security engineer in cloud infrastructure

Enfint; Barcelona; Presencial; EUR 70.000 - 110.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Alan private health insurance

Wellhub membership

Cobee expense savings

Language classes with Preply

Payflow salary access

Office breakfast and organic fruit

Nora and Apeteat discounts

Pet-friendly office

Descripción de la vacante

Factorial ищет опытного инженера по инфраструктурной безопасности для защиты облачных окружений и систем. Ваша задача — внедрять безопасные архитектуры, управлять уязвимостями и обеспечивать защиту CI/CD.

Требуется опыт работы с AWS/Azure, Terraform и Kubernetes, знание EDR/CNAPP/SIEM и навыки сканирования уязвимостей. График гибридный, офис + удаленка, Барселона.

Formación

• 5+ лет опыта в инфраструктурной безопасности или инженерии безопасности.
• Опыт работы в облаках AWS или Azure.
• Опыт инфраструктуры как код с Terraform.
• Опыт контейнеризации и Kubernetes.
• Глубокие знания сканирования уязвимостей и приоритизации рисков.
• Опыт в сетевой безопасности и жестком Linux/Unix.
• Опыт IAM и знакомство с угрозами инфраструктуры.
• Опыт работы с EDR/CNAPP/SIEM и управлением уязвимостями.

Responsabilidades

• Разработка стратегии безопасности для облачных окружений и внедрение безопасной архитектуры с нуля.
• Руководство выявлением, оценкой и устранением уязвимостей инфраструктуры.
• Поддержка реестра риска и приоритизация мер по бизнес-импорту.
• Реализация и поддержка харднинга инфраструктуры.
• Мониторинг предупреждений и инцидентов по безопасности.
• Проведение реагирования на инциденты и анализ причин.
• Разработка инструментов инфраструктурной безопасности (CNAPP, CSPM, сканеры).
• Обеспечение безопасности CI/CD конвейеров.
• Сотрудничество с IT, DX, SRE для внедрения лучших практик.

Conocimientos

Cloud security

Terraform

Kubernetes

Vuln management

Network security

Linux hardening

IAM

EDR/CNAPP/SIEM

Python scripting

Incident response

Educación

Bachelor's degree in Computer Science or related field

Herramientas

Tenable

Qualys

Wiz

CNAPP

CI/CD security

Descripción del empleo

Описание: Factorial provides Business Management Software that helps small and medium-sized enterprises streamline company processes, automate workflows, centralize people data, and make better business decisions. Its customers are located across more than 60 countries.

Задачи:

• Drive the security strategy for cloud environments and ensure security is built into the architecture from day one
• Lead the identification, assessment, and remediation of infrastructure vulnerabilities
• Maintain the infrastructure risk register and prioritize mitigation efforts based on business impact
• Implement and maintain hardening strategies across the infrastructure
• Monitor security alerts and incidents
• Conduct incident response and investigations to identify root causes within the infrastructure stack
• Develop and manage infrastructure security tooling, including CNAPP, CSPM, and vulnerability scanners
• Secure infrastructure and runners within CI/CD pipelines
• Partner with IT, DX, and SRE teams to integrate infrastructure security best practices and automate security controls
• Develop, maintain, and regularly update incident response plans and infrastructure security policies

Требования:

• 5+ Years of experience in Infrastructure Security or Security Engineering
• Experience with cloud environments, including AWS or Azure
• Experience with Infrastructure as Code using Terraform
• Experience with containerization using Kubernetes
• Deep experience managing enterprise-grade vulnerability scanning and risk prioritization workflows
• Strong understanding of network security, OS hardening on Linux/Unix, and identity management with IAM
• Strong understanding of cyberattacks and threat actor Tactics, Techniques, and Procedures related to infrastructure and cloud escape
• Experience using and managing EDR, CNAPP, SIEM, and vulnerability management solutions such as Tenable, Qualys, or Wiz
• Proficiency in scripting and automation using Python, Bash, or similar languages
• Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent experience
• Nice to have: Industry certifications

Условия:

• Office-first, flexible approach with on-site work several days a week and remote work supported when appropriate
• 80% On-site and 20% remote work
• Continuous training and learning based on individual needs
• Alan private health insurance
• Wellhub membership
• Cobee expense savings
• Language classes with Preply
• Payflow salary access
• Office breakfast and organic fruit
• Nora and Apeteat discounts
• Pet-friendly office