Our partner is looking for a Platform Security Engineer based in Spain.
We are looking for a senior Platform Security Engineer to strengthen cloud security, platform reliability, and secure engineering practices in a fully remote European environment.
You will design and implement secure-by-default workflows that protect sensitive personal and compensation data across multiple countries.
Your work will span cloud infrastructure, Kubernetes, CI/CD security, identity management, observability, and disaster recovery.
You will collaborate closely with engineers to embed security into everyday workflows without compromising delivery speed or usability.
By combining hands-on engineering, automation, and pragmatic risk management, you will help build a resilient platform where security becomes the easiest path.
This is an opportunity to shape platform security strategy while delivering measurable improvements in a collaborative, remote-first team.
Accountabilities: As a Platform Security Engineer, you will take ownership of production security improvements while contributing to the broader platform engineering roadmap. You will focus on practical solutions that improve security, reliability, and developer productivity.
Design and implement secure-by-default workflows for production operations, ensuring access is controlled, auditable, and straightforward for engineers to use.
Strengthen cloud security practices, including identity and access management, SSO/OIDC, secrets management, and least-privilege access controls.
Secure and operate production Kubernetes environments, implementing appropriate workload security and access restrictions.
Integrate security checks and automated scanning into CI/CD pipelines to identify and resolve vulnerabilities early in the delivery process.
Manage cloud networking and edge protection,



including VPC boundaries, DNS, TLS, load balancing, CDN, and Web Application Firewall (WAF) configuration.
Define and improve security priorities, response targets, incident workflows, threat modeling, and post-incident reviews.
Design, implement, and regularly test backup, restoration, and disaster recovery procedures to support business continuity.
Document technical decisions, communicate trade-offs clearly, and use feedback and adoption metrics to continuously improve platform security.

Requirements:
You should be a hands-on platform engineer with strong production security expertise and the ability to turn security requirements into practical, measurable improvements. Demonstrated ownership of application or platform security in a production cloud environment, with clear examples of impact.
Strong cloud security fundamentals, including IAM, SSO/OIDC, secrets management, identity integrations, and least-privilege access.
Solid platform engineering experience across infrastructure as code, CI/CD pipelines, security automation, and observability.
Proven experience operating Kubernetes in production, including workload security and access controls.
Practical knowledge of cloud networking and edge technologies, including VPCs, DNS, TLS, load balancing CDNs, and WAFs.
Hands-on experience designing and testing backup, restore, and disaster recovery procedures.
Fluent English,



with the ability to communicate technical decisions, document trade-offs, and collaborate effectively in a remote-first environment.
Background in fintech, payroll, or other environments handling regulated or sensitive data.
Knowledge of detection engineering, security information and event management (SIEM), or related security monitoring practices.
Experience with PostgreSQL operations and safe database schema migrations.
Familiarity with Elixir or the ability to learn and work with functional programming languages.
Awareness of cloud cost optimization and FinOps practices.
Fully remote work: Remote-first working arrangements across Europe, with interviews generally scheduled between 10:00 and 16:00 CET.
A MacBook and a €500 onboarding budget to support your setup during your first months.
Professional development: A €1,000 annual FlexBudget for professional development and remote-work enablement.
Health insurance: Health insurance plans, with options to add family members and adjust coverage depending on the country.
Paid time off: 25 days of paid vacation annually, plus three additional caring days for side projects supporting positive social causes.
Two additional paid weeks on top of the legal maximum parental leave, plus your birthday and your children's birthdays off.
Permanent employment: A permanent contract and the opportunity to influence platform security, infrastructure, and developer experience.
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR).

📌 Security Platform Engineer (España)
🏢 Jobgether
📍 España