CLBOO.26.02_Cloud Security & DevSecOps Engineer

WebCreek is looking for a skilled Cloud Security & DevSecOps Engineer to support security operations across cloud infrastructure, applications, and development environments.

The ideal candidate has hands-on experience with AWS security, application security, vulnerability management, and DevSecOps practices. This role requires strong technical expertise in identifying security risks, supporting incident response activities, and integrating security controls into development and operational workflows.

This position is well suited for a proactive, detail-oriented professional who can work independently, collaborate closely with Engineering and enterprise security teams, and help strengthen security practices across cloud and application environments.

What You'll Do:

• Assess AWS cloud infrastructure, application configurations, APIs, and security controls to identify vulnerabilities and potential security risks.

• Conduct cloud and application security reviews, evaluate configurations, and recommend appropriate security improvements.

• Coordinate penetration testing, vulnerability assessments, and security scanning activities using SAST and DAST tools.

• Track security findings, prioritize remediation efforts, and collaborate with Engineering teams to implement and validate fixes.

• Monitor security alerts, investigate suspicious activities, and support technical incident response, including escalation and remediation coordination.

• Review AWS IAM permissions, privileged access, service accounts, and secrets management practices.

• Integrate security scanning, automated checks, and security controls into CI/CD pipelines.

• Identify opportunities to improve security workflows, processes, and automation across development and operational environments.

• Collaborate with Engineering and enterprise security teams on security assessments, tooling deployments, and technical control implementation.

• Support enterprise security integration initiatives, including control alignment, security tooling adoption, and remediation activities.

• Maintain security documentation, track remediation progress, and communicate findings and recommendations to technical stakeholders.

What You Bring:

• 3+ years of professional experience in cloud security, DevSecOps, application security, security operations, or a related cybersecurity role.

• Hands-on experience securing AWS infrastructure, services, and cloud configurations.

• 
  

• Strong understanding of application security principles, API security, common vulnerabilities, and secure configuration practices.

• Experience with vulnerability management, security assessments, and remediation tracking.

• Familiarity with penetration testing processes and security scanning tools, including SAST and DAST.

• Experience with security monitoring, alert investigation, and technical incident response.

• Knowledge of AWS Identity and Access Management (IAM), privileged access controls, service accounts, and secrets management.

• Experience working with CI/CD pipelines and integrating automated security testing into development workflows.

• Familiarity with enterprise security tooling, cloud security monitoring, and vulnerability management platforms.

• Understanding of security controls, risk assessment, and cloud security best practices.

• Ability to collaborate with Engineering teams to identify, prioritize, and resolve security vulnerabilities.

• Strong analytical, troubleshooting, and problem-solving skills.

• Excellent communication skills and the ability to explain technical security findings clearly.

• Ability to work independently, manage multiple priorities, and collaborate effectively with distributed teams.

• Professional proficiency in spoken and written English.

What You'll Gain:

• The opportunity to collaborate with a growing international technology company.

• Exposure to enterprise IT environments, security initiatives, and technology integration projects.

• Opportunities to strengthen your expertise in Apple device management, cloud administration, and IT operations.

• A collaborative environment with experienced technical professionals and international teams.

• Opportunities for professional development and continuous learning.

Location: Fully remote – Latin America

Applicants must currently reside in a Latin American country and be able to work remotely from their current location.

WebCreek is an equal opportunity employer. We believe our strength comes from our people and welcome all qualified applicants regardless of race, religion, color, gender, age, or disability. If you have the skills and passion for technology, we want you on our team. Apply today and advance your career with a global technology company.

For more information, please visit: https://www.webcreek.com/