ph3Role Description /h3pUST is a multinational company based in North America, certified as a Top Employer and Great Place to Work company with over 35,000 employees worldwide and presence in more than 35 countries. We are leaders in digital technology services, providing large-scale technological solutions to some of the world’s leading organizations. /ppWe are currently looking for a Cybersecurity Consultant – Cloud Security Identity to join our Cybersecurity team. /ph3Location /h3pMadrid (Hybrid model: 3 days at the office) /ph3Key Responsibilities /h3h3Cloud Security (Azure GCP) /h3ulliEvaluate and enhance the security posture of Azure subscriptions and GCP projects. /liliManage security policies, RBAC, Conditional Access, and Microsoft Defender for Cloud. /liliImplement and maintain Google Security Command Center controls. /liliReview IaaS, PaaS, and container environments to identify misconfigurations and security gaps. /li /ulh3CSPM CNAPP /h3ulliManage and optimize CSPM solutions such as Wiz, Prisma Cloud, or Defender CSPM. /liliOperate CNAPP platforms integrating CWPP, KSPM, and DSPM capabilities. /liliDefine compliance frameworks and automate remediation initiatives aligned with CIS, NIST, and ISO 27001. /liliCollaborate with DevSecOps teams to integrate security controls into CI/CD pipelines. /li /ulh3Identity Access Management /h3ulliDesign and implement Zero Trust identity architectures. /liliManage Azure AD / Microsoft Entra ID security controls, including MFA, SSO, Conditional Access, and PIM. /liliReview privileged access and excessive permissions through CIEM practices. /liliImplement controls to prevent privilege escalation and lateral movement.



/li /ulh3Network Security /h3ulliDesign and review cloud network segmentation strategies using VNets, VPCs, NSGs, Firewalls, and Private Endpoints. /liliAssess hybrid connectivity solutions (ExpressRoute, VPN, Interconnect). /liliAnalyze traffic flows, firewall policies, WAF configurations, and DDoS protections. /liliSupport incident investigations and network forensics activities. /li /ulh3Consulting Governance /h3ulliConduct technical cloud security assessments and define remediation roadmaps. /liliDevelop security architectures, standards, policies, and procedures. /liliSupport internal and external stakeholders during secure cloud transformation initiatives. /liliParticipate in incident response activities and red team/blue team exercises. /li /ulh3Mandatory Requirements /h3ulliBachelor’s degree in Computer Science, Telecommunications, Engineering, Information Systems, or a related field. /liliMinimum of 4 years of experience in cloud security technical roles. /liliHands‑on experience securing Azure and/or Google Cloud environments in production. /liliProven experience with CSPM and CNAPP platforms. /liliStrong knowledge of IAM, PIM, CIEM, and Zero Trust methodologies. /liliExperience with:ulliMicrosoft Azure /liliGoogle Cloud Platform (GCP)



/liliMicrosoft Entra ID / Azure AD /liliDefender for Cloud /liliSecurity Command Center /liliCloud networking and segmentation /liliSIEM/SOAR solutions /liliTerraform and Infrastructure as Code /liliDevSecOps and CI/CD security /liliCIS Benchmarks, NIST, ISO 27001 and MITRE ATTCK /li /ul /li /ulh3Nice To Have /h3ulliAZ‑500 – Microsoft Azure Security Engineer /liliSC‑100 – Microsoft Cybersecurity Architect /liliGoogle Professional Cloud Security Engineer /liliCCSP (ISC²) /liliCISSP or CISM /liliCEH or OSCP /liliExperience participating in red team/blue team exercises. /liliStrong automation mindset and security engineering background. /li /ulh3What can we offer? /h3ulli23 days of Annual Leave plus the 24th and 31st of December as discretionary days! /liliNumerous benefits (Health Care Plan, Internet Connectivity, Life and Accident Insurances). /liliFlexible Benefits Program (Meals, Kindergarten, Transport, Online English Lessons, Health Care Plan…). /liliFree access to several training platforms. /liliProfessional stability and career development plans. /liliReferral Program with attractive rewards. /liliThe option to choose between 12 or 14 salary payments per year. /liliReal Work-Life Balance measures (flexibility, remote work policy, compact working hours during summer, etc.). /liliUST Club Platform discounts and gym access discounts. /li /ulpAt UST we are committed to equal opportunities in our selection processes and do not discriminate based on race, gender, disability, age, religion, sexual orientation, or nationality. We have a special commitment to Disability Inclusion and encourage applications from candidates holding a disability certificate. /ph3Skills /h3pMicrosoft Azure, ISO 27001, Google Cloud Platform, CIEM /p /p #J-18808-Ljbffr

📌 Cybersecurity Consultant (Cloud Security) - Hybrid (Madrid)
🏢 Ust
📍 Madrid