Descrição

Responsabilidades e Atribuições

• We are seeking experienced Cloud Security Engineers with expertise in at least one major Cloud Service Provider (CSP) - AWS, GCP, or Azure. This role is focused on the development of robust security policies for cloud environments, with a strong emphasis on scripting and automation.
• Key Responsibilities:
• Policy as Code Development: Research, create and script policies as code for AWS, Azure, or GCP services using YAML, CloudFormation, Terraform and other relevant scripting languages;
• Develop policies that automate and enforce security controls in cloud environments;
• laC Code Policy Formulation: Formulate and script policies for Infrastructure as Code (laC) scanning, addressing misconfigurations and compliance issues;
• Integrate laC scanning into CI/CD pipelines, ensuring continuous security compliance;
• CNAPP Policy Framework Development: Develop comprehensive policy frameworks for Cloud-Native Application Protection Platform (CNAPP) using scripting tools;
• Ensure policies cover key CNAPP functionalities such as runtime protection and container security;
• Deep understanding of cloud security architectures and best practices across AWS, Azure, and GCP;
• Extensive experience in developing comprehensive security policies tailored for cloud environments. Ability to translate complex security requirements into clear, actionable, and enforceable policies. Skilled in crafting policies that cover critical security domains such as access control, data protection, network security, and incident response;
• Extensive experience in scripting and automating cloud infrastructure using Terraform, CloudFormation, and other laC tools;
• Ability to create and manage secure, reusable, and modular laC scripts for deploying and managing cloud resources. Familiarity with security frameworks like NIST, CIS, ISO 27001, and the ability to align security policies with these frameworks;
• Expertise in designing and implementing RBAC policies in cloud environments;
• Experience in developing policies for managing user access to cloud resources based on roles and responsibilities.