Senior Cloud Security Engineer - AWS, K8s & Compliance

Gorilla Logic, Inc.; Colombia; On-site; COP 286,670,000 - 414,079,000; Full time

Job summary

Gorilla Logic, Inc. seeks a hands-on Cloud Security Engineer in Colombia or Costa Rica to own day-to-day security operations and support our compliance programs. You will act as the security point of contact, backed by a DevOps team for execution.

The role requires strong experience with AWS security, Terraform, Kubernetes security, and CI/CD security practices, with potential exposure to SOC 2 audits and federal compliance programs.

Qualifications

• Hands-on AWS security: IAM and least-privilege design, GuardDuty, Security Hub, CloudTrail.
• Security alert triage and incident response in cloud environments.
• Comfortable working in Terraform and shipping changes through pull requests.
• Kubernetes security fundamentals (RBAC, workload hardening).
• Vulnerability management: scanning, prioritization, remediation coordination with engineers.
• Experience supporting SOC 2 audits and providing control evidence.
• CI/CD and supply-chain security awareness (GitHub Actions, dependency/image scanning).

Responsibilities

• Own day-to-day security operations and support our compliance programs.
• You will be the security point of contact for the company, backed by DevOps for execution.

Skills

AWS security

IAM/least-privilege

GuardDuty

Security Hub

CloudTrail

Incident response

Terraform

Kubernetes security

RBAC

Vulnerability management

SOC 2 audits

GitHub Actions

CI/CD

Supply-chain security

Tools

Terraform

GitHub Actions

Kubernetes

Job description

Gorilla Logic, Inc. seeks a hands-on Cloud Security Engineer in Colombia or Costa Rica to own day-to-day security operations and support our compliance programs. You will act as the security point of contact, backed by a DevOps team for execution.

The role requires strong experience with AWS security, Terraform, Kubernetes security, and CI/CD security practices, with potential exposure to SOC 2 audits and federal compliance programs.