Cloud Security Engineer: CNAPP & IaC Gatekeeper

Happyrobot Inc.; Madrid; Presencial; EUR 60.000 - 90.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Healthcare, dental, vision

Equity compensation

Autonomy and ownership

Descripción de la vacante

HappyRobot Inc. is seeking a Cloud Security Engineer to own cloud posture across AWS, Azure, and GCP. You will triage Wiz findings, implement policy-as-code gates in Terraform, and enforce a consistent security baseline across leading cloud platforms.

You will harden Kubernetes clusters, manage RBAC and image scanning, and drive remediation with engineering teams to meet SLAs. English proficiency is required.

Formación

• 4-6 years in cloud security or platform/infrastructure security.
• Expert depth in at least one major cloud provider (AWS, Azure, or GCP).
• Hands-on with a CNAPP/CSPM (Wiz preferred).
• Terraform in production plus policy-as-code in CI/CD.
• Kubernetes security fundamentals: RBAC, admission control, and image scanning.
• Scripting in Python or Go.
• English B2+ (professional working proficiency).

Responsabilidades

• Own CNAPP end-to-end cloud posture management and triage Wiz findings.
• Design policy-as-code gates in Terraform pipeline (OPA/Rego, Checkov, tfsec).
• Define and enforce multi-cloud security baseline across AWS, Azure, GCP.
• Harden Kubernetes clusters, images, admission paths, RBAC and scans.
• Lead remediation with engineering teams and track SLAs.
• Grow Terraform-based guardrails to reduce production misconfigurations.

Conocimientos

Cloud security

Cloud providers

CNAPP/CSPM Wiz

Terraform policy-as-code

Kubernetes security

Python or Go

English B2+

Educación

Bachelor's in CS/Engineering

Herramientas

Wiz CSPM

Terraform

OPA/Rego

Checkov/tfsec

Descripción del empleo

HappyRobot Inc. is seeking a Cloud Security Engineer to own cloud posture across AWS, Azure, and GCP. You will triage Wiz findings, implement policy-as-code gates in Terraform, and enforce a consistent security baseline across leading cloud platforms.

You will harden Kubernetes clusters, manage RBAC and image scanning, and drive remediation with engineering teams to meet SLAs. English proficiency is required.