Senior Cloud Security Engineer (Cloud Defense)

Allianz Popular SL.; Madrid; Hybrid; EUR 75,000 - 110,000; Full time

Benefits offered by this job

Hybrid work model

Bonus scheme

Pension

Employee shares program

Employee discounts

Job summary

Allianz Popular SL. is seeking a Senior Cloud Security Engineer to join the Allianz Cyber Defense Center in Madrid.

You will secure cloud workloads across AWS, Azure and GCP, building prevention, detection and response capabilities and working with international teams in a fast-paced environment. This hands-on role focuses on cloud security engineering, threat detection and automation, with collaboration across engineering to enforce best practices.

Qualifications

• Hands-on experience securing cloud environments (AWS, Azure and/or GCP).
• Experience with cloud threat detection and attacker techniques.
• Experience with event-driven detection, SIEM and SOAR environments.
• Knowledge of microservices and cloud-native architectures.
• Familiarity with IaC (Terraform) and CI/CD pipelines.
• Strong communication skills in English.

Responsibilities

• Analyze and investigate cloud security findings across AWS, Azure and GCP.
• Manage and remediate cloud security posture issues and exposure scenarios.
• Respond to active threat detections and correlate signals across data sources.
• Monitor and improve SaaS security posture and third-party access risks.
• Develop detection use cases within SIEM and contribute to SOAR workflows.
• Collaborate with engineering to implement guardrails and best practices.
• Support shift-left security in infrastructure pipelines (IaC, CI/CD).
• Contribute to automation, documentation and knowledge sharing.

Skills

Cloud security

IAM

Networking

Threat detection

Incident response

SIEM

SOAR

Kubernetes

Docker

Terraform

CI/CD

GitOps

Python

English communication

Tools

Wiz

Prisma Cloud

Lacework

Job description

About the Job

Join theAllianz Cyber Defense Center (ACDC) and play a key role in securing cloud environments at scale for one of the world’s leading insurance companies.

As aSenior Cloud Security Engineer, you will be part of the Cloud Defense team, working across AWS, Azure, and GCP to protect critical workloads and SaaS platforms. You will contribute across the full security lifecycle—from prevention to detection and response—helping us stay ahead in an ever‑evolving threat landscape.

This is a hands‑on, high‑impact role where you will work at the intersection of cloud security engineering, threat detection, and automation, collaborating with international teams in a fast‑paced and continuously evolving environment.

What you do

• Analyze and investigate cloud security findings across AWS, Azure, and GCP, prioritizing based on risk and business impact
• Manage and remediate cloud security posture issues, including misconfigurations, identity risks, and exposure scenarios
• Handle and respond to active threat detections, correlating signals across multiple data sources
• Monitor and improve SaaS security posture, identifying risks such as identity drift or third‑party access issues
• Develop and enhance detection use cases within SIEM and contribute to SOAR automation workflows
• Collaborate with engineering and platform teams to implement security guardrails and enforce best practices
• Support shift‑left security initiatives by integrating security into infrastructure pipelines (IaC, CI/CD)
• Contribute to continuous improvement through automation, documentation, and knowledge sharing

What you bring

• Hands‑on experience securing cloud environments (AWS, Azure and/or GCP), including IAM, networking and workload protection
• Strong understanding of cloud threat detection and attacker techniques (e.g., credential abuse, lateral movement, misconfiguration exploitation)
• Experience with CNAPP/CSPM platforms (e.g., Wiz, Prisma Cloud, Lacework or similar)
• Proven ability to manage security incidents end‑to‑end, from investigation to containment and reporting
• Experience designing or working with event‑driven detection and SIEM/SOAR environments
• Knowledge of microservices and cloud‑native architectures, with a focus on scalability and resilience
• Hands‑on experience with Kubernetes, Docker and cloud platforms (AWS, Azure, GCP)
• Familiarity with Infrastructure as Code (Terraform, CI/CD, GitOps) and shift‑left security practices
• Scripting or automation skills (e.g., Python or similar)
• Strong communication skills in English, with the ability to explain technical findings to non‑security stakeholders

What we offer

• We offer a hybrid work model which recognizes the value of striking a balance between in‑person collaboration and remote working incl. up to 25 days per year working from abroad.
• We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location).
• From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered.
• Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career andhelp our people return from career breaks with experience that nothing else can teach.