
Cloud Network Security Development Engineer
- Lisboa
- Permanente
- Horário completo
- Design and implement Network secure cloud architectures including also classical Network infrastructures
- Participate in the evaluation and selection of cloud service providers and platforms as part of evolution and Network Security lifecycle
- Ensure compliance with relevant security standards and regulations (e.g., ISO 27001, SOC 2, HIPAA)
- Knowledge of SASE (Secure Access Services Edge, ZTA (Zero Trust Architecture) and SSE (Security Services Edge) frameworks and how they can be implemented in green & brown environments
- Design and implement Network secure architectures within classical Network infrastructures
- Create evolution plans related to Classical Security components as part of Lifecycle management and long-term company strategy plans
- Ensure security posture within classical and legacy environments
- Familiarity with network security appliances (e.g., firewalls, proxies, intrusion detection systems)
- Conduct threat auditing/status exercises to identify and assess potential security risks in cloud environments and in classical network deployments
- Perform vulnerability assessments and penetration testing of cloud resources
- Develop and maintain risk mitigation strategies
- Act as an Engineering support to Operation team regarding cloud security events and incidents
- Investigate security alerts and respond to security incidents effectively
- Implement and maintain security monitoring tools and dashboards
- Automate security tasks and processes using scripting and automation tools
- Integrate security tools and systems with cloud platforms
- Collaborate with platform development teams to ensure security is built into the platform development lifecycle (SDLC)
- Manage and collaborate with Network Vendors as part of evolution and risk management
- Communicate security risks and recommendations to stakeholders effectively
- Stay current on the latest cloud security threats and best practices
- Work with UI/UX designer to outline customer journeys
- Mitigate impediments with Scrum master and impact successful team completion of Release/Sprint Goals
- Work with Development team on the analysis of features and product backlog increments, ensuring they are all aware of the business value of each item
- Ensure user stories are broken down to an adequate level of detail for execution by engineering
- Support the development of and execution of acceptance tests based on acceptance criteria, verifying stories meet acceptance criteria
- Analyse and report delivery risks and opportunities
- Bachelor's degree in computer science, Information Security, or a related field
- 3+ years of experience in cloud security engineering
- 5 Years of Experience with network security concepts (e.g., firewalls, VPNs, Proxies, routing protocols, network segmentation)
- Relevant industry certifications (e.g., AWS Certified Security, Azure Security Engineer Associate, Juniper, Fortinet)
- Experience of current and emerging virtualization, infrastructure, and cloud network technologies and architectures such SDN ACI, SD WAN, NSX, Amazon, OCI, Azure, Google networks
- Experience working closely with agile methodologies, such as Scrum, XP, and with teams leveraging DevOps and Continuous Delivery / Integration
- Strong understanding of IT management best practice frameworks, such as ITIL
- Professional experience and knowledge of the Telecommunications industry strongly preferred
- Excellent organizational, verbal, and written communication skills
- Strong understanding of cloud computing concepts and technologies (AWS, Azure, GCP)
- Strong understanding of security concepts (e.g., firewalls, VPNs, Proxies, routing protocols, network segmentation)
- Good experience with security tools and technologies (e.g., firewalls, intrusion detection systems, WAF, SIEM, endpoint protection)
- Very good understanding of network elements (e.g., TCP/IP, Routing, HTTP/HTTPS, Layer 2, SDN, SDWAN)
- Experience with terraform and DevOps practices and tools (CI/CD, GitHUB, ADO)
- Experience with scripting languages (e.g., Python, PowerShell, Shell)
- Strong understanding of security principles and best practices
- Excellent communication and interpersonal skills
- Ability to work independently and as part of a team
- Understanding of fundamentals of software development processes and procedures, as well as supporting systems and architecture
- User story definition and refinement and team backlog management
- User and technical acceptance test design, execution, and validation
- Good understanding of the business capability / user journey, wider organizational goals, and desired product business outcomes
- Hybrid Work Model - Flexible hybrid work model with 8-10 in-office days per month, managed by team leaders
- Vodafone Products and Services - Employees get a mobile phone, free communication plan, data card, and various discounts on services and products
- Recognition - Recognition programs for innovative, creative, high-potential employees and exemplary behaviors
- Health and Well-being - Well-being Program offers nutrition and psychological consultations, webinars, workshops, and discounts on various services and products
- Learning - Access to Communities of Practice and a customizable digital training platform with high-quality content (namely Harvard Business Publishing and Skillsoft)
- Local and International Mobility - Internal recruitment with local and international rotation opportunities across departments and roles