Senior Cloud Security & DevSecOps Engineer

1GLOBAL; Lisboa; Híbrido; EUR 90 000 - 130 000; Tempo integral

Resumo da oferta

1GLOBAL is seeking a SeniorDevSecOps/Cloud Security Engineer to strengthen and automate security across cloud and hybrid infrastructure. You will implement cloud-native security controls in AWS, harden Kubernetes environments, and drive best practices across CI/CD pipelines.

You will embed security into every stage of the infrastructure lifecycle, proactively identify risks, and collaborate with DevOps, Platform, and IP/Network teams to ensure secure-by-default practices.

Qualificações

• Minimum 3+ years of experience in Cloud Security/DevSecOps/Infrastructure Security.
• Strong AWS security fundamentals (IAM, KMS, GuardDuty, Config, Security Hub).
• Hands-on Kubernetes security (RBAC, NetworkPolicies, pod security, image scanning).
• Infrastructure as Code (Terraform) and Git-based workflows.
• Scripting for automation (Python or Bash).
• Experience with vulnerability management and container security.

Responsabilidades

• Design, implement, and evolve scalable cloud security controls across AWS multi-account environments using security-as-code principles.
• Own Kubernetes security architecture including workload isolation, RBAC, pod security standards, and network segmentation.
• Embed security automation into CI/CD pipelines, including image scanning, IaC validation, and policy enforcement.
• Continuously assess cloud and Kubernetes environments for vulnerabilities, misconfigurations, and emerging threats.
• Design and maintain strong IAM and secrets management practices, enforcing least-privilege access.
• Partner with DevOps, Platform, and IP/Network teams to deliver security controls as code and by design.
• Analyze network traffic and security telemetry using flow logs, metrics, and targeted packet inspection where required.
• Ensure alignment with internal security policies and external frameworks (CIS, NIST, ISO 27001, etc.).
• Produce and maintain clear documentation, including security architectures, runbooks, and incident response playbooks.
• Act as a security champion, driving best practices, awareness, and secure engineering culture across teams.

Conhecimentos

Cloud Security

DevSecOps

Kubernetes security

Linux security

Scripting (Python/Bash)

Threat monitoring

Troubleshooting

WAF/DDoS protection

Ferramentas

Terraform

Git workflows

Container security

tcpdump

Wireshark

Suricata

Kubernetes

Descrição da oferta de emprego

1GLOBAL is seeking a SeniorDevSecOps/Cloud Security Engineer to strengthen and automate security across cloud and hybrid infrastructure. You will implement cloud-native security controls in AWS, harden Kubernetes environments, and drive best practices across CI/CD pipelines.

You will embed security into every stage of the infrastructure lifecycle, proactively identify risks, and collaborate with DevOps, Platform, and IP/Network teams to ensure secure-by-default practices.