Senior Security Engineer - Barcelona

Squad Conseil Et Expertises; Barcelona; Presencial; EUR 60.000 - 90.000; Jornada completa

Descripción de la vacante

SQUAD Group in Barcelona is looking for a hands-on Senior Security Engineer focusing on vulnerability management to build and operate scalable security tooling across large environments. You will design automation, lead remediation pipelines, conduct risk assessments, and partner with Cloud, IR, and product teams to drive secure development and operations.

You'll work across scanning platforms, CI/CD integrations, cloud environments, and detection tooling to surface risk and drive timely

Formación

• 4–6 years of experience in security engineering, vulnerability management, or closely related infrastructure security roles.
• Strong hands-on skills in automation and secure integration: Python, APIs, CI/CD orchestration, and cloud IAM patterns.
• Solid understanding of cloud security across major public cloud environments (AWS, GCP, or Azure).
• Familiarity with threat modelling methodologies and penetration testing techniques.

Responsabilidades

• Design and operate end-to-end vulnerability management systems: asset inventories, ingestion pipelines, triage workflows, and remediation tracking.
• Build complex automation and integrations across the vulnerability ecosystem, APIs, service-account patterns, canonical data schemas, and CI/CD pipelines.
• Conduct internal penetration tests and technical assessments to validate controls and drive root-cause remediations.
• Lead threat modelling, countermeasure validation, and technical reviews for high-impact vulnerabilities.
• Author and maintain runbooks, SLAs, and observability dashboards for operational reliability.
• Mentor and coach engineers through design reviews, code reviews, and shared platform patterns.
• Evaluate vendors and tooling: define criteria, run proof-of-concepts, and deliver technical procurement recommendations.
• Act as a technical partner to Cloud, Incident Response, and product engineering teams.

Conocimientos

Python

APIs

CI/CD orchestration

Cloud IAM patterns

Threat modelling

Penetration testing techniques

Herramientas

Vulnerability scanners

CI/CD platforms

Descripción del empleo

Senior Security Engineer – Vulnerability Management | Barcelona

Since 2011, SQUAD Group has been a key player in the cybersecurity landscape. We partner with leading organizations to protect their information systems through a comprehensive 360° offering of consulting, integration, expertise, and managed services

Our mission: Securing Together!

We believe in a collaborative approach to cybersecurity, where experts and clients work hand-in-hand to anticipate threats and protect critical infrastructure.

As part of our growing team, were seeking a Senior Security Engineer specialising in Vulnerability Management. Based in Barcelona, this role will put you at the heart of a high-impact security engineering function, building and operating the systems that keep complex, large-scale environments continuously protected.

Your Role

You are a hands-on security engineer and technical leader. A Senior Engineer focused on vulnerability management architecture, automation, and remediation pipelines. Working across scanning platforms, CI/CD integrations, cloud environments, and detection tooling, youll design, build, and operate the systems that surface risk and drive it to resolution at scale.

Your Responsibilites

• Design and operate end-to-end vulnerability management systems: asset inventories, ingestion pipelines, triage workflows, and remediation tracking.
• Build complex automation and integrations across the vulnerability ecosystem, APIs, service-account patterns, canonical data schemas, and CI/CD pipelines.
• Conduct internal penetration tests and technical assessments to validate controls and drive root-cause remediations.
• Lead threat modelling, countermeasure validation, and technical reviews for high-impact vulnerabilities.
• Author and maintain runbooks, SLAs, and observability dashboards for operational reliability.
• Mentor and coach engineers through design reviews, code reviews, and shared platform patterns.
• Evaluate vendors and tooling: define criteria, run proof-of-concepts, and deliver technical procurement recommendations.
• Act as a technical partner to Cloud, Incident Response, and product engineering teams.

What You Bring

• 4–6 years of experience in security engineering, vulnerability management, or closely related infrastructure security roles.
• Deep knowledge of vulnerability scanning workflows, CVSS/risk scoring, and remediation pipeline design.
• Strong hands-on skills in automation and secure integration: Python, APIs, CI/CD orchestration, and cloud IAM patterns.
• Solid understanding of cloud security across major public cloud environments (AWS, GCP, or Azure).
• Familiarity with threat modelling methodologies and penetration testing techniques.
• Experience driving technical alignment across multiple teams without direct authority.

Preferred Cert

Certifications: OSCP, GIAC GPEN / GWAPT, AWS Security Specialty, CISM, or equivalent hands-on security engineering credentials

Why Join Squad?

Personalized Growth: We help you build a training and certification plan aligned with your professional goals through our SquadExeperience

• Expertise Development: Participate in internal events like our MixYourTalent webinars and monthly CTF sessions.
• Visibility: Attend major industry conferences and contribute to our #TheExpert technical blog
• Culture: Enjoy a dynamic and close-knit environment with after-work events and team gatherings that foster great camaraderie.