11 months ago
Campinas, Brazil +5 moreSenior
Responsibilities
- Design and implement scalable cloud security controls across AWS multi-account environments.
- Own Kubernetes security architecture, including workload isolation, RBAC, pod security standards, and network segmentation.
- Embed image scanning, infrastructure-as-code validation, and policy enforcement into CI/CD pipelines.
- Assess cloud and Kubernetes environments for vulnerabilities, misconfigurations, and emerging threats.
- Maintain IAM and secrets management practices based on least-privilege access.
- Partner with DevOps, Platform, and IP/Network teams to deliver security controls as code and by design.
- Analyze network traffic and security telemetry using flow logs, metrics, and targeted packet inspection.
- Align security practices with internal policies and CIS, NIST, and ISO 27001 frameworks.
- Maintain security architecture documentation, runbooks, and incident response playbooks.
- Act as a security champion and promote secure engineering practices across teams.
Requirements
- At least 3 years of experience in cloud security, DevSecOps, or infrastructure security.
- Strong AWS security fundamentals, including IAM, KMS, GuardDuty, Config, and Security Hub.
- Solid Linux security and cloud networking fundamentals.
- Hands-on Kubernetes security experience with RBAC, NetworkPolicies, pod security, and image scanning.
- Experience with Terraform and Git-based workflows.
- Scripting experience with Python, Go, or Bash.
- Experience with vulnerability management and container security.
- Experience with WAFs and cloud DDoS protection.
- Comfort with packet inspection, flow analysis, and traffic monitoring using tools such as tcpdump, Wireshark, and Suricata.
- Strong troubleshooting skills and a security-first mindset.
Benefits
- CLT employment contract with job stability and benefits.
- Quarterly performance bonuses.
- Meal allowance of R$100 per working day paid into a Caju card.
- Extended parental leave: 180 days of maternity leave and 20 days of paternity leave.
- Health insurance through SulAmérica, with 50% covered by the company.
- Daycare allowance of R$500 per month per child for mothers with children under 3.
- Hybrid work arrangement in São Paulo, Brazil.
- Growth opportunities, professional development, international office opportunities, and exposure to a fast-growing telecommunications company.
About 1GLOBAL
1GLOBAL provides eSIM-based mobile connectivity and an owned global core network for enterprises, consumers, and IoT device makers, sold via subscriptions and wholesale/MVNO services. The privately held company operates as a regulated telecom provider across 40 countries, including MVNO operations in 12 markets, and offers APIs to embed mobile service into brands and apps. Founded in 2022 by Hakan Koç and Pyrros Koussios, it is headquartered in Amsterdam.