Cloud Engineer GCP

**Overview:**

We are looking for a Cloud Security Engineer to help monitor, improve, and automate the organisation’s cloud security posture, with a strong focus on GCP environments. The role involves identifying risks, vulnerabilities, and misconfigurations, operating CNAPP tools, supporting incident response, and defining cloud security policies aligned with industry standards.

**What will you do?**

• Monitor and analyse cloud security posture across the organisation's environments (primarily GCP), identifying risks, misconfigurations, and vulnerabilities.
• Automate remediation of cloud security findings, reducing manual effort and accelerating response times, through solutions using Terraform (IaC), GitHub Actions and scripts using languages like Python or Bash.
• Manage and operate CNAPP tools (e.g., Wiz) to continuously assess cloud workloads, containers, and infrastructure for threats and compliance gaps.
• You will integrate third-party tools with Cloud providers through Identity Providers (IdP such as EntraID or Okta).
• Conduct Attack Surface Management (ASM) activities, mapping and reducing the organisation's external exposure.
• Respond to cloud security incidents, supporting investigation, containment, and post-incident reviews.
• Define and enforce cloud security policies and guardrails, aligned with industry frameworks (e.g., CIS Benchmarks, NIST, ISO 27001).
• Produce clear security reports and dashboards for technical and non-technical stakeholders.
• Stay up to date with the latest cloud threats, vulnerabilities, and security tooling.

**What are we looking for?**

• Student background of Computer Science Engineering or similar
• Up to 3 years of hands-on experience in a Cloud Security, Cloud Engineering, or Cybersecurity role (preferably using Google Cloud).
• Proficiency in **Terraform** for infrastructure provisioning and security policy enforcement.
• Ability to automate repetitive tasks (scripting skills in **Bash/PowerShell/Python**)
• Solid understanding of modern information implementation methodologies and standards, especially in cloud environments.
• Strong foundations in cybersecurity principles: **threat modelling, vulnerability management, incident response**.
• Good understanding of networking concepts: **firewalls, VPNs, DNS, TLS/mTLS, Zero Trust architecture**.
• Experience with git practices and patterns.
• Strong Linux knowledge (administration, hardening, scripting).
• Willingness to explore the benefits of AI to improve our productivity.
• Fluency in Portuguese and English (speaking, reading and writing).

We value, by order of priority

• Professional Cloud Security Engineer certification on Google Cloud Platform (GCP)
• Hands-on experience with CNAPP tools (e.g., Wiz, Prisma Cloud, or equivalent) for cloud workload protection.
• Familiarity with Attack Surface Management (ASM) tools and methodologies.
• Terraform certification or Experience with Infrastructure-as-Code (IaC) practices and patterns – Terraform, Ansible, etc.
• Experience with Apigee - API Management platform
• Kubernetes certifications (CKA, CKAD or CKS) or knowledge of Kubernetes security (pod security policies, network policies, RBAC).

**What can you expect from us?**

• A permanent job contract for a long term project;
• Tech equipment + SIM Card + personal smartphone;
• Health and Life Insurance;
• Social events and team buildings;
• The commitment of letting you grow with us, and be rewarded accordingly;
• A dynamic and young team that will be always there to support you;
• Training in the latest technologies;
• Coffee, fruits, snacks and a warm welcoming when you pass by the office.