Senior Security Architect

Job not on LinkedIn

6 days ago

Apply Now

Receive Emails with Similar Jobs

Darede

WebsiteLinkedInAll Job Openings

Cloud Computing • Consulting • Artificial Intelligence

Darede is a cloud solutions provider specializing in cloud migration, consulting, and optimization services. They focus on helping businesses efficiently transition to cloud environments while minimizing downtime and ensuring operational efficiency. Darede also offers managed services, security assessments, and the use of advanced technologies like machine learning and generative AI to transform data into actionable insights. Their portfolio includes various clients in sectors such as finance, education, and technology, showcasing their versatility and expertise in delivering tailored cloud solutions.

201 - 500 employees

Founded 2013

🤖 Artificial Intelligence

📋 Description

• Conduct security-focused pre-sales meetings to understand client business needs, associated risks, and security requirements (technical and regulatory). • Design AWS cloud security architectures aligned with best practices (multi-account, landing zone, network segmentation, IAM, encryption, monitoring, logging). • Prepare technical security proposals (documents, presentations, and estimates) and deliver executive and technical presentations to clients. • Support cost estimation for security solutions, billing analysis and use of tools like AWS Cost Explorer, with focus on security and networking services. • Lead security posture assessments (security assessment / gap analysis) in AWS environments, defining action plans and a maturity roadmap. • Define monitoring requirements, create playbooks and integrations with detection and response tools (SIEM, XDR, SOAR). • Define and review perimeter and network controls (firewalls, WAF, VPN, IDS/IPS, segmentation, zero trust) in on-premises, hybrid and multi-cloud environments. • Support offensive security initiatives (pentests, control validation, technical vulnerability reviews). • Conduct and support POCs, Immersion Days and AWS security workshops for clients. • Ensure solutions are aligned with the AWS Well-Architected Framework (primarily the Security pillar) and frameworks such as NIST, ISO 27001 and LGPD requirements. • Contribute to security governance: policies, standards, architecture patterns, security RACI and alignment with audits and compliance.

🎯 Requirements

• Strong experience as a Security Architect (preferably Senior), with extensive work in AWS environments. • Advanced knowledge of cloud security architecture: IAM (users/roles, policies, SCPs, permission boundaries, federation). • Encryption (KMS, customer-managed keys, secrets management). • Monitoring and detection (CloudTrail, Config, CloudWatch, Security Hub, GuardDuty, Detective, WAF, Shield). • Solid knowledge of firewall and perimeter security: Next-Generation Firewalls (NGFW), site-to-site VPN and client VPN. WAF, IDS/IPS, proxies, network segmentation, VPC, public/private subnets, NACLs, Security Groups. • Experience with Fortinet solutions (e.g., FortiGate, FortiManager, FortiAnalyzer) and EDR/XDR solutions such as CrowdStrike. • Experience in security GRC: implementing or supporting security programs based on NIST CSF, ISO 27001, CIS Controls, LGPD and corporate policies. • Risk mapping, defining controls and supporting audits. • Knowledge of offensive security: pentest concepts (infrastructure, applications and cloud), vulnerability exploitation, service hardening and review of scan results. • Experience with microservices-based architectures and their security implications (APIs, containers, service mesh, authentication/authorization, secrets). • Preferable experience with Infrastructure as Code (CloudFormation, Terraform) for standardizing security controls. • Strong communication skills with both technical and executive audiences, translating technical risks into business impact.

🏖️ Benefits

• Educational incentives (partnerships with educational institutions) • Paid vacation • TotalPass • Birthday off • Health insurance • Dental insurance • Maternity leave • Paternity leave • Reimbursement for AWS certifications