Network Cloud Security Specialist

About Neon

We want to be an exceptional team — one that builds, maintains, and recognizes the diversity of teams that set a high bar!

We are a fintech company, founded by a Brazilian who, dissatisfied with traditional banks, began creating a service to simplify people's financial lives without unnecessary bureaucracy.

Our goal is to simplify the banking system, and we work with a great mission: to create paths for a better financial life for all Brazilians.

We use technology as an ally to innovate and develop the best solutions for those in the "race"!

At Neon, our mission is to safely, efficiently, and scalably simplify the financial lives of millions of Brazilians. So that we can continue to grow and innovate without limits, our perimeter security and cloud network architecture must be impeccable. As a Cloud Security Specialist, you will be the technical leader responsible for designing, automating, and maintaining the security of our networks and perimeters in the cloud (with a strong focus on AWS). Your task will be to ensure the integrity of a complex financial ecosystem, using state-of-the-art perimeter protection solutions (Palo Alto and Zscaler), acting strategically and practically to guide our team towards building an increasingly resilient and secure environment by design.

Key Responsibilities: Secure Cloud Architecture: Design, implement, and optimize secure network architectures in the AWS ecosystem, applying best practices for segmentation, isolation, and least privilege. Perimeter and SASE Management: Configure, administer, and evolve our next-generation firewalls (Palo Alto Networks / VM-Series) and our edge security and access platforms (Zscaler — ZIA/ZPA), driving the SASE/Zero Trust strategy. Infrastructure as Code (IaC): Fully automate the development and maintenance of our network and security infrastructure (Security as Code) using Terraform, minimizing risks and promoting standardization. Monitoring and Proactive Response: Act on the front lines to detect, analyze, and remediate network security threats or incidents in real-time, implementing continuous improvements to protect against emerging attack vectors. High-Level Compliance: Ensure all cloud network environments comply with internal security policies and market regulatory frameworks (PCI-DSS, ISO 27001, CIS Benchmarks). Culture Dissemination: Support the technical development of the team, mentoring engineers and analysts, and acting as a benchmark in Security by Design for developers, product managers, and other technology areas.

Mandatory Requirements: Significant technical experience in network security and cloud security in complex and scalable environments. Advanced knowledge of AWS native networking and security technologies (VPC, Security Groups, NACLs, Transit Gateway, Route 53, AWS WAF, Shield, GuardDuty, and CloudTrail). Established practice in administering Palo Alto Networks next-generation firewalls (VM-Series, Panorama). Solid technical experience with Zscaler's SASE/Zero Trust solutions (Zscaler Internet Access — ZIA and Zscaler Private Access — ZPA). Deep understanding of network fundamentals: dynamic routing protocols (BGP, OSPF), VPN topologies (IPsec, SSL), TCP/IP, OSI models, and advanced packet analysis. Hands-on experience in building and maintaining infrastructure code (IaC) using Terraform.

Desirable Qualifications: Hands-on experience with security in multiple cloud providers (Microsoft Azure or Google Cloud Platform — GCP). Experience with modern CNAPP/CSPM platforms (e.g., Prisma Cloud, Wiz, Orca Security). Valid technical certifications such as: AWS Certified Advanced Networking or AWS Certified Security — Specialty. Palo Alto Networks PCNSE. Zscaler Certified Cloud Specialist (ZCCS). Independent market certifications (CISSP, CCSP, CEH).

CNPJ: Neon Tecnologia

If you join Neon, this is what you'll find here:

At Neon, we support and value our Neowers not only with great benefits but also with care for well-being and development!

Care for your well-being:

• Medical and dental plan • Food/grocery voucher • Life insurance • Home office credit • Gympass: network of gyms and online classes • Childcare or nanny benefit • Extended parental leave • Open English: lesson packages with exclusive discounts for all Neowners and their dependents • Discounts on MBAs and specializations at USP ESALQ; • Betterfly: well-being platform • Alô cafufé: psychological support program • Epharma: discounts of up to 50% on medications • Allya: partner discount network in pharmacies, supermarkets, and other places • Use of co-working spaces: according to internal policy

Care for your career: • Bi-annual performance and culture review cycle • Regular feedback and follow-up on your Individual Development Plan • Decola: internal hiring program • Onflow: internal knowledge network

Care for your wallet, using your Neon account (of course!): • Convenience of payroll-deducted credit • Free cashback

LGPD at Neon

Neon adheres to policies aimed at ensuring control and transparency in the processing of data from all individuals, including those interested in joining our team. Information from candidates for open vacancies at Neon during the selection process is processed strictly in accordance with LGPD.