Description
We are seeking a senior Cybersecurity professional specializing in cloud environments, with experience in protecting cloud applications and infrastructure using CNAPP (Cloud Native Application Protection Platform) and WAF (Web Application Firewall) solutions.
The professional will work strategically and technically on the implementation, management, and evolution of security controls in cloud environments, ensuring protection for applications, data, and infrastructure.
### **Responsibilities**
* Implement and manage CNAPP and WAF solutions to protect cloud environments and applications
* Perform security assessments of cloud architectures and identify vulnerabilities
* Collaborate with DevOps, development, and infrastructure teams to integrate security practices into development lifecycles
* Configure and manage security policies in WAF to prevent attacks such as DDoS and application exploitation
* Monitor, detect, and respond to security incidents in cloud environments
* Conduct security analyses and technical investigations when required
* Perform security audits on cloud platforms and propose architectural improvements
* Support cloud migration projects, ensuring application of security best practices
* Produce technical documentation and reports on infrastructure security posture
* Support internal initiatives to promote cloud security best practices
**Required**
* Proven experience in information security with a focus on cloud environments
* Experience with CNAPP and Web Application Firewall (WAF) solutions
* Solid knowledge of cloud platforms such as AWS, Azure, or Google Cloud
* Experience with DevSecOps practices and integrating security into CI/CD pipelines
* Knowledge of access control, identity management, and application security
* Experience in security incident investigation and response
* Critical analytical ability and capacity to resolve complex problems
**Desirable**
* Experience with Google Cloud Armor or equivalent WAF solutions
* Cloud security certifications, such as:
+ AWS Certified Security Specialty
+ Google Professional Cloud Security Engineer
+ Certified Cloud Security Professional (CCSP)
* Knowledge of security frameworks such as ISO 27001, NIST, or CIS
* Experience with security process automation or incident orchestration
* Specific certification related to CNAPP