Senior Cloud Security Engineer

1GLOBAL is a technology-driven global mobile communications provider dedicated to empowering enterprises worldwide to unlock the full growth potential of mobile connectivity.We are looking for a talented Senior DevSecOps / Cloud Security Engineer to join our Technology Department, with a focus on strengthening and automating our security posture across cloud and hybrid infrastructure.We are open to hiring this role in Lisbon, Portugal, or São Paulo, Brazil.As a DevSecOps / Cloud Security Engineer, you will be responsible for embedding security into every stage of our infrastructure lifecycle, from design to deployment.Key responsibilitiesDesign and implement scalable cloud security controls in AWS multi-account environmentsLead Kubernetes security architecture, including PodSecurity, RBAC, and network policiesEnforce zero trust network architecture and secure segmentation across cloud and hybrid environmentsIntegrate security automation into CI/CD pipelines (image scanning, SAST, IaC analysis)Deploy and manage CrowdStrike, Tenable, and similar endpoint and vulnerability management toolsContinuously monitor infrastructure for vulnerabilities, threats, and misconfigurationsEnforce least privilege IAM policies and secure secrets managementConduct regular audits, penetration testing, and hardening of cloud workloads and host systemsConduct network traffic inspection using tools like VPC Flow Logs, packet capture, or NetFlowCollaborate with DevOps and IP teams on security-as-code principlesMaintain compliance with internal policies and external standards (e.g. CIS, NIST, ISO 27001)Tune and respond to alerts from WAF, IDS/IPS, and SIEM systemsDocument security controls, incident response playbooks, and operational runbooksChampion a security-first culture through collaboration, training, and awarenessRequirementsA minimum of 5 years in DevSecOps, Cloud Security, or Infrastructure Security rolesStrong expertise in AWS security services (IAM, KMS, GuardDuty, Config, Security Hub, etc.)In-depth understanding of network security principles (firewalls, routing, segmentation, VPNs, IPsec, etc.)Proven hands-on experience with Kubernetes security (RBAC, NetworkPolicies, OPA/Gatekeeper, Admission Controllers)Experience operating CrowdStrike Falcon and Tenable Nessus / Tenable.ioExperience with WAFs, DDoS protection, NIDS/NIPS, and threat intelligence integrationsComfortable with packet inspection, flow analysis, and traffic monitoring (tcpdump, Wireshark, Suricata, etc.)Proficiency in Infrastructure as Code (Terraform, Terragrunt) and configuration management (Ansible, Packer)Strong scripting/programming skills (Python, Go, or Bash) for automation and toolingSolid understanding of Linux security hardening and secure cloud networkingFamiliarity with service mesh security in Istio or similarExperience with GitOps workflows using tools like Argo CD or FluxUnderstanding of vulnerability management, secure software development lifecycle (SSDLC), and security controls for containersExposure to compliance frameworks like ISO 27001, SOC2, NIST, PCI-DSS is a plusExcellent analytical and problem-solving skills with a proactive mindsetCertifications such as AWS Certified Security Specialty, CKS, OSCP, or CISSP is a plusExperience with multi-cloud security (Azure/GCP)Background in ethical hacking, bug bounty programs, or red teamingFamiliarity with tools like Falco, Sysdig, Trivy, or eBPF-based runtime security toolsBenefitsCLT contract — enjoy job stability and reliable benefits that value your workQuarterly performance bonuses to reward your hard work and achievementsMeal allowance paid into Caju card — R$100 per working dayHealth insurance with SulAmérica — 50% covered by the companyDaycare allowance provided to mothers with children under 3 years old — R$500 per month per childKickstart your journey with an exciting welcome onboarding trip to one of our European offices (Lisbon or Berlin)Why 1GLOBAL?Growth Opportunities: Advance your career in one of the fastest growing telecommunications companies, expanding over 100% year-on-year under the leadership of successful tech entrepreneursMajor Transaction Exposure: Be in the driver's seat for transactions that will have an impact on the future telco industryWork with a Talented Team: From the Board and the Founders to the Senior Management Team, you will collaborate daily with the most capable and renowned external advisors, and constantly being exposed to talented and driven individualsDynamic Work Environment: Thrive in a collaborative, fast-paced workplace where innovation is encouraged, and every contribution countsProfessional Development: Work alongside industry experts to enhance your skills and knowledge in a cutting-edge fieldInternational Experience: Gain opportunities to work in different 1GLOBAL offices around the world as you grow within the companyOpen Communication Culture: Join a team where your ideas are heard, and open dialogue is encouraged, fostering a supportive and transparent work environmentGet Things Done Attitude: Be part of a results-driven team that values efficiency, creativity, and the drive to make a tangible impact in the industry1GLOBAL is an equal opportunity employer, we value your character as much as your talent.Diversity drives our innovation, and we offer a collaborative, dynamic, and international work environment.#J-18808-Ljbffr