7 дней назад
Senior Engineer - Cloud Engineering (AWS Cloud Security)
Вакансия из Hirify Global, списка международных tech-компанийДля мэтча и отклика нужен Plus
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Senior Engineer - Cloud Engineering (AWS Cloud Security): Remediating cloud and code-level security findings across AWS environments with an accent on CSPM, infrastructure as code, incident investigations, and security architecture reviews. Focus on automating remediation workflows, analyzing cloud-native logs, fixing vulnerabilities in Terraform, CloudFormation, containers, and application code, and reducing security risk across engineering platforms.
Location: Bogota, Colombia; hybrid schedule with 2 days per week in the office
Company
develops technology that simplifies airline financial and commercial processes and supports digital transformation across the air transport industry.
What you will do
- Analyze and remediate code-level vulnerabilities, dependency issues, insecure configurations, and infrastructure-as-code misconfigurations.
- Triage and drive remediation of Upwind CSPM findings across AWS accounts, workloads, and services.
- Maintain remediation runbooks, posture metrics, detection workflows, and automation using Lambda, EventBridge, and SSM Automation.
- Support cloud security incident investigations through CloudTrail, VPC Flow Logs, GuardDuty findings, impact assessment, and containment activities.
- Participate in architecture reviews covering IAM, network segmentation, encryption, and data protection.
- Collaborate with engineering, DevOps, and platform teams to deliver durable security fixes and preventive controls.
Requirements
- At least 3 years of hands-on cloud security experience with practical AWS knowledge, including IAM, VPC, KMS, S3, CloudTrail, Security Hub, GuardDuty, Config, and Inspector.
- Direct experience remediating findings from CSPM or CNAPP platforms such as Upwind, Wiz, Prisma Cloud, or Orca.
- Experience with SAST, SCA, container image scanning, Terraform and/or CloudFormation, and remediation directly in code.
- Scripting ability in Python and/or Bash, plus familiarity with incident response processes and cloud-native log sources.
- Strong written and verbal communication skills for explaining technical risk to technical and non-technical stakeholders.
- Fluent English is required; interviews will be conducted in English.
Nice to have
- Experience with EKS, ECR, Kubernetes security policies, and CI/CD security integration.
- Knowledge of SOC 2, ISO 27001, PCI-DSS, GDPR, and NIST 800-53 controls.
- AWS, CSPM, CEH, OSCP, GCIH, or CISSP certifications.
- Experience in a dedicated cloud security or DevSecOps team, including ethical hacking.
Culture & Benefits
- Hands-on security work across code, cloud consoles, and delivery pipelines.
- Collaboration with engineering, DevOps, and platform teams.
- Practical, risk-based security recommendations balanced with delivery timelines.
- Hybrid work arrangement with two office days per week in Bogota.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →