Cloud Security Engineer
KnowBe4Summary
Cloud Security Engineer at KnowBe4 responsible for securing cloud infrastructure and AI agents for a global leader in Human Risk Management serving over 70,000 organizations. The role involves implementing advanced technical defenses and security measures within KnowBe4's HRM+ platform.
Job Description
KnowBe4 is the global leader in Human Risk Management, trusted by over 70,000 organizations worldwide to secure their employees and AI agents for over 15 years. We're pioneering a new era of security. AI-powered since 2016. And market-leading since day one.
Our HRM+ combines continuous risk intelligence, advanced technical defenses, and personalized training to help organizations build strong security cultures. We help organizations understand, measure, and reduce human risk across their entire workforce, defending against, deepfakes, and emerging AI-powered threats.
We believe that protecting organizations from cyberthreats and creating a positive environmental impact go hand in hand. True resilience is collective, it requires us to protect our people, our data, and our planet.
Please submit your resume in English.
To learn more about our team and office culture in São Paulo, Brazil, visit the following links.
Careers Page: https://www.knowbe4.com/careers/locations/sao-paulo
Glassdoor: https://www.glassdoor.com/Location/KnowBe4-S%C3%A3o-Paulo-Location-EI_IE969384.0,7_IL[…]M_-C1lsxoZq7Cx8IriVE8MkrzuTmnJzqego77RAWZz9sqGt_55BflwYKpQeg
LinkedIn: https://www.linkedin.com/company/knowbe4/life/brazil/
Join our Information Security team as the person responsible for the safety of our cloud-native environments. As a Cloud Security Engineer, your mission is to protect the privacy and integrity of our data by treating security as code. You’ll work proactively with our IT and R&D teams to help them operate securely using automation and cutting-edge tools. If you have a solid foundation in the cloud, love the "detective work" of digging into alerts in a tool like Wiz, and take pride in building resilient systems, you’ll fit right in.What You'll Do
- Architect Secure Systems: Collaborate with engineering teams to design and build cloud-native applications and infrastructure that are secure by default.
- Automated Triage: Use CSPM tools (like Wiz) to discover cloud security findings and provide clear, practical guidance to teams on how to remediate those risks.
- Manage Modern Tooling: Implement and oversee Cloud Security Posture Management (CSPM) to ensure we have 100% visibility across our cloud footprint.
- Monitor & Detect: Create new security alerts and dashboards within our infosec stack and perform threat hunting across log feeds to identify emerging risks.
- Respond to Incidents: Monitor for security incidents and lead the investigation and root cause analysis to ensure we don't just fix a problem, but prevent it from returning.
- Secure the Pipeline: Conduct security reviews and automated vulnerability scans across our cloud environments and CI/CD pipelines.
- Document & Standardize: Create and maintain infosec policies, procedures, and runbooks that document our best practices and security principles.
You’re a cloud-native engineer who prefers automation over manual configuration. You are analytical, stay calm when investigating alerts, and enjoy the challenge of learning a complex environment from the inside out.
- Cloud Foundation: Hands-on experience working within AWS or other cloud environments and a strong understanding of cloud-native security principles.
- Infrastructure as Code: Experience with Terraform or similar tools to manage and secure infrastructure.
- Analytical Detective: You genuinely enjoy digging into cloud alerts (CSPM) to find the "needle in the haystack" and identifying the root cause of vulnerabilities.
- Technical Proficiency: Experience with automated vulnerability scanning and monitoring for security incidents across log feeds.
- Clear Communicator: You can explain technical risks in a way that helps developers take action and can document clear policies for the team.
- Continuous Learner: You stay informed on the latest vulnerabilities and are excited to apply modern security practices to a growing environment.
- Experience securing CI/CD pipelines.
- A background in the cybersecurity or SaaS industry.
- Familiarity with creating custom dashboards for proactive threat hunting.
- Engineering-First Security Culture: We focus on automating the small things so you can spend your time on high-impact security architecture and threat hunting using cutting-edge tools.
- Remote Flexibility: This is a fully remote role, giving you the autonomy to secure our environments from wherever you work best.
- Real Impact: You’ll have a direct hand in the architecture and safety of a platform that millions of users rely on every day.
- Focus on Growth: We support your development through tuition reimbursement and bonuses for obtaining relevant security certifications as you grow with the team.
Our Fantastic Benefits
Note: An applicant assessment and background check may be part of your hiring procedure.
Individuals seeking employment at KnowBe4 are considered without prejudice to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, sexual orientation or any other characteristic protected under applicable federal, state, or local law. If you require reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please visit www.knowbe4.com/careers/request-accommodation.
No recruitment agencies, please.