Senior Security Engineer

CoberonChronos; Santander; A distancia; EUR 50.000 - 90.000; Jornada completa

Descripción de la vacante

Join a forward-thinking AI startup as a Senior Security Engineer, where you'll design and implement security solutions for a cutting-edge cloud-native platform. This role offers the opportunity to lead security initiatives, conduct vulnerability assessments, and collaborate with cross-functional teams to enhance security posture. If you're passionate about cybersecurity and eager to tackle real challenges in a dynamic environment, this is the perfect opportunity for you. Contribute to safeguarding systems while working with innovative technologies in a remote, full-time position.

Formación

• 5-8 years in cybersecurity focusing on cloud infrastructure security.
• Deep expertise in AWS security services and scripting.

Responsabilidades

• Design and manage security solutions for a cloud-native platform on AWS.
• Lead investigations into advanced persistent threats and security incidents.

Conocimientos

Cloud Infrastructure Security

Vulnerability Management

Automation & Monitoring

Penetration Testing

Risk Assessments

Cross-Functional Collaboration

Incident Response

Scripting (Python, Bash)

Compliance Knowledge (SOC 2, ISO 27001)

Educación

Bachelor's degree in a related technical field

Master's degree (advantageous)

Herramientas

AWS Security Services (EKS, IAM, KMS, GuardDuty)

SIEM

IDS / IPS

Vulnerability Scanners

Penetration Testing Tools (Metasploit, Burp Suite)

Descripción del empleo

Our client is a US enterprise AI startup.

They are looking for a highly skilled Senior Security Engineer to join their Product Security team in Barcelona (remote, full-time, permanent employment contract). You must be eligible to work in Spain / EU.

This role will focus on designing, implementing, and managing security solutions for their cloud-native platform on AWS. You will play a pivotal role in safeguarding our systems, ensuring compliance, and advancing our security posture.

• Cloud Infrastructure Security : Design, implement, and manage security controls for AWS infrastructure.
• Vulnerability Management : Perform vulnerability assessments and drive remediation efforts across cloud environments.
• Automation & Monitoring : Automate security monitoring and incident response processes using industry best practices and tools.
• Security Projects Leadership : Lead key initiatives and projects such as CNAPP selection and implementation, advanced threat detection, and custom security control development.
• Penetration Testing : Conduct and analyze penetration testing exercises to identify and mitigate potential risks.
• Compliance Support : Collaborate with compliance teams to ensure adherence to security standards like SOC 2 and ISO 27001.
• Risk Assessments : Conduct technical risk assessments for critical infrastructure components.
• Cross-Functional Collaboration : Work closely with DevOps, Infrastructure, and Application teams to embed security into the development lifecycle.
• Incident Response : Lead investigations into advanced persistent threats (APTs) and other sophisticated security incidents. If you’re looking for a real challenge in terms of mission-criticality, multi-geographic region deployments, diversity of managed services, and the chance to be a part of an impactful team working with cutting-edge cloud technologies and more, then this might be the position for you!

Requirements

• Education : Bachelor's degree in a related technical field. A Master's degree is advantageous.
• Certifications : ○ Essential : AWS Security Specialty, GIAC (e.g., GSEC)

Preferred : CISSP, OSCP, GPEN, GCIH

• Years of Experience : 5-8 years in cybersecurity, focusing on cloud infrastructure security.
• Deep expertise in AWS security services (e.g., EKS, IAM, KMS, GuardDuty, Config, Amazon Linux).
• Proficient in scripting and automation (e.g., Python, Bash).
• Hands-on experience with security tools like SIEM, IDS / IPS, and vulnerability scanners.
• Advanced knowledge of penetration testing tools and methodologies (e.g., Metasploit, Burp Suite).
• Expertise in network security, encryption standards, and IAM technologies.
• Familiarity with compliance frameworks (e.g., SOC 2, ISO 27001).
• Experience with security automation in DevSecOps environments.
• Strong documentation and communication skills.