Cloud security engineer

Icapital; Lisboa; Híbrido; EUR 140 000 - 190 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Equity

Health insurance

Paid time off

Annual bonus

Resumo da oferta

iCapital is seeking an Assistant Vice President, Cyber Cloud Security Engineer to join the Security Engineering team. This role will establish and manage cloud security programs, build new security architecture, and drive automation across iCapital's technology landscape.

The ideal candidate is a deeply technical individual contributor who can research, design, and implement security technologies, and collaborate effectively across teams and functions.

Qualificações

• 6–9 years of experience in cloud environments, with AWS as the primary platform.
• Hands-on expertise in cloud security architecture and infrastructure design.
• Proficiency with AWS-native security services (IAM, Config, KMS, Secrets Manager, CloudWatch, CloudTrail, GuardDuty).
• Experience with cloud identity and access architecture (federation, RBAC/ABAC).
• IaC tooling: AWS CDK, CloudFormation, Terraform.
• Nice to have certifications (AWS CS/S, CISSP, CCSP).

Responsabilidades

• Build and manage cloud security programs across AWS, Azure, and GCP.
• Design, implement, and validate secure cloud architectures meeting security standards.
• Apply Zero Trust principles to cloud design and access models.
• Drive automation for continuous monitoring and remediation of cloud vulnerabilities.
• Collaborate with engineering to embed security early in the development lifecycle.
• Support risk, governance, and policy development for cloud security.

Conhecimentos

Cloud security architecture

Cloud security engineering

Security automation

Ferramentas

AWS IAM

AWS Config

KMS

Secrets Manager

CloudWatch

CloudTrail

GuardDuty

Okta federation

Terraform

CloudFormation

AWS CDK

Descrição da oferta de emprego

Описание

iCapital is looking for a Assistant Vice President, Cyber Cloud Security Engineer to join the Security Engineering team, within the Information Security organization. This role will establish and manage cloud security programs, build new security architecture, drive automation, and continuously identify and address security gaps across iCapital's technology landscape. The ideal candidate is a deeply technical individual contributor who can research, design, and implement security technologies, and collaborate effectively across teams and functions.

Задачи

Build and manage Cloud Security Programs across AWS, Azure, and GCP infrastructure Design, implement, and validate secure cloud infrastructure architectures, ensuring new capabilities meet established security standards and requirements. Apply Zero Trust architecture principles and best practices across cloud infrastructure design and access models. Drive continuous detection, remediation, and resolution of cloud vulnerabilities and security misconfigurations, leveraging CSPM tooling (e.g., AWS Security Hub, Wiz, or equivalent) and automation to continuously improve and maintain cloud security posture. Build automation capabilities for continuous monitoring and alerting across cloud infrastructure. Partner with engineering teams to drive the adoption of security standards and best practices, embedding security early across the development lifecycle and supporting a shift-left security culture. Collaborate with the SOC to develop and strengthen cloud detection engineering capabilities. Assist the Risk and Governance teams with the development and implementation of cloud-related policies, procedures, and standards. Engage with Platform, DevOps, and Software Engineering teams to deliver security initiatives and provide security guidance to projects across the organization.

Требования

6–9 years of experience in cloud environments, with AWS as the primary platform, including proven hands-on expertise in cloud security architecture and infrastructure design. Proficiency with AWS-native security services, including IAM, Config, KMS, Secrets Manager, CloudWatch, CloudTrail, and GuardDuty. Experience with cloud identity and access architecture, including federation (e.g., Okta), RBAC, ABAC, and service-to-service authentication models. Hands-on experience with Infrastructure as Code tooling such as AWS CDK, CloudFormation, or Terraform.

Будет плюсом: Relevant cloud or security certifications are a plus (e.g., AWS Certified Solutions Architect, AWS Certified Security – Specialty, CISSP, or CCSP)

Условия

We believe the best ideas and innovation happen when we are together. Employees in this role will work in the office four days, with the flexibility to work remote one day (Friday). iCapital offers a comprehensive benefits package that includes a total compensation program consisting of competitive salary, annual performance bonus, and equity for all full-time employees; healthcare with 100% employer-paid health and dental insurance; and generous paid time off (PTO).