R

RecargaPay

All-in-one Brazilian mobile payments platform

Senior Cyber Security Analyst - CloudSec

Security Engineering & ArchitecturePosted on Nov 9
Full-timeRemote in BrazilNo salary listed

About the Job

Requirements

  • Completed higher education is required; postgraduate study is desirable.
  • At least 4 years of information security experience, including at least 3 years securing AWS production environments.
  • Demonstrated record of delivering high-impact work.
  • Strong information security experience and expertise in AWS IAM policies, roles, service control policies, cross-account access, and AWS security services including GuardDuty, Security Hub, CloudTrail, Config, and KMS.
  • Knowledge of AWS Control Tower, including landing zones, preventive and detective controls, Account Factory, and multi-account governance.
  • Knowledge of cloud security best practices and reference frameworks, including the CIS AWS Foundations Benchmark and AWS Security Maturity Model.
  • Practical experience with Terraform or another infrastructure-as-code tool and security in CI/CD pipelines.
  • Experience investigating and responding to incidents in cloud environments.
  • Ability to automate security tasks using Python, Bash, or a similar language.

Responsibilities

  • Manage the security posture of AWS accounts using Control Tower, Organizations, service control policies, Security Hub, Config, and GuardDuty; prioritize critical findings and coordinate remediation with engineering teams through closure.
  • Review and harden IAM policies, roles, and cross-account access by applying least privilege and eliminating static credentials and excessive permissions.
  • Investigate and respond to cloud security alerts and incidents using CloudTrail, GuardDuty, and VPC Flow Logs, including triage, containment, and post-incident reviews.
  • Integrate security controls into infrastructure as code using Terraform and into CI/CD pipelines through change reviews, policy as code, and infrastructure-as-code and image scanning.
  • Protect containerized and serverless workloads, including EKS, ECS, and Lambda, through image baselines, secrets management, and network segmentation.
  • Produce and maintain control evidence for audits and regulatory requirements, including PCI DSS, Central Bank requirements, and LGPD, in collaboration with Compliance.
  • Automate recurring detections and remediations to reduce manual work and time to resolution.
  • Document AWS security standards and guardrails and guide engineers in adopting secure practices.

Desired Qualifications

  • Experience in fintech, payment services, or another regulated environment, including PCI DSS or Central Bank requirements.
  • Experience securing Kubernetes, EKS, and containers.
  • Experience with SIEM and creating detection rules.
  • AWS Certified Security – Specialty or CCSP certification.
  • Intermediate English and Spanish.

About the Company

RecargaPay

All-in-one Brazilian mobile payments platform

RecargaPay is a Brazilian, all-in-one mobile payments platform that lets users pay bills and send money from their smartphones. Users can perform Pix payments with a credit card and transfer funds without card machines or bank details. The service offers cashback on purchases at retailers like iFood, Amazon, and Casas Bahias, plus gift cards and prepaid TV with cashback. Its revenue comes from transactional fees and a Prime+ subscription, and it has expanded into small loans after Central Bank approval to operate as a Direct Credit Society.

Company size
501-1,000
Company stage
Debt Financing
Total funding
$165.1M
Headquarters
São Paulo, Brazil
Founded
2010

Recently Posted Jobs

Explore more opportunities at RecargaPay

See more jobs