Senior Cloud Security Engineer

Company Overview 1GLOBAL is a technology-driven global mobile communications provider dedicated to empowering enterprises worldwide to unlock the full growth potential of mobile connectivity. With a best-in-class telecom technology platform, a comprehensive suite of globally viable regulatory licenses, and privileged access to the telecom wholesale market, 1GLOBAL delivers seamless compliance and connectivity solutions. With 2024 full-year revenue exceeding US$100 million and in line to exceed US$200 million in FY25, 1GLOBAL is a profitable business generating significant cash flows to fund ongoing investments in infrastructure and transformation. Position Overview We are looking for a talented Senior DevSecOps / Cloud Security Engineer to join our Technology Department, focused on strengthening and automating our security posture across cloud and hybrid infrastructure. The role is open for locations in São Paulo, Brazil or Israel . As a DevSecOps / Cloud Security Engineer , you will embed security into every stage of our infrastructure lifecycle, from design to deployment, lead implementation of cloud-native controls in AWS, harden Kubernetes environments, and drive best practices across CI/CD pipelines. Key Responsibilities Design and implement scalable cloud security controls in AWS multi‑account environments Lead Kubernetes security architecture, including PodSecurity, RBAC, and network policies Enforce zero trust network architecture and secure segmentation across cloud and hybrid environments Integrate security automation into CI/CD pipelines (image scanning, SAST, IaC analysis) Deploy and manage CrowdStrike, Tenable, and similar endpoint and vulnerability management tools Continuously monitor infrastructure for vulnerabilities, threats, and misconfigurations Enforce least privilege IAM policies and secure secrets management Conduct regular audits, penetration testing, and hardening of cloud workloads and host systems Conduct network traffic inspection using tools like VPC Flow Logs, packet capture, or NetFlow Collaborate with DevOps and IP teams on security‑as‑code principles Maintain compliance with internal policies and external standards (e.g. CIS, NIST, ISO 27001) Tune and respond to alerts from WAF, IDS/IPS, and SIEM systems Document security controls, incident response playbooks, and operational runbooks Champion a security‑first culture through collaboration, training, and awareness Requirements Minimum of 5 years in DevSecOps, Cloud Security, or Infrastructure Security roles Strong expertise in AWS security services (IAM, KMS, GuardDuty, Config, Security Hub, etc.) In‑depth understanding of network security principles (firewalls, routing, segmentation, VPNs, IPsec, etc.) Hands‑on experience with Kubernetes security (RBAC, NetworkPolicies, OPA/Gatekeeper, Admission Controllers) Experience operating CrowdStrike Falcon and Tenable Nessus / Tenable.io Experience with WAFs, DDoS protection, NIDS/NIPS, and threat intelligence integrations Comfortable with packet inspection, flow analysis, and traffic monitoring (tcpdump, Wireshark, Suricata, etc.) Proficiency in Infrastructure as Code (Terraform, Terragrunt) and configuration management (Ansible, Packer) Strong scripting/programming skills (Python, Go, or Bash) for automation and tooling Solid understanding of Linux security hardening and secure cloud networking Familiarity with service mesh security (Istio or similar) Experience with GitOps workflows using tools like Argo CD or Flux Understanding of vulnerability management, SSDLC, and security controls for containers Exposure to compliance frameworks such as ISO 27001, SOC2, NIST, PCI‑DSS Excellent analytical and problem‑solving skills with a proactive mindset Certifications such as AWS Certified Security Specialty, CKS, OSCP, or CISSP are a plus Experience with multi‑cloud security (Azure/GCP) Background in ethical hacking, bug bounty programs, or red teaming Familiarity with tools like Falco, Sysdig, Trivy, or eBPF‑based runtime security tools Benefits CLT contract – job stability and reliable benefits Quarterly performance bonuses Meal allowance paid into Caju card – R$100 per working day Health insurance with SulAmérica – 50% covered by the company Daycare allowance for mothers with children under 3 years old – R$500 per month per child Kick‑start your journey with an on‑boarding trip to one of our European offices (Lisbon or Berlin) Diversity & Inclusion 1GLOBAL is an equal‑opportunity employer. We value your character as much as your talent. Diversity drives our innovation, and we offer a collaborative, dynamic, and international work environment. Seniority Level Mid‑Senior level Employment Type Full‑time Industries Non‑profit Organizations Primary and Secondary Education Referrals increase your chances of interviewing at 1GLOBAL by 2x. #J-18808-Ljbffr