Cybersecurity Consultant (Cloud Security) - Hybrid Madrid

UST; Madrid; On-site; EUR 70,000 - 95,000; Full time

Benefits offered by this job

Annual leave 23 days

Health care plan

Flexible benefits program

Training platforms access

Career development plans

Remote work policy

UST Club discounts

Job summary

UST is a multinational technology leader seeking a Cybersecurity Consultant – Cloud Security & Identity to join our Madrid-based Cybersecurity team in a hybrid role. You will drive cloud security initiatives across Azure and Google Cloud, implement CNAPP and CSPM controls, and shape Zero Trust IAM architectures with DevSecOps collaboration.

The role emphasizes hands-on cloud security, governance, and incident response across modern cloud environments, offering career growth and a flexible work

Qualifications

• Bachelor’s degree in Computer Science, Telecommunications, Engineering, Information Systems, or a related field.
• Minimum of 4 years of experience in cloud security technical roles.
• Hands‑on experience securing Azure and/or Google Cloud environments in production.
• Proven experience with CSPM and CNAPP platforms.
• Strong knowledge of IAM, PIM, CIEM, and Zero Trust methodologies.
• Experience with: Microsoft Azure, Google Cloud Platform (GCP), Microsoft Entra ID / Azure AD, Defender for Cloud, Security Command Center, Cloud networking and segmentation, SIEM/SOAR solutions, Terraform and Infrastructure as Code, DevSecOps and CI/CD security, CIS Benchmarks, NIST, ISO 27001 and MITRE ATT&CK.

Responsibilities

• Evaluate and enhance the security posture of Azure subscriptions and GCP projects.
• Manage security policies, RBAC, Conditional Access, and Defender for Cloud.
• Implement and maintain Google Security Command Center controls.
• Review IaaS, PaaS, and container environments for misconfigurations and gaps.
• Define remediation roadmaps and automate security controls in CI/CD pipelines.
• Collaborate with DevSecOps teams to integrate security into CI/CD processes.
• Design Zero Trust identity architectures and manage Azure AD/Microsoft Entra security controls.
• Design cloud network segmentation strategies and assess hybrid connectivity solutions.
• Support incident response activities and cloud forensics.

Education

Bachelor’s degree in Computer Science, Telecommunications, Engineering, Information Systems, or a related field

Tools

Microsoft Azure

Google Cloud Platform

Microsoft Entra ID / Azure AD

Defender for Cloud

Security Command Center

Terraform

CIEM

SIEM/SOAR

CNAPP/CSPM tools (Wiz, Prisma Cloud, Defender CSPM)

Job description

Role Description

UST is a multinational company based in North America, certified as a Top Employer and Great Place to Work company with over 35,000 employees worldwide and presence in more than 35 countries. We are leaders in digital technology services, providing large-scale technological solutions to some of the world’s leading organizations.

We are currently looking for a Cybersecurity Consultant – Cloud Security & Identity to join our Cybersecurity team.

Location

Madrid (Hybrid model: 3 days at the office)

Key Responsibilities

Cloud Security (Azure & GCP)

• Evaluate and enhance the security posture of Azure subscriptions and GCP projects.
• Manage security policies, RBAC, Conditional Access, and Microsoft Defender for Cloud.
• Implement and maintain Google Security Command Center controls.
• Review IaaS, PaaS, and container environments to identify misconfigurations and security gaps.

CSPM & CNAPP

• Manage and optimize CSPM solutions such as Wiz, Prisma Cloud, or Defender CSPM.
• Operate CNAPP platforms integrating CWPP, KSPM, and DSPM capabilities.
• Define compliance frameworks and automate remediation initiatives aligned with CIS, NIST, and ISO 27001.
• Collaborate with DevSecOps teams to integrate security controls into CI/CD pipelines.

Identity & Access Management

• Design and implement Zero Trust identity architectures.
• Manage Azure AD / Microsoft Entra ID security controls, including MFA, SSO, Conditional Access, and PIM.
• Review privileged access and excessive permissions through CIEM practices.
• Implement controls to prevent privilege escalation and lateral movement.

Network Security

• Design and review cloud network segmentation strategies using VNets, VPCs, NSGs, Firewalls, and Private Endpoints.
• Assess hybrid connectivity solutions (ExpressRoute, VPN, Interconnect).
• Analyze traffic flows, firewall policies, WAF configurations, and DDoS protections.
• Support incident investigations and network forensics activities.

Consulting & Governance

• Conduct technical cloud security assessments and define remediation roadmaps.
• Develop security architectures, standards, policies, and procedures.
• Support internal and external stakeholders during secure cloud transformation initiatives.
• Participate in incident response activities and red team/blue team exercises.

Mandatory Requirements

• Bachelor’s degree in Computer Science, Telecommunications, Engineering, Information Systems, or a related field.
• Minimum of 4 years of experience in cloud security technical roles.
• Hands‑on experience securing Azure and/or Google Cloud environments in production.
• Proven experience with CSPM and CNAPP platforms.
• Strong knowledge of IAM, PIM, CIEM, and Zero Trust methodologies.
• Experience with:
  • Microsoft Azure
  • Google Cloud Platform (GCP)
  • Microsoft Entra ID / Azure AD
  • Defender for Cloud
  • Security Command Center
  • Cloud networking and segmentation
  • SIEM/SOAR solutions
  • Terraform and Infrastructure as Code
  • DevSecOps and CI/CD security
  • CIS Benchmarks, NIST, ISO 27001 and MITRE ATT&CK

Nice To Have

• AZ‑500 – Microsoft Azure Security Engineer
• SC‑100 – Microsoft Cybersecurity Architect
• Google Professional Cloud Security Engineer
• CCSP (ISC²)
• CISSP or CISM
• CEH or OSCP
• Experience participating in red team/blue team exercises.
• Strong automation mindset and security engineering background.

What can we offer?

• 23 days of Annual Leave plus the 24th and 31st of December as discretionary days!
• Numerous benefits (Health Care Plan, Internet Connectivity, Life and Accident Insurances).
• Flexible Benefits Program (Meals, Kindergarten, Transport, Online English Lessons, Health Care Plan…).
• Free access to several training platforms.
• Professional stability and career development plans.
• Referral Program with attractive rewards.
• The option to choose between 12 or 14 salary payments per year.
• Real Work-Life Balance measures (flexibility, remote work policy, compact working hours during summer, etc.).
• UST Club Platform discounts and gym access discounts.

At UST we are committed to equal opportunities in our selection processes and do not discriminate based on race, gender, disability, age, religion, sexual orientation, or nationality. We have a special commitment to Disability & Inclusion and encourage applications from candidates holding a disability certificate.

Skills

Microsoft Azure, ISO 27001, Google Cloud Platform, CIEM