Cloud security engineer

La Fosse; Lisboa; On-site; EUR 60,000 - 90,000; Full time

Job summary

La Fosse is seeking a Cloud Security Engineer to join an engineering-led security team. The role focuses on securing cloud infrastructure, improving security architecture, and developing practical cloud security solutions in collaboration with cloud, platform, and software teams.

The ideal candidate enjoys building and automating security solutions and brings hands-on experience with major cloud platforms, IaC, and containerized environments.

Qualifications

• Experience in Cloud Security Engineering, DevSecOps, Platform Security or Cloud Infrastructure Engineering.
• Hands-on experience with at least one major cloud platform, ideally AWS or GCP.
• Experience automating security controls and building Infrastructure as Code security.

Responsibilities

• Design, implement and maintain security controls across cloud environments.
• Work closely with engineering teams to improve cloud security architecture.
• Identify and remediate cloud infrastructure vulnerabilities and misconfigurations.
• Develop automation and tooling to improve cloud security and operational efficiency.
• Implement security best practices across infrastructure, identity and access management.
• Secure cloud-native environments, workloads and containerised applications.
• Improve Infrastructure as Code security and integrate security into deployment pipelines.
• Support cloud security monitoring, vulnerability management and incident prevention.
• Evaluate emerging technologies and identify opportunities to strengthen cloud security.

Skills

Cloud security

DevSecOps

Terraform

Kubernetes

Programming languages

Tools

Terraform

Kubernetes

Cloud platforms

Job description

Описание

We are looking for Cloud Security Engineers to join an engineering-led security team within a growing technology business. This is a hands-on engineering position focused on securing cloud infrastructure, improving security architecture and developing practical solutions to complex cloud security challenges. You'll work closely with cloud infrastructure, platform and software engineering teams to ensure security is embedded into the design, development and operation of cloud environments. We're particularly interested in engineers who enjoy building, automating and improving security solutions, rather than simply managing security platforms or monitoring alerts.

Задачи

Design, implement and maintain security controls across cloud environments. Work closely with engineering teams to improve cloud security architecture. Identify and remediate cloud infrastructure vulnerabilities and misconfigurations. Develop automation and tooling to improve cloud security and operational efficiency. Implement security best practices across infrastructure, identity and access management. Secure cloud-native environments, workloads and containerised applications. Improve Infrastructure as Code security and integrate security into deployment pipelines. Support cloud security monitoring, vulnerability management and incident prevention. Evaluate emerging technologies and identify opportunities to strengthen cloud security.

Требования

Experience in Cloud Security Engineering, DevSecOps, Platform Security or Cloud Infrastructure Engineering. Strong hands-on experience with at least one major cloud platform, ideally AWS or GCP. Ability to write code or scripts using languages such as Python, Go, Java or PowerShell. Experience with Infrastructure as Code, particularly Terraform. Understanding of Kubernetes, containers and cloud-native architectures. Knowledge of cloud security principles, including IAM, networking, encryption and workload security. Experience automating security controls and improving infrastructure security. A strong engineering mindset and the ability to work directly with technical teams. Ownership of cloud security architecture and engineering initiatives. Experience designing and implementing security solutions at scale. Strong technical expertise across cloud infrastructure, automation and security controls. Ability to influence engineering standards and mentor other technical professionals.

Условия

You'll be joining a security function that values engineering capability and practical problem-solving. The team is focused on building secure, scalable cloud environments and developing solutions rather than relying solely on third-party tooling.