Cloud Security Engineer

Tamarind Intelligence; Madrid; Híbrido; EUR 60.000 - 90.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health insurance

Learning budget

Descripción de la vacante

Tamarind Intelligence is seeking a Cloud Security Engineer to join a fast-growing security team spanning AWS, Azure, and GCP. You will help stay ahead of cloud-native threats, strengthen security posture, and build automation to scale securely.

This hybrid role is based in Madrid or Barcelona with 2-3 days in the office. You will own security incidents from discovery to containment, implement guardrails, and collaborate with engineering to embed security into CI/CD and IaC.

Formación

• Proven experience securing AWS, Azure, or GCP environments.
• Knowledge of CNAPP/CSPM tooling (e.g., Wiz, Prisma Cloud, Lacework).
• Experience leading security incidents end-to-end (investigation, containment, write-up).
• Experience with SIEM/SOAR and event-driven detections.
• Familiarity with Kubernetes, Docker, and cloud-native architectures.
• Proficient in Infrastructure as Code (Terraform, CI/CD, GitOps).
• Strong English communication for non-security audiences.

Responsabilidades

• Review and triage cloud security alerts across AWS, Azure, and GCP.
• Own fixes for cloud security posture gaps and misconfigurations.
• Investigate live threats and correlate signals from multiple sources.
• Monitor SaaS security health and third-party access risks.
• Refine detection logic in SIEM and grow SOAR automation.
• Collaborate with engineering to roll out security guardrails and best practices.
• Embed security into IaC and CI/CD pipelines.
• Document learnings and drive automation improvements.

Conocimientos

Cloud security

Incident response

SIEM/SOAR

Kubernetes & Docker

Infrastructure as Code

Python scripting

English communication

Herramientas

Wiz

Prisma Cloud

Lacework

Descripción del empleo

Location:

Madrid or Barcelona (Hybrid, 2--3 days/week in office)

Employment type:

Full-time

We're looking for a Cloud Security Engineer to join a fast-growing security team working across AWS, Azure, and GCP. You'll help us stay ahead of cloud-native threats, strengthen our security posture, and build the automation that lets us scale securely.

What You'll Do

• Review and triage cloud security alerts across AWS, Azure, and GCP, focusing effort where risk and business impact are highest
• Own the fix for cloud security posture gaps - misconfigurations, identity risks, and exposed resources
• Investigate and respond to live threats, piecing together signals from different data sources
• Keep an eye on SaaS security health, spotting issues like identity drift or risky third-party access
• Build out and refine detection logic in our SIEM, and help grow our SOAR automation
• Partner with engineering and platform teams to roll out security guardrails and drive adoption of best practices
• Push shift-left security forward by embedding it into IaC and CI/CD pipelines
• Help the team keep getting better through automation, solid documentation, and sharing what you learn

What You Bring

• Practical experience locking down cloud environments (AWS, Azure, and/or GCP)
• Solid grasp of how attackers operate in the cloud (credential abuse, lateral movement, exploiting misconfigurations) and how to detect it
• Time spent with CNAPP/CSPM tooling (Wiz, Prisma Cloud, Lacework, or similar)
• A track record of owning security incidents start to finish - investigation, containment, and writing it up
• Comfort building or working within event-driven detection setups and SIEM/SOAR platforms
• Understanding of microservices and cloud-native architecture, with an eye toward scalability and resilience
• Real-world experience with Kubernetes, Docker, and the major cloud platforms (AWS, Azure, GCP)
• Working knowledge of Infrastructure as Code (Terraform, CI/CD, GitOps) and shift-left approaches
• Some scripting or automation ability (Python or similar)
• Clear communicator in English, able to translate technical findings for non-security audiences

Why This Role

A team that's going places

Invest in yourself - the company invests heavily in learning & development

Great offices, real flexibility - hybrid working (2--3 days in office) from Barcelona or Madrid, with a terrace and stunning views

Build your own path - take ownership, show what you've got, and grow within the team and the company on your own terms

People come first -flexible working, healthcare, parental leave, and genuine wellbeing support Competitive package €2k annual compensation health insurance, a dedicated learning budget, and more perks on top