Zippi

Security Engineer

• Build Secure-by-Default Infrastructure: Design and implement cloud-hardened architectures, secure base images (containers, VMs), and environments with embedded native security controls.
• Automate Security as Code: Be an expert in Policy-as-Code and Security-as-Code. Create and maintain Terraform modules, admission policies, and automated controls that prevent insecure configurations before deployment.
• Implement and Manage Security Controls: Operate cloud security tools, identity & access management (IAM), endpoint security, DLP, and threat monitoring systems.
• Manage Perimeter Defenses: Configure and maintain edge security solutions (WAF, CDN, anti-bot), ensuring secure change processes, pre-production testing, and rollback procedures when needed.
• Enable Engineering Teams: Work alongside engineers to integrate security from the start, build tools and frameworks that enable secure development, and make security an accelerator — not a bottleneck — for team velocity.
• Support Incident Response: Define response playbooks for cloud and platform security incidents, acting as a senior technical specialist when needed.
• Maintain Compliance and Best Practices: Ensure adherence to security frameworks (CIS, NIST, OWASP, PCI-DSS, LGPD) and stay up to date on emerging threats and mitigation technologies.

Senior Security Engineer