DevSecOps & cloud security engineer

Extia Group; Barcelona; Hybrid; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Health insurance

Meal vouchers

Transport

Job summary

Extia Group seeks an experienced DevSecOps & Cloud Security Engineer to lead protection of our clients’ global cloud infrastructure (AWS and Azure) and ensure confidentiality, integrity, and availability across multi-cloud environments.

You will apply a true DevSecOps culture, implement automation, and run real-time incident response, collaborating with development and operations teams across Europe in a hybrid work model.

Qualifications

• 3–5 years in Cybersecurity or Cloud Operations with DevSecOps exposure.
• Strong AWS and/or Azure design and operations experience.
• Terraform proficiency and scripting in Python/PowerShell/Bash.
• Experience with SIEM/EDR tools and network security fundamentals.

Responsibilities

• Design, secure, and manage cloud infrastructure (AWS/Azure) per secure architectures.
• Monitor, detect, respond to threats in real time and automate security controls.
• Configure SIEM/EDR tools at an advanced level and apply IaC with Terraform.
• Ensure compliance with ISO 27001, NIST, CIS, GDPR; Collaborate with DevOps teams.

Skills

DevSecOps

Cloud security

AWS

Azure

Terraform

SIEM

EDR

Kubernetes

Python

PowerShell

Bash

CI/CD

Security best practices

Education

Degree in CS or Cybersecurity

Tools

Splunk

Microsoft Sentinel

CrowdStrike

Defender for Endpoint

Job description

Описание

Are you looking to join a dynamic, international environment where the impact of your work is visible on a global scale? At Extia, our motto is “First who, then what.” We put people and teamwork first to deliver high-impact solutions. As the No. 1 Great Place To Work® in France for 2024–25 and a Great Place To Work® in Europe for the seventh consecutive year, we are convinced that well-being at work drives performance. We are looking for an experienced DevSecOps & Cloud Security Engineer to lead the protection of our clients’ global cloud infrastructure and services. In this role, you will play a key part in ensuring the confidentiality, integrity, and availability of multi-cloud environments (AWS / Azure), applying a DevSecOps culture, advanced automation, and real-time incident response.

Задачи

• Design, configure, and secure cloud infrastructure (AWS / Azure) based on secure architectures and shared responsibility models.
• Monitor, detect, respond to, and mitigate security threats in real time.
• Configure and manage SIEM tools (Splunk, Microsoft Sentinel) and EDR tools (CrowdStrike, Defender for Endpoint) at an advanced level.
• Implement security controls through Infrastructure as Code (IaC with Terraform) and Policy-as-Code.
• Ensure operational stability and the automation of security policies.
• Protect container environments and apply hardening practices in Kubernetes.
• Ensure cloud infrastructure aligns with regulatory compliance frameworks (ISO 27001, NIST, CIS, GDPR).
• Work closely with development and operations teams to integrate security into the software lifecycle (DevSecOps) and support crisis management.

Требования

• 3 to 5 years of work experience in Cybersecurity or Cloud Operations, including at least 2 years of direct DevSecOps experience.
• Degree/Master’s in Computer Science, Cybersecurity, Information Systems, or equivalent professional experience.
• Strong understanding of and hands-on experience operating and designing solutions in AWS and/or Azure.
• Proficiency in Terraform and fluency in scripting languages (Python, PowerShell, Bash, YAML, KQL, etc.).
• Demonstrable experience configuring and managing SIEM and EDR tools, and knowledge of network security principles (Firewalls, VPNs, WAFs).
• Familiarity with Docker security and Kubernetes hardening.
• Fluent English (B2+ / C1, written and spoken), essential for collaborating with international teams and stakeholders.
• Будет плюсом: Active certifications such as CISSP, CCSP, AWS Certified Security - Specialty, or Azure Security Engineer Associate (AZ-500); Knowledge of and experience integrating security tools into CI/CD pipelines (GitHub Actions, Jenkins, Ansible); Experience with CSPM (Cloud Security Posture Management) and CWPP (Cloud Workload Protection Platform) solutions

Условия

A hybrid model adapted to your project and work-life balance. A personalized training plan: we design your technical development and certification roadmap with you. Three points of contact: a Coach, a Manager, and an HR representative always by your side. A competitive benefits package: health insurance (including physiotherapy and psychology), meal vouchers, and transport. An international environment with more than 3,000 employees in Europe and Canada. A Great Place to Work culture based on closeness, transparency, and genuine support. Events, after-work gatherings, and an active community: team-building activities, charity initiatives, meetups, internal celebrations—we like to connect beyond work!