Senior Aws Security Engineer

Squad Conseil Et Expertises; Barcelona; Presencial; EUR 75.000 - 100.000; Jornada completa

Descripción de la vacante

SQUAD Group, based in Barcelona, seeks a Senior Security Engineer specializing in Vulnerability Management to join a high‑impact security engineering function. You will design, build and operate end‑to‑end vulnerability management systems, including asset inventories, ingestion pipelines, triage workflows and remediation tracking, with automation across scanners and CI/CD integrations.

Ideal candidates have 4–6 years in security engineering or vulnerability management, strong cloud security

Formación

• 4–6 years of experience in security engineering or vulnerability management.
• Hands-on with cloud security across major public cloud environments (AWS, GCP, or Azure).
• Preferred certifications: OSCP, GIAC GPEN / GWAPT, AWS Security Specialty, CISM, or equivalent hands‑on security credentials.

Responsabilidades

• Design, build and operate end‑to‑end vulnerability management systems, including asset inventories, ingestion pipelines, triage workflows and remediation tracking.
• Build complex automation and integrations across the vulnerability ecosystem, APIs, service‑account patterns, canonical data schemas, and CI/CD pipelines.
• Conduct internal penetration tests and technical assessments to validate controls and drive root‑cause remediations.
• Act as a technical partner to Cloud, Incident Response, and product engineering teams.

Conocimientos

Python

APIs

CI/CD orchestration

Cloud IAM patterns

Descripción del empleo

Senior Security Engineer – Vulnerability Management | Barcelona

Since 2011, SQUAD Group has been a key player in the cybersecurity landscape. We believe in a collaborative approach to cybersecurity, where experts and clients work hand-in-hand to anticipate threats and protect critical infrastructure. As part of our growing team, we're seeking a Senior Security Engineer specialising in Vulnerability Management. Based in Barcelona, this role will put you at the heart of a high‑impact security engineering function, building and operating the systems that keep complex, large‑scale environments continuously protected. You are a hands‑on security engineer and technical leader, focused on vulnerability management architecture, automation, and remediation pipelines. Working across scanning platforms, CI/CD integrations, cloud environments, and detection tooling, you'll design, build, and operate the systems that surface risk and drive it to resolution at scale. Design and operate end‑to‑end vulnerability management systems: asset inventories, ingestion pipelines, triage workflows, and remediation tracking. Build complex automation and integrations across the vulnerability ecosystem, APIs, service‑account patterns, canonical data schemas, and CI/CD pipelines. Conduct internal penetration tests and technical assessments to validate controls and drive root‑cause remediations. Act as a technical partner to Cloud, Incident Response, and product engineering teams. 4–6 years of experience in security engineering, vulnerability management, or closely related infrastructure security roles.

• Python, APIs, CI/CD orchestration, and cloud IAM patterns.
• Solid understanding of cloud security across major public cloud environments (AWS, GCP, or Azure).
• Familiarity with threat modelling methodologies and penetration testing techniques.
• Preferred Certifications: OSCP, GIAC GPEN / GWAPT, AWS Security Specialty, CISM, or equivalent hands‑on security engineering credentials.
• Personalized Growth: We help you build a training and certification plan aligned with your professional goals through our SquadExeperience.
• Visibility: Attend major industry conferences and contribute to our #TheExpert technical blog.