Senior Vulnerability Engineer – Automation & Cloud Security

SQUAD - Cabinet de conseils et d’expertises; Barcelona; Presencial; EUR 70.000 - 100.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Training & certification plan

CTF sessions

Conference exposure

Descripción de la vacante

SQUAD Group in Barcelona is seeking a hands-on Senior Security Engineer focused on vulnerability management, automation, and scalable remediation. You will design, build, and operate systems spanning asset inventories, ingestion pipelines, and triage workflows across cloud environments.

The role emphasizes CI/CD integration, practical threat modelling, and collaboration with Cloud, Incident Response, and product teams. A strong automation background and security certifications are preferred.

Formación

• 4–6 years of experience in security engineering or related infrastructure security roles.
• Deep knowledge of vulnerability scanning workflows, CVSS and remediation pipelines.
• Hands-on automation skills: Python, APIs, CI/CD orchestration, cloud IAM.
• Strong cloud security knowledge (AWS, GCP, or Azure).
• Familiarity with threat modelling methodologies and penetration testing techniques.
• Experience coordinating across multiple teams without direct authority.

Responsabilidades

• Design and operate end-to-end vulnerability management systems: asset inventories, ingestion pipelines, triage workflows, and remediation tracking.
• Build automation and integrations across the vulnerability ecosystem, APIs, service-account patterns, canonical data schemas, and CI/CD pipelines.
• Conduct internal penetration tests and technical assessments to validate controls and drive root-cause remediations.
• Lead threat modelling, countermeasure validation, and technical reviews for high-impact vulnerabilities.
• Author and maintain runbooks, SLAs, and observability dashboards for operational reliability.
• Mentor and coach engineers through design reviews, code reviews, and shared platform patterns.
• Evaluate vendors and tooling: define criteria, run proof-of-concepts, and deliver technical procurement recommendations.
• Act as a technical partner to Cloud, Incident Response, and product engineering teams.

Conocimientos

Automation

Vulnerability management

Python

APIs

CI/CD orchestration

Cloud IAM

Threat modelling

Cross-team alignment

Educación

Certifications (OSCP/GIAC/AWS)

Descripción del empleo

SQUAD Group in Barcelona is seeking a hands-on Senior Security Engineer focused on vulnerability management, automation, and scalable remediation. You will design, build, and operate systems spanning asset inventories, ingestion pipelines, and triage workflows across cloud environments.

The role emphasizes CI/CD integration, practical threat modelling, and collaboration with Cloud, Incident Response, and product teams. A strong automation background and security certifications are preferred.