Senior SAP Security Specialist working with SAP Security solutions on customer projects. Responsible for workshops and leading consultancy in SAP Security environments.
About the role
- Professional focused on Cloud Security solutions and DevSecOps at innovative tech consulting firm Leega. Implementing security for AWS services and integrating security analysis tools.
Responsibilities
- Develop and implement AuthN/AuthZ mechanisms for APIs, microservices, and enterprise integrations using mTLS and OAuth2
- Design and implement security solutions integrated with the cloud and DevOps pipelines
- Automate deployment of security resources and solutions using Infrastructure as Code (IaC) — Terraform and GitHub Actions
- Integrate security analysis tools (SAST, DAST, SCA, IAST) into CI/CD pipelines
- Apply and automate hardening for EKS, Istio, Lambda, and infrastructure provisioned via Terraform
- Implement security policies and encryption controls for S3, DynamoDB, and other AWS services
- Manage digital certificates via ACM and secrets via Secrets Manager
- Support development teams in adopting secure patterns and remediating vulnerabilities
- Automate security validations and drive continuous improvement
- Document technical standards and security best practices
Requirements
- Strong experience in AWS Cloud Security, including IAM (RBAC/ABAC), KMS, Secrets Manager, Certificate Manager (ACM), CloudTrail, GuardDuty, WAF, Macie, and Security Hub
- Experience developing and implementing security solutions, including building reusable components, automating controls, and securing integrations between systems
- Hands-on experience with DevSecOps, integrating SAST, DAST, SCA, IAST, and IaC security into CI/CD pipelines (GitHub Actions)
- Knowledge of Authentication and Authorization (AuthN/AuthZ) for APIs and enterprise integrations, using OAuth2, OpenID Connect, JWT, JWE, and mTLS
- Experience securing APIs and microservices
- Experience with AWS services: API Gateway, Cognito, Lambda, DynamoDB, S3, and Load Balancers (ALB/NLB)
- Knowledge of Kubernetes (EKS) and Istio, including mTLS between services, network policies, access control, and workload hardening
- Experience with Infrastructure as Code (Terraform), applying policy-as-code, automated validation, and secure configurations
- Strong knowledge of cryptography, digital certificates (PKI), TLS/mTLS, and protection of data in transit and at rest
- Experience with SDLC/SSDLC and secure development practices
- Intermediate/advanced English and Spanish
- AWS or security certifications (AWS Security Specialty, Solutions Architect, DevOps Engineer, Security+, or similar) — desirable
- Experience with Threat Modeling and MITRE ATT&CK — desirable
- Development of internal security frameworks or libraries — desirable
- Use of AI applied to security automation and analysis — desirable
- Experience in regulated environments (financial sector) — desirable
Benefits
- Porto Seguro medical insurance
- Porto Seguro dental insurance
- Profit Sharing (PLR)
- Childcare assistance
- Alelo meal and food vouchers
- Home office allowance
- Partnerships with educational institutions
- Support for certifications, including cloud certifications
- Livelo points
- Total Pass membership
- Mindself
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Cybersecurity Engineer ensuring the security of IT & OT systems at ArianeGroup. Collaborating with internal teams and overseeing compliance and protection measures.
Internship for building and deploying SSE/MASE system while working closely with management at I3P, a firm specialized in electrical networks.
Technicien d'installation de dispositifs antichute supervisant l'installation et la sécurité. Participer aux visites de chantier, préparer et gérer l'installation avec une autre personne.
Installs complete fall protection systems ensuring safety compliance. Managing team and quality of work on construction sites in a hybrid role.
IT Specialist ensuring smooth IT operations in a growing beauty company. Collaborate with external service providers and support internal teams with compliance and documentation.
Strategic leader focused on Cyber Security and Fraud analytics at Sun Life. Establishing centralized functions and driving proactive detection and response efforts.
Manager Infrastructure & Security driving IT infrastructure and security landscape for semiconductor firm. Collaborating with teams to build scalable systems and innovative security strategies.
Residential Security Agent managing physical security for clients in California and Nevada, ensuring compliance with safety protocols and quick response to emergencies.
Senior Cyber Security Consultant at HvS - Consulting focusing on ISMS development and team leadership. Engaging clients in ISO 27001 compliance and strategic cybersecurity improvements.