Senior Cloud Security Engineer (AWS)

TL;DR

Senior Cloud Security Engineer (AWS): Building and securing expanding cloud infrastructure in AWS and GCP with an accent on automation and DevSecOps methodology. Focus on designing IAM policies, managing attack surfaces, and implementing security incident response processes.

Location: Barcelona, Spain

Company

A pioneer in research technology (ResTech) providing a programmatic marketplace for global consumer research.

What you will do

• Define and improve security posture across legacy and greenfield resources, including data, applications, and networks.
• Collaborate with engineering teams to ensure the adoption of security policies and best practices.
• Automate security integration into the cloud platform following DevSecOps principles.
• Enhance monitoring and alerting systems with security-specific data points.
• Develop and implement a Security Incident Response process and policy.
• Participate in on-call rotations and troubleshoot infrastructure security issues.

Requirements

• 3+ years of experience in Cloud Infrastructure roles (predominantly AWS) within DevSecOps teams.
• Proficiency in managing infrastructure exclusively via Terraform.
• Expertise in threat assessment, IAM policies, VPC security, WAF, and CloudFront.
• Experience securing Docker images and container orchestration.
• Proficiency in at least one scripting language (e.g., Python, Bash, Golang).
• Knowledge of VPN, MFA, SAML, OAuth2, and IdP frameworks (e.g., Okta).

Nice to have

• AWS Certified Security Specialist.
• Hands-on experience with security controls in GCP.
• Experience with ISO27001 certification processes.
• Offensive or defensive penetration testing experience.

Culture & Benefits

• Recognized as one of Newsweek’s 2025 Global Top 100 Most Loved Workplaces.
• Strong focus on collaboration, innovation, and accountability.
• Inclusive environment embracing diversity, equity, and inclusion.
• Competitive compensation packages and employment benefits.