Cybersecurity Analyst III CloudSec SRE
Brazilian digital-asset investment platform and cryptocurrency exchange offering trading, tokenized/digital investment products, custody-related services, and institutional solutions.
Projects
About Mercado Bitcoin
Mercado Bitcoin states that it was founded in 2013 as Brazil’s first cryptocurrency brokerage and now provides regulated services and technological infrastructure for virtual assets, including cryptocurrency trading and digital fixed- and variable-income products.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will design, automate, and operate preventive and reactive cloud controls. You will build security-as-code modules and policies, harden CI/CD and software supply chains, manage edge-security policies, and investigate infrastructure incidents. You will partner with engineering teams to embed security into critical architectures.
Requirements
- Experience as an SRE, Platform Engineer, or Cloud Security professional in high-scale, highly available environments
- Production GCP expertise, including IAM, advanced networking, KMS, and GKE/Kubernetes
- Terraform expertise in modular, automated infrastructure-as-code environments
- Ability to develop automations, internal tools, remediation scripts, and API integrations
- Experience with monitoring and log-analysis tools
- Knowledge of WAF operations and application-edge security rules
- Knowledge of CSPM/CWPP ecosystems
- Technical negotiation skills across availability, security, delivery speed, and cost
Responsibilities
- Design, automate, and operate preventive and reactive cloud controls in GCP and multi-cloud environments
- Build and maintain secure infrastructure-as-code modules and security-as-code policies
- Harden CI/CD pipelines and the software supply chain
- Manage edge-security policies, bot mitigation, and DDoS protection
- Perform detection engineering and respond to infrastructure incidents
- Partner with product, data, and engineering teams to embed security into critical architectures
