Cloud Security Engineer — Hybrid (Madrid/Barcelona)

Montash; Cataluña; Híbrido; EUR 70.000 - 100.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health insurance

Learning budget

Hybrid work

Descripción de la vacante

Montash is seeking a Cloud Security Engineer to join a fast-growing security team spanning AWS, Azure, and GCP. You will review alerts, own posture improvements, and respond to live threats while extending automation.

The role emphasizes IaC, CI/CD integration, and collaboration with engineering to embed security into pipelines. Hybrid work from Madrid or Barcelona, with flexible offices and a strong security-first culture.

Formación

• Experience securing cloud environments (AWS/Azure/GCP).
• Know-how on cloud attacker techniques and detection methods.
• Experience with CNAPP/CSPM tooling or similar (Wiz, Prisma Cloud, Lacework).
• Track record of owning security incidents end-to-end: investigation, containment, reporting.

Responsabilidades

• Review and triage cloud security alerts across AWS/Azure/GCP.
• Own fixes for cloud security posture gaps and misconfigurations.
• Respond to live threats and correlate signals from multiple data sources.
• Monitor SaaS security health and third-party access risks.
• Develop detection logic in SIEM and contribute to SOAR automation.
• Collaborate with engineering to implement security guardrails.

Conocimientos

Cloud security

Incident response

SIEM/SOAR

Cloud platforms AWS/Azure/GCP

IaC & CI/CD

Kubernetes

Docker

Python scripting

Communicate in English

Herramientas

Kubernetes

Docker

Terraform

CI/CD tooling

Descripción del empleo

Montash is seeking a Cloud Security Engineer to join a fast-growing security team spanning AWS, Azure, and GCP. You will review alerts, own posture improvements, and respond to live threats while extending automation.

The role emphasizes IaC, CI/CD integration, and collaboration with engineering to embed security into pipelines. Hybrid work from Madrid or Barcelona, with flexible offices and a strong security-first culture.