Hybrid Cybersecurity Engineer: Cloud Security & Compliance

mscope; Madrid; Hybrid; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Hybrid work

25 days vacation

Birthday off

Job summary

mscope is seeking a security-focused professional to own vulnerability management, automate compliance, and harden cloud security across AWS and Azure. You will integrate SAST/DAST into CI/CD and drive DLP, incident response, and client audits.

The role requires 3+ years in cybersecurity, fluency in Spanish and English, and hands-on with AWS/Microsoft security tools. Hybrid work, 25 days vacation, and startup autonomy are offered.

Qualifications

• 3+ years of cybersecurity experience in regulated environments.
• Hands-on with AWS security services and Microsoft security stack.
• Experience integrating security tooling into CI/CD pipelines.

Responsibilities

• Own vulnerability management program and integrate SAST/DAST into CI/CD.
• Automate compliance checks across firewalls, rotations, audits and policies.
• Harden AWS/Azure security postures and protect endpoints.
• Design and implement DLP across endpoints, email and cloud storage.
• Close gaps in SIEM-SOC integration, IR, BCP and DR planning.
• Serve as security point of contact for client audits and certifications.
• Maintain security policies and drive awareness across the organization.

Skills

Vulnerability management

Cloud security

Compliance automation

SIEM/SOC

Incident response

Security governance

Security communications

CI/CD security integration

IaC security scanning

Secrets rotation automation

Vulnerability scanning tools

Penetration testing basics

ISO 27001 / GDPR / NIS2 / DORA

Spanish & English fluency

Security certifications

Tools

OpenVAS

Nessus

Microsoft Sentinel

Splunk

AWS Security Hub

GuardDuty

Terraform

OPA

CloudFormation Guard

Entra ID

Intune

Defender for Endpoint

Job description

mscope is seeking a security-focused professional to own vulnerability management, automate compliance, and harden cloud security across AWS and Azure. You will integrate SAST/DAST into CI/CD and drive DLP, incident response, and client audits.

The role requires 3+ years in cybersecurity, fluency in Spanish and English, and hands-on with AWS/Microsoft security tools. Hybrid work, 25 days vacation, and startup autonomy are offered.