Senior Cloud Security

🔥 0 minutes ago

🇧🇷 Brazil – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

GFT Technologies

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1987

💼 Consulting

🛡️ Insurance

🔒 Cybersecurity

Consulting • Insurance • Cybersecurity

GFT Technologies is a leading technology and digital transformation company that specializes in providing advanced solutions for consent management and data privacy compliance. Their flagship product, Cookiebot, enables businesses to automate user consent collection efficiently, ensuring adherence to complex privacy regulations such as GDPR and CCPA. GFT's solutions facilitate seamless integration into existing digital infrastructures, helping over 600,000 customers globally manage user data transparently and securely.

📋 Description

• Develop and maintain Terraform modules focused on strengthening security in AWS environments • Implement IAM hardening, AWS KMS key management, secrets management, and additional risk and compliance controls • Own CI/CD operations related to security tools • Contribute to the evolution and development of the program’s security services • Analyze, prioritize, and remediate vulnerabilities identified in code and infrastructure • Conduct structured vulnerability handoffs to other engineers when necessary • Develop and maintain threat models for the services under your responsibility • Support Disaster Recovery and Resilience strategies for highly available AWS environments • Participate in the evolution of the architecture toward future multi-region resilience strategies • Implement and maintain observability mechanisms for security and compliance services and controls • Use CloudWatch, CloudTrail, AWS Config, Security Hub, and GuardDuty • Support formal security reviews and the client’s internal security assessment processes • Participate in organizational audits and certifications for services and applications, including SOC 2 and ISO 27001 or equivalent standards • Produce client-facing documentation on security controls, vulnerabilities, and remediation recommendations • Lead knowledge transfers and handoffs to client teams • Collaborate with delivery and platform teams, as well as client stakeholders • Balance security and compliance requirements with program timelines, priorities, and objectives

🎯 Requirements

• Advanced or fluent English • Strong hands-on experience developing and maintaining Terraform modules in AWS • Advanced knowledge of IAM, AWS KMS, networking and VPCs, secrets management, and cloud environment hardening • Proven track record implementing security and compliance controls in highly regulated environments • Experience handling and protecting regulated data • Practical knowledge of compliance frameworks • Experience participating in audits, formal security reviews, and organizational certification processes • Ability to engage directly with the client’s Risk, Compliance, and Audit functions • Experience analyzing, prioritizing, and remediating vulnerabilities in code and infrastructure • Experience creating and using threat models • Hands-on experience with application and legacy infrastructure migration projects to AWS • Experience replatforming workloads from on-premises or VMware environments • Experience designing and implementing resilient, highly available AWS architectures • Knowledge of Disaster Recovery strategies and multi-region architectures • Familiarity with formal security review processes • Knowledge of enterprise risk and compliance assessment cycles • Proven ability to coordinate multiple teams and stakeholders across complex programs • Experience preparing client-focused documentation • Ability to lead security and compliance discussions with a consultative approach • Previous experience in the financial services industry is a strong plus • Previous experience in consulting, Professional Services, or similar environments is a plus

🏖️ Benefits

• Multi-benefit card – choose how and where to use it. • Educational grants for undergraduate, graduate, MBA, and language courses. • Certification incentive programs. • Flexible working hours. • Competitive salaries. • Annual performance review with a structured career development plan. • International career opportunities. • Wellhub and TotalPass. • Private pension plan. • Childcare assistance. • Health insurance. • Dental insurance. • Life insurance.