Cloud Security Engineer

Accountabilities:

As a Cloud Security Engineer, you will help maintain a strong security posture across cloud environments, support internal stakeholders, and continuously improve security operations and processes. Your responsibilities will include:

• Monitor cloud security dashboards to identify alerts, vulnerabilities, misconfigurations, and compliance risks.

• Collaborate with cloud stakeholders to investigate security incidents and alerts, validate potential threats, address false positives, and coordinate remediation activities.

• Document investigation findings, lessons learned, follow-up actions, and relevant security procedures to improve knowledge sharing and operational consistency.

• Support internal teams with cloud security requirements, including platform access, client deployments, alert investigations, reporting, metrics, and related requests.

• Integrate application security capabilities into development workflows and CI/CD pipelines to promote a shift-left security approach.

• Generate and analyze security reports to track key metrics, recurring issues, vulnerabilities, and areas of elevated risk.

• Identify opportunities to automate security operations, reporting, and repetitive processes using scripting, APIs, and relevant security tools.

• Collaborate with cross-functional teams to enforce security best practices and improve cloud security controls across different environments.

• Support security initiatives involving cloud infrastructure, containers, infrastructure as code, and hybrid cloud environments.

• Maintain accurate documentation and follow established ticketing, change management, and IT service management processes.

Requirements:

The ideal candidate will bring extensive experience in information technology and cybersecurity, particularly in cloud security operations, platform management, and threat mitigation. The following qualifications are expected:

• A bachelor's degree in Information Security, Computer Science, or a related field, or equivalent education and professional experience.

• Extensive hands-on experience in information technology and information security.

• Strong expertise in Palo Alto Prisma/Cortex Cloud or comparable CNAPP platforms, including securing cloud environments and managing security findings.

• Solid understanding of cybersecurity principles, cloud security frameworks, and threat mitigation practices, including CIS, OWASP, and NIST.

• Familiarity with a broad range of security technologies and functions, including XDR, CASB, SIEM, SOAR, DLP, SOC, FIM, WAF, API gateways, SAST, DAST, and SCA.

• Experience with DevOps tools, CI/CD pipelines, code repositories, Bash or PowerShell scripting, API integrations, and security automation.

• Practical experience with infrastructure as code, including Terraform and CloudFormation, as well as container technologies and container security.

• Experience creating and managing AWS and Azure environments and accounts, with a strong understanding of cloud security configurations and controls.

• Familiarity with ticketing systems, change management, ITIL, ITSM, CMDB, and technical documentation repositories.

• Experience with additional cybersecurity platforms such as Zscaler, Qualys, SentinelOne, BeyondTrust, or Salt Security is an advantage.

• Knowledge of on-premises security solutions and the challenges associated with hybrid cloud environments.

• Strong analytical and troubleshooting skills, attention to detail, and the ability to prioritize security issues effectively.

• Excellent communication and collaboration skills, with the ability to work across multiple internal teams and manage competing stakeholder needs.

• Relevant certifications are highly preferred, including Palo Alto PCCSE, AWS or Azure Security certifications, CISSP, CCSK, or CCSP.

Benefits:

• Remote work: Work remotely from Brazil, with additional flexibility to work from anywhere for up to 60 days per year.

• Flexible working hours: Organize your schedule to support productivity and work-life balance.

• Generous vacation allowance: Take time off to rest, recharge, and maintain your well-being.

• Career development: Access opportunities to expand your technical skills and advance your career.

• Well-being support: Benefit from resources designed to support mental, physical, and financial well-being.

• Industry perks and discounts: Access professional benefits and discounts related to the travel industry.

• Inclusive work environment: Join a global team that values diversity, collaboration, and different perspectives.

• Technology and innovation: Contribute to security initiatives at the intersection of cloud technology, cybersecurity, and the future of business travel.