At Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world’s leading businesses. with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge. The Application & Cloud Security Consultant will support the design, implementation, and continuous improvement of secure-by-design principles across application development, cloud environments, and modern access architectures. The role combines hands-on technical expertise and consulting capabilities to help organizations embed security throughout the software lifecycle while strengthening cloud security posture and Zero Trust access frameworks. 5+ years of experience in Cybersecurity Services, with a focus on Application Security, Cloud Security, and Secure Software Development Lifecycle (Secure SDLC). ~ Proven experience working within enterprise-scale cloud and hybrid environments.

Spanish and English (B2 level or higher). Bachelor's or Master's degree in Computer Science, Cybersecurity, Software Engineering, Information Technology, or equivalent experience. CCSK (Certificate of Cloud Security Knowledge) CCSP (Certified Cloud Security Professional) AZ-500 Microsoft Azure Security Technologies AWS Certified Security – Specialty Kubernetes Security Specialist (CKS) Relevant Secure SDLC, DevSecOps, or Cloud Security certifications Definition and implementation of secure development frameworks and security gates.

DevSecOps Automation: Integration of security tools into CI/CD platforms and developer workflows.

Application Security Testing: Expertise in SAST, DAST,



API Security Testing, SCA, and container security assessments.

Cloud Security Architecture: Deep understanding of Azure, AWS, and cloud-native security controls, including identity, networking, encryption, and workload protection.

Cloud Security Posture

Management (CSPM): Experience assessing and improving cloud configurations, policies, and governance frameworks. Understanding of Secure Service Edge (SSE), Secure Web Gateway (SWG), CASB, ZTNA, and modern secure access architectures.

Threat Modeling & Risk Assessment: Ability to identify security risks in applications and cloud workloads and define pragmatic mitigation strategies.

Documentation & Stakeholder Management: Ability to communicate security requirements and collaborate effectively with development, infrastructure, and security teams. Support implementation of DevSecOps tooling and automated security controls. Perform application security assessments and architecture reviews.

Define secure coding standards and developer awareness initiatives. Monitor application security posture and support remediation efforts. Collaborate with cloud, infrastructure, and development teams to reduce application-related risks Cloud Security Hardening:



Assist in implementing cloud security controls, governance models, and remediation plans across Azure, CGP and AWS environments.

SASE/ZTNA Adoption: Support the deployment and optimization of modern secure access solutions aligned with Zero Trust principles (ZScaler, Netskope, etc) Risk Mitigation & Governance: Identify security gaps, propose remediation roadmaps, and help ensure compliance with organizational security policies and industry standards. Your career with us isn’t just a job—it’s an adventure with purpose.

We offer a dynamic, hybrid-friendly culture that supports your well-being and empowers you to grow.

Our Be

Well programs are thoughtfully designed to support your financial, mental, physical, and social health - because we know that when you feel your best, you do your best. You won’t just contribute - you’ll make a difference, tackling meaningful projects that sharpen your skills and fuel your growth. You’ll develop in-demand skills to grow your career and achieve your ambitions with access to cutting-edge learning opportunities - from certifications with Microsoft, Google, and Amazon to coaching and hands‑on experiences.

And through it all, you’ll be part of a culture that values empathy, restless learning, and a devotion to shared success. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, pregnancy, disability, age, veteran status, or other characteristics.

📌 Cloud Security Consultant (Aws/Azure) (Madrid)
🏢 Kyndryl
📍 Madrid