Senior Cloud Security Engineer

This is a fully remote position, open to applicants in Spain.

📋 Description

• Collaborate with the Infrastructure team to define and enhance our overall security posture across both legacy and new resources, including data, applications, and networks.

• Act as a subject matter expert on application, data, and network security for our broader engineering teams, ensuring the consistent application of security policies and best practices.

• Engage in the automation of software deployment to our cloud platform, integrating security into our processes and adopting a DevSecOps approach.

• Enhance our monitoring and alerting systems by incorporating specific and relevant security data points.

• Participate in an on-call rotation and assist in troubleshooting any issues that may arise.

• Develop and implement a Security Incident Response process and policy, with a focus on regular updates, testing, and compliance.

⛳️ Requirements

• A minimum of three years of experience in Cloud Infrastructure roles, primarily focusing on AWS, within teams that implement DevSecOps practices.

• Comfortable interacting with AWS through CLI and/or API.

• Skilled in managing Infrastructure solely with Terraform.

• Specialized knowledge in threat assessment, attack surface management, data security, and the network stack at L4 and L7, including DNS, VPC security, IGW, WAF, and CloudFront.

• Experience in designing and managing IAM policies, roles, and trust policies.

• Solid understanding of VPN, MFA, SAML, OAuth2, KMS, and TLS.

• Familiarity with various IdP frameworks and integrations, such as Okta, OneLogin, and Auth0.

• Experience in building and securely running Docker images/containers, including container orchestration security.

• Background in code security audits, static and dynamic analysis, defensive programming techniques, and the visualization and measurement of security KPIs.

• Proficient in at least one scripting or programming language (Python, Bash, Ruby, Node, Golang, Java).

• Strong team player - we build and deliver as a cohesive unit.

🏝️ Benefits

• Competitive compensation packages.

• Comprehensive employment benefits.

• A vibrant tech culture.