One of the companies we work with at Joppy is looking for an Infrastructure Security Engineer to join the team.

Working arrangement: HYBRID in Barcelona, Madrid or A Coruña.

The Mission:

- End-to-End Infrastructure Management: Drive the security strategy for our cloud environments, ensuring security is baked into the architecture from day one.
- Detection & Response: Continuously monitor security alerts and incidents. Conduct thorough incident response and detailed investigations to identify root causes within the infrastructure stack.
- Vulnerability & Risk Management: Lead the identification, assessment, and remediation of infrastructure vulnerabilities. Maintain the infrastructure risk register and prioritize mitigation efforts based on business impact.
- Hardening & Resilience: Implement and maintain rigorous hardening strategies across our infrastructure to increase resilience against sophisticated cyberattacks.
- AI, Tooling & Automation: Develop and manage infrastructure security tooling (CNAPP, CSPM, Vulnerability Scanners) to ensure accurate threat detection and automated compliance.
- Secure Delivery Pipelines: Secure the infrastructure and runners within our CI/CD pipelines, ensuring the environment where code is built and deployed is protected.
- Collaboration: Partner with Infra, IT, DX and SRE teams to integrate infrastructure security best practices and automate security controls.
- Strategy & Documentation: Develop, maintain, and regularly update incident response plans and infrastructure security policies.

Your Profile:





- 4 years of experience in Infrastructure Security or Security Engineering, specifically within Cloud environments, Infrastructure as Code, and Containerization (Kubernetes).
- Tooling Proficiency: Experience using and managing EDR, CNAPP, DLP, SIEM, and vulnerability management solutions.
- Threat Knowledge: Strong understanding of Cyberattacks and Threat Actor Tactics, Techniques, and Procedures (TTPs) related to infrastructure and cloud escape.
- Vulnerability Management Expert: Deep experience managing enterprise-grade vulnerability scanning and risk prioritization workflows.
- Infrastructure Specialist: Strong understanding of network security, OS hardening (Linux/Unix), and identity management (IAM).
- Automation Mindset: Proficiency in scripting and automation using Python, Bash, and AI, to streamline SOC operations.
- Education: Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent experience.
- Bonus Points: Industry certifications.

⭐ Our Values

- We own it: We take responsibility and make decisive actions
- We learn and teach: We invest in continuous learning and share knowledge
- We partner: We make decisions as a team and trust each other
- We grow fast: We act quickly and learn from every outcome

? Benefits

- Collaborative, multicultural, and high-growth work environment
- Private health insurance
- Access to gym, pools, and wellness programs
- Savings on expenses
- Language classes
- Office breakfasts and organic fruit
- Exclusive discounts on meals
- Free coffee and tea
- Pet-friendly environment

📌 Infrastructure Security Engineer (Barcelona)
🏢 Joppy
📍 Barcelona