This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Security Engineer based in Spain.
This role sits at the core of securing a complex, cloud-native cybersecurity platform used by enterprises and government organizations to detect and respond to real-world adversary activity. You will take full ownership of application and cloud security across a fast-moving engineering environment, directly shaping how security is embedded into products, infrastructure, and delivery pipelines. The position is highly hands-on, focused on building, implementing, and improving security controls rather than advising from the sidelines. You will work closely with engineering, DevOps, and product teams to ensure secure design, resilient architecture, and effective threat detection across AWS and Kubernetes environments. In addition, you will play a key role in compliance programs such as SOC 2 and ISO * while supporting customer trust and audit processes. This is a leadership role with direct responsibility for mentoring a security engineer and acting as a technical escalation point for security incidents. The environment is fast-paced, mission-driven, and highly collaborative.
Accountabilities
You will own and continuously improve the security posture of the platform, with a strong emphasis on application security, cloud security, and secure software delivery. This includes both building security capabilities and embedding them directly into engineering workflows.
Lead application security efforts across the product, including threat modeling, secure design reviews, and hands-on vulnerability remediation with engineering teams
Design, implement,



and maintain secure SDLC practices by embedding security into CI/CD pipelines, including SAST, DAST, dependency scanning, and secrets detection
Build and manage security tooling and policy-as-code controls across Terraform/Terragrunt-based infrastructure pipelines
Identify, validate, prioritize, and remediate vulnerabilities across applications, APIs, cloud infrastructure, and third-party integrations
Own cloud security across AWS and Kubernetes, including IAM design, network security, encryption, logging, and configuration drift management
Develop and tune detection and response capabilities using tools such as CloudTrail, GuardDuty, and Security Hub, and lead security incident response activities
Drive SOC 2 and ISO * compliance programs, including control design, audit coordination, and documentation ownership
Support customer trust initiatives by responding to security questionnaires and explaining technical controls during audits and evaluations
Manage and mentor an internal Security Engineer responsible for corporate IT, identity, and endpoint security
Requirements
You are a hands-on security engineer with deep technical expertise in cloud and application security, comfortable operating directly within code, infrastructure, and CI/CD pipelines. You combine strong execution skills with the ability to guide security strategy in a product-driven environment.
5+ years of experience in security engineering, application security,



DevSecOps, or cloud security roles
Strong hands-on experience with AWS and Kubernetes security in production environments
Deep understanding of secure SDLC practices and CI/CD security integration
Ability to read, review, and work directly with application code and APIs for security remediation
Experience implementing SAST, DAST, container scanning, and secrets management tools
Proven experience with SOC 2 and/or ISO * compliance programs, including audit collaboration
Strong knowledge of IAM, network security, encryption, logging, and cloud security posture management
Experience working with incident response, detection engineering, and security monitoring tools
Leadership experience, including mentoring or managing security engineers
Strong communication skills, able to translate technical risk for engineers, leadership, and auditors
Comfortable working in Atlassian tools (Jira, Confluence) and modern SaaS engineering environments
Open and practical mindset toward AI tools and their use in security workflows
Benefits
Fully remote-friendly role with versátil working arrangements
Competitive compensation aligned with market standards
Wellness programs and employee support initiatives
Strong focus on learning, certifications, and professional development
Inclusive, collaborative, and mission-driven work culture
Opportunity to work on high-impact cybersecurity problems at scale
Employee recognition programs and long-term growth opportunities
How Jobgether works:
We use an
AI-powered matching process
to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our syst

📌 Senior Security Engineer (Málaga)
🏢 Jobgether
📍 Málaga