Mid-Level Cloud Security Analyst

Description

We are looking for a senior Cybersecurity professional with a focus on cloud environments, with experience in protecting applications and cloud infrastructure using CNAPP (Cloud Native Application Protection Platform) and WAF (Web Application Firewall) solutions. The professional will act strategically and technically in the implementation, management, and evolution of security controls in cloud environments, ensuring the protection of applications, data, and infrastructure. ### **Responsibilities** * Implement and manage CNAPP and WAF solutions for the protection of cloud environments and applications * Perform security analyses on cloud architectures and identify vulnerabilities * Collaborate with DevOps, development, and infrastructure teams to integrate security practices into development cycles * Configure and manage security policies in WAF, preventing attacks such as DDoS and application exploitation * Monitor, detect, and respond to security incidents in cloud environments * Conduct security analyses and technical investigations when necessary * Perform security audits on cloud platforms and propose architecture improvements * Support cloud migration projects, ensuring the application of security best practices * Produce technical documentation and reports on the security posture of the infrastructure * Support internal initiatives for disseminating cloud security best practices **Required** * Proven experience in information security with a focus on cloud environments * Experience with CNAPP and Web Application Firewall (WAF) solutions * Solid knowledge of cloud platforms such as AWS, Azure, or Google Cloud * Experience with DevSecOps practices and security integration in CI/CD pipelines * Knowledge of access control, identity management, and application security * Experience in security incident investigation and response * Ability for critical analysis and resolution of complex problems **Desirable** * Experience with Google Cloud Armor or equivalent WAF solutions * Cloud security certifications, such as: + AWS Certified Security Specialty + Google Professional Cloud Security Engineer + Certified Cloud Security Professional (CCSP) * Knowledge of security frameworks such as ISO 27001, NIST, or CIS * Experience with security process automation or incident orchestration * Specific certification related to CNAPP