Cloud Security Engineer: Incident Response & Cloud Automation

Michael Page; Barcelona; Presencial; EUR 80.000 - 150.000; Jornada completa

Descripción de la vacante

Michael Page is seeking a senior cloud security lead for a leading European digital marketplace company operating large-scale online platforms across multiple sectors. You will drive complex security investigations, collaborate with engineering, and shape incident response in cloud environments.

Based in Barcelona, you will work with AWS, Kubernetes, GitOps, and security automation, participate in on‑call rotations, and contribute to post‑incident reviews while continuously enhancing detection

Formación

• Experience leading cloud security investigations and incident response.
• Strong knowledge of cloud platforms (AWS, Azure or GCP) and security tooling.
• Proven ability to develop and improve security playbooks and detection rules.

Responsabilidades

• Lead advanced incident response investigations, particularly involving cloud infrastructure and platform environments.
• Analyse, contain, eradicate and recover from security incidents escalated from SOC and L2 teams.
• Develop and improve incident response playbooks, detection rules and escalation procedures.
• Manage and enhance security tooling such as SIEM, EDR and threat intelligence platforms.
• Operationalise threat intelligence to strengthen detection and response capabilities.
• Collaborate with security and engineering teams to improve processes, automation and security monitoring.
• Participate in on‑call rotations and contribute to post‑incident reviews and continuous improvement initiatives.

Descripción del empleo

Michael Page is seeking a senior cloud security lead for a leading European digital marketplace company operating large-scale online platforms across multiple sectors. You will drive complex security investigations, collaborate with engineering, and shape incident response in cloud environments.

Based in Barcelona, you will work with AWS, Kubernetes, GitOps, and security automation, participate in on‑call rotations, and contribute to post‑incident reviews while continuously enhancing detection