Cloud Engineer GCP

Caixa Mágica Software; Lisboa; Presencial; EUR 30 000 - 55 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Health and Life Insurance

Social events and team buildings

Training in latest technologies

Coffee, fruits, snacks

Resumo da oferta

Caixa Mágica Software is seeking a Cloud Security Engineer to monitor, improve, and automate our cloud security posture with a focus on Google Cloud Platform. You will identify risks, automate remediation, and operate CNAPP tools to protect workloads and infrastructure.

The role requires 0–3 years in cloud security or related fields, strong scripting skills, and fluency in Portuguese and English. Join a dynamic team in an evolving security landscape.

Qualificações

• Student background in Computer Science Engineering or similar.
• Up to 3 years of hands-on experience in Cloud Security, Cloud Engineering, or Cybersecurity (preferably Google Cloud).
• Proficiency in Terraform for infrastructure provisioning and security policy enforcement.
• Ability to automate repetitive tasks using Bash/PowerShell/Python.

Responsabilidades

• Monitor cloud security posture across environments, primarily GCP.
• Automate remediation of findings using Terraform, GitHub Actions, and scripts (Python/Bash).
• Operate CNAPP tools to assess workloads, containers, and infrastructure.

Conhecimentos

Terraform

Bash/PowerShell/Python

Linux

Networking basics

Git workflows

Threat modelling

Vulnerability management

Incident response

Cloud security

Portuguese & English fluency

Formação académica

Computer Science Engineering or similar

Ferramentas

Wiz

Prisma Cloud

Apigee

Terraform (IaC)

Ansible

Descrição da oferta de emprego

We are looking for a Cloud Security Engineer to help monitor, improve, and automate the organisation’s cloud security posture, with a strong focus on GCP environments. The role involves identifying risks, vulnerabilities, and misconfigurations, operating CNAPP tools, supporting incident response, and defining cloud security policies aligned with industry standards.

What will you do?

• Monitor and analyse cloud security posture across the organisation's environments (primarily GCP), identifying risks, misconfigurations, and vulnerabilities.
• Automate remediation of cloud security findings, reducing manual effort and accelerating response times, through solutions using Terraform (IaC), GitHub Actions and scripts using languages like Python or Bash.
• Manage and operate CNAPP tools (e.g., Wiz) to continuously assess cloud workloads, containers, and infrastructure for threats and compliance gaps.
• You will integrate third-party tools with Cloud providers through Identity Providers (IdP such as EntraID or Okta).
• Conduct Attack Surface Management (ASM) activities, mapping and reducing the organisation's external exposure.
• Respond to cloud security incidents, supporting investigation, containment, and post-incident reviews.
• Define and enforce cloud security policies and guardrails, aligned with industry frameworks (e.g., CIS Benchmarks, NIST, ISO 27001).
• Produce clear security reports and dashboards for technical and non-technical stakeholders.
• Stay up to date with the latest cloud threats, vulnerabilities, and security tooling.

What are we looking for?

• Student background of Computer Science Engineering or similar
• Up to 3 years of hands‑on experience in a Cloud Security, Cloud Engineering, or Cybersecurity role (preferably using Google Cloud).
• Proficiency in Terraform for infrastructure provisioning and security policy enforcement.
• Ability to automate repetitive tasks (scripting skills in Bash/PowerShell/Python)
• Solid understanding of modern information implementation methodologies and standards, especially in cloud environments.
• Strong foundations in cybersecurity principles: threat modelling, vulnerability management, incident response.
• Good understanding of networking concepts: firewalls, VPNs, DNS, TLS/mTLS, Zero Trust architecture.
• Experience with git practices and patterns.
• Strong Linux knowledge (administration, hardening, scripting).
• Willingness to explore the benefits of AI to improve our productivity.
• Fluency in Portuguese and English (speaking, reading and writing).

We value, by order of priority:

• Professional Cloud Security Engineer certification on Google Cloud Platform (GCP)
• Hands‑on experience with CNAPP tools (e.g., Wiz, Prisma Cloud, or equivalent) for cloud workload protection.
• Familiarity with Attack Surface Management (ASM) tools and methodologies.
• Terraform certification or Experience with Infrastructure-as-Code (IaC) practices and patterns – Terraform, Ansible, etc.
• Experience with Apigee - API Management platform
• Kubernetes certifications (CKA, CKAD or CKS) or knowledge of Kubernetes security (pod security policies, network policies, RBAC).

What can you expect from us?

• A permanent job contract for a long term project;
• Tech equipment + SIM Card + personal smartphone;
• Health and Life Insurance;
• Social events and team buildings;
• The commitment of letting you grow with us, and be rewarded accordingly;
• A dynamic and young team that will be always there to support you;
• Training in the latest technologies;
• Coffee, fruits, snacks and a warm welcoming when you pass by the office.