Senior Cloud Security Engineer

<p>1GLOBAL is a technology-driven global mobile communications provider dedicated to empowering enterprises worldwide to unlock the full growth potential of mobile connectivity. With a best-in-class telecom technology platform, a comprehensive suite of globally viable regulatory licenses, and privileged access to the telecom wholesale market, 1GLOBAL is uniquely positioned to deliver seamless compliance and connectivity solutions. Serving the world’s leading banks, corporations, and digital-first businesses—including neo-banks, travel companies, and payment service providers—1GLOBAL connects over 43 million devices globally.</p><p> <br/>With 2024 full-year revenue exceeding US$100 million and in line to exceed US$200 million in FY25, 1GLOBAL is a profitable business generating significant cash flows to fund its ongoing investments in infrastructure, transformation, and growth. 2024 saw major client wins and marked 1GLOBAL’s evolution from a multi-market telecommunication provider to a global technology-driven mobile connectivity powerhouse. </p><p> <br/>Established in 2022 by experienced tech founders and entrepreneurs Hakan Koç and Pyrros Koussios, 1GLOBAL is a European technology leader driving digital transformation in the global telecommunications market. It operates as a fully regulated Mobile Virtual Network Operator (“MVNO”) in ten countries and as a regulated telecommunications operator in an additional 31 countries. Headquartered in the Netherlands, with world-class R&amp;D hubs in Lisbon, Berlin, and São Paulo, 1GLOBAL employs over 450 experts across 15 countries.</p><p></p><p><u><strong>Position Overview</strong></u></p><p>We are looking for a talented <strong>Senior DevSecOps / Cloud Security Engineer</strong> to join our Technology Department, with a focus on strengthening and automating our security posture across cloud and hybrid infrastructure.</p><p>As a <strong>DevSecOps / Cloud Security Engineer</strong>, you will be responsible for embedding security into every stage of our infrastructure lifecycle, from design to deployment. You will lead the implementation of cloud-native security controls in AWS, harden Kubernetes environments, and drive best practices across CI/CD pipelines. Your role includes continuous vulnerability management, network protection, monitoring for threats, and working with development, DevOps and IP teams to ensure secure-by-default practices. You’ll also proactively identify risks, secure network perimeters, and automate remediation wherever possible.</p><p><u></u></p><p><u><strong>Key responsibilities</strong></u></p><ul><li>Design and implement scalable cloud security controls in AWS multi-account environments </li><li>Lead Kubernetes security architecture, including PodSecurity, RBAC, and network policies </li><li>Enforce<strong> zero trust network architecture</strong> and secure segmentation across cloud and hybrid environments</li><li>Integrate security automation into CI/CD pipelines (image scanning, SAST, IaC analysis) </li><li>Deploy and manage CrowdStrike, Tenable, and similar endpoint and vulnerability management tools </li><li>Continuously monitor infrastructure for vulnerabilities, threats, and misconfigurations </li><li>Enforce least privilege IAM policies and secure secrets management </li><li>Conduct regular audits, penetration testing, and hardening of cloud workloads and host systems </li><li>Conduct <strong>network traffic inspection </strong>using tools like VPC Flow Logs, packet capture, or NetFlow</li><li>Collaborate with DevOps and IP teams on security-as-code principles </li><li>Maintain compliance with internal policies and external standards (e.g. CIS, NIST, ISO 27001) </li><li>Tune and respond to alerts from WAF, IDS/IPS, and SIEM systems </li><li>Document security controls, incident response playbooks, and operational runbooks </li><li>Champion a security-first culture through collaboration, training, and awareness</li></ul><p><strong>Requirements</strong></p><ul> <li>A minimum of 5 years in DevSecOps, Cloud Security, or Infrastructure Security roles </li> <li>Strong expertise in AWS security services (IAM, KMS, GuardDuty, Config, Security Hub, etc.) </li> <li>In-depth understanding of <strong>network security</strong> principles (firewalls, routing, segmentation, VPNs, IPsec, etc.)</li> <li>Proven hands-on experience with Kubernetes security (RBAC, NetworkPolicies, OPA/Gatekeeper, Admission Controllers) </li> <li>Experience operating CrowdStrike Falcon and Tenable Nessus / Tenable.io </li> <li>Experience with WAFs, DDoS protection<strong>, NIDS/NIPS,</strong> and threat intelligence integrations</li> <li>Comfortable with <strong>packet inspection, flow analysis,</strong> and traffic monitoring (tcpdump, Wireshark, Suricata, etc.)</li> <li>Proficiency in Infrastructure as Code (Terraform, Terragrunt) and configuration management (Ansible, Packer) </li> <li>Strong scripting/programming skills (Python, Go, or Bash) for automation and toolin