Cloud Security Manager

About Kairostek

At Kairostek, we believe great technology starts with great people.

We foster a culture of innovation, collaboration, and continuous growth, empowering our team to make a meaningful impact while building solutions that shape the future. Our teams work across software engineering, artificial intelligence, cloud infrastructure, cybersecurity, digital products, payments technology, and technology operations to deliver scalable and innovative solutions for global organizations.

If you are passionate about technology, problem-solving, and continuous learning, we would love to hear from you.

About the Role

The Cloud Security Engineer is responsible for designing, implementing, and maintaining security controls across the organization's cloud infrastructure, with a focus on threat detection, vulnerability management, and compliance enforcement. This role is well suited to mid-career cybersecurity professionals with hands-on experience in cloud security architecture, automation, and incident response. The engineer partners with platform, DevOps, and SOC teams to harden cloud workloads, embed security into CI/CD pipelines, and respond to cloud-native threats. The role is based on-site and supports global operations through a Follow-The-Sun model, coordinating with regional teams across multiple time zones.

Key Responsibilities

Design, deploy, and maintain security controls across AWS, Azure, and GCP environments, including IAM, network segmentation, encryption, key management, and centralized logging.

Develop and tune cloud-native detections in SIEM, CSPM, and CWPP platforms to identify misconfigurations, anomalous activity, and indicators of compromise.

Lead investigation and containment of cloud security incidents, partnering with SOC analysts and incident responders to drive issues to resolution.

Build automation and infrastructure-as-code patterns (Terraform, CloudFormation, scripts) to enforce security baselines at scale and prevent configuration drift.

Perform vulnerability assessments and configuration reviews of cloud workloads, container platforms, and Kubernetes clusters.

Embed security guardrails into CI/CD pipelines and partner with DevOps engineers on secure-by-default reference architectures.

Document standards, runbooks, and architecture decisions, and support audit and compliance activities (ISO 27001, PCI DSS, SOC 2).

Communicate effectively in English and Spanish when coordinating with regional and global stakeholders, and maintain awareness of cloud threats affecting financial services, retail, logistics, and other sectors active in Panama's market.

Qualifications & Experience

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Systems Engineering, or a related discipline.

3–5 years of experience in cloud security, information security engineering, or a closely related technical role.

Hands-on expertise with at least one major cloud platform (AWS, Azure, or GCP) and working familiarity with at least one other.

Solid understanding of IAM, network security, encryption, container security, and infrastructure-as-code patterns.

Experience with SIEM, CSPM, CWPP, or cloud-native detection tooling, plus scripting skills in Python, PowerShell, or Bash.

Prior gaming experience — whether competitive, hobbyist, or professional — demonstrating the strategic thinking, fast decision-making under pressure, and team coordination that translate to incident response and adversarial environments.

Working proficiency in English and Spanish to support multinational teams, with availability to work on-site in Panama City and participate in on-call rotations where required.

Preferred

Cloud or security certifications such as AWS Security Specialty, Azure Security Engineer Associate (AZ-500), GCP Professional Cloud Security Engineer, CCSP, CISSP, or equivalent.

Experience securing Kubernetes, containerized workloads, or serverless platforms in production environments.

Familiarity with regulated industries (banking, fintech, retail, logistics) and their compliance regimes.

Experience with threat modeling, red/purple team exercises, capture-the-flag competitions, or cloud penetration testing.

Exposure to Microsoft security technologies (Defender for Cloud, Sentinel, Entra ID) and other enterprise security platforms.

Strong stakeholder management skills and the ability to translate security risk into business terms for technical and non-technical audiences.

What We Offer

Competitive compensation package.

Flexible and remote-friendly work environment.

Professional growth and development opportunities.

Exposure to international projects and teams.

Collaborative and inclusive company culture.

Opportunity to work with modern technologies and innovative solutions.

Equal Opportunity Employer

Kairostek is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We welcome applications from qualified candidates regardless of race, ethnicity, gender, age, disability, religion, sexual orientation, or background.