DevOps Engineer

CrowdStrike; A distancia; EUR 60.000 - 80.000; Jornada completa

Descripción de la vacante

A leading cybersecurity firm in Spain is seeking a DevSecOps Engineer to enhance security practices in their development lifecycle. The ideal candidate will embed security controls throughout the DevOps process, ensuring the agility of the development team. This role involves working with CI/CD pipelines and requires knowledge of AWS, Docker, and Kubernetes. The company promotes a flexible, remote-friendly work culture, offering competitive compensation and numerous benefits.

Servicios

Remote-friendly and flexible work culture

Market leader in compensation and equity awards

Comprehensive wellness programs

Professional development opportunities

Formación

• 3+ years of experience in DevOps, Security Engineering, or related roles.
• Strong programming skills in Python, Go, or similar languages for automation and tooling.
• Deep knowledge of cloud platforms, particularly AWS.

Responsabilidades

• Embed security controls throughout the entire DevOps lifecycle.
• Design and implement automated security gates within CI/CD pipelines.
• Proactively identify and remediate security vulnerabilities.

Conocimientos

Security integration

Automation

Risk management

Incident response

Collaboration

Educación

3+ years of experience in DevOps or Security Engineering

Herramientas

AWS

Docker

Kubernetes

Terraform

Jenkins

Descripción del empleo

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We’re also a mission‑driven company. We cultivate a culture that gives every CrowdStriker both the flexibility and autonomy to own their careers. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.

About the Role:

We're seeking a talented DevSecOps Engineer to join the NG SIEM Onum team and work directly with our security and infrastructure leadership. This role is critical in embedding security‑first practices into our development lifecycle while maintaining the agility and speed that defines our innovation culture. You'll be instrumental in securing our CI/CD pipelines, infrastructure, and applications while enabling developers to ship secure code faster.

What You'll Do:

Security Integration & Automation (40%):

• Embed security controls throughout the entire DevOps lifecycle, from code commit to production deployment

• Design and implement automated security gates within CI/CD pipelines using tools like GitHub Actions, Jenkins, or GitLab CI

• Build security‑as‑code frameworks that make secure practices the default path for developers

• Automate compliance checks and security policy enforcement across cloud infrastructure (AWS, GCP)

• Develop custom security tooling to address Onum specific security requirements

Vulnerability & Risk Management (25%):

• Proactively identify and remediate security vulnerabilities in applications, containers, and infrastructure

• Conduct threat modeling for new services and features before they reach production

• Perform risk assessments on architectural decisions and third‑party integrations

• Manage vulnerability lifecycle from detection through remediation, tracking metrics and SLAs

• Implement and maintain vulnerability scanning tools integrated into development workflows

Security Testing & Validation (20%):

• Execute comprehensive security testing including SAST, DAST, SCA, and container security scanning

• Perform code reviews with a security lens, identifying potential vulnerabilities before merge

• Validate security controls through continuous testing and red team exercises

• Establish security testing standards and ensure coverage across the project

Incident Response & Collaboration (15%):

• Help to respond to security incidents affecting Onum’s infrastructure and applications

• Collaborate with CrowdStrike SOC and incident response teams during security events

• Conduct post‑incident reviews and implement preventive measures

• Work cross‑functionally with development, operations, and security teams to foster shared security responsibility

• Partner with the Manager on strategic security initiatives and architectural decisions

What You'll Need:

Technical Expertise:

• 3+ years of experience in DevOps, Security Engineering, or related roles

• Strong programming skills in Python, Go, or similar languages for automation and tooling

• Deep knowledge of cloud platforms, particularly AWS (EC2, S3, VPC, Security Groups, CloudTrail)

• Hands‑on experience with:

  • Containerization: Docker, container security best practices

  • Orchestration: Kubernetes, EKS, security policies, RBAC

  • IaC: Terraform, CloudFormation, security scanning for IaC

  • CI/CD: GitHub Actions, Jenkins, GitLab CI, security pipeline integration

  • Configuration Management: Ansible, Chef, or Puppet

Security Knowledge:

• Strong understanding of:

  • OWASP Top 10 and secure coding practices

  • Network security, firewalls, ACLs, and segmentation

  • Secrets management (HashiCorp Vault, AWS Secrets Manager)

  • Security compliance frameworks (SOC 2, ISO 27001, NIST)

• Experience with security tools:

  • Vulnerability scanners (Nessus, Qualys, Rapid7)

  • SAST/DAST tools (SonarQube, Checkmarx, Burp Suite)

  • Container security (Trivy, Aqua, Twistlock)

  • SIEM and log analysis

  • Git security scanning (GitGuardian, TruffleHog)

Soft Skills:

• Excellent communication- ability to explain complex security concepts to developers and leadership

• Collaborative mindset- security is a team sport at CrowdStrike

• Problem‑solving orientation- creative approaches to balancing security and developer velocity

• Self‑motivated- ability to work independently and drive initiatives to completion

• Adaptability- comfortable in a fast‑paced, innovative environment

Bonus Points:

• Security certifications: AWS Security Specialty, CKS (Certified Kubernetes Security Specialist), Certified DevSecOps Professional (CDP), GIAC Cloud Security Automation (GCSA) or equivalent security certifications.

• Contributions to open‑source security projects

• Familiarity with zero‑trust architecture principles

Benefits of Working at CrowdStrike:

• Remote‑friendly and flexible work culture

• Market leader in compensation and equity awards

• Comprehensive physical and mental wellness programs

• Competitive vacation and holidays for recharge

• Paid parental and adoption leaves

• Professional development opportunities for all employees regardless of level or role

• Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections

• Vibrant office culture with world class amenities

• Great Place to Work Certified™ across the globe

CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program.

CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy‑related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisions--including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay‑offs, return from lay‑off, terminations and social/recreational programs--on valid job requirements.

If you need assistance accessing or reviewing the information on this website or need help submitting an application for employment or requesting an accommodation, please contact us at [e-mail] for further assistance.