> Markdown version of [/jobs/ext/2244553-cloud-security-engineer](https://www.wearedevelopers.com/jobs/ext/2244553-cloud-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cloud Security Engineer

- **Company:** Werfen S.a.
- **Location:** Barcelona, Spain
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Cloud Computing Security, Cloud Engineering, Cyber Security, Continuous Integration, DevOps, Network Security, Cloud Services, Zero Trust Network Access, Runbook, Data Logging, Information Technology, Vulnerability Analysis
- **Published:** August 26, 2026
- **Apply:** https://www.buscojobs.com.es/cloud-security-engineer-en-badalona-ID-368896229

## About the Role

This role partners closely with Cloud Engineering, Security Operations, Architecture, DevOps, and IT teams to enforce secure-by-default patterns, automate guardrails, and maintain continuous compliance across cloud platforms.Key AccountabilitiesImplement and maintain secure cloud configurations, controls, and guardrails aligned with Zero Trust and best practices.Automate security enforcement using IaC, CI/CD integration, and policy?as?code tools.Manage cloud identity and access security, including least?privilege roles, workload identity, and privileged access.Operate and tune cloud?native threat protection, logging, and monitoring services in partnership with Security Operations.Support incident response with cloud-specific visibility, forensics, and remediation actions.Perform vulnerability scanning, misconfiguration detection, and drive remediation across cloud workloads.Implement secure networking patterns such as private endpoints, WAFs, segmentation, and API protection.Collaborate
with DevOps, Cloud Engineering, and Architecture teams to embed security into cloud deployments and projects.Document security patterns, runbooks, and provide guidance to engineering teams.Networking/Key relationships:Governance, Risk and Compliance: Collaborate close with GRC to align controls to risk and compliance requirements.Infrastructure Teams: Collaborate with IT to implement secure and resilient infrastructure on the Cloud.Security Operations: Coordinate with IR/SOC team to enhance detection and response.Minimum Knowledge & Experience for the position:Education: Bachelor's degree in computer science, cybersecurity, or related field.Experience: 3+ years of hands-on experience in cybersecurity role.Skills & Capabilities:Strategic Thinking: Align operational goals with business risk and security strategy.Technical Depth: Solid understanding of tools, threats, and mitigation techniques.Communication: Clear and effective reporting to technical and executive audiences.Collaboration:
Strong cross-functional engagement and influence.Continuous Learning: Commitment to continuous professional development.Travel requirements:Up to 5% of time.Individual Contributor Core Competencies:Managing WorkEffectively managing one's time and resources to ensure that work is completed efficiently.Emotional Intelligence EssentialsEstablishing and sustaining trusting relationships by accurately perceiving and interpreting own and others' emotions and behavior; leveraging insights to effectively manage own responses so that one's behavior matches one's values and delivers intended results.Building PartnershipsDeveloping and leveraging relationships within and across work groups, including cross-functional groups, to achieve results.Decision MakingIdentifying and understanding problems and opportunities by gathering, analyzing, and interpreting quantitative and qualitative information; choosing the best course of action by establishing clear decision criteria, generating and evaluating
alternatives, and making timely decisions; taking action that is consistent with available facts and constraints and optimizes probable consequences.Continuous ImprovementOriginating action to improve existing conditions and processes; identifying improvementopportunities, generating ideas and implementing solutions.
xqysrnhContinuous LearningActively identifying new areas for learning; regularly creating and taking advantage of learning opportunities; using newly gained knowledge and skill on the job and learning through their application.

## Description

Job Summary Es esencial asegurarse de que cumple con los requisitos como solicitante para este puesto; por favor, lea atentamente la información a continuación.The Cloud Security Engineer is responsible for designing, implementing, and operating security controls across cloud environments to ensure that applications, data, identities, and infrastructure are protected against modern threats.This role partners closely with Cloud Engineering, Security Operations, Architecture, DevOps, and IT teams to enforce secure-by-default patterns, automate guardrails, and maintain continuous compliance across cloud platforms.Key AccountabilitiesImplement and maintain secure cloud configurations, controls, and guardrails aligned with Zero Trust and best practices.Automate security enforcement using IaC, CI/CD integration, and policy?as?code tools.Manage cloud identity and access security, including least?privilege roles, workload identity, and privileged access.Operate and tune cloud?native threat protection, logging, and monitoring services in partnership with Security Operations.Support incident response with cloud-specific visibility, forensics, and remediation actions.Perform vulnerability scanning, misconfiguration detection, and drive remediation across cloud workloads.Implement secure networking patterns such as private endpoints, WAFs, segmentation, and API protection.Collaborate with DevOps, Cloud Engineering, and Architecture teams to embed security into cloud deployments and projects.Document security patterns, runbooks, and provide guidance to engineering teams.Networking/Key relationships:Governance, Risk and Compliance: Collaborate close with GRC to align controls to risk and compliance requirements.Infrastructure Teams: Collaborate with IT to implement secure and resilient infrastructure on the Cloud.Security Operations: Coordinate with IR/SOC team to enhance detection and response.Minimum Knowledge & Experience for the position:Education: Bachelor's degree in computer science, cybersecurity, or related field.Experience: 3+ years of hands-on experience in cybersecurity role.Skills & Capabilities:Strategic Thinking: Align operational goals with business risk and security strategy.Technical Depth: Solid understanding of tools, threats, and mitigation techniques.Communication: Clear and effective reporting to technical and executive audiences.Collaboration: Strong cross-functional engagement and influence.Continuous Learning: Commitment to continuous professional development.Travel requirements:Up to 5% of time.Individual Contributor Core Competencies:Managing WorkEffectively managing one's time and resources to ensure that work is completed efficiently.Emotional Intelligence EssentialsEstablishing and sustaining trusting relationships by accurately perceiving and interpreting own and others' emotions and behavior; leveraging insights to effectively manage own responses so that one's behavior matches one's values and delivers intended results.Building PartnershipsDeveloping and leveraging relationships within and across work groups, including cross-functional groups, to achieve results.Decision MakingIdentifying and understanding problems and opportunities by gathering, analyzing, and interpreting quantitative and qualitative information; choosing the best course of action by establishing clear decision criteria, generating and evaluating alternatives, and making timely decisions; taking action that is consistent with available facts and constraints and optimizes probable consequences.Continuous ImprovementOriginating action to improve existing conditions and processes; identifying improvementopportunities, generating ideas and implementing solutions.xqysrnhContinuous LearningActively identifying new areas for learning; regularly creating and taking advantage of learning opportunities; using newly gained knowledge and skill on the job and learning through their application.


## Related Videos

- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain)
- [Technical Documentation - How Can I Write Them Better and Why Should I Care?](https://www.wearedevelopers.com/videos/681-technical-documentation-how-can-i-write-them-better-and-why-should-i-care)
- [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform)
- [3 Key Steps for Optimizing DevOps Workflows](https://www.wearedevelopers.com/videos/962-3-key-steps-for-optimizing-devops-workflows)
- [We adopted DevOps and are Cloud-native, Now What?](https://www.wearedevelopers.com/videos/485-we-adopted-devops-and-are-cloud-native-now-what)

## Related Articles

- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)