Cloud Security Engineer — Own End-to-End Cloud Posture

happyrobot.ai; Madrid; On-site; EUR 65,000 - 90,000; Full time

Benefits offered by this job

Healthcare

Dental coverage

Vision coverage

Job summary

HappyRobot is seeking a Cloud Security Engineer to own cloud posture across AWS, Azure, and GCP, ensuring hardened infrastructure and remediation to SLA. You will implement policy-as-code gates and drive security across multiple platforms.

The role emphasizes end-to-end ownership, shift-left guardrails, and collaboration with engineering teams to resolve findings and strengthen security baselines. Strong CNAPP/CSPM, Terraform, and Kubernetes security skills are essential.

Qualifications

• 4–6 years in cloud security or platform security.
• Expert depth in at least one major cloud provider (AWS, Azure or GCP).
• Hands-on CNAPP/CSPM experience (Wiz strongly preferred).
• Terraform in production plus policy-as-code experience integrated in CI/CD.
• Kubernetes security fundamentals: RBAC, admission controls, and image scanning.
• Scripting proficiency in Python or Go.
• English B2+ (professional working proficiency).

Responsibilities

• Own CNAPP end-to-end cloud posture management and triage Wiz findings to SLA.
• Design and ship policy-as-code gates in Terraform pipelines (OPA/Rego, Checkov, tfsec).
• Define, document, and enforce a consistent cloud security baseline across AWS, Azure, GCP.
• Harden Kubernetes clusters, images, and admission paths across EKS, AKS, GKE; enforce RBAC and image scanning.
• Drive remediation across engineering teams and track SLAs without direct authority.
• Grow Terraform-driven guardrails; reduce misconfigurations reaching production.

Skills

Cloud security

CNAPP/CSPM

Terraform

Kubernetes security

Python

Go

English B2+

Tools

OPA/Rego

Checkov

tfsec

Job description

HappyRobot is seeking a Cloud Security Engineer to own cloud posture across AWS, Azure, and GCP, ensuring hardened infrastructure and remediation to SLA. You will implement policy-as-code gates and drive security across multiple platforms.

The role emphasizes end-to-end ownership, shift-left guardrails, and collaboration with engineering teams to resolve findings and strengthen security baselines. Strong CNAPP/CSPM, Terraform, and Kubernetes security skills are essential.