Cloud Security Engineer

Montash; Cataluña; Híbrido; EUR 70.000 - 100.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health insurance

Learning budget

Hybrid work

Descripción de la vacante

Montash is seeking a Cloud Security Engineer to join a fast-growing security team spanning AWS, Azure, and GCP. You will review alerts, own posture improvements, and respond to live threats while extending automation.

The role emphasizes IaC, CI/CD integration, and collaboration with engineering to embed security into pipelines. Hybrid work from Madrid or Barcelona, with flexible offices and a strong security-first culture.

Formación

• Experience securing cloud environments (AWS/Azure/GCP).
• Know-how on cloud attacker techniques and detection methods.
• Experience with CNAPP/CSPM tooling or similar (Wiz, Prisma Cloud, Lacework).
• Track record of owning security incidents end-to-end: investigation, containment, reporting.

Responsabilidades

• Review and triage cloud security alerts across AWS/Azure/GCP.
• Own fixes for cloud security posture gaps and misconfigurations.
• Respond to live threats and correlate signals from multiple data sources.
• Monitor SaaS security health and third-party access risks.
• Develop detection logic in SIEM and contribute to SOAR automation.
• Collaborate with engineering to implement security guardrails.

Conocimientos

Cloud security

Incident response

SIEM/SOAR

Cloud platforms AWS/Azure/GCP

IaC & CI/CD

Kubernetes

Docker

Python scripting

Communicate in English

Herramientas

Kubernetes

Docker

Terraform

CI/CD tooling

Descripción del empleo

Location: Madrid or Barcelona (Hybrid, 2–3 days/week in office)

Employment type: Full-time

We're looking for a Cloud Security Engineer to join a fast-growing security team working across AWS, Azure, and GCP. You'll help us stay ahead of cloud-native threats, strengthen our security posture, and build the automation that lets us scale securely.

What You'll Do

• Review and triage cloud security alerts across AWS, Azure, and GCP, focusing effort where risk and business impact are highest
• Own the fix for cloud security posture gaps - misconfigurations, identity risks, and exposed resources
• Investigate and respond to live threats, piecing together signals from different data sources
• Keep an eye on SaaS security health, spotting issues like identity drift or risky third-party access
• Build out and refine detection logic in our SIEM, and help grow our SOAR automation
• Partner with engineering and platform teams to roll out security guardrails and drive adoption of best practices
• Push shift-left security forward by embedding it into IaC and CI/CD pipelines
• Help the team keep getting better through automation, solid documentation, and sharing what you learn

What You Bring

• Practical experience locking down cloud environments (AWS, Azure, and/or GCP)
• Solid grasp of how attackers operate in the cloud (credential abuse, lateral movement, exploiting misconfigurations) and how to detect it
• Time spent with CNAPP/CSPM tooling (Wiz, Prisma Cloud, Lacework, or similar)
• A track record of owning security incidents start to finish - investigation, containment, and writing it up
• Comfort building or working within event-driven detection setups and SIEM/SOAR platforms
• Understanding of microservices and cloud-native architecture, with an eye toward scalability and resilience
• Real-world experience with Kubernetes, Docker, and the major cloud platforms (AWS, Azure, GCP)
• Working knowledge of Infrastructure as Code (Terraform, CI/CD, GitOps) and shift-left approaches
• Some scripting or automation ability (Python or similar)
• Clear communicator in English, able to translate technical findings for non-security audiences

Why This Role

A team that's going places - continuously growing, working with the latest technologies including AI, and genuinely pushing the boundaries of what a modern team looks like

Invest in yourself - the company invests heavily in learning & development

Great offices, real flexibility - hybrid working (2–3 days in office) from Barcelona or Madrid, with a terrace and stunning views

Build your own path - take ownership, show what you've got, and grow within the team and the company on your own terms

People come first -flexible working, healthcare, parental leave, and genuine wellbeing support

Competitive package + €2k annual compensation + health insurance, a dedicated learning budget, and more perks on top