Cloud Security Engineer - Hybrid - Lisbon - Mid/Senior

La Fosse; Lisboa; On-site; EUR 70,000 - 100,000; Full time

Job summary

La Fosse is seeking a Senior Cloud Security Engineer in Lisbon to join a technical security team focused on cloud-native fintech solutions. The role emphasizes building automation, controls, and tooling beyond traditional product-security setups.

You will drive security across cloud platforms, threat modelling, security architecture, and tooling, collaborating with developers, cloud engineers, and infrastructure teams to deliver secure, scalable systems.

Qualifications

• Strong background in cloud security engineering across cloud platforms.
• Hands-on experience with AWS and/or GCP.
• Experience securing containerised environments and Kubernetes.
• Solid understanding of cloud networking, infrastructure and distributed systems.

Responsibilities

• Lead design and implementation of cloud-native preventative and detective security controls.
• Collaborate with engineering teams through planning, architecture, development and testing.
• Design and review secure cloud and distributed-system architectures.
• Perform threat modelling, security reviews and technical risk assessments.
• Build automation to assess infrastructure, infrastructure-as-code and cloud environments.
• Develop security tooling and integrations using code.
• Maintain a secure production environment with cloud/platform engineering teams.
• Review security controls across containerised and Kubernetes environments.
• Conduct security testing and vulnerability assessments.
• Lead complex security engineering projects from design to delivery.
• Contribute to security architecture, strategy and tooling decisions.
• Mentor engineers and influence security decisions across the wider engineering organisation.

Skills

Cloud security

AWS/GCP

Kubernetes security

Infrastructure as Code

Python/Go scripting

Security automation

Threat modelling

Tools

Kubernetes

CI/CD pipelines

Infrastructure as Code

Job description

We are looking for a Senior Cloud Security Engineer to join a highly technical security engineering team building and securing cloud-native financial technology at scale.

This is an engineering-led security environment where the team works closely with developers, cloud engineers and infrastructure teams to design, build and operate security solutions. The focus is not simply on selecting or configuring security products - the team has a strong preference for building automation, controls and tooling themselves.

You will have the opportunity to work across cloud security, infrastructure security, threat modelling, security architecture and security automation, with significant autonomy over how complex security problems are approached.

The role

You will:

• Lead the design and implementation of cloud-native preventative and detective security controls.
• Work closely with engineering teams throughout planning, architecture, development and testing.
• Design and review secure cloud and distributed-system architectures.
• Perform threat modelling, security reviews and technical risk assessments.
• Build automation to assess infrastructure, infrastructure-as-code and cloud environments.
• Develop security tooling and integrations using code.
• Work with cloud and platform engineering teams to maintain a secure production environment.
• Review security controls across containerised and Kubernetes environments.
• Conduct security testing and vulnerability assessments.
• Lead complex security engineering projects from design through to delivery.
• Contribute to security architecture, strategy and tooling decisions.
• Mentor engineers and influence security decisions across the wider engineering organisation.

What we're looking for

• Strong experience in cloud security engineering.
• Hands-on experience with AWS and/or GCP.
• Experience securing containerised environments and Kubernetes.
• Strong understanding of cloud networking, infrastructure and distributed systems.
• Experience with infrastructure-as-code and CI/CD.
• Strong programming or scripting capability, ideally Python, Go or a similar language.
• Experience building security automation or security tooling.
• Experience with security architecture, threat modelling and technical design reviews.
• Strong understanding of security controls and how they are implemented technically.
• Experience working closely with software, platform or infrastructure engineers.
• Excellent communication skills and the ability to influence technical decisions.
• Experience with cloud provider APIs.
• Penetration testing or security testing experience.
• Knowledge of cloud security frameworks such as Well-Architected or CSA-CCM.
• Contributions to the security community through research, blogging, presentations or open-source work.

The environment

This is a particularly good opportunity for someone who wants to be a security engineer rather than a security tool administrator.

You will work alongside experienced AppSec and CloudSec engineers and highly capable developers who already understand the importance of security. Discussions can therefore get into the technical detail of how a control should actually be engineered, rather than spending time convincing engineering teams that security matters.

The team is collaborative and risk-led. Security decisions are made through evidence, technical judgement and discussion, with an emphasis on delivering the greatest security benefit for the engineering effort invested.