Orange Business
Monkey
Cloud Security Engineer Pl
AWSKubernetes
Automatic translation. Check the original.
About us
Monkey was born with the great purpose of, through technology, simplifying financial transactions between large companies and their supplier chain. Easily and quickly, we improve the cash flow of our clients and suppliers by anticipating their invoices. All of this is possible through spectacular partnerships with different financial institutions 🚀
Your mission will be to strengthen the security of our cloud environments, implementing and evolving controls, investigating vulnerabilities, and collaborating with SRE, Development, and Governance teams to ensure secure, resilient, and compliant environments.
Activities
- Implement and maintain security controls in AWS, including identities and access, networks, encryption, key management, and logs.
- Administer and enhance infrastructure security tools, including monitoring, vulnerability management, and network protections, firewall, and WAF, such as Cloudflare.
- Analyze and investigate security alerts, execute planned treatments, and escalate critical situations or those requiring joint action.
- Identify and track vulnerability remediation, perform hardening adjustments, and propose corrective actions according to agreed-upon risks and priorities.
- Collaborate with SRE, DevOps, and Development in implementing security in clusters, pipelines, and automations.
- Complete security assessments and questionnaires, gather evidence, and participate in audits, explaining the technical controls under your responsibility.
- Document configurations, procedures, and solutions, sharing best practices with the involved teams.
Minimum requirements
- Hands-on experience with infrastructure in AWS, including implementation or operation of security controls.
- Applied knowledge in IAM, networks, encryption, KMS, and security logs.
- Experience with cloud or infrastructure security tools, including alert analysis and issue investigation.
- Knowledge in infrastructure and systems security, including hardening and vulnerability management.
- Ability to investigate issues, propose solutions, and conduct technical activities autonomously, recognizing when to involve other stakeholders.
- Familiarity with security requirements related to ISO/IEC 27001 and SOC 2, including documentation and control evidence.
Differentiators
- Previous experience in Infrastructure, SRE, DevOps, or Development teams.
- Knowledge in Kubernetes security and containers.
- Participation in audits, client assessments, or preparation of security evidence.
- Cloud or information security certifications.
- Experience in fintechs, SaaS companies, or regulated environments.
- English for meetings and documentation.
- 🛒 Meal/Food Voucher on the Flash card, with the freedom to use as you prefer;
- 🏠 Home Office Assistance to support your remote routine;
- 🩺 Medical and Dental Assistance, 100% company-paid;
- 💓 Life Insurance, for more peace of mind in your day-to-day;
- 💪 Wellhub – access to gyms, studios, and wellness throughout Brazil;
- 📖 Monkey Academy – career development and acceleration programs;
- 🥳 Birthday Day-off - so you can enjoy your day however you prefer;
- 😎 Agreement with Sesc for leisure, culture, and well-being;
- 🧑🍼 Extended Maternity and Paternity Leave, so you can enjoy this special moment with peace of mind;
- 👶 Daycare Assistance, to bring more security and balance to your routine.
