Cloud Security Engineer (Hybrid - Lisbon)

Claranet Portugal; Lisboa; Híbrido; EUR 52 000 - 78 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Hybrid work model

Professional development

Resumo da oferta

Claranet Portugal is seeking a Cloud Engineer to join our Talent Team in a hybrid Lisbon setup. You will monitor cloud security posture (primarily GCP), automate remediation with Terraform and scripts, and manage CNAPP tools to detect threats across workloads and containers.

You will integrate IdPs, conduct ASM activities, and respond to incidents, while aligning with CIS/NIST/ISO 27001. Fluency in Portuguese and English is required, with up to 3 years of relevant experience.

Qualificações

• Up to 3 years of experience in Cloud Security, Cloud Engineering, or Cybersecurity, preferably with GCP.
• Strong knowledge of Terraform and Infrastructure as Code (IaC).
• Experience with automation and scripting (Python, Bash, or PowerShell).
• Solid understanding of cloud security principles, including threat modeling, vulnerability management, and incident response.
• Good networking knowledge (Firewalls, VPNs, DNS, TLS/mTLS, Zero Trust).
• Experience with Git and Linux administration/hardening.
• Familiarity with security standards and modern cloud implementation methodologies.
• Fluent in Portuguese and English.
• Interest in leveraging AI to improve productivity.

Responsabilidades

• Monitor and analyse cloud security posture across the organisation's environments (primarily GCP).
• Automate remediation of cloud security findings using Terraform, GitHub Actions and scripts.
• Manage and operate CNAPP tools to assess workloads, containers and infrastructure for threats.
• Integrate third-party tools with Cloud providers through IdPs (EntraID or Okta).
• Conduct Attack Surface Management (ASM) activities to reduce external exposure.
• Respond to cloud security incidents, supporting investigation and containment.
• Define and enforce cloud security policies aligned with CIS, NIST, ISO 27001.
• Produce security reports and dashboards for stakeholders.
• Stay updated on cloud threats and tooling.

Conhecimentos

Cloud Security

IaC

Python

Bash

Linux

Networking

Zero Trust

Git

Ferramentas

Terraform

Wiz

Prisma Cloud

Ansible

Descrição da oferta de emprego

We're fast learners, hard workers, natural collaborators... and weMake Modern Happen!

Our ambition is to unlock the potential of our digital world so that organisations everywhere can innovate and thrive securely. We aim to achieve this goal by bringing together the world’s most talented people and the most powerful technologies, combining them to address our customers' challenges and to build something stronger together.

If you share our vision, join us!

Right now, we are looking for a Cloud Engineer for a client on our Talent Team.

Your responsibilities include:

Monitor and analyse cloud security posture across the organisation's environments (primarily GCP), identifying risks, misconfigurations, and vulnerabilities.

Automate remediation of cloud security findings, reducing manual effort and accelerating response times, through solutions using Terraform (IaC), GitHub Actions and scripts using languages like Python or Bash.

Manage and operate CNAPP tools (e.g., Wiz) to continuously assess cloud workloads, containers, and infrastructure for threats and compliance gaps.

You will integrate third-party tools with Cloud providers through Identity Providers (IdP such as EntraID or Okta).

Conduct Attack Surface Management (ASM) activities, mapping and reducing the organisation's external exposure.

Respond to cloud security incidents, supporting investigation, containment, and post-incident reviews.

Define and enforce cloud security policies and guardrails, aligned with industry frameworks (e.g., CIS Benchmarks, NIST, ISO 27001).

Produce clear security reports and dashboards for technical and non-technical stakeholders.

Stay up to date with the latest cloud threats, vulnerabilities, and security tooling.

You must have:

Up to 3 years of experience in Cloud Security, Cloud Engineering, or Cybersecurity, preferably with GCP.

Strong knowledge of Terraform and Infrastructure as Code (IaC).

Experience with automation and scripting (Python, Bash, or PowerShell).

Solid understanding of cloud security principles, including threat modeling, vulnerability management, and incident response.

Good networking knowledge (Firewalls, VPNs, DNS, TLS/mTLS, Zero Trust).

Experience with Git and Linux administration/hardening.

Familiarity with security standards and modern cloud implementation methodologies.

Fluent in Portuguese and English.

Interest in leveraging AI to improve productivity.

Preferred Qualifications

GCP Professional Cloud Security Engineer certification.

Experience with CNAPP platforms such as Wiz or Prisma Cloud.

Knowledge of Attack Surface Management (ASM).

Experience with IaC tools such as Terraform and Ansible.

Experience with Apigee.

Kubernetes security knowledge or certifications (CKA, CKAD, CKS), including RBAC, Network Policies, and Pod Security.

We offer:

Integration into a dynamic and motivated team for the performance of the role.

Additional training.

Salary package according to the role performed.

Professional development.

Workplace:Hybrid - Lisbon

Claranet, Make modern happen!

Regime de trabalho híbrido.