Senior Security Engineer | CloudSec

Gympass; Stati Uniti; Remoto; USD 180.000 - 240.000; Tempo pieno

Vantaggi offerti da questo lavoro

Home office reimbursement

Paid time off and parental leave

Wellness program and learning

Descrizione del lavoro

Gympass is seeking a senior cloud security engineer to lead security strategy across multi-cloud environments (AWS and GCP) within its information security team based in Brazil. The role drives a Zero Trust architecture, embeds Shift-Left practices into engineering workflows, and pioneers security controls for emerging AI and LLM deployments.

This is a remote position offering flexible schedule and asynchronous collaboration with distributed teams.

Competenze

• Multi-cloud security experience across AWS and GCP.
• Zero Trust posture with least-privilege identity and micro-segmentation.
• Security for containerized and serverless environments.
• Experience with SAST/DAST/SCA and IaC security in DevSecOps.
• AI security knowledge including guardrails and RAG pipelines.
• Strong English for async collaboration.

Mansioni

• Architect and govern cloud security controls across AWS and GCP.
• Embed automated security testing and threat modeling into CI/CD.
• Define runtime security and compliance for Kubernetes, EKS, GKE, and serverless.
• Design AI/LLM guardrails for RAG pipelines and Model Context Protocols.
• Evaluate risks per OWASP Top 10 for LLMs and MITRE ATLAS.
• Identify, analyze, and report vulnerabilities across the ecosystem.

Conoscenze

Multi-cloud security

Zero Trust

Kubernetes

Docker

Serverless security

Shift-Left

SAST

DAST

SCA

IaC security

AI security

English communication

Strumenti

AWS

GCP

Kubernetes

Docker

Descrizione del lavoro

Role overview

A senior cloud security engineer is needed to lead security strategy across multi-cloud environments (AWS and GCP) within an information security team based in Brazil. The role drives a Zero Trust architecture, embeds Shift-Left practices into engineering workflows, and pioneers security controls for emerging AI and LLM deployments. The position is remote.

Responsibilities

• Architect and govern cloud security controls across AWS and GCP following Zero Trust principles, including least-privilege identity and micro-segmentation
• Embed automated security testing and threat modeling into CI/CD pipelines to advance Shift-Left adoption across development teams
• Define runtime security, posture management, and compliance for containerized (Kubernetes, EKS, GKE) and serverless architectures
• Design guardrails and security boundaries for AI and LLM workloads, covering RAG pipelines, Model Context Protocol integrations, and Agentic AI workflows
• Evaluate and mitigate risks aligned with the OWASP Top 10 for LLMs and the MITRE ATLAS framework
• Identify, analyze, and report vulnerabilities across the ecosystem and manage vulnerability tooling

Requirements

• Solid experience with multi-cloud architecture and security controls across AWS and GCP
• Demonstrated work implementing Zero Trust posture, least-privilege identity, and micro-segmentation
• Strong background securing containerized environments (Kubernetes, Docker) and serverless technologies such as AWS Lambda, Cloud Run, and Cloud Functions
• Hands-on experience driving Shift-Left initiatives using SAST, DAST, SCA, and IaC security tooling inside DevSecOps pipelines
• Practical knowledge of AI security risks including prompt injection defense, AI guardrails, and securing RAG data pipelines
• Strong communication skills in English, comfortable working asynchronously with distributed teammates

Nice to have

• Experience with identity provider platforms such as Azure AD

Benefits and work setup

• Fully remote role based in Brazil
• Flexible schedule where employees shape how and when work gets done across time zones
• Home office reimbursement available at hire
• Paid time off including vacation after 6 months, additional days accruing with tenure, and a birthday holiday
• 100% paid parental leave, with extended leave and a part‑time ramp‑back period for birth parents
• Wellness subscription covering gyms, studios, digital fitness, mental wellbeing, nutrition, and family add‑ons
• Emotional wellbeing program with therapy sessions and on‑demand content
• Health, dental, and life insurance
• Learning platforms and internal mobility programs for career growth