Cloud Security Engineer

Job not on LinkedIn

🔥 0 minutes ago

🇧🇷 Brazil – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Digibee

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2017

💼 Consulting

📣 Marketing

📦 Logistics

💰 $60.5M Series B - Digibee on 2023-06

Consulting • Marketing • Logistics

Digibee is a cloud-native integration and automation platform that helps enterprises connect apps, legacy systems, data, and AI. It provides low-code/visual tools for building integrations, orchestrating workflows, deploying agents, and managing MCP/AI connectivity with built-in observability, security, and serverless scaling. Digibee is offered as a SaaS platform for IT teams, developers, and architects to accelerate digital transformation, modernize core systems, and automate high-volume, mission-critical processes.

📋 Description

• Integrate security controls into CI/CD pipelines (SAST, SCA, image scanning, SBOM, image signing/verification), making security part of the delivery workflow rather than a manual gate at the end. • Assess, define, and lead the rollout of hardened container images (Wolfi/Chainguard, distroless), reducing the attack surface and CVEs in the base images used by Engineering. • Lead vulnerability management and governance: risk-based prioritization, remediation SLAs, and follow-up with Engineering teams through closure. • Design and implement security controls in GCP infrastructure (IAM, networking, Artifact Registry, organization policies), together with Infrastructure as Code (Terraform). • Serve as a technical authority for pipeline and cloud security, guiding Engineering squads on secure development practices (shift-left) without slowing delivery velocity. • Collaborate with SRE on observability and resilience through a security lens (runtime hardening, incident response, production security posture). • Perform targeted penetration-testing activities to validate controls and remediations, complementing formal penetration-testing engagements with external vendors. • Support audits and compliance requirements (SOC 2, PCI) related to pipelines, vulnerabilities, and images. • Embed security into the software development and delivery lifecycle (DevSecOps). • Work closely with Engineering, SRE, and Platform teams as a technical authority, without hierarchical authority.

🎯 Requirements

• 5+ years of experience in Cloud Security Engineering, DevSecOps, or Security Engineering, with hands-on experience in production environments. • Strong command of Google Cloud Platform (GCP), including IAM, networking, Artifact Registry, and organization security policies. • Hands-on experience integrating security into CI/CD pipelines (GitLab CI, Jenkins, or similar) and using vulnerability-scanning tools (e.g., Trivy, Snyk, Wiz). • Production experience with Docker/Kubernetes: multi-stage builds, runtime hardening, non-root execution, and dependency management. • Knowledge of secure/hardened container images (Wolfi, Chainguard, distroless), or a strong willingness to specialize in this area. • Strong scripting skills in Python and/or Bash for automating security controls. • Understanding of secure development practices (secure SDLC, OWASP Top 10, and basic threat modeling). • Experience with SRE practices (observability, reliability, and incident response) sufficient to collaborate technically with the SRE team. • Strong technical communication skills and the ability to influence Engineering squads without direct hierarchical authority. • Certifications such as Google Professional Cloud Security Engineer, Certified Kubernetes Security Specialist (CKS), or equivalent are a plus. • Previous experience specifically with Chainguard/Wolfi or other minimal container image ecosystems is a plus. • Experience with SBOMs, image signing (cosign/Sigstore), and supply chain security (SLSA) is a plus. • Experience with compliance frameworks (SOC 2, PCI-DSS, ISO 27001) is a plus. • Previous experience as an SRE or on Platform/Infrastructure teams is a plus. • Open-source contributions or technical content published in the DevSecOps/cloud security community is a plus.

🏖️ Benefits

• Health care • Dental care • R$1,400 per month on a Caju card (for food and meal allowances, mobility, home office supplies, culture, health, and education) • Life insurance • Childcare assistance • Wellhub (formerly Gympass) • English course: partnership for group classes at R$100 per month • Global Equity Program • Flexible and autonomous work culture • Global distributed team • Home office supplies allowance