Descrição da Empresa

FOX IT is a Portuguese IT consulting company, ranked for the fifth consecutive year among Portugal’s top 5% SMEs and, for the first time, in the sector’s national Top 10. We promote a fairer IT market for clients and consultants. Our Happy at Work certification reinforces our commitment to people.

Descrição da Função

Responsibilities: Act as the upper intermediate/senior Cloud DevSecOps engineer for the continuous analysis and refinement of configuration policies to enforce least privilege in AWS, Azure, and GCP environments. Collaborate closely with security, software engineering, and DevOps teams to strengthen the organization’s overall security posture. Provide mentorship and direction to more junior DevSecOps team members. Work directly with development teams (service owners) to execute comprehensive QA validation, covering both functional and performance aspects. Stay up to date on security trends, vulnerabilities, compliance regulations, and emerging tools, advocating for continuous improvement in security practices. Requirements: 2-4 years of proven experience with cloud platforms (AWS, Azure, or GCP), with strong expertise in identity, access management, container security (Kubernetes), and cloud networking. Proficient in spoken and written English. Solid understanding of secure software development lifecycle (SDLC) practices, DevSecOps principles, Infrastructure as Code (Terraform or similar), and integrating security controls into CI/CD pipelines. Practical skills in scripting/automation (Python, PowerShell, or similar) for automating security tasks. Excellent communication skills, with the ability to explain technical security risks and solutions to both technical and non-technical stakeholders. Strong problem-solving abilities with a collaborative approach to addressing security challenges. Nice to Have: Experience with Cloud Security Posture Management (CSPM) tools such as Prisma Cloud, Wiz, BitSight, SecurityScorecard, Black Duck, etc. Knowledge of application security tools and methodologies, including SCA/SAST/DAST solutions (especially Snyk). Solid experience with container technologies like Docker and deep expertise managing Kubernetes clusters. Experience using AI tools to accelerate security-related work. Familiarity with Crossplane for infrastructure management.

Localização

• Todo o país, Portugal