Principal Cloud Security Engineer

At Damia Group Portugal (Permanent), in Portugal

Salary: €70.000 - €78.000

Expires at: 2027-05-12

Remote policy: Full remote

Role description and responsibilities

Damia Group is an international tech recruitment agency with 3 decades of experience. Our arrival in Portugal, 7 years later, was set on a mission to transform IT recruitment experiences and, through them, achieve better results. We believe in long-term relationships with a transparent and relaxed mindset. In a short period, we have reached the hearts of both scale-ups and larger organisations by delivering spot-on curated candidate shortlists, increased job offer acceptance rates and shorter time-to-fill.

About the role: As a Principal Cloud Security Engineer, the successful candidate will partner with DevOps and CI/CD engineers and their Architects team to ensure security best practices are embedded across the company's cloud infrastructure.

The Cloud Security team is a collaborative group of talented cloud security engineers working in close partnership with the engineering, platform, and trust & security teams. They are on a mission to safeguard the privacy and security of the company and its users' data, embedded directly in the heart of product development.

Responsibilities:

Act as a strategic security leader by defining and driving cloud security principles, standards, and reference architectures across the organisation

Use their knowledge of security architecture to help engineers build and securely operate products and services from the ground up

Assess, design, and implement security processes and controls to meet security, compliance, and audit requirements

Perform proactive research to identify new threats and attack vectors

Partner with engineering teams to embed shift-left security practices throughout the software development lifecycle

Implement and manage cloud and Kubernetes security posture management tooling to continuously monitor and reduce risk across containerised workloads

Requirements

Proven experience working with AWS and AWS security services in a secure production environment, including IAM, Config, KMS, Secrets Manager, CloudWatch, CloudTrail, and GuardDuty

Proven experience working closely with engineering teams and supporting them on their path to shifting security left

Background with infrastructure as code (AWS CDK, CloudFormation, or Terraform), version control and CI tools such as GitLab and GitLab CI

Hands-on experience with Kubernetes (AWS EKS), containers (Docker, AWS ECS), K8s admission controllers and Supply Chain Security

Solid understanding of internet and computer network protocols, including TCP/IP, TLS, and VPN

Good written and verbal communication skills in English

Collaborative team player with a hands-on, can-do approach to problem-solving

Currently living in Portugal and legally authorized to work in the country

Nice to have:

AWS Certified Security – Specialty certification or similar

General familiarity with AI tools and large language models (e.g., Claude by Anthropic, AWS Bedrock)