Cloud Security Engineer

Richemont; Portugal; On-site; EUR 50,000 - 70,000; Full time

Benefits offered by this job

Personal development opportunities

Participation in conferences and summits

Dynamic team environment

Job summary

A leading luxury goods company is seeking a Cloud Security Engineer to enhance its cloud security posture within the Governance & Architecture team. The role involves developing security solutions, fostering collaboration between product and cybersecurity teams, and providing practical guidance on security best practices. Candidates should have 2-3 years of experience in a cloud environment, knowledge of cloud services, and excellent communication skills. This position offers a dynamic team environment focused on personal development and involvement in cloud transformation projects.

Qualifications

• Minimum 2‑3 years of experience in a cloud environment.
• Proven track record in developing cloud security solutions.
• Deep understanding of cloud services and one or more cloud certifications.

Responsibilities

• Contribute to a complete stack of solutions for cloud security.
• Provide guidance to engineering teams on security controls.
• Facilitate collaboration between product and cybersecurity teams.

Skills

Cloud security solutions

Collaboration

Understanding of cloud providers (AWS, Alibaba Cloud, GCP)

Communication skills

Container technologies (Kubernetes, Anthos)

Data protection

Tools

Terraform

Security frameworks

Job description

Richemont, one of the world leaders in the luxury sector, has various Houses specializing in jewelry, watches and high‑end accessories. Each Maison proudly embodies a tradition of style, quality and craftsmanship and Richemont strives to preserve the heritage and identity specific to each of them. At the same time, we are committed to innovating and designing new products in line with the values of our Houses, through a process of permanent creativity.

CONTEXT

As a Cloud Security Engineer, you will be part of the Governance & Architecture team within the Cloud & DevOps Services department. You are pivotal in enabling and enhancing our security posture, allowing streamlined and secure cloud development and deployment processes. You participate in designing, implementing, and continuously improving our security frameworks. Your proficiency in secured Cloud & DevOps practices and technologies cultivates collaboration between development and operations teams.

HOW WILL YOU MAKE AN IMPACT?

• Contribute to and enhance a complete stack of solutions for cloud security & DevSecOps management from a people, process, and technology perspective. This includes but is not limited to CSPM, CWP, SAST, secret detection, policy as code, and Infrastructure as Code modules review. (tem de ter conhecimento)
• Provide practical guidance to engineering and project teams to support the implementation of security controls, guidelines, and best practices.
• Be a driving element and enable greater cooperation between product teams, cybersecurity teams, and compliance functions, helping quantify the risk and define relevant control objectives and activities to secure cloud workloads.
• Contribute to cloud security governance (including participating in committees, building dedicated dashboards with associated KPIs, and evangelizing to other teams).
• Be autonomous and proactive; Able to understand functional and technical requirements, identify gaps, and suggest improvements.

HOW WILL YOU EXPERIENCE SUCCESS WITH US?

• Minimum 2‑3 years of experience in a cloud environment, with a proven track record in developing and implementing effective cloud security solutions and managing security challenges.
• A deep understanding of cloud providers' services, especially AWS, Alibaba Cloud, or GCP, with one or more cloud certifications such as AWS Certified Security.
• Experience in management and definition of security in the software development lifecycle (SDLC) is a plus.
• Experience with OWASP Testing Guide v3 / 4 and OWASP TOP 10 – Security Engineering.
• Experience in data architecture, protection, and mitigating data exfiltration risks on sensitive data (PII).
• Understanding in container technologies (Kubernetes, Anthos).
• Hands‑on technical experience in Security Architecture, Automation & Configuration Management, Integration and Deployment (Terraform).
• Strong verbal and written communication skills and ability to share technical ideas in business‑friendly language.
• Fluent in English, with also a good level of French.

HOW DO WE KEEP YOU SMILING?

• In a young and dynamic team environment focusing on personal development (training, conferences, certifications, etc.), you will participate in our Cloud transformation journey at Richemont Group.
• You will work with a multicultural stakeholder (Maison's and markets) and for a great company in the luxury industry.
• You will be able to participate in Conferences and Summits about cloud providers' technologies and provide guidance and feedback regarding technologies available in the market.
• You will be able to work with an open‑minded and self‑learner team in a cutting‑edge technical environment to provide excellent value to the business.

#Richemont #WeCraftTheFuture