Security Engineer: Cloud & DevSecOps Champion

Everseen; Barcelona; Presencial; EUR 60.000 - 90.000; Jornada completa

Descripción de la vacante

Everseen, a leader in vision AI solutions for global retailers, is seeking a Security Engineer to join its Security team. You will work with Infrastructure and Security teams to harden environments and improve detection across cloud, network, and on-prem stacks.

You will own security across AKS, GKE, Azure, perform CIS hardening, patch Linux hosts, manage vulnerability lifecycles, and build SIEM and SOAR workflows. Strong Linux, cloud, container, and automation skills are required.

Formación

• 3+ years in a Security Engineer, DevSecOps, or equivalent hands-on role.
• Solid Linux fundamentals: Comfortable navigating, troubleshooting and administering Linux environments strictly via the command line.
• Cloud Infrastructure: Practical experience with at least one major cloud platform (Azure or GCP is strongly preferred).
• Networking fundamentals: Understanding of TCP/IP, DNS, routing, firewall rule logic, and VPN concepts.
• Automation & IAC: Proficient in Bash for scripting, alongside hands-on experience with configuration management and provisioning tools like Ansible and/or Terraform.
• Vulnerability Management & Cloud Security: Hands-on experience with traditional and cloud-native security tooling such as Tenable (including Tenable Cloud Security / Ermetic), Wazuh, Qualys, or equivalent platforms.
• Container Ecosystems: Hands-on experience with Docker, Kubernetes, and container image scanning.
• Software Development Lifecycle: Experience with GitLab CI/CD pipeline security integration (SAST, DAST, secret detection).
• Microsoft Sentinel administration (log ingestion, KQL query writing, analytics rules) or other SIEM administration experience is preferred.
• Azure certifications (e.g., AZ-500: Azure Security Engineer) are extremely useful for this role.
• Experience with RHEL subscription management, Insights, and patch automation with Ansible is an advantage.
• Having a working knowledge of security frameworks in a live environment (ISO 27001, NIST, or CIS Benchmarks) is an advantage.
• Ownership mindset: You close the loop and solve problems; you don't just flag issues.
• Clear communication: You are comfortable coordinating asynchronously and possess business‑flüent English for both written and verbal collaboration.

Responsabilidades

• Define and maintain security standards for workloads (AKS, GKE) — covering RBAC, network policies, and admission controls.
• Maintain and improve security posture across Azure (Entra ID, Sentinel, Defender for Cloud).
• Contribute to container image scanning and runtime security monitoring.
• Support JFrog Artifactory operations including artifact security and access control.
• Apply and maintain CIS benchmark hardening across all environments company-wide.
• Manage patching across Linux systems, ensuring timely remediation and compliance.
• Support vulnerability management lifecycle: triage, prioritization, and remediation tracking.
• Maintain and improve Microsoft Sentinel log ingestion, analytics rules, and detection coverage.
• Investigate security alerts, triage incidents, and support SOC activities.
• Build and maintain correlation rules, workbooks, and SOAR playbooks.
• Implement and maintain SAST, DAST, dependency scanning, and secrets detection in GitLab CI/CD.
• Automate security operations tasks using Bash and Ansible.
• Contribute to Infrastructure-as-Code security reviews (Terraform, Helm, Kubernetes manifests).
• Support shift-left security practices and developer security enablement.

Conocimientos

Security engineering

Linux fundamentals

Cloud infrastructure

Networking fundamentals

Automation & IAC

Vulnerability management

Container security

CI/CD security

SIEM administration

Azure security

RHEL patching

Security frameworks

Ownership & communication

Herramientas

Docker

Kubernetes

Ansible

Terraform

GitLab CI/CD

Tenable Cloud Security / Ermetic

Wazuh

Qualys

Microsoft Sentinel

Azure AD / Entra ID

Descripción del empleo

Everseen, a leader in vision AI solutions for global retailers, is seeking a Security Engineer to join its Security team. You will work with Infrastructure and Security teams to harden environments and improve detection across cloud, network, and on-prem stacks.

You will own security across AKS, GKE, Azure, perform CIS hardening, patch Linux hosts, manage vulnerability lifecycles, and build SIEM and SOAR workflows. Strong Linux, cloud, container, and automation skills are required.