Cloud Security Engineer

Cidade : São Paulo, Brasil Estado : São Paulo (BR-SP) País : Brasil (BR) Número da Vaga : 46471

Role Purpose Statement

The Cloud Security Engineer demonstrates a high level of professionalism, leveraging in-depth knowledge in cloud security and a basic understanding of related cybersecurity disciplines to adapt departmental plans and recommend optimal solutions and best practices within the Cyber Security Engineering & Automation department. This individual contributor role manages cloud security projects and processes independently with limited supervision, allowing for tactical choices within established functional policies and broad procedures to achieve security goals. They are responsible for the execution of main cloud security activities to achieve important security outcomes, actively participating in small to medium-sized projects of moderate complexity and contributing to process improvements. The Engineer performs a variety of complex tasks, requiring detailed analysis to understand problems and supporting the delivery of solutions to intricate cloud security challenges where clear precedents may not exist.

Main Accountabilities

• Design, implement, and maintain security controls across cloud platforms (IaaS, PaaS, and SaaS).

• Define and enforce cloud security standards, guardrails, and reference architectures.

• Secure cloud networking, identity, access management, and data protection services.

• Implement and manage cloud security tooling such as CSPM, CWPP, CIEM, and WAF solutions.

• Partner with cloud engineering and application teams to embed security into CI/CD and IaC pipelines (DevSecOps).

• Conduct cloud security risk assessments, architecture reviews, and threat modeling.

• Monitor cloud environments for misconfigurations, vulnerabilities, and security events, coordinating response with global SOC and IR teams.

• Support regulatory, audit, and compliance requirements and global security standards.

• Provide regional cloud security expertise and support global cloud security initiatives.

Knowledge and Skills

Improve Bunge's outcomes by making data-driven decisions, keeping the customer at the forefront of all they do, and proactively gaining insight into the global strategy.

Collaborate, effectively communicate with others and take initiative to continually develop themselves.

Pursue opportunities to solve problems and take action while maintaining the ability to manage work, even in times of challenge or change.

• In-depth knowledge of cloud security principles, architectures, and best practices across major cloud providers AWS, Azure, GCP).

• Experience with cloud security tools and technologies CASB, CSPM, CIEM, WAF).

• Proficiency in scripting/automation for cloud environments Python, PowerShell, Terraform, CloudFormation).

• Strong understanding of network security, identity and access management, data protection, and compliance in cloud contexts.

• Ability to perform complex analysis and support the delivery of solutions to intricate cloud security problems.

• Excellent communication skills, capable of providing leadership and guidance to technical teams and stakeholders.

Education & Experience

Bachelor’s degree in Information Security, Computer Science, Engineering, or a related field.

• 5+ years of experience in cybersecurity engineering with strong focus on cloud security.

• Hands-on experience securing major cloud platforms (GCP, Azure, and/or AWS).

• Strong knowledge of cloud identity, networking, encryption, logging, and monitoring services.

• Experience with infrastructure-as-code (Terraform, ARM, Cloud Deployment Manager, or similar).

• Understanding of cloud threat models and security frameworks (NIST, CSA, MITRE)

Colaborativo, respeitoso e inclusivo
Somos ágeis, Empoderados e inovadores
Com segurança, de forma sustentável e com integridade