Cloud Security Engineer: CWPP & Kubernetes Defense

Stratesys; Ávila; Presencial; EUR 52.000 - 80.000; Jornada completa

Descripción de la vacante

Roche is seeking a Cloud Security Engineer to architect and operate CWPP across AWS, Azure, and GCP, with a focus on container security and cloud-native controls.

You will drive security in CI/CD pipelines, implement runtime protection for container workloads, and develop automated remediation using cloud APIs and serverless functions. English fluency required for global collaboration.

Formación

• Bachelor's degree or equivalent practical experience in CS, software engineering or cybersecurity.
• 3+ years securing public cloud workloads with a strong shared responsibility model.
• Hands-on with Docker, Kubernetes, and container orchestration to secure pods and manage network policies.
• Proven experience deploying and tuning CWPP/CNAPP platforms in multi-cloud environments.
• Strong cloud networking and IAM fundamentals, with emphasis on least-privilege access.
• Excellent written and spoken English (C1 or above).

Responsabilidades

• Cloud Workload Protection Platform deployment, management across AWS, Azure, and GCP.
• Container and Kubernetes security, runtime defense, vulnerability scanning, and hardening.
• Extend security tooling for CI/CD, scanning images, registries, and IaC templates.
• Automated remediation using serverless functions and cloud APIs.
• Collaborate with DevSecOps to embed security into development pipelines.

Conocimientos

CWPP / CNAPP

Docker

Kubernetes

DevSecOps

Cloud security

Educación

Bachelor's degree in Computer Science or related

Herramientas

AWS

Azure

GCP

EKS

AKS

GKE

Descripción del empleo

Roche is seeking a Cloud Security Engineer to architect and operate CWPP across AWS, Azure, and GCP, with a focus on container security and cloud-native controls.

You will drive security in CI/CD pipelines, implement runtime protection for container workloads, and develop automated remediation using cloud APIs and serverless functions. English fluency required for global collaboration.