Analista Pleno CloudSec

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Analista Pleno CloudSec based in Brazil. We are seeking a Cloud Security Analyst to strengthen cloud security governance and protect critical infrastructure, with a particular focus on Amazon Web Services (AWS). In this role, you will manage identity and access controls, enforce security policies, and ensure compliance with established cloud security standards. You will play a key role in implementing the principle of least privilege, identifying excessive permissions, and mitigating potential security risks across multi-account environments. Working closely with engineering and infrastructure teams, you will help automate security processes and improve cloud protection. This opportunity is ideal for a technically minded professional who enjoys solving complex security challenges and promoting continuous improvement. Join a collaborative, innovation-driven environment that values autonomy, accountability, integrity, and professional excellence. Accountabilities - Cloud Identity and Access Management: Manage and govern AWS Identity and Access Management (IAM), including creating, reviewing, and maintaining roles, managed and inline policies, and permissions. - Security Governance: Implement and maintain the principle of least privilege, ensuring access rights are appropriately restricted and aligned with organizational security requirements. - Multi-Account Security Management: Configure and maintain security controls across AWS Organizations, Control Tower, and Landing Zone environments, including the implementation and management of Service Control Policies (SCPs). - Access Auditing and Remediation: Conduct regular audits of permissions and access configurations, identify excessive privileges, and implement corrective measures to reduce security exposure.

- Security Monitoring and Incident Response: Monitor, investigate, and respond to security alerts and misconfigurations using AWS services such as GuardDuty, Security Hub, CloudTrail, AWS Config, and KMS. - Automation and Process Optimization: Develop scripts, preferably in Python, to automate IAM analysis, security remediation, access reviews, and governance workflows. - Cross-Functional Collaboration: Partner with engineering and infrastructure teams to define secure access policies and implement appropriate controls for new services, applications, and workloads. - Documentation and Standards: Maintain clear documentation of cloud security processes, policies, procedures, and governance guidelines. - Compliance and Auditing: Support internal and external audits and compliance initiatives related to LGPD, ISO 27001, PCI-DSS, CIS Benchmarks, and other relevant security frameworks. - Continuous Improvement: Stay informed about AWS security developments, emerging threats, and industry best practices, recommending improvements to strengthen cloud security and governance. Requirements - Cloud Computing Experience: Previous hands-on experience with cloud computing environments, preferably AWS, including familiarity with cloud security principles and infrastructure management. - AWS IAM Expertise: Practical experience creating and managing IAM roles and policies, including managed and inline policies, applying Service Control Policies, and administering access across multi-account AWS environments. - Least-Privilege Implementation: Demonstrated understanding of access governance and the ability to apply least-privilege principles to reduce excessive permissions and strengthen security controls. - AWS Security Services: Solid knowledge of AWS IAM, CloudTrail, AWS Config, GuardDuty, Security Hub, and Key Management Service (KMS). - Education: Completed or ongoing bachelor's degree in Computer Science, Information Technology, or a related field.