Senior DevSecOps Engineer (São Paulo Based)

About this role

About Us 1GLOBAL is a technology-driven global mobile communications provider, delivering global connectivity solutions to enterprises and consumers. Powered by a best-in-class telecom platform with its own owned and operated global mobile core network in 15 countries, fully fledged in-house developed eSIM technology, and an extensive portfolio of telecom licenses; 1GLOBAL operates as a fully regulated telecommunications provider across 43 countries worldwide. The company serves many of the world’s leading banks, multinational enterprises, global retailers and digital-first businesses, including neo-banks, global fast moving consumer goods companies, travel leaders, and payment service providers. Today, 1GLOBAL connects more than 80 million people and devices globally, enabling our customers to launch, scale, and innovate with confidence in the mobile ecosystem. 1GLOBAL is a profitable, fast-growing business. With full-year revenues in 2025 exceeding US$200 million and profits of over US$25 million, we generate strong cash flows to fund our growth allowing us to continuously invest in infrastructure, platform innovation, and global expansion. In 2026 also the parent of the Lidl Group acquired a 10% interest in 1GLOBAL as part of a deal for Lidl to offer globally to its 180 million consumers communication services. Recent years have marked a defining phase in 1GLOBAL’s journey, with major enterprise and mass-consumer client wins accelerating its evolution into a global mobile connectivity powerhouse, purpose-built to enable consumer brands to enter and succeed with their own aspirations to offer telecommunications services to their clients. Founded in 2022 by experienced technology entrepreneurs, Hakan Koç and Pyrros Koussios, 1GLOBAL has rapidly emerged as a European technology leader shaping the future of global telecommunications. It operates as a fully regulated Mobile Virtual Network Operator (MVNO) in 15 countries and as a regulated telecom operator in an additional 28 markets. Headquartered in the Netherlands, with world-class R&D hubs in Lisbon, Berlin, and São Paulo, its team of close to 550 experts across 16 countries is united by a single ambition: to redefine global mobile connectivity through technology, scale, and execution excellence. About the Ideal Candidate We are looking for a talented Senior DevSecOps / Cloud Security Engineer to join our Technology Department, with a focus on strengthening and automating our security posture across cloud and hybrid infrastructure. As a DevSecOps / Cloud Security Engineer, you will be responsible for embedding security into every stage of our infrastructure lifecycle, from design to deployment. You will lead the implementation of cloud-native security controls in AWS, harden Kubernetes environments, and drive best practices across CI/CD pipelines. Your role includes continuous vulnerability management, network protection, monitoring for threats, and working with development, DevOps and IP teams to ensure secure-by-default practices. You’ll also proactively identify risks, secure network perimeters, and automate remediation wherever possible. About the Role Design, implement, and evolve scalable cloud security controls across AWS multi-account environments using security-as-code principles Own Kubernetes security architecture including workload isolation, RBAC, pod security standards, and network segmentation Embed security automation into CI/CD pipelines, including image scanning, IaC validation, and policy enforcement Continuously assess cloud and Kubernetes environments for vulnerabilities, misconfigurations, and emerging threats Design and maintain strong IAM and secrets management practices, enforcing least-privilege access Partner with DevOps, Platform, and IP/Network teams to deliver security controls as code and by design Analyze network traffic and security telemetry using flow logs, metrics, and targeted packet inspection where required Ensure alignment with internal security policies and external frameworks (CIS, NIST, ISO 27001, etc.) Produce and maintain clear documentation, including security architectures, runbooks, and incident response playbooks Act as a security champion, driving best practices, awareness, and secure engineering culture across teams Requirements About You A minimum of 3+ years Cloud Security / DevSecOps / Infrastructure Security Strong AWS security fundamentals (IAM, KMS, GuardDuty, Config, Security Hub) Solid Linux security and cloud networking fundamentals Hands-on Kubernetes security (RBAC, NetworkPolicies, pod security, image scanning) Infrastructure as Code (Terraform) and Git-based workflows Scripting for automation (Python or Go or Bash) Experience with vulnerability management and container security Security-first mindset with strong troubleshooting skills Experience with WAFs and cloud DDoS protection Comfortable with packet inspection, flow analysis , and traffic monitoring (tcpdump, Wireshark, Suricata, etc.) Benefits What we offer? CLT contract — enjoy job stability and reliable benefits that value your work Quarterly performance bonuses to reward your hard work and achievements Meal allowance paid into Caju card — R$100 per working day Extended parental leave — 180 days of maternity leave and 20 days of paternity leave Health insurance with SulAmérica — 50% covered by the company Daycare allowance provided to mothers with children under 3 years old — R$500 per month per child Why 1GLOBAL? Growth Opportunities: Advance your career in one of the fastest growing telecommunications companies, expanding over 50% year-on-year under the leadership of successful tech entrepreneurs. Major Transaction Exposure: Be in the driver’s seat for transactions that will have an impact on the future telco industry. Work with a Talented Team: From the Board and the Founders to the Senior Management Team, you will collaborate daily with the most capable and renowned external advisors and constantly being expose