Senior Security Engineer - Cloud Infrastructure

Job Reference: -1Date Posted: 12 July **Recruiter: Coberon ChronosLocation: Greater Barcelona areaRemote Working: 100% remote working possibleSalary: On ApplicationSector: IT & Tech, Enterprise Software, Cybersecurity, AI and Machine Learning, SaaS & PaaSJob Type: Remote, HybridContact: Recruitment ManagerEmail: for this job nowJob DescriptionOur client is a leading US enterprise AI startup.They are looking for a highly skilled Senior Security Engineer to join their Product Security team in Barcelona (remote, full-time, permanent employment contract).You must be eligible to work in Spain/EU.This role will focus on designing, implementing, and managing security solutions for their cloud-native platform on AWS.You will play a pivotal role in safeguarding our systems, ensuring compliance, and advancing our security posture.Cloud Infrastructure Security: Design, implement, and manage security controls for AWS infrastructure.Vulnerability Management: Perform vulnerability assessments and drive remediation efforts across cloud environments.Automation & Monitoring: Automate security monitoring and incident response processes using industry best practices and tools.Security Projects Leadership: Lead key initiatives and projects such as CNAPP selection and implementation, advanced threat detection, and custom security control development.Penetration Testing: Conduct and analyze penetration testing exercises to identify and mitigate potential risks.Compliance Support: Collaborate with compliance teams to ensure adherence to security standards like SOC 2 and ISO **.Risk Assessments: Conduct technical risk assessments for critical infrastructure components.Cross-Functional Collaboration: Work closely with DevOps, Infrastructure, and Application teams to embed security into the development lifecycle.Incident Response: Lead investigations into advanced persistent threats (APTs) and other sophisticated security incidents.If you’re looking for a real challenge in terms of mission-criticality, multi-geographic region deployments, diversity of managed services, and the chance to be a part of an impactful team working with cutting-edge cloud technologies and more, then this might be the position for you!Requirements Education: Bachelor’s degree in a related technical field.A Master’s degree is advantageous.Certifications: Essential: AWS Security Specialty, GIAC (e.G., GSEC) Preferred: CISSP, OSCP, GPEN, GCIH Years of Experience: 5-8 years in cybersecurity, focusing on cloud infrastructure security.Deep expertise in AWS security services (e.G., EKS, IAM, KMS, GuardDuty, Config, Amazon Linux).Proficient in scripting and automation (e.G., Python, Bash).Hands-on experience with security tools like SIEM, IDS/IPS, and vulnerability scanners.Advanced knowledge of penetration testing tools and methodologies (e.G., Metasploit, Burp Suite).Expertise in network security, encryption standards, and IAM technologies.Familiarity with compliance frameworks (e.G., SOC 2, ISO ****).Experience with security automation in DevSecOps environments.Strong documentation and communication skills.

Requirements Education: Bachelor’s degree in a related technical field. A Master’s degree is advantageous. Certifications: Essential: AWS Security Specialty, GIAC (e.G., GSEC) Preferred: CISSP, OSCP, GPEN, GCIH Years of Experience: 5-8 years in cybersecurity, focusing on cloud infrastructure security. Deep expertise in AWS security services (e.G., EKS, IAM, KMS, GuardDuty, Config, Amazon Linux). Proficient in scripting and automation (e.G., Python, Bash). Hands-on experience with security tools like SIEM, IDS/IPS, and vulnerability scanners. Advanced knowledge of penetration testing tools and methodologies (e.G., Metasploit, Burp Suite). Expertise in network security, encryption standards, and IAM technologies. Familiarity with compliance frameworks (e.G., SOC 2, ISO *****). Experience with security automation in DevSecOps environments. Strong documentation and communication skills.