Cloud Security Engineer (m/f/d)

Schwarz Digits; Barcelona; On-site; EUR 52,000 - 76,000; Full time

Job summary

Schwarz Digits is seeking a security specialist to analyze CSPM findings across multi‑cloud environments (e.g., GCP, STACKIT) in Barcelona. You will apply a risk‑based approach to interpret results and design a structured prioritization scheme for efficient remediation.

In this hands‑on role, you will track remediation progress, drive accountability with asset owners, and provide actionable guidance to engineering teams to close gaps in a timely manner.

Qualifications

• Experience in Cloud Security, ideally with CSPM tools and scalable cloud architectures.
• Strong analytical and conceptual skills for designing prioritization and risk evaluation strategies.
• Deep technical understanding to distinguish critical risk from false positives within infrastructure, code, and broader context.
• Excellent communication and diplomatic skills to collaborate with technical teams without friction.
• Persistence and follow-up skills to drive vulnerability resolution across engineering teams.
• Proactive, structured, and goal-oriented mindset with focus on task completion.
• Business-fluent English; Spanish or German a plus for the international environment.

Responsibilities

• Analyze security findings from CSPM solutions for multi-cloud environments.
• Review backlog to ensure quality and filter out false positives.
• Design and implement a structured prioritization schema for vulnerabilities.
• Evaluate security issues in full technical context using a risk-based approach.
• Track remediation progress and drive accountability with asset/solution owners.
• Provide hands-on remediation guidance to teams throughout the process.

Skills

Cloud Security

CSPM tools

Analytical thinking

Communication skills

Risk assessment

Tools

CSPM solutions

Job description

• You analyze and deeply understand security findings generated by our CSPM (Cloud Security Posture Management) solutions for multi-cloud environments (e.g., GCP, STACKIT).
• You ensure the quality of our results by reviewing a substantial backlog, accurately identifying and filtering out false positives.
• You work conceptually to design and implement a new, structured prioritization schema that allows us to manage vulnerabilities efficiently and systematically.
• You analyze security issues within their full technical context to evaluate the real-world impact and apply a strictly risk-based approach.
• You actively track remediation progress, drive accountability with asset/solution owners, and ensure timely closure of identified security gaps.
• You act as a reliable technical point of contact, providing hands-on remediation guidance to the teams throughout the entire process.

Your tasks

• You analyze and deeply understand security findings generated by our CSPM (Cloud Security Posture Management) solutions for multi-cloud environments (e.g., GCP, STACKIT).
• You ensure the quality of our results by reviewing a substantial backlog, accurately identifying and filtering out false positives.
• You work conceptually to design and implement a new, structured prioritization schema that allows us to manage vulnerabilities efficiently and systematically.
• You analyze security issues within their full technical context to evaluate the real-world impact and apply a strictly risk-based approach.
• You actively track remediation progress, drive accountability with asset/solution owners, and ensure timely closure of identified security gaps.
• You act as a reliable technical point of contact, providing hands-on remediation guidance to the teams throughout the entire process.

Your Profile

• You have professional experience in Cloud Security, ideally working with CSPM tools and scalable cloud architectures.
• You possess strong analytical and conceptual skills, enabling you to design prioritization and risk evaluation strategies from the ground up.
• Your deep technical understanding allows you to grasp infrastructure, code, and the broader context of vulnerabilities to easily distinguish a critical risk from a false positive.
• You stand out with excellent communication and diplomatic skills; you know how to approach technical teams, build rapport, and foster collaboration without creating friction.
• You possess strong persistence and follow-up skills to drive vulnerability resolution across different engineering teams.
• You are characterized by a proactive, structured, and goal-oriented mindset with a strong focus on tracking tasks to completion.
• You have business-fluent English skills for our international technical environment (knowledge of Spanish or German is a plus)