Pavago
Monkey
Mid-Level Cloud Security Engineer
AWSKubernetes
Automatic translation. Check the original.
About us
Monkey was born with the great purpose of simplifying financial transactions between large companies and their supply chains through technology. Easily and quickly, we improve the cash flow of our clients and suppliers by advancing their invoices. All of this is possible through spectacular partnerships with different financial institutions 🚀
Activities
Your mission will be to strengthen the security of our cloud environments by implementing and evolving controls, investigating vulnerabilities, and collaborating with SRE, Development, and Governance teams to ensure secure, resilient, and compliant environments.
- Implement and maintain security controls in AWS, including identity and access, networking, encryption, key management, and logs.
- Administer and improve infrastructure security tools, including monitoring, vulnerability management, and network protections, such as firewalls and WAFs like Cloudflare.
- Analyze and investigate security alerts, execute planned remediation, and escalate critical situations or those requiring joint action.
- Identify and track the remediation of vulnerabilities, perform hardening adjustments, and propose corrective actions according to agreed-upon risks and priorities.
- Collaborate with SRE, DevOps, and Development on implementing security in clusters, pipelines, and automations.
- Complete security assessments and questionnaires, gather evidence, and participate in audits, explaining the technical controls under your responsibility.
- Document configurations, procedures, and solutions, sharing best practices with the teams involved.
Minimum requirements
- Practical experience with AWS infrastructure, including implementing or operating security controls.
- Applied knowledge in IAM, networking, encryption, KMS, and security logs.
- Experience with cloud or infrastructure security tools, including alert analysis and troubleshooting.
- Knowledge of infrastructure and system security, including hardening and vulnerability management.
- Ability to investigate issues, propose solutions, and conduct technical activities autonomously, recognizing when to involve other stakeholders.
- Familiarity with security requirements related to ISO/IEC 27001 and SOC 2, including documentation and control evidence.
Preferred Qualifications
- Previous experience in Infrastructure, SRE, DevOps, or Development teams.
- Knowledge of Kubernetes and container security.
- Participation in audits, client assessments, or preparation of security evidence.
- Cloud or information security certifications.
- Experience in fintechs, SaaS companies, or regulated environments.
- English proficiency for meetings and documentation.
- 🛒 Meal/Food voucher on a Flash card, with the freedom to use it as you prefer;
- 🏠 Home Office allowance to support your remote routine;
- 🩺 Medical and Dental insurance 100% covered by the company;
- 💓 Life insurance, for more peace of mind in your daily life;
- 💪 Wellhub – access to gyms, studios, and wellness throughout Brazil;
- 📖 Monkey Academy – career development and acceleration programs;
- 🥳 Birthday day-off - so you can enjoy your day however you prefer;
- 😎 Partnership with Sesc for leisure, culture, and wellness;
- 🧑🍼 Extended Maternity and Paternity leave, so you can enjoy this special moment with peace of mind;
- 👶 Daycare assistance, to bring more security and balance to your routine.
