cloud security engineer in fintech

HireHi; Portugal; Presencial; EUR 60 000 - 100 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Health and dental insurance

Generous PTO

Remote work 1 day per week

Equity

Resumo da oferta

iCapital ищет специалиста по облачной безопасности с опытом работы в AWS, Azure и GCP для разработки и управления программами безопасности облачных сред. Ваша задача — проектировать, внедрять и валидировать безопасные архитектуры, применять Zero Trust и выявлять уязвимости с использованием CSPM-инструментов и автоматизации.

Кандидат должен иметь 6–9 лет опыта в облачных средах, владение AWS-сервисами IAM, Config, KMS, Secrets Manager, CloudWatch, CloudTrail и GuardDuty, опыт инфраструктуры как

Qualificações

• Опыт разработки и внедрения облачных архитектур безопасности.
• Знания по IAM, Config, KMS и GuardDuty в AWS.

Responsabilidades

• Разработка и управление программами облачной безопасности AWS/Azure/GCP, внедрение Zero Trust.
• Проектирование и валидация безопасных архитектур облачных сред.
• Поиск и устранение уязвимостей и некорректной конфигурации с помощью CSPM и автоматизации.
• Разработка автоматизации мониторинга и реагирования на инциденты в облаке.
• Сотрудничество с инженерами, SOC и командами риска для обеспечения безопасности на протяжении жизненного цикла проекта.

Conhecimentos

Cloud security

AWS security services

Identity & access management

Infrastructure as Code

Security automation

Formação académica

AWS Certified Solutions Architect

AWS Certified Security – Specialty

CISSP or CCSP

Ferramentas

AWS CDK

CloudFormation

Terraform

Descrição da oferta de emprego

Описание

iCapital provides a technology landscape that includes cloud infrastructure across AWS, Azure, and GCP.

Задачи

Build and manage cloud security programs across AWS, Azure, and GCP infrastructure Design, implement, and validate secure cloud infrastructure architectures that meet established security standards and requirements Apply Zero Trust principles and best practices to cloud infrastructure design and access models Detect, remediate, and resolve cloud vulnerabilities and security misconfigurations using CSPM tools and automation Build automation for continuous monitoring and alerting across cloud infrastructure Partner with engineering teams to promote security standards and best practices throughout the development lifecycle Collaborate with the SOC to develop and strengthen cloud detection engineering capabilities Assist Risk and Governance teams in developing and implementing cloud-related policies, procedures, and standards Work with Platform, DevOps, and Software Engineering teams to deliver security initiatives and provide security guidance to projects

Требования

6–9 Years of experience in cloud environments, primarily AWS, including hands‑on expertise in cloud security architecture and infrastructure design Proficiency with AWS-native security services, including IAM, Config, KMS, Secrets Manager, CloudWatch, CloudTrail, and GuardDuty Experience with cloud identity and access architecture, including federation, RBAC, ABAC, and service-to-service authentication models Hands‑on experience with Infrastructure as Code tools such as AWS CDK, CloudFormation, or Terraform Будет плюсом: Relevant cloud or security certifications such as AWS Certified Solutions Architect, AWS Certified Security – Specialty, CISSP, or CCSP

Условия

Competitive salary, annual performance bonus, and equity 100% Employer‑paid health and dental insurance Generous paid time off (PTO) Employees in this role work in the office four days per week, with the flexibility to work remotely one day (Friday)