Develop a solid understanding of the current security landscape across a multi‑cloud environment (AWS and GCP).
Build relationships and understand interactions between system owners, engineering teams, and global security partners.
Take ownership of specific areas within the cloud security ecosystem and drive improvements.
Establish processes that ensure security is embedded throughout the engineering lifecycle (SSDLC).
Lead or contribute to automation initiatives across the organization to reduce manual work and increase consistency.
Implement and improve DevSecOps practices, embedding security controls into CI/CD and development workflows.
Work with security tooling to support scanning, hardening, monitoring, and policy enforcement.
Support cultural transformation, promoting a mindset of shared responsibility for security.
Collaborate closely with Development, DevOps/SRE, Infrastructure, TSSI, EGSO, Audit, and global security partners.
Operate independently with high ownership while contributing effectively across teams.

Bachelor’s degree in Computer Science, Engineering, Information Systems, or a related technical field, or equivalent practical experience.
Strong hands‑on experience with AWS Security (required).
GCP Security strongly preferred (can be developed on the job for candidates with strong AWS background).
Experience with: GitHub
Linux/Unix
Scripting in Go or Python
Terraform (Infrastructure as Code)
Solid understanding of Cloud Security Architecture, DevSecOps principles, and secure-by-design mindset.
Familiarity with security tooling and ability to integrate controls into pipelines and cloud environments.
Ability to collaborate across multiple teams while working independently with high autonomy.
A problem‑solving attitude and the ability to understand the full end‑to‑end picture.
A mindset of enabling teams — positioning security as a partner that helps deliver secure features and products.
Advanced English and availability to travel to São Carlos/SP when need it.

DevSecOps Specialist

Key skills