Hybrid Cloud Security Engineer

at COLIBRIX ONE

• Job title: Cloud Security Engineer
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Tech skills: AWS, Cloud, Firewalls, Kubernetes, Python, Splunk, Terraform, Vault
• Location requirements: Hybrid, Barcelona, Spain

About the role

• Cloud Security Engineer focused on enhancing security in a cloud-native fintech platform. Collaborating with teams to integrate security into infrastructure and software development processes.

Responsibilities

• Harden and maintain security across a multi-account AWS environment (IAM, VPC, EKS, RDS, S3)
• Implement and manage cloud security posture monitoring
• Maintain and extend SSO permission sets and Kubernetes RBAC configurations
• Manage network security controls (firewalls, VPN, security groups)
• Drive secrets management, including rotation policies, vault integration, and eliminating hardcoded credentials
• Integrate SAST, DAST, and SCA scanning into CI/CD pipelines
• Implement container image scanning and Kubernetes admission controls
• Add IaC security scanning to the deployment workflow
• Conduct security reviews of infrastructure changes and architecture decisions
• Work with development teams to remediate application vulnerabilities
• Participate in threat modeling for new services and architecture changes.
• Own the vulnerability management lifecycle (scanning, triage, remediation tracking)
• Manage penetration test findings and coordinate fixes with development teams
• Define remediation SLAs and report security posture metrics
• Maintain and improve security monitoring and alerting pipelines
• Manage log aggregation and alert routing for critical events
• Participate in incident response and maintain IR runbooks

Requirements

• 3-5 years of experience in security engineering, DevSecOps, or infrastructure/cloud security
• Strong hands-on AWS experience: IAM, VPC, EKS, CloudTrail, GuardDuty, Security Hub, KMS
• Ability to automate security processes using Python and IaC tools
• Kubernetes experience: RBAC, network policies, pod security, container image security
• Terraform proficiency with ability to read, write, and review IaC
• Experience integrating security tools into CI/CD pipelines (SAST/DAST/SCA)
• Practical vulnerability management experience: scanning, triage, working with developers on remediation
• Scripting skills: Python and Bash
• Familiarity with SIEM platforms (ELK, Splunk, or similar)
• Understanding of OWASP Top 10 and common web application vulnerabilities.

Benefits

• Opportunity to shape the future of fintech solutions within a growing company
• Collaborative, horizontal team structure that values your expertise and ideas
• Continuous learning and development opportunities to enhance your skills and career growth
• Competitive salary and benefits package
• Flexible work arrangements to support work-life balance