Senior Cloud Security Engineer Lisboa

Overview

Moon
Pay is building the infrastructure that powers the crypto economy. We enable buying, selling, and trading crypto using everyday payment methods and provide tools to send, receive, and manage stablecoins. We are licensed and regulated across multiple regions and are expanding our consumer app to make crypto accessible and usable for everyone.

Our Product Security Team fortifies Moon
Pay’s cloud infrastructure (GCP) through security reviews, threat modelling, and automated controls. We actively manage cloud security posture, leveraging Data
Dog for monitoring and Terraform for secure Infrastructure as Code. We embed security practices throughout the infrastructure lifecycle and continuously research emerging threats to empower engineering teams with training and clear guidance. We maintain
-
- date cloud security standards, implement Just-in-Time (JIT) access controls, and lead cloud incident management.

Responsibilities

• Perform threat modelling of architectural changes and new cloud infrastructure and Kubernetes deployments in GCP
• Design, implement, and manage robust security controls and configurations for GCP environments
• Develop and maintain secure Infrastructure as Code (Ia
  C) using Terraform and related tools
• Implement, manage, and enhance cloud security monitoring with Data
  Dog, including alert configuration and incident response procedures
• Implement and manage Just-in-Time (JIT) access for elevated cloud privileges
• Establish and manage the cloud incident management process, leading incident response for cloud security events
• Collaborate with infrastructure and development teams to integrate cloud security best practices throughout the lifecycle
• Research emerging cloud security threats and vulnerabilities and develop mitigation strategies
• Develop and deliver cloud security training and awareness programs
• Contribute to cloud security standards, policies, and documentation; keep them
  -
  - date
• Drive continuous improvement of the cloud security posture and strategic initiatives
• Document cloud security configurations and processes clearly for dissemination to other teams
• Conduct vulnerability assessments and drive remediation for cloud infrastructure
• Support audit, compliance, and regulator requests with required evidence

What you’ll be working on

As part of our Cloud Security team, you’ll design, build, and maintain the security of our cloud platform (GCP). You’ll conduct
- depth threat models, manage and enhance our security posture with Data
Dog and Terraform, implement JIT access controls, and establish incident response frameworks. You’ll collaborate with infrastructure and engineering teams, research emerging threats, deliver security training, and maintain security standards and documentation. You’ll lead cloud incident response efforts and support certifications and audit requirements.

About You

• You have extensive experience in Cloud Security with deep expertise in GCP
• You understand threat modelling principles and their application to cloud architectures
• You have
  - on experience with cloud security tools (Data
  Dog, Terraform)
• You have proven experience designing, implementing, and managing cloud security controls
• You have experience with IAM in cloud environments, including JIT access
• You can establish and manage cloud incident response programs
• Proficiency in scripting/programming for cloud automation (e. g. , Python, Go) is a plus
• You can explain technical security concepts clearly to diverse audiences
• You are
  - motivated, can work remotely, and collaborate effectively with a team
• You are skilled at documenting security processes and sharing knowledge
• Your background includes Fin
  Tech, Saa
  S, or Crypto environments
• Relevant security certifications (e. g. , GCP Professional Cloud Security Engineer - Specialty, CISSP, CISM) are a plus but not required
• You have a good understanding of cryptography and its applications in cloud security
• You contribute to the security community (open source, conferences, CTFs)

Company Values

We live our core values: B - Be Hungry, L - Level Up, O - Own It, C - Crypto Curious, K - Kaizen.

What’s in it for you

• Competitive salary package
• Equity package: ownership at Moon
  Pay
• Pay-for-performance equity bonus
• Unlimited holidays
• Hybrid working schedule
• Private healthcare benefits
• Enhanced parental leave
• Annual training budget
• Home office setup allowance
• Remote working allowance
• Monthly budget to spend on our products and
  - fee crypto transactions
• Employee referral programme
• Regular remote company offsites
• Opportunity to work in a disruptive,
  - growing company

Commitment to Diversity

We welcome applicants from diverse backgrounds. If you require accommodations for the interview process, please let us know. Moon
Pay is an equal opportunity employer committed to diversity and inclusion and prohibiting discrimination or harassment of any kind. We provide reasonable accommodations in our application process for qualified individuals with disabilities.

Please be aware that Moon
Pay does not request an AI-led interview without a recruiter or team member on video call, and will not ask for personal identification documents or money during the interview. If you receive an email claiming to be from Moon
Pay from a
- moonpay.com address, it is not from us.