Cloud Security Incident Engineer

Michael Page; Barcelona; Presencial; EUR 90.000 - 130.000; Jornada completa

Descripción de la vacante

Michael Page is assisting a leading European digital marketplace company seeking a Cloud Security Lead in Spain. You will lead complex investigations, work with modern security engineering, automation, and cloud infrastructure to protect high-availability platforms.

You will collaborate with security and engineering teams to improve processes, develop incident response playbooks, manage SIEM/EDR and threat intel, and participate in on-call rotations across markets.

Formación

• Lead complex cloud security investigations and defend cloud platforms.
• Experience collaborating with security and engineering teams to improve monitoring.
• Proven ability to develop and refine incident response processes.

Responsabilidades

• Lead advanced incident response investigations, particularly involving cloud infrastructure and platform environments.
• Analyse, contain, eradicate and recover from security incidents escalated from SOC and L2 teams.
• Develop and improve incident response playbooks, detection rules and escalation procedures.
• Manage and enhance security tooling such as SIEM, EDR and threat intelligence platforms.
• Operationalise threat intelligence to strengthen detection and response capabilities.
• Collaborate with security and engineering teams to improve processes, automation and security monitoring.
• Participate in on-call rotations and contribute to post-incident reviews and continuous improvement initiatives.

Conocimientos

Cloud security

Incident response

Automation

Threat intelligence

Security tooling

Herramientas

SIEM

EDR

Threat intelligence platforms

Descripción del empleo

Michael Page is assisting a leading European digital marketplace company seeking a Cloud Security Lead in Spain. You will lead complex investigations, work with modern security engineering, automation, and cloud infrastructure to protect high-availability platforms.

You will collaborate with security and engineering teams to improve processes, develop incident response playbooks, manage SIEM/EDR and threat intel, and participate in on-call rotations across markets.