Assess and define secure architectures for applications in cloud environments, with a focus on AWS, using threat modeling methodologies.
Understand security broadly, recognizing that cloud security encompasses multiple pillars and is not limited to AWS Security.
Hands-on mastery of key native AWS security services in day-to-day activities.
Orchestrate and implement security controls in cloud environments (AWS), with an emphasis on native AWS security.
Establish minimum security requirements for the architecture and for the development of new products and digital solutions.
Develop and maintain scripts in Python, ShellScript and PowerShell to support security, audit, and compliance routines in cloud environments.
Implement infrastructure as code, ensuring adherence to security and governance standards.
Interest in studying and implementing security for AI.

Experience in Information Security, with proven experience in Cloud Security on AWS, Azure, or GCP.
Proven experience in AWS environments, with mastery of the platform's main native security services.
Experience with microservices-based architectures (Docker, Kubernetes).
Knowledge of automation for security reviews and security processes.
Knowledge of security standards such as OWASP, OpenSAMM, ISO 27001, and the NIST Cybersecurity Framework.
Security certifications from one of the major cloud providers.
English (proficiency).
Residence in the São Paulo region.

Senior Information Security Analyst – Cloud Security

Key skills