Senior Cloud Security Engineer (Cloud Defense)

Allianz Technology Se Spain Branch; Madrid; Híbrido; EUR 70.000 - 100.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid work model with international‑d

Bonus scheme

Pension

Employee shares program

Employee discounts

Lifelong learning

Health and wellness

Descripción de la vacante

Allianz Technology seeks a Senior Cloud Security Engineer to join the Cloud Defense team, securing AWS, Azure, and GCP workloads at scale. You will prevent, detect, and respond to threats while integrating security into CI/CD and IaC workflows.

This role collaborates with international teams in a fast-paced environment. Ideal candidates have hands-on cloud security experience, CNAPP/CSPM exposure, and strong English communication skills.

Formación

• Hands-on experience securing cloud environments (AWS, Azure and/or GCP), including IAM, networking and workload protection.
• Strong understanding of cloud threat detection and attacker techniques.
• Experience with CNAPP/CSPM platforms (e.g., Wiz, Prisma Cloud, Lacework or similar).
• Proven ability to manage security incidents end-to-end, from investigation to containment and reporting.
• Experience designing or working with event-driven detection and SIEM/SOAR environments.
• Knowledge of microservices and cloud-native architectures, with a focus on scalability and resilience.
• Hands-on experience with Kubernetes, Docker and cloud platforms (AWS, Azure, GCP).
• Familiarity with Infrastructure as Code (Terraform, CI/CD, GitOps) and shift-left security practices.
• Scripting or automation skills (e.g., Python or similar).
• Strong communication skills in English, with the ability to explain technical findings to non-security stakeholders.

Responsabilidades

• Analyze and investigate cloud security findings across AWS, Azure, and GCP, prioritizing based on risk and business impact.
• Manage and remediate cloud security posture issues, including misconfigurations, identity risks, and exposure scenarios.
• Handle and respond to active threat detections, correlating signals across multiple data sources.
• Monitor and improve SaaS security posture, identifying risks such as identity drift or third-party access issues.
• Develop and enhance detection use cases within SIEM and contribute to SOAR automation workflows.
• Collaborate with engineering and platform teams to implement security guardrails and enforce best practices.
• Support shift-left security initiatives by integrating security into infrastructure pipelines (IaC, CI/CD).
• Contribute to continuous improvement through automation, documentation, and knowledge sharing.

Conocimientos

Cloud security

IAM

Networking

Workload protection

Threat detection

SIEM

SOAR

Kubernetes

Docker

CNAPP/CSPM

Prisma Cloud

Lacework

Terraform

CI/CD

GitOps

Python

English comms

Herramientas

Wiz

Prisma Cloud

Lacework

Descripción del empleo

About the Job

Join theAllianz Cyber Defense Center (ACDC) and play a key role in securing cloud environments at scale for one of the world’s leading insurance companies.

As a Senior Cloud Security Engineer, you will be part of the Cloud Defense team, working across AWS, Azure, and GCP to protect critical workloads and SaaS platforms. You will contribute across the full security lifecycle—from prevention to detection and response—helping us stay ahead in an ever-evolving threat landscape.

This is a hands‑on, high-impact role where you will work at the intersection of cloud security engineering, threat detection, and automation, collaborating with international teams in a fast‑paced and continuously evolving environment.

What you do

• Analyze and investigate cloud security findings across AWS, Azure, and GCP, prioritizing based on risk and business impact
• Manage and remediate cloud security posture issues, including misconfigurations, identity risks, and exposure scenarios
• Handle and respond to active threat detections, correlating signals across multiple data sources
• Monitor and improve SaaS security posture, identifying risks such as identity drift or third-party access issues
• Develop and enhance detection use cases within SIEM and contribute to SOAR automation workflows
• Collaborate with engineering and platform teams to implement security guardrails and enforce best practices
• Support shift-left security initiatives by integrating security into infrastructure pipelines (IaC, CI/CD)
• Contribute to continuous improvement through automation, documentation, and knowledge sharing

What you bring

• Hands-on experience securing cloud environments (AWS, Azure and/or GCP), including IAM, networking and workload protection
• Strong understanding of cloud threat detection and attacker techniques (e.g., credential abuse, lateral movement, misconfiguration exploitation)
• Experience with CNAPP/CSPM platforms (e.g., Wiz, Prisma Cloud, Lacework or similar)
• Proven ability to manage security incidents end-to-end, from investigation to containment and reporting
• Experience designing or working with event-driven detection and SIEM/SOAR environments
• Knowledge of microservices and cloud-native architectures, with a focus on scalability and resilience
• Hands-on experience with Kubernetes, Docker and cloud platforms (AWS, Azure, GCP)
• Familiarity with Infrastructure as Code (Terraform, CI/CD, GitOps) and shift-left security practices
• Scripting or automation skills (e.g., Python or similar)
• Strong communication skills in English, with the ability to explain technical findings to non-security stakeholders

What we offer

• We offer a hybrid work model which recognizes the value of striking a balance between in-person collaboration and remote working incl. up to 25 days per year working from abroad.
• We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location).
• From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered.
• Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach.

About Allianz Technology

With its headquarters in Munich, Germany, Allianz Technology is Allianz's global IT service provider and delivers IT solutions that drive the group's digitalization. With more than 11,000 employees in over 20 countries around the world, Allianz Technology is tasked to run, optimize, transform, and innovate the infrastructure, applications, and services together with Allianz companies to co-create the best customer experience.

We service the entire spectrum of digitalization – from one of the industry's largest IT infrastructure projects that spans data centers, networks, and security, to application platforms ranging from workplace services to digital interaction.

In short: We deliver comprehensive end-to-end IT solutions for Allianz in the digital age. We are the backbone of Allianz.

Find us at: www.linkedin.com/company/allianz-technology.

Commitment to Integrity, Fairness & Inclusion

Allianz Technology is proud to be an equal opportunity employer dedicated to fostering an inclusive work environment for everyone. We embrace individuals of all gender identities and expressions, sexual orientations, ethnicities, ages, nationalities, religions, disabilities, and philosophies of life. Ultimately, our greatest strength as a company lies in the unique skills, experiences, and backgrounds our employees contribute.