Cloud Application Security Engineer (304)

Florianópolis, SC
# – KB /
Full-time /
Remote
Info on the Cloud Application Security Engineer role
Want to get to the next step in your international career? We can support you!

Ubiminds is a GPTW-certified, people-first company that partners with American software product companies to scale their development footprint. Ubi custom-curates Brazilian top 5% talent for their LATAM strategy, offering a unique combo of staff augmentation and employer-of-record services.

Ubiminds is assisting a global rating agency established to restore trust in credit ratings and offer accurate and transparent ratings.

Challenge
The Cloud Application Security Engineer will ensure that their cloud environments and any software their engineering teams develop meet the overall security standards and protect information. This position will be hands-on when necessary but also work collaboratively with engineers, and establish security processes. It will have a huge impact on the organization's security standards.

What you'll do
• Assist their engineers in creating secure pipelines and ensure that their applications and cloud environments are secure.
• Create, support, and tune the tools that the engineering teams will use to keep their applications and cloud environments secure.
• Assist in identifying possible vulnerabilities, pointing out areas requiring improvements, and supporting team leads to rectify issues.
• Give support to their engineering teams on cloud/application security reviews, threat modeling and ultimately resolving security issues.
• Work on security projects to ensure timely completion of efforts.
• Drive security into their systems development life cycle to ensure that security is built in and considered.
• Contribute to security policies, standards, procedures, and guidelines.

In order to succeed in this position, you will need:

Mandatory skills
• Advanced/fluent English skills – Excellent written and verbal communication skills.
• Strong Development/DevOps/Engineering background with experience in Python.
• Experience with cloud technologies, AWS and Azure preferred.
• Experience with CI/CD pipelines (they use GitLab but others are welcome).
• Experience with Infra as a Code (Terraform and/or others).
• Understanding the underlying infrastructure that applications rely on such as cloud (compute, storage), DNS, networking, etc.
• Ability to fix code, working directly with engineers, and ability to code/script solutions and push toward automation.
• Understanding of secure software development practices including threat modeling, secure design principles, secure coding, code analysis, security testing, and Application Security automation, etc.

Nice-to-have
• Certifications such as GCLD, GCPN, GPCS, GCSA, GWEB, CCSP, or other related security certifications such as CISSP or CISM. Candidates with OSCP would be strongly considered.

Non-technical skills
• Proven ability to communicate technical issues to technical and non-technical audiences.
• Great at stakeholder management and influencing skills.
• Can work with people across multiple disciplines to create a clear vision and strategy.
• Autonomy and ability to self-drive.
• Have excellent written and verbal communication skills.

About Ubiminds
Our Culture
People First. We are all about people!
Challenge yourself. There’s always room for improvement and continuous improvement is in our essence.
Make it happen. Be ready to take challenges as they come. It’s all about attitude and commitment.
We’re in this together. We work as a team, thrive as a team, and evolve as a team.
Averaging on awesome. We work hard to deliver high-quality services and look forward to exceeding expectations.
Keep it real. We promise you honesty, transparency, and openness, regardless of the situation.

Perks and Benefits
As a Cloud Application Security Engineer @Ubiminds, you:
- Are placed in a product-based company, with the same treatment as their full-time employees.
- Have our full back-office support, from career guidance to HR and concierge services.
- Enjoy our remote-first policy – we are a distributed team, after all.
- Get your own MacBook (none of that "bring your own device" stuff here).
- Have access to growth opportunities with other amazing technology professionals, through tech talks, chapter meetings, and even remote happy hours for tons of fun!
- Improve your English through free lessons with a native English speaker - get to the next level on your communication skills!
- Candidate Referral bonus (promote Ubi to your tech friends, and get paid for it!)
- Miss working in the office? Our cool Florianópolis headquarters is available, whenever you want, with weekly quick massages & tasty snacks, soft drinks, and games

How our process works
1. Interview with Tech Recruiter (chat about the job opening and your experiences)
2. Client process (this may vary)
3. Offer (yay)