> Markdown version of [/jobs/ext/1675793-senior-cloud-security-engineer](https://www.wearedevelopers.com/jobs/ext/1675793-senior-cloud-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Cloud Security Engineer

- **Company:** Roche
- **Location:** Madrid, Spain
- **Contract:** Permanent contract
- **Skills:** Microsoft Access, Application Programming Interfaces (APIs), Amazon Web Services, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cloud Engineering, Cyber Security, DevOps, Infrastructure as a Service (IaaS), Platform as a Service (PAAS), Software Engineering, Multi-Cloud, Infrastructure as Code (IaC), Kubernetes, Information Technology, Prisma Cloud Platform, Devsecops, Serverless Computing, Docker, Vulnerability Analysis
- **Published:** July 27, 2026
- **Apply:** https://www.buscojobs.com.es/senior-cloud-security-engineer-en-madrid-ID-364709383

## About the Role

Automated Remediation: Develop automated response playbooks for cloud misconfigurations and workload alerts using serverless functions and native cloud APIs.
Qualifications Education / Experience / Technical Skills Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, or equivalent practical experience.
3+ years of dedicated experience securing public cloud workloads, with a strong understanding of the shared responsibility model.
Deep technical knowledge of Docker, Kubernetes, and container orchestration.
You should know how to secure a pod, restrict container privileges, and manage network policies.
Proven, hands?on experience deploying and tuning commercial or open?source cloud security platforms (CWPP / CNAPP).
Strong grasp of cloud-native networking (VPCs, Security Groups) and Identity and Access Management (least?privilege roles, service accounts).
Proficiency in written and spoken English (C1 or above level).
Additional Qualifications Bridge Builder: Ability to collaborate closely with DevOps and Cloud Engineering teams, acting as an enabler rather than a roadblock.
Strategic Thinker: Capacity to look at our existing on?premise security policies and intelligently adapt them for ephemeral cloud environments.
Adaptable: Comfortable working in a highly dynamic cybersecurity environment where priorities can shift based on emerging needs.
Team Player: Ability to collaborate effectively with internal and external team mates and stakeholders.
Mentorship: Willingness to cross?train our existing senior endpoint engineers on cloud?native security concepts, while learning from their deep endpoint telemetry expertise.

## Description

Chez Roche, vous pouvez être vous-même et être apprécié pour les qualités uniques que vous apportez.Notre culture encourage l'expression personnelle, le dialogue ouvert et les connexions authentiques, où vous êtes valorisé, accepté et respecté pour ce que vous êtes, vous permettant de prospérer tant personnellement que professionnellement.Voici comment nous visons à prévenir, arrêter et guérir les maladies et à garantir à chacun l'accès aux soins de santé aujourd'hui et pour les générations à venir.Rejoignez Roche, où chaque voix compte.La position We are a high-performing cybersecurity team tasked with protecting the organization's computing environments.While our historical stronghold has been managing enterprise Endpoint Detection and Response (EDR), Application Control, and Secure Data Erasure, we are now expanding our focus to secure our dynamic, cloud-native environments.We are looking for a Cloud Security Engineer specializing in Cloud Workload Protection.You will be responsible for securing IaaS, PaaS, containers, and serverless architectures.Working alongside your senior endpoint security colleagues, you will bridge the gap between traditional endpoint defense and modern cloud infrastructure, ensuring our threat detection and application governance standards are seamlessly extended to the cloud.Job Responsibilities Cloud Workload Protection (CWPP): Architect, deploy, and manage Cloud Workload Protection Platforms (e.G., Prisma Cloud, Microsoft Defender for Cloud, Wiz, or Aqua) across our multi-cloud environment (AWS, Azure, and/or GCP).Container & Kubernetes Security: Implement runtime defense, vulnerability scanning, and configuration hardening for containerized applications and orchestration platforms (EKS, AKS, GKE).Extending Core Services to the Cloud: Adapt our existing strategies for EDR and Application Control to function effectively in ephemeral, cloud-native workloads without degrading performance.DevSecOps Integration: Embed security controls directly into CI/CD pipelines (Shift-Left), ensuring images, registries, and Infrastructure as Code (IaC) templates are scanned and secured before deployment.Automated Remediation: Develop automated response playbooks for cloud misconfigurations and workload alerts using serverless functions and native cloud APIs.Qualifications Education / Experience / Technical Skills Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, or equivalent practical experience.3+ years of dedicated experience securing public cloud workloads, with a strong understanding of the shared responsibility model.Deep technical knowledge of Docker, Kubernetes, and container orchestration.You should know how to secure a pod, restrict container privileges, and manage network policies.Proven, hands?on experience deploying and tuning commercial or open?source cloud security platforms (CWPP / CNAPP).Strong grasp of cloud-native networking (VPCs, Security Groups) and Identity and Access Management (least?privilege roles, service accounts).Proficiency in written and spoken English (C1 or above level).Additional Qualifications Bridge Builder: Ability to collaborate closely with DevOps and Cloud Engineering teams, acting as an enabler rather than a roadblock.Strategic Thinker: Capacity to look at our existing on?premise security policies and intelligently adapt them for ephemeral cloud environments.Adaptable: Comfortable working in a highly dynamic cybersecurity environment where priorities can shift based on emerging needs.Team Player: Ability to collaborate effectively with internal and external team mates and stakeholders.Mentorship: Willingness to cross?train our existing senior endpoint engineers on cloud?native security concepts, while learning from their deep endpoint telemetry expertise.Qui nous sommes Un avenir plus sain nous pousse à innover.Ensemble, plus de ******* employés à travers le monde sont dédiés à faire progresser la science et à garantir à chacun l'accès aux soins de santé aujourd'hui et pour les générations à venir.Nos efforts aboutissent à plus de 26 millions de personnes traitées avec nos médicaments et plus de 30 milliards de tests réalisés avec nos produits de Diagnostique.Nous nous encourageons mutuellement à explorer de nouvelles possibilités, à favoriser la créativité et à conserver nos grandes ambitions, afin de fournir des solutions de santé qui changent des vies et ont un impact mondial.Roche est un employeur offrant l'équité en matière d'emploi.#J-*****-Ljbffr


## Related Videos

- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines)
- [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered)
- [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform)
- [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security)
- [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops)

## Related Articles

- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)