Zero-Trust Cloud Security Engineer

Werfen; Barcelona; Presencial; EUR 55.000 - 75.000; Jornada completa

Descripción de la vacante

Werfen in Barcelona is seeking a Cloud Security Engineer to design, implement, and operate security controls across cloud environments to protect applications, data, identities, and infrastructure from modern threats.

You will partner with Cloud Engineering, Security Operations, Architecture, DevOps and IT teams to enforce secure-by-default patterns, automate guardrails, and maintain continuous compliance across cloud platforms.

Formación

• Bachelor’s degree in computer science, cybersecurity, or related field.
• 3+ years of hands-on experience in cybersecurity role.

Responsabilidades

• Implement and maintain secure cloud configurations, controls, and guardrails aligned with Zero Trust and best practices.
• Automate security enforcement using IaC, CI/CD integration, and policy-as-code tools.
• Manage cloud identity and access security, including least-privilege roles, workload identity, and privileged access.
• Operate and tune cloud-native threat protection, logging, and monitoring services with Security Operations.
• Support incident response with cloud-specific visibility, forensics, and remediation actions.
• Perform vulnerability scanning, misconfiguration detection, and drive remediation across cloud workloads.
• Implement secure networking patterns such as private endpoints, WAFs, segmentation, and API protection.
• Collaborate with DevOps, Cloud Engineering, and Architecture teams to embed security into cloud deployments and projects.
• Document security patterns, runbooks, and provide guidance to engineering teams.

Conocimientos

Strategic Thinking

Technical Depth

Communication

Collaboration

Continuous Learning

Educación

Bachelor’s degree in CS/Cybersecurity

Descripción del empleo

Werfen in Barcelona is seeking a Cloud Security Engineer to design, implement, and operate security controls across cloud environments to protect applications, data, identities, and infrastructure from modern threats.

You will partner with Cloud Engineering, Security Operations, Architecture, DevOps and IT teams to enforce secure-by-default patterns, automate guardrails, and maintain continuous compliance across cloud platforms.