Cloud Engineer GCP
Job Location:
Monthly Salary:
Posted on:
Vacancies:
Job Summary
Overview:
We are looking for a Cloud Security Engineer to help monitor improve and automate the organisations cloud security posture with a strong focus on GCP environments. The role involves identifying risks vulnerabilities and misconfigurations operating CNAPP tools supporting incident response and defining cloud security policies aligned with industry standards.
What will you do
- Monitor and analyse cloud security posture across the organisations environments (primarily GCP) identifying risks misconfigurations and vulnerabilities.
- Automate remediation of cloud security findings reducing manual effort and accelerating response times through solutions using Terraform (IaC) GitHub Actions and scripts using languages like Python or Bash.
- Manage and operate CNAPP tools (e.g. Wiz) to continuously assess cloud workloads containers and infrastructure for threats and compliance gaps.
- You will integrate third-party tools with Cloud providers through Identity Providers (IdP such as EntraID or Okta).
- Conduct Attack Surface Management (ASM) activities mapping and reducing the organisations external exposure.
- Respond to cloud security incidents supporting investigation containment and post-incident reviews.
- Define and enforce cloud security policies and guardrails aligned with industry frameworks (e.g. CIS Benchmarks NIST ISO 27001).
- Produce clear security reports and dashboards for technical and non-technical stakeholders.
- Stay up to date with the latest cloud threats vulnerabilities and security tooling.
What are we looking for
- Student background of Computer Science Engineering or similar
- Up to 3 years of hands-on experience in a Cloud Security Cloud Engineering or Cybersecurity role (preferably using Google Cloud).
- Proficiency in Terraform for infrastructure provisioning and security policy enforcement.
- Ability to automate repetitive tasks (scripting skills in Bash/PowerShell/Python)
- Solid understanding of modern information implementation methodologies and standards especially in cloud environments.
- Strong foundations in cybersecurity principles: threat modelling vulnerability management incident response.
- Good understanding of networking concepts: firewalls VPNs DNS TLS/mTLS Zero Trust architecture.
- Experience with git practices and patterns.
- Strong Linux knowledge (administration hardening scripting).
- Willingness to explore the benefits of AI to improve our productivity.
- Fluency in Portuguese and English (speaking reading and writing).
- Professional Cloud Security Engineer certification on Google Cloud Platform (GCP)
- Hands-on experience with CNAPP tools (e.g. Wiz Prisma Cloud or equivalent) for cloud workload protection.
- Familiarity with Attack Surface Management (ASM) tools and methodologies.
- Terraform certification or Experience with Infrastructure-as-Code (IaC) practices and patterns Terraform Ansible etc.
- Experience with Apigee - API Management platform
- Kubernetes certifications (CKA CKAD or CKS) or knowledge of Kubernetes security (pod security policies network policies RBAC).
What can you expect from us
- A permanent job contract for a long term project;
- Tech equipment SIM Card personal smartphone;
- Health and Life Insurance;
- Social events and team buildings;
- The commitment of letting you grow with us and be rewarded accordingly;
- A dynamic and young team that will be always there to support you;
- Training in the latest technologies;
- Coffee fruits snacks and a warm welcoming when you pass by the office.
Required Experience:
IC
About Company
At Caixa Mágica, we provide custom software development that drives business growth. Explore our services and see how we help companies.
