Infrastructure Security Engineer - Barcelona

OverviewIn this role you defend Factorial’s cloud and on-premises infrastructure, owning security from risk assessment to incident response.You’ll collaborate with SRE and IT to embed security into architecture and drive resilience.You’ll lead vulnerability management, hardening, and automation of security tooling to protect CI/CD pipelines and infrastructure.This position offers impact across global teams and a chance to shape secure, scalable foundations for a fast-growing product.You’ll work in a collaborative, office-forward culture with opportunities for remote focus.Compensaciones / BeneficiosAlan private health insuranceWellhub fitness and wellness benefitsCobee expense savingsPreply language classesCompetitive salary with PayflowPet-friendly officeResponsabilidadesDrive security strategy for cloud environments and secure-by-design architectureDetect, monitor, and respond to security incidents and conduct investigationsLead vulnerability assessment, risk management, and remediation; maintain risk registerImplement rigorous hardening and resilience measures across infrastructureDevelop and manage security tooling (CNAPP, CSPM, vulnerability scanners) and automate security controlsSecure CI/CD pipelines and build/deploy runners against threatsCollaborate with Infra, IT, DX, and SRE teams to integrate security practicesDevelop and maintain incident response plans and infrastructure security policiesRequisitos principales5+ years in Infrastructure Security or Security Engineering in Cloud, IaC, and KubernetesExperience with EDR, CNAPP, DLP, SIEM, and vulnerability management solutionsStrong understanding of cyberattacks and TTPs related to infrastructure and cloudDeep expertise in vulnerability management and risk prioritization workflowsStrong knowledge of network security, OS hardening (Linux/Unix), and IAMAutomation mindset with scripting in Python and Bash; familiarity with AI applications in SOCBachelor’s degree in Computer Science, Information Technology, or related field, or equivalent experienceIndustry certifications are a plusCross-functional collaborationProactive problem solvingAnalytical mindsetCNAPPCSPMEDR

Requisitos principales5+ years in Infrastructure Security or Security Engineering in Cloud, IaC, and Kubernetes Experience with EDR, CNAPP, DLP, SIEM, and vulnerability management solutions Strong understanding of cyberattacks and TTPs related to infrastructure and cloud Deep expertise in vulnerability management and risk prioritization workflows Strong knowledge of network security, OS hardening (Linux/Unix), and IAM Automation mindset with scripting in Python and Bash; familiarity with AI applications in SOC Bachelor’s degree in Computer Science, Information Technology, or related field, or equivalent experience Industry certifications are a plus Cross-functional collaboration Proactive problem solving Analytical mindset