Principal Cloud Security Engineer

Visa Hunt; Portugal; Presencial; EUR 90 000 - 130 000; Tempo integral

Resumo da oferta

Damia Group is seeking a Principal Cloud Security Engineer to partner with DevOps and Architects to embed security across our cloud infrastructure in Portugal.

The Cloud Security team collaborates with engineering and trust & security to safeguard data and enable secure product development. You will lead security principles, design controls, and work with teams to embed security across the SDLC, including Kubernetes and AWS services.

Qualificações

• Proven experience with AWS security services in production, incl. IAM, Config, KMS, Secrets Manager, CloudWatch, CloudTrail, GuardDuty.
• Experience partnering with engineering teams to shift security left through the SDLC.
• Background with IaC (CDK/CloudFormation/Terraform), version control, and GitLab CI.
• Hands-on Kubernetes (AWS EKS), containers (Docker) and security posture tooling.
• Solid understanding of networking protocols (TCP/IP, TLS, VPN).
• Good written and verbal English communication.
• Currently living in Portugal and authorized to work in the country.

Responsabilidades

• Act as strategic security leader by defining cloud security principles, standards, and reference architectures.
• Help engineers build and securely operate products from the ground up.
• Assess, design, and implement security processes to meet compliance and audits.
• Perform proactive research to identify new threats and attack vectors.
• Embed shift-left security across the software development lifecycle.
• Implement and manage cloud security tooling to monitor and reduce risk.

Conhecimentos

AWS security services

Kubernetes

IaC

CI/CD tooling

Networking (TCP/IP, TLS, VPN)

English communication

Security leadership

Shift-left security

Ferramentas

Terraform

CloudFormation

GitLab CI

Docker

AWS CDK

Git

Descrição da oferta de emprego

Role description and responsibilities

Damia Group is an international tech recruitment agency with 3 decades of experience. Our arrival in Portugal, 7 years later, was set on a mission to transform IT recruitment experiences and, through them, achieve better results. We believe in long-term relationships with a transparent and relaxed mindset. In a short period, we have reached the hearts of both scale-ups and larger organisations by delivering spot-on curated candidate shortlists, increased job offer acceptance rates and shorter time-to-fill.

About the role:

As a Principal Cloud Security Engineer, the successful candidate will partner with DevOps and CI/CD engineers and their Architects team to ensure security best practices are embedded across the company's cloud infrastructure.

The Cloud Security team is a collaborative group of talented cloud security engineers working in close partnership with the engineering, platform, and trust & security teams. They are on a mission to safeguard the privacy and security of the company and its users' data, embedded directly in the heart of product development.

Responsibilities:

• Act as a strategic security leader by defining and driving cloud security principles, standards, and reference architectures across the organisation


• Use their knowledge of security architecture to help engineers build and securely operate products and services from the ground up


• Assess, design, and implement security processes and controls to meet security, compliance, and audit requirements


• Perform proactive research to identify new threats and attack vectors


• Partner with engineering teams to embed shift-left security practices throughout the software development lifecycle


• Implement and manage cloud and Kubernetes security posture management tooling to continuously monitor and reduce risk across containerised workloads

Requirements

• Proven experience working with AWS and AWS security services in a secure production environment, including IAM, Config, KMS, Secrets Manager, CloudWatch, CloudTrail, and GuardDuty


• Proven experience working closely with engineering teams and supporting them on their path to shifting security left


• Background with infrastructure as code (AWS CDK, CloudFormation, or Terraform), version control and CI tools such as GitLab and GitLab CI


• hands-on experience with Kubernetes (AWS EKS), containers (Docker, AWS ECS), K8s admission controllers and Supply Chain Security


• Solid understanding of internet and computer network protocols, including TCP/IP, TLS, and VPN


• Good written and verbal communication skills in English


• Collaborative team player with a hands-on, can-do approach to problem-solving


• Currently living in Portugal and legally authorized to work in the country

Nice to have:

• AWS Certified Security - Specialty certification or similar


• General familiarity with AI tools and large language models (e.g., Claude by Anthropic, AWS Bedrock)