Cloud Security Engineer

📋 Description

• Conduct cloud security assessment across all AWS accounts in 60 days.
• Design and operationalize CNAPP; full AWS coverage and posture monitoring.
• Assess Terraform codebase; define secure IaC standards and policy controls.
• Maintain cloud security controls to sustain ISO 27001; provide audit evidence.
• Establish continuous cloud security monitoring with NG-SIEM; set alert SLAs.

🎯 Requirements

• Deep AWS security expertise (Must-Have): IAM, VPC, S3, CloudTrail, GuardDuty, KMS.
• AWS shared responsibility model and cloud-native threats.
• CNAPP / CSPM experience: production platforms; detection rules; remediation.
• Cloud vulnerability & risk management: end-to-end findings and prioritization.
• Terraform & Secure IaC: IaC in prod; checks (Checkov/tfsec); least privilege IAM.
• Compliance & audit support: ISO 27001 familiarity; evidence for audits.

🎁 Benefits

• Work on a problem that matters in Colombia fintech.
• Be part of something from the ground up; ownership mindset.
• Growth opportunity in a fast-scaling fintech.
• Competitive compensation and meaningful ownership.