Security Architect

This is a fully remote position, open to applicants in Spain.

📋 Description

• Analyze risks and propose security solutions.

• Make technical decisions and advocate for them with sound reasoning.

• Design secure architectures that are viable from security, development, and operational perspectives.

• Collaborate with multidisciplinary teams.

• Support the implementation of solutions.

• Maintain an up-to-date understanding of new threats, technologies, and best security practices.

⛳️ Requirements

• Strong experience in IAM and identity management.

• Advanced Keycloak knowledge: realms, clients, client scopes, mappers, roles, groups, service accounts, and federation with IdPs.

• Familiarity with OAuth 2.0, OpenID Connect, and SAML.

• Security expertise in Kubernetes/OpenShift: RBAC, least privilege, NetworkPolicies, SecurityContext, SCCs, and multi-tenancy strategies.

• Experience with DevSecOps / SSDLC: integration of SAST, SCA, DAST, image analysis, and security controls in CI/CD.

• Proficient in using HashiCorp Vault for management, authentication, and secret rotation.

• Strong skills in hardening and vulnerability management applying CIS Benchmarks and OWASP.

• Experience in pentesting web applications, APIs, and Kubernetes using Burp Suite or OWASP ZAP.

• Knowledge of Software Supply Chain Security: SBOM, Syft/CycloneDX, Cosign, SLSA, and admission control.

• Interest or experience in security for AI/LLM-based applications: prompt injection, RAG poisoning, vector database security, access control, and observability.

• Automation skills with Python, Bash, or Go.

• Ability to make architectural decisions and justify them effectively.

• Capacity to work with multidisciplinary teams.

• Disability certification will be considered an asset.

🏝️ Benefits

• Opportunity to work in a remote or hybrid work model.

• Flexibility to organize work, promoting a balance between personal and professional life.

• Buddy system for support from day one.

• Annual training plan.

• Official certifications.

• Learning spaces for professional development.

• 100% subsidized health insurance.

• Flexible compensation through Edenred.

• 25 annual vacation days.

• Additional benefits focused on well-being.

• Collaborative and close-knit work environment.