Senior Security Engineer - Workload Security (Hybrid option)

Quest JD Edwards Community; Madrid; Hybrid; EUR 60,000 - 100,000; Full time

Benefits offered by this job

Hybrid work model

Competitive compensation

Global, inclusive environment

Job summary

Swiss Re in Madrid is seeking a Senior Security Engineer - Workload Security & XDR to design, engineer, and operate security capabilities across endpoints, servers, containers, and cloud-native workloads. You will collaborate with cross-functional teams, implement Falco-based runtime detections, and integrate security through Helm, Argo CD, GitOps, and CI/CD pipelines, shaping security at global scale.

You will mentor peers and guide architectural decisions in a dynamic, international

Qualifications

• Several years of security engineering experience with EDR/XDR and workload protection.
• Strong Windows and Linux security fundamentals.
• Hands-on Kubernetes security including workloads, RBAC and networking.
• Experience with Sysdig Secure, Falco or similar security tech.
• Familiar with Helm, Argo CD, GitOps and CI/CD pipelines.
• Scripting in PowerShell, Python or Bash; cloud security concepts (Azure).

Responsibilities

• Design, engineer, and operate endpoint and workload security across Windows, Linux, cloud, and containers.
• Develop runtime protection, workload visibility, vulnerability management and behavioral detection for Linux and Kubernetes.
• Maintain Falco-based rules and policies using Sysdig Secure or equivalents.
• Integrate security capabilities via Helm, Argo CD, GitOps and CI/CD pipelines.
• Collaborate with Detection Engineering and Incident Response for telemetry and forensics.

Skills

Security engineering

EDR/XDR

Kubernetes security

Sysdig/Falco

CI/CD pipelines

Automation scripting

Azure cloud security

Windows security

Linux security

Communication

Tools

Sysdig Secure

Falco

Argo CD

Helm

GitOps

Azure DevOps

Job description

About The Role

Join Swiss Re's Cyber Defence organization and help us fulfil our mission of making the world more resilient. As a Senior Security Engineer - Workload Security & XDR, you will play a key role in designing, engineering, and operating security capabilities protecting endpoints, servers, containers, and cloud-native workloads across Swiss Re's global environment.

Location: Madrid, M, ES

About The Team

Cyber Defence is the focal point for security monitoring, detection, protection, and response activities across Swiss Re.

You will be part of a highly skilled, international engineering team within the Cyber Defence Product & Engineering unit, working closely with Detection Engineering, Incident Response, Threat Intelligence, Cloud Security, and infrastructure and platform teams, to continuously improve prevention, detection, investigation, and response capabilities.

In this role, you will

• Design, engineer, and operate endpoint and workload security capabilities across Windows, Linux, cloud, and containerized environments.
• Design and operate security capabilities for Linux and Kubernetes workloads, including runtime protection, workload visibility, vulnerability management, and behavioral detection.
• Develop, tune, and maintain Falco-based runtime detection rules and security policies using platforms such as Sysdig Secure or equivalent container security technologies.
• Work with enterprise Kubernetes platforms and cloud-native environments such as AKS.
• Integrate and deploy security capabilities through Helm, Argo CD, GitOps, and CI/CD pipelines, ensuring repeatable and controlled deployments across environments.
• Partner with Detection Engineering and Incident Response teams to ensure endpoint and workload telemetry supports detection, threat hunting, forensic investigation, and response use cases.
• Troubleshoot complex security and integration issues across endpoints, Linux workloads, container platforms, APIs, networks, and distributed environments.
• Act as a senior technical contributor, evaluating new technologies, providing technical direction, design reviews, mentoring, and guidance across engineering initiatives.

About You

You are a hands-on security engineer who enjoys solving complex technical problems and building security capabilities that operate reliably at scale. You combine strong technical depth with ownership, collaboration, and the ability to influence technical decisions across teams.

We are looking for candidates who meet many of the following criteria:

• Several years of experience in security engineering, EDR/XDR, workload protection, or cloud/container security.
• Strong knowledge of Windows and Linux security fundamentals.
• Hands-on experience with Kubernetes and container security, including workloads, nodes, namespaces, RBAC, networking, and runtime behaviour.
• Practical experience with Sysdig Secure, Falco, or similar workload and runtime security technologies.
• Experience working with Kubernetes-based container platforms, including enterprise CaaS environments.
• Experience with Helm, Argo CD, GitOps, Azure DevOps, and CI/CD pipelines.
• Familiarity with scripting, APIs, and automation using technologies such as PowerShell, Python, or Bash.
• Good understanding of Azure and cloud security concepts, including identity, networking, workloads, and security controls.
• Ability to troubleshoot complex issues across operating systems, security technologies, container platforms, and cloud infrastructure.
• Strong communication skills and the ability to work effectively with technical and non-technical stakeholders.

Nice to Have

• Experience with Microsoft Defender XDR, Defender for Cloud, Defender for Identity, or Defender for Cloud Apps.
• Experience with cybersecurity deception technologies and techniques, such as Canarytokens, honey credentials, or similar solutions, including their deployment and use.
• Experience with Infrastructure as Code technologies such as Terraform.
• Exposure to Site Reliability Engineer (SRE) or Platform Engineering practices.
• Experience with containers workload hardening.
• Experience integrating security technologies using APIs and automation.
• Relevant Kubernetes and cloud-native security certifications, such as CKA (Certified Kubernetes Administrator), CKS (Certified Kubernetes Security Specialist) or KCSA (Kubernetes and Cloud Native Security Associate), are a plus

What We Offer

• The opportunity to shape security monitoring at global scale in a leading re/insurance company.
• A flexible hybrid working model balancing office collaboration and remote work.
• A diverse, inclusive, and international work environment.
• Strong focus on learning, technical excellence, and career development.
• Competitive compensation and benefits aligned with Swiss Re standards.

Role

For Spain the base salary range for this position is between EUR 60,000 and EUR 100,000 (for a full-time role). The specific salary offered considers:

• the requirements, scope, complexity and responsibilities of the role,
• the applicant's own profile including education/qualifications, expertise, specialisation, skills and experience.

In the situation where you do not meet all the requirements or you significantly exceed these, the offered salary may be below or above the advertised range.

In addition to your base salary, you may be eligible for additional rewards and benefits including an attractive performance-based bonus.

About Swiss Re

Swiss Re is one of the world's leading providers of reinsurance, insurance and other forms of insurance-based risk transfer, working to make the world more resilient. We anticipate and manage a wide variety of risks, from natural catastrophes and climate change to cybercrime. Combining experience with creative thinking and cutting-edge expertise, we create new opportunities and solutions for our clients. This is possible thanks to the collaboration of more than 15,000 employees across the world.

Our success depends on our ability to build an inclusive culture encouraging fresh perspectives and innovative thinking. We embrace a workplace where everyone has equal opportunities to thrive and develop professionally regardless of their age, gender, race, ethnicity, gender identity and/or expression, sexual orientation, physical or mental ability, skillset, thought or other characteristics. In our inclusive and flexible environment everyone can bring their authentic selves to work and their passion for sustainability.

If you are an experienced professional returning to the workforce after a career break, we encourage you to apply for open positions that match your skills and experience.

We may use AI-powered tools to support the review and evaluation of applications for this position. These tools provide additional insights to our recruitment teams, but all hiring decisions are carefully reviewed and made by people. To learn more about how we use AI in recruitment and how we handle your personal data, please review our Data Privacy Statement before applying.