> Markdown version of [/jobs/ext/1660778-security-engineer-cloud-infrastructure](https://www.wearedevelopers.com/jobs/ext/1660778-security-engineer-cloud-infrastructure). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Engineer - Cloud Infrastructure

- **Company:** Ebury
- **Location:** Málaga, Spain
- **Contract:** Permanent contract
- **Skills:** Kubernetes Security, Amazon Web Services, Application Firewall, Bash Shell, Cloud Computing, Cloud Computing Security, Cyber Security, Computer Networks, Domain Name System (DNS), Identity and Access Management, Virtual Private Networks (VPN), Python (Programming Language), Network Security, Network Architecture, Routing, Network Segmentation, PCI Data Security Standards, Remote Access Technology, Zero Trust Network Access, Security Information and Event Management, Data Logging, Transport Layer Security, Google Cloud, Multi-Cloud, Firewalls (Computer Science), Kubernetes, CIS Benchmarks, Terraform, Devsecops, Security Orchestration, Automation & Response
- **Published:** July 17, 2026
- **Apply:** https://www.adzuna.es/contact-us.html

## About the Role

You understand cloud infrastructure security end-to-end, applying frameworks (CIS Benchmarks, NIST CSF, ISO 27001) within a regulated context.
You think holistically about defence-in-depth, from network perimeter to workload protection.
You effectively engage with platform, infrastructure, and engineering teams, clearly explaining the 'why' and impact of security controls.
You advocate for security-as-code and automation, reducing manual processes and improving consistency.
You promote a collaborative culture, share knowledge openly, and optimise your contributions for predictable delivery
Experience and Qualifications
Required
5+ years in security or infrastructure engineering with deep expertise in cloud security, ideally within FinTech, banking, or a similar regulated industry.
Expert-level experience with AWS and/or GCP security services, including VPCs, security groups, IAM, and cloud-native security tools.
Proven track record designing and implementing WAF solutions (AWS WAF, Cloud Armor, or similar) with custom detection rules.
Strong experience designing network architectures with proper segmentation and isolation patterns.
Extensive experience with Infrastructure as Code (Terraform preferred) and GitOps practices.
Proficiency in scripting and automation (Python, Bash, or similar).
Solid understanding of network security fundamentals: firewalls, routing, DNS, TLS, VPNs.
Experience implementing or operating SIEM, logging, and security monitoring solutions
Desired
Experience with zero-trust network architectures and identity-aware access solutions.
Knowledge of container security and Kubernetes network policies.
Experience with security orchestration and automated response (SOAR).
Familiarity with compliance requirements for financial services (PSD2, GDPR, PCI-DSS).
Relevant certifications (AWS/GCP Security Specialty, CCSP, or similar).
Experience migrating from legacy VPN solutions to modern alternatives (e.g., ZTNA, SDP)

## Description

Ebury is investing significantly in its cloud infrastructure security capabilities to ensure the trust and safety of our global financial services. As a Senior Security Engineer specialising in Cloud Infrastructure, you will own and evolve the security posture of our cloud environments across AWS and GCP, with a focus on network security, perimeter defence, and attack surface management.
This hands-on role requires deep expertise in cloud-native security controls, network architecture, and defensive security operations. You will design, implement, and maintain security infrastructure that proactively detects and mitigates threats before they impact our business. You will work closely with platform, infrastructure, and security operations teams, embedding security best practices into our cloud foundations., Own cloud security posture and attack surface management: Maintain comprehensive visibility and control across AWS and GCP environments. Implement cloud-native security monitoring, detection, and alerting to proactively identify and mitigate threats before they impact customers or the business. Define and enforce security baselines using policy-as-code.
Design and maintain web application firewall infrastructure: Own WAF configurations across AWS and GCP, developing and tuning detection rules aligned with application threat models and emerging attack patterns. Establish operational processes for rule lifecycle management and incident response integration, collaborating with application teams to implement protections without impacting availability.
Architect network segmentation and isolation: Design and implement network security strategies ensuring proper separation between development, staging, and production environments. Define consistent patterns across multi-cloud infrastructure, applying zero-trust principles to workload communication and documenting reference architectures for engineering teams.
Deliver modern secure remote access: Architect and implement a scalable remote access solution to meet current network security and environment isolation requirements. Design identity-aware access controls for infrastructure and cloud resources, ensuring solutions satisfy compliance and audit requirements for regulated financial services.
Drive security automation and DevSecOps adoption: Implement Infrastructure as Code for security controls using Terraform and cloud-native tools. Build automated compliance checking, policy enforcement pipelines, and security tooling that improves detection and response capabilities across infrastructure deployments.
Improve team capabilities and cross-functional collaboration: Partner with platform and infrastructure teams to embed security into cloud foundations. Provide technical guidance on network and cloud security best practices, contribute to incident response, and actively share security learnings to elevate engineering capabilities.


## Related Videos

- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines)
- [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon)
- [Creating a routing app with Google Maps API from scratch](https://www.wearedevelopers.com/videos/831-creating-a-routing-app-with-google-maps-api-from-scratch)
- [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)

## Related Articles

- [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)