Senior Security Engineer - Workload Security (Hybrid option)

Location: Madrid, Spain; flexible hybrid working model

Base salary: EUR 60,000–100,000 annually, plus potential performance-based bonus and benefits.

Company

hirify.global is a leading reinsurance and insurance-based risk transfer provider focused on managing global risks, including cybercrime.

What you will do

• Design, engineer, and operate endpoint and workload security capabilities across Windows, Linux, cloud, and containerized environments.
• Build security controls for Kubernetes workloads, including runtime protection, vulnerability management, workload visibility, and behavioral detection.
• Develop and maintain Falco-based runtime detection rules and policies using Sysdig Secure or equivalent technologies.
• Deploy security capabilities through Helm, Argo CD, GitOps, and CI/CD pipelines across enterprise Kubernetes and Azure environments.
• Integrate endpoint and workload telemetry with detection engineering, incident response, threat hunting, forensic investigation, and response use cases.
• Provide technical direction, conduct design reviews, mentor engineers, and troubleshoot complex issues across operating systems, containers, APIs, networks, and cloud infrastructure.

Requirements

• Several years of experience in security engineering, EDR/XDR, workload protection, or cloud and container security.
• Strong Windows and Linux security fundamentals, with hands-on Kubernetes and container security experience covering workloads, nodes, namespaces, RBAC, networking, and runtime behavior.
• Practical experience with Sysdig Secure, Falco, or comparable workload and runtime security technologies.
• Experience with enterprise Kubernetes platforms, Helm, Argo CD, GitOps, Azure DevOps, and CI/CD pipelines.
• Experience with scripting, APIs, and automation using PowerShell, Python, or Bash, plus a good understanding of Azure and cloud security.
• Strong troubleshooting, communication, and stakeholder collaboration skills.

Nice to have

• Experience with Microsoft Defender XDR, Defender for Cloud, Defender for Identity, or Defender for Cloud Apps.
• Experience with cybersecurity deception technologies, Infrastructure as Code such as Terraform, SRE or platform engineering, and container workload hardening.
• Kubernetes or cloud-native security certifications such as CKA, CKS, or KCSA.

Culture & Benefits

• Opportunity to shape security monitoring at global scale within a leading reinsurance company.
• Flexible hybrid work balancing office collaboration and remote work.
• Diverse, inclusive, and international work environment.
• Strong focus on learning, technical excellence, and career development.
• Competitive compensation, benefits, and potential performance-based rewards.