Cloud Security Architect

🕒 July 3

🇧🇷 Brazil – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 29%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

GFT Technologies

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1987

💼 Consulting

🛡️ Insurance

🔒 Cybersecurity

Consulting • Insurance • Cybersecurity

GFT Technologies is a leading technology and digital transformation company that specializes in providing advanced solutions for consent management and data privacy compliance. Their flagship product, Cookiebot, enables businesses to automate user consent collection efficiently, ensuring adherence to complex privacy regulations such as GDPR and CCPA. GFT's solutions facilitate seamless integration into existing digital infrastructures, helping over 600,000 customers globally manage user data transparently and securely.

📋 Description

• Act as a security architect for public applications hosted on AWS; • Define security standards for edge security, identity, segmentation, observability and application resilience; • Influence the corporate cloud security strategy by balancing security, scalability and operational efficiency; • Collaborate with cloud architects and DevOps teams to identify and remediate insecure configurations; • Develop strategies to implement WAF, CNAPP and CSPM integrated into the organization’s security framework; • Evaluate new AWS security services and capabilities and translate them into architecture and governance standards; • Establish security guidelines and best practices for software development based on industry frameworks; • Serve as a technical authority on application security during corporate projects; • Collaborate with development teams to integrate security into all phases of the SDLC; • Identify, prioritize and define mitigation strategies for application vulnerabilities; • Integrate security tools, processes and automations into the DevOps pipeline (DevSecOps); • Define robust authentication and authorization requirements, including privilege and access controls; • Continuously monitor threats, public vulnerabilities and trends in the security community; • Actively participate in projects, technical forums and change processes to ensure security by design; • Promote secure design practices and data integrity across users, applications and infrastructure; • Develop and strengthen a culture of security champions within development teams; • Participate in and lead technical discussions in security forums and meetings; • Build relationships with stakeholders to sustain security initiatives; • Engage in information security projects according to leadership guidelines.

🎯 Requirements

• Experience in cybersecurity with a focus on web application security or security architecture; • Experience protecting applications and AWS environments; • Experience in penetration testing, secure code review and static and dynamic code analysis; • Experience identifying and mitigating OWASP vulnerabilities; • Familiarity with web application scanning tools; • Strong knowledge of software development (Java, Python, C#, among others); • Experience with web technologies and frameworks (REST, JSON, XML, JavaScript, React); • Experience securing internal and third-party APIs; • Background in DevOps and public and private cloud environments; • Experience implementing and managing Web Application Firewall (WAF); • Knowledge of CNAPP and CSPM; • Solid understanding of network and web protocols; • Experience with technical documentation; • Proven ability to communicate security risks to the business; • Bachelor’s degree, preferably in a technical or analytical field; • Differentiators: Experience in risk management and compliance; experience with frameworks and regulations such as ISO 27001, NIST, SOX, GDPR, CIS or SOC 2; information security certifications (SANS, CISSP, CCSP, CSSLP, OSCP or similar); experience with SQL, KQL or Splunk for at least 2 years.

🏖️ Benefits

• Multi-benefits card – choose how and where to use it. • Study grants for undergraduate, graduate, MBA and language courses. • Incentive programs for certifications. • Flexible working hours. • Competitive salaries. • Annual performance review with a structured career plan. • Opportunity for international career development. • Wellhub and TotalPass. • Private pension plan. • Childcare assistance. • Health insurance. • Dental insurance. • Life insurance.