Cloud Security Engineer

📋 Description

• Integrate security controls into CI/CD pipelines, including SAST, SCA, container scanning, SBOM
• Establish security practices that become part of the standard software delivery workflow rather
• Evaluate, define, and lead the rollout of hardened container images using technologies and
• Reduce attack surface and vulnerabilities in the base container images used by engineering teams.
• Lead vulnerability management and governance, including risk-based prioritization, remediation
• Design and implement security controls across GCP infrastructure, including IAM, networking

🎯 Requirements

• 5+ years of practical experience in Cloud Security Engineering, DevSecOps, Security Engineering, or
• Strong hands-on knowledge of Google Cloud Platform, particularly IAM, networking, Artifact
• Experience integrating security controls into CI/CD pipelines using GitLab CI, Jenkins, or similar
• Practical experience with vulnerability scanning tools such as Trivy, Snyk, Wiz, or comparable
• Strong production experience with Docker and Kubernetes, including multi-stage builds, runtime
• Knowledge of hardened and minimal container image ecosystems such as Wolfi, Chainguard, and

🎁 Benefits

• Full-time, remote position based in Brazil.
• Healthcare coverage.
• Dental care.
• R$1,400 per month through a Caju card, covering areas such as food and meals, mobility, home-office
• Life insurance.
• Childcare assistance.