**About the role** We are looking for a **Lead Security Software Engineer** to architect GenAI workflows and automation systems that translate manual cloud security adoption into AI\-accelerated pipelines within a large\-scale financial services environment. You will design RAG\-based systems and LLM API integrations to automate secure cloud baseline generation, Rego policy creation, and Terraform module compliance, while leading a localized engineering pod and acting as the primary technical point of contact for cloud security tooling. **What you will do** * Architect Generative AI workflows utilizing RAG, vector databases, and LLM APIs to automate the creation of configuration requirements, Rego policies, and Terraform modules for new cloud services (e.g., AWS S3\). * Oversee the development of automated drift detection, continuous discovery, and gap analysis capabilities to identify unmanaged AI assets and configuration anomalies. * Guide the engineering pod in generating and validating compliant Terraform modules, Rego policies (for Wiz Custom Configuration Rules), and Regula test cases for CI/CD pipelines. * Act as the primary technical point of contact for a Cloud Security Tooling (CST) team, leading a localized pod to ensure scalable, maintainable, and highly effective automation frameworks. **Must haves** * **6\+ years of software engineering experience** with a strong architectural focus on Cloud infrastructure. * Advanced **Python** development and **REST API** design capabilities. * Practical experience integrating **Gen AI APIs** into software applications (e.g., OpenAI, Anthropic) and a working understanding of developer\-level concepts like **Retrieval\-Augmented Generation (RAG)** and **Vector databases**. (Note: We need software builders, not Machine Learning researchers.) * Deep **Cloud Architecture** experience (**AWS** preferred) and proven ability to design **Infrastructure as Code (Terraform)**. * Proven capability to lead and mentor senior engineers in an autonomous, follow\-the\-sun model. * **Upper\-intermediate English level.** **Nice to haves** * Hands\-on experience with modern AI orchestration frameworks (**LangChain**, **LangGraph**). * Experience building APIs with **FastAPI**. * Direct experience writing **Rego policies (Open Policy Agent)** or **Regula test cases**. * Familiarity with Cloud\-Native Application Protection Platforms (CNAPP), particularly **Wiz**. **Perks and benefits** * **Growth without limits:** build your skills through mentorship, internal TechTalks, challenging projects, and a dedicated annual learning budget * **Competitive compensation:** get recognition that reflects your skills and impact, with regular performance and compensation reviews * **Flexibility:** work 100% remotely with flexible hours that support focus, autonomy, and a healthy work rhythm * **Meaningful, modern projects:** build impactful products using modern technologies alongside global teams and leading brands * **Collaborative culture:** join a supportive environment with zero micromanagement where ideas are welcomed and contributions are recognized * **Well\-being \& support:** access local well\-being programs and people\-focused support tailored to your location Job Type: Full\-time Work Location: Remote
João Silva
Indeed · HR
João Silva
Indeed · HR
