Cloud Security Engineer - Assistant Vice President

iCapital
Lisbon, Portugal
Hybrid

Who this role is best for

A natural match if you have 6–9 years of hands-on cloud security architecture experience and a strong background in AWS.

Best fit for

  • Candidates with 6–9 years of cloud security architecture experience and a focus on AWS infrastructure
    — “6–9 years of experience in cloud environments, with AWS as the primary platform”
  • Individuals who can bridge security engineering with development lifecycle practices and automation
    — “embedding security early across the development lifecycle and supporting a shift-left security culture”
  • Professionals with a proven ability to manage cloud security programs across multiple platforms
    — “Build and manage Cloud Security Programs across AWS, Azure, and GCP infrastructure”

Things to consider

  • Requires in-office presence for four days a week, with limited remote flexibility.
    — “Employees in this role will work in the office four days, with the flexibility to work remotely one day (Friday)”
  • The role demands a high level of technical depth in cloud-native security tools and IaC frameworks.
    — “Hands-on experience with Infrastructure as Code tooling such as AWS CDK, CloudFormation, or Terraform”

How to stand out

  • Highlight your experience with CSPM tools and automation in cloud security posture management.
    — “Drive continuous detection, remediation, and resolution of cloud vulnerabilities and security misconfigurations”
  • Demonstrate your ability to design cloud infrastructure with Zero Trust architecture principles.
    — “Apply Zero Trust architecture principles and best practices across cloud infrastructure design”
  • Showcase your collaborative work with SOC, engineering, and governance teams in past roles.
    — “Collaborate with the SOC to develop and strengthen cloud detection engineering capabilities”
  • Emphasize your hands-on experience with AWS-native security services like IAM and CloudTrail.
    — “Proficiency with AWS-native security services, including IAM, Config, KMS, Secrets Manager, CloudWatch, CloudTrail, and GuardDuty”
Pace · SteadyCollaboration · HighAutonomy · MediumDecision Impact · Team

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

  • secure cloud infrastructure
  • continuous monitoring and alerting
  • security standards adoption
Typical background
6-9 years of cloud or security experienceAWS Certified Solutions ArchitectCISSP

Skills & requirements

Required

Cloud SecurityAWSCSPMAutomationZero Trust Architecture

Preferred

AzureGCPCSPM ToolingInfrastructure As Code

Stack & domain

AWSAzureGCPIAMConfigKMSSecrets ManagerCloudwatchCloudtrailGuarddutyOktaRBACABACService-to-service AuthenticationAWS CDKCloudformationTerraformCollaborationCommunicationAWS Certified Solutions ArchitectAWS Certified Security – SpecialtyCisspCCSPCloud SecurityCybersecurity

About the role

Original posting from iCapital via Greenhouse

About the Role

iCapital is looking for a Assistant Vice President, Cyber Cloud Security Engineer to join the Security Engineering team, within the Information Security organization. This role will establish and manage cloud security programs, build new security architecture, drive automation, and continuously identify and address security gaps across iCapital's technology landscape. The ideal candidate is a deeply technical individual contributor who can research, design, and implement security technologies, and collaborate effectively across teams and functions.

Responsibilities

Build and manage Cloud Security Programs across AWS, Azure, and GCP infrastructure 

Design, implement, and validate secure cloud infrastructure architectures, ensuring new capabilities meet established security standards and requirements.

Apply Zero Trust architecture principles and best practices across cloud infrastructure design and access models.

Drive continuous detection, remediation, and resolution of cloud vulnerabilities and security misconfigurations, leveraging CSPM tooling (e.g., AWS Security Hub, Wiz, or equivalent) and automation to continuously improve and maintain cloud security posture.

Build automation capabilities for continuous monitoring and alerting across cloud infrastructure.

Partner with engineering teams to drive the adoption of security standards and best practices, embedding security early across the development lifecycle and supporting a shift-left security culture.

Collaborate with the SOC to develop and strengthen cloud detection engineering capabilities.

Assist the Risk and Governance teams with the development and implementation of cloud-related policies, procedures, and standards.

Engage with Platform, DevOps, and Software Engineering teams to deliver security initiatives and provide security guidance to projects across the organization.

Qualifications

6–9 years of experience in cloud environments, with AWS as the primary platform, including proven hands-on expertise in cloud security architecture and infrastructure design.

Relevant cloud or security certifications are a plus (e.g., AWS Certified Solutions Architect, AWS Certified Security – Specialty, CISSP, or CCSP).

Proficiency with AWS-native security services, including IAM, Config, KMS, Secrets Manager, CloudWatch, CloudTrail, and GuardDuty.

Experience with cloud identity and access architecture, including federation (e.g., Okta), RBAC, ABAC, and service-to-service authentication models.

Hands-on experience with Infrastructure as Code tooling such as AWS CDK, CloudFormation, or Terraform.

We believe the best ideas and innovation happen when we are together. Employees in this role will work in the office four days, with the flexibility to work remotely one day (Friday). 

Benefits

iCapital offers a comprehensive benefits package that includes a total compensation program consisting of competitive salary, annual performance bonus, and equity for all full-time employees; healthcare with 100% employer-paid health and dental insurance; and generous paid time off (PTO).

For additional information on iCapital Network, please visit https://www.icapitalnetwork.com/about-us  Twitter: @icapitalnetwork | LinkedIn: https://www.linkedin.com/company/icapital-network-inc

Source: iCapital careers (Greenhouse)

Similar roles

More roles at iCapital