Cloud Security Engineer

Montash; Barcelona; Híbrido; EUR 70.000 - 95.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health insurance

Learning budget

Flexible working

Descripción de la vacante

Montash is seeking a Cloud Security Engineer to join a fast-growing security team spanning AWS, Azure, and GCP. In this hybrid role, you’ll help us strengthen our security posture, automate detection, and scale security across cloud environments.

Based in Barcelona or Madrid, you’ll collaborate with engineering and platform teams to implement guardrails, embed security into CI/CD, and respond to incidents with swift triage and remediation. English communication is essential.

Formación

• Experience securing AWS, Azure, and/or GCP environments.
• Ability to detect cloud attacks, misconfigurations and identity risks.
• Familiarity with CNAPP/CSPM tooling (Wiz, Prisma Cloud, Lacework).

Responsabilidades

• Review and triage cloud security alerts across AWS, Azure, and GCP.
• Own the fix for cloud security posture gaps and misconfigurations.
• Investigate and respond to live threats across data sources.
• Monitor SaaS security health and third-party access risk.
• Develop and refine detection logic in SIEM and contribute to SOAR automation.
• Collaborate with engineering to deploy security guardrails in CI/CD.

Conocimientos

Cloud security

AWS

Azure

GCP

CNAPP/CSPM

Kubernetes

Docker

Terraform

GitOps

Python

SIEM/SOAR

Herramientas

Wiz

Prisma Cloud

Lacework

Descripción del empleo

Location: Madrid or Barcelona (Hybrid, 2-3 days/week in office)

Employment type: Full-time

We're looking for a Cloud Security Engineer to join a fast-growing security team working across AWS, Azure, and GCP. You'll help us stay ahead of cloud-native threats, strengthen our security posture, and build the automation that lets us scale securely.

What You'll Do

• Review and triage cloud security alerts across AWS, Azure, and GCP, focusing effort where risk and business impact are highest
• Own the fix for cloud security posture gaps - misconfigurations, identity risks, and exposed resources
• Investigate and respond to live threats, piecing together signals from different data sources
• Keep an eye on SaaS security health, spotting issues like identity drift or risky third-party access
• Build out and refine detection logic in our SIEM, and help grow our SOAR automation
• Partner with engineering and platform teams to roll out security guardrails and drive adoption of best practices
• Push shift-left security forward by embedding it into IaC and CI/CD pipelines
• Help the team keep getting better through automation, solid documentation, and sharing what you learn

What You Bring

• Practical experience locking down cloud environments (AWS, Azure, and/or GCP)
• Solid grasp of how attackers operate in the cloud (credential abuse, lateral movement, exploiting misconfigurations) and how to detect it
• Time spent with CNAPP/CSPM tooling (Wiz, Prisma Cloud, Lacework, or similar)
• A track record of owning security incidents start to finish - investigation, containment, and writing it up
• Comfort building or working within event-driven detection setups and SIEM/SOAR platforms
• Understanding of microservices and cloud-native architecture, with an eye toward scalability and resilience
• Real-world experience with Kubernetes, Docker, and the major cloud platforms (AWS, Azure, GCP)
• Working knowledge of Infrastructure as Code (Terraform, CI/CD, GitOps) and shift-left approaches
• Some scripting or automation ability (Python or similar)
• Clear communicator in English, able to translate technical findings for non-security audiences

Why This Role

A team that's going places - continuously growing, working with the latest technologies including AI, and genuinely pushing the boundaries of what a modern team looks like

Invest in yourself - the company invests heavily in learning & development

Great offices, real flexibility - hybrid working (2-3 days in office) from Barcelona or Madrid, with a terrace and stunning views

Build your own path - take ownership, show what you've got, and grow within the team and the company on your own terms

People come first -flexible working, healthcare, parental leave, and genuine wellbeing support Competitive package + €2k annual compensation + health insurance, a dedicated learning budget, and more perks on top