Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowFirst seen 3 hours ago

Security Engineering Manager, AWS DevSecOps

Rig Globalconsulting2 open roles

Where
São Paulo, Brazil, Remote
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSecurity Engineering Manager, AWS DevSecOpsRig Globalconsulting · São Paulo, Brazil, Remote

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Rig Globalconsulting's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.5% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.4%3 days
  3. 11.5%7 days
  4. 18.1%14 days
  5. 35.6%30 days
  6. 44.6%60 days
This job: first seen 3 hours ago

The posting

Security Engineering Manager, AWS, DevSecOps, Identity, Endpoint, SOC 2

Location: Americas, Remote

Employment Type: Full-Time Contractor

Overview

We are seeking a Security Engineering Consultant to support the Security Engineering team in securing our infrastructure. This role will focus on strengthening AWS security architecture, integrating security automation into GitHub and CI/CD workflows, hardening identity and endpoint controls, and leading SOC 2 Type 1 readiness.

What You'll Do

Cloud Security (AWS)

  • Design and implement AWS security architecture, including encryption, IAM policies, and least-privilege access controls.
  • Establish standards for secure configuration and continuous monitoring across AWS services (IAM, GuardDuty, Config, CloudTrail).
  • Improve visibility and reporting on cloud security posture and risk trends.

DevSecOps and Automation

  • Integrate security automation into GitHub workflows and CI/CD pipelines to identify vulnerabilities before code deployment.
  • Implement and maintain security scanning across repositories using tools such as GitHub security features, Snyk, SonarQube, and related solutions.
  • Collaborate with engineering teams to implement secure coding practices and security testing protocols.

Identity and Access Management

  • Manage and optimize Okta identity management, including roles, policies, MFA, and privileged access controls.
  • Strengthen Google Workspace security configuration, access policies, and monitoring practices.
  • Drive reduction of privileged access through role redesign, access reviews, and enforcement of least privilege.

Endpoint Security

  • Deploy and maintain endpoint security solutions across corporate devices with threat monitoring capabilities (CrowdStrike, SentinelOne, or equivalent).
  • Establish endpoint security standards, enforcement mechanisms, and compliance reporting.

Compliance and Security Program Execution

  • Establish the SOC 2 compliance framework and coordinate audit preparation activities toward SOC 2 Type 1 completion.
  • Build and maintain security documentation, policies, evidence collection processes, and control ownership alignment.

Monitoring, Reporting, and Incident Response

  • Monitor security metrics across cloud, endpoint, and identity systems with regular reporting.
  • Respond to security incidents, conduct root cause analysis, and implement corrective actions to prevent recurrence.
  • Continuously improve detection, alerting, and response workflows through tooling and automation.

Qualifications & Experience

  • 4+ years of hands-on experience in security engineering, product security, or infrastructure security roles (cloud, DevSecOps, identity, endpoint, and compliance).
  • Hands-on AWS security: encryption, IAM/least privilege, monitoring (GuardDuty/Config/CloudTrail).
  • DevSecOps automation in GitHub/CI/CD: scanning, vulnerability management, secure SDLC.
  • Okta + Google Workspace security administration (MFA, roles, access governance).
  • Endpoint security deployment and compliance monitoring (CrowdStrike/SentinelOne or similar).
  • SOC 2 Type 1 readiness: controls, documentation, evidence, audit coordination.
  • Incident response and root cause analysis; strong collaboration and documentation skills.
  • Strong communication and leadership skills, with experience mentoring engineers and influencing cross-functional teams.

We are committed to providing equal opportunity for qualified applicants to contract positions, regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status. This is a contract opportunity, not a direct employment role.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Rig Globalconsulting's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Rig Globalconsulting's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Rig Globalconsulting's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.