Cloud Security Engineer (Hybrid - Lisbon)

We're fast learners, hard workers, natural collaborators... and we Make Modern Happen!

Our ambition is to unlock the potential of our digital world so that organisations everywhere can innovate and thrive securely. We aim to achieve this goal by bringing together the world’s most talented people and the most powerful technologies, combining them to address our customers' challenges and to build something stronger together.

If you share our vision, join us!

Right now, we are looking for a Cloud Engineer for a client on our Talent Team.

Your responsibilities include:

•  Monitor and analyse cloud security posture across the organisation's environments (primarily GCP), identifying risks, misconfigurations, and vulnerabilities.
  
•  Automate remediation of cloud security findings, reducing manual effort and accelerating response times, through solutions using Terraform (IaC), GitHub Actions and scripts using  languages like Python or Bash.
  
• Manage and operate CNAPP tools (e.g., Wiz) to continuously assess cloud workloads, containers, and infrastructure for threats and compliance gaps.
  
• You will integrate third-party tools with Cloud providers through Identity Providers (IdP such as EntraID or Okta).
  
• Conduct Attack Surface Management (ASM) activities, mapping and reducing the organisation's external exposure.
  
• Respond to cloud security incidents, supporting investigation, containment, and post-incident reviews.
  
• Define and enforce cloud security policies and guardrails, aligned with industry frameworks (e.g., CIS Benchmarks, NIST, ISO 27001).
  
• Produce clear security reports and dashboards for technical and non-technical stakeholders.
  
• Stay up to date with the latest cloud threats, vulnerabilities, and security tooling.
  

You must have:

• Up to 3 years of experience in Cloud Security, Cloud Engineering, or Cybersecurity, preferably with GCP.
  
• Strong knowledge of Terraform and Infrastructure as Code (IaC).
  
• Experience with automation and scripting (Python, Bash, or PowerShell).
  
• Solid understanding of cloud security principles, including threat modeling, vulnerability management, and incident response.
  
• Good networking knowledge (Firewalls, VPNs, DNS, TLS/mTLS, Zero Trust).
  
• Experience with Git and Linux administration/hardening.
  
• Familiarity with security standards and modern cloud implementation methodologies.
  
• Fluent in Portuguese and English.
  
• Interest in leveraging AI to improve productivity.
  

Preferred Qualifications

• GCP Professional Cloud Security Engineer certification.
  
• Experience with CNAPP platforms such as Wiz or Prisma Cloud.
  
• Knowledge of Attack Surface Management (ASM).
  
• Experience with IaC tools such as Terraform and Ansible.
  
• Experience with Apigee.
  
• Kubernetes security knowledge or certifications (CKA, CKAD, CKS), including RBAC, Network Policies, and Pod Security.
  

We offer:

• Integration into a dynamic and motivated team for the performance of the role.
  
• Additional training.
  
• Salary package according to the role performed.
  
• Professional development.
  
  

Workplace: Hybrid - Lisbon

Claranet, Make modern happen!