FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in Cloud Security Architecture, focusing on AWS and Azure environments, with a strong emphasis on Identity & Access Management, Kubernetes Security, and DevSecOps practices. Proficient in assessing risks, defining security controls, and ensuring compliance with industry standards and regulations.
Highest-signal resume keywords
Cloud Security ArchitectureAWS SecurityAzure SecurityIdentity & Access Management (IAM)Kubernetes Security
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Cloud NetworkingDevSecOpsThreat ModelingVulnerability ManagementInfrastructure as Code SecurityContinuous ComplianceSecurity by DesignZero TrustAPI SecurityCloud Governance
Tools & Technologies
GitHubGitHub ActionsAzure DevOpsJenkinsTerraformAkamai WAFCSPMCNAPPWorkload ProtectionNetwork Security
Industry Keywords
CIS BenchmarksNIST Cybersecurity FrameworkMITRE ATT&CKCloud Security AllianceOWASP Top 10OWASP API Security Top 10LGPDBACEN RegulationsOpen FinancePIX
Tech Stack
Tools & technologiesAWSAzureCloudCyber SecurityDNSJenkinsKubernetesTerraform
About the role
Key responsibilities & impact- Define and evolve enterprise security standards for AWS, Azure, and other cloud providers
- Assess architectures from security, resilience, and compliance perspectives
- Participate in Security by Design initiatives for new products and projects
- Define minimum security requirements for cloud workloads
- Support architectural reviews and solution approvals
- Assess and support the protection of Kubernetes environments, containers, and distributed platforms
- Define security controls for EKS, AKS, and other managed services
- Assess risks associated with cloud-native applications, APIs, serverless architectures, and microservices
- Support hardening and attack surface reduction
- Define controls for IAM, authentication, authorization, privileged access, federation, SSO, MFA, secrets, certificates, and cryptographic keys
- Support Zero Trust initiatives and privileged access reviews
- Define controls for segmentation, isolation, and protection of internet-facing services
- Assess risks related to DNS, APIs, WAFs, load balancers, gateways, and external integrations
- Establish security baselines, metrics, and cloud security indicators
- Support compliance, internal and external audits, and regulatory adherence
- Lead continuous monitoring of cloud security posture
- Identify exposures, configuration deviations, and operational risks
- Support vulnerability prioritization and remediation, as well as CTEM initiatives
- Integrate security controls into development and continuous delivery pipelines
- Support Infrastructure as Code Security, continuous compliance, and secure DevOps practices
- Assess risks associated with new technologies, projects, and providers
- Support risk exceptions and remediation plans
- Produce documentation and evidence for audits
- Support initiatives related to Brazil’s LGPD, BACEN regulations, Open Finance, PCI DSS, and other applicable standards
- Act as a technical security reference for business and technology teams
Requirements
What you’ll need- Proven experience in Cloud Security Architecture
- Experience with AWS and Azure security
- Experience in technology risk management
- Experience in Cloud Networking
- Experience in Identity & Access Management (IAM)
- Experience in Kubernetes Security and Container Security
- Experience in DevSecOps
- Experience in Security by Design and Threat Modeling
- Experience in Cloud Governance
- Experience with AWS, Azure, and hybrid and multi-cloud environments
- Knowledge of IAM and Identity Governance, Zero Trust, CSPM, CNAPP, Workload Protection, and Network Security
- Knowledge of vulnerability management
- Knowledge of containers, Kubernetes, APIs, DNS, load balancers, WAFs, API Gateways, and applied cryptography
- Experience with or knowledge of GitHub, GitHub Actions, Azure DevOps, Jenkins, Terraform, and Infrastructure as Code
- Knowledge of CIS Benchmarks, the NIST Cybersecurity Framework, MITRE ATT&CK, the Cloud Security Alliance, OWASP Top 10, and OWASP API Security Top 10
- Experience in the financial sector or with fintech companies
- Knowledge of Open Finance
- Experience with PIX and payment methods
- Experience with Akamai WAF or equivalent solutions
- Experience with Attack Surface Management
- Knowledge of Continuous Threat Exposure Management (CTEM)
- Experience working in high-scale, high-availability environments
- Experience with API Security platforms
- Knowledge of security for Artificial Intelligence and LLMs
- Experience with cloud transformation and migration projects
Benefits
Comp & perks- No benefits, perks, or additional compensation are explicitly stated in the job posting
- A culture of collaboration, continuous learning, and ongoing growth
- Accessibility: the position is also open to people with disabilities