca/Wiz/Upwind and security data platforms.
• Experience handling regulated data (HIPAA) in cloud data platforms.

Responsabilidades

• Own the design, buildout, and priorities of cloud and data security engineering.
• Collaborate with teams to automate security guardrails, not gates.
• Know where sensitive data lives and develop controls for secure access.
• Partner with engineering teams so security is understood and owned, not imposed.

Conocimientos

Cloud security fundamentals

Automation scripting

Policy as code

Kubernetes security

HIPAA data handling

Threat modeling / IAM / encryption

Herramientas

Orca

Wiz

Upwind

DSPM

CIEM

SSPM

Descripción del empleo

Qventus is hiring a Security Engineer to own the design and buildout of cloud and data security tooling. You will drive security policy, collaborate with internal teams, and implement preventative controls to improve overall security posture.

You will work with CNAPP/CSPM tooling, automate guardrails, and ensure secure access to sensitive data while partnering with engineering for security ownership across projects.