Senior Security Engineer - Barcelona

SQUAD - Cabinet de conseils et d’expertises; Barcelona; On-site; EUR 75,000 - 110,000; Full time

Job summary

SQUAD - Cabinet de conseils et d’expertises in Barcelona is seeking a Senior Security Engineer specializing in Vulnerability Management. You will design, build, and operate scalable vulnerability programs across complex environments, surfacing risk and driving remediation.

You’ll lead automation and integrations across scanning tools, CI/CD pipelines, cloud IAM patterns, and threat modelling. Strong hands-on security engineering and collaboration across teams are essential.

Qualifications

• 4–6 years of experience in security engineering or vulnerability management.
• Deep knowledge of vulnerability scanning workflows and risk scoring (CVSS).
• Strong hands-on skills in automation, APIs, CI/CD orchestration, and cloud IAM patterns.
• Solid understanding of cloud security across AWS, GCP, or Azure.
• Familiarity with threat modelling methodologies and penetration testing.
• Experience aligning multiple teams on security initiatives without direct authority.

Responsibilities

• Design and operate end-to-end vulnerability management systems, including asset inventories and remediation tracking.
• Build automation and integrations across vulnerability ecosystems, APIs, and CI/CD pipelines.
• Conduct internal security assessments to validate controls and drive root-cause remediations.
• Lead threat modelling, countermeasure validation, and technical reviews for high-impact vulnerabilities.
• Author and maintain runbooks, SLAs, and dashboards for operational reliability.
• Mentor engineers through design and code reviews, promoting security patterns.
• Evaluate vendors and tooling through proof-of-concepts and technical procurement guidance.
• Act as a technical partner to Cloud, Incident Response, and product engineering teams.

Skills

Vulnerability management

Automation

CI/CD integration

Python

APIs

Cloud IAM patterns

Threat modelling

Security engineering

Job description

Senior Security Engineer – Vulnerability Management | Barcelona

Since 2011, SQUAD Group has been a key player in the cybersecurity landscape. We partner with leading organizations to protect their information systems through a comprehensive 360° offering of consulting, integration, expertise, and managed services

Our mission: Securing Together!

We believe in a collaborative approach to cybersecurity, where experts and clients work hand-in-hand to anticipate threats and protect critical infrastructure.

As part of our growing team, we're seekin g a Senior Security Engineer specialising in Vulnerability Management. Based in Barcelona, this role will put you at the heart of a high-impact security engineering function, building and operating the systems that keep complex, large-scale environments continuously protected.

Your Role

You are a hands-on security engineer and technical leader. A Senior Engineer focused on vulnerability management architecture, automation, and remediation pipelines. Working across scanning platforms, CI/CD integrations, cloud environments, and detection tooling, you'll design, build, and operate the systems that surface risk and drive it to resolution at scale.

Your Responsibilites

• Design and operate end-to-end vulnerability management systems: asset inventories, ingestion pipelines, triage workflows, and remediation tracking.
• Build complex automation and integrations across the vulnerability ecosystem, APIs, service-account patterns, canonical data schemas, and CI/CD pipelines.
• Conduct internal penetration tests and technical assessments to validate controls and drive root-cause remediations.
• Lead threat modelling, countermeasure validation, and technical reviews for high-impact vulnerabilities.
• Author and maintain runbooks, SLAs, and observability dashboards for operational reliability.
• Mentor and coach engineers through design reviews, code reviews, and shared platform patterns.
• Evaluate vendors and tooling: define criteria, run proof-of-concepts, and deliver technical procurement recommendations.
• Act as a technical partner to Cloud, Incident Response, and product engineering teams.

What You Bring

• 4–6 years of experience in security engineering, vulnerability management, or closely related infrastructure security roles.
• Deep knowledge of vulnerability scanning workflows, CVSS/risk scoring, and remediation pipeline design.
• Strong hands‑on skills in automation and secure integration: Python, APIs, CI/CD orchestration, and cloud IAM patterns.
• Solid understanding of cloud security across major public cloud environments (AWS, GCP, or Azure).
• Familiarity with threat modelling methodologies and penetration testing techniques.
• Experience driving technical alignment across multiple teams without direct authority.

Preferred Certifications:

OSCP, GIAC GPEN / GWAPT, AWS Security Specialty, CISM, or equivalent hands‑on security engineering credentials

Why Join Squad?

Personalized Growth: We help you build a training and certification plan aligned with your professional goals through our SquadExeperience

• Expertise Development: Participate in internal events like our MixYourTalent webinars and monthly CTF sessions.
• Visibility: Attend major industry conferences and contribute to our #TheExpert technical blog
• Culture: Enjoy a dynamic and close-knit environment with after-work events and team gatherings that foster great camaraderie.