Our partner is looking for a Senior Security Engineer based in Spain.

This role sits at the core of securing a complex, cloud-native cybersecurity platform used by enterprises and government organizations to detect and respond to real-world adversary activity. You will take full ownership of application and cloud security across a fast-moving engineering environment, directly shaping how security is embedded into products, infrastructure, and delivery pipelines. The position is highly hands-on, focused on building, implementing, and improving security controls rather than advising from the sidelines. You will work closely with engineering, DevOps, and product teams to ensure secure design, resilient architecture, and effective threat detection across AWS and Kubernetes environments. This is a leadership role with direct responsibility for mentoring a security engineer and acting as a technical escalation point for security incidents. You will own and continuously improve the security posture of the platform, with a strong emphasis on application security, cloud security, and secure software delivery. This includes both building security capabilities and embedding them directly into engineering workflows.

Lead application security efforts across the product, including threat modeling, secure design reviews, and hands-on vulnerability remediation with engineering teams

Design, implement, and maintain secure SDLC practices by embedding security into CI/CD pipelines, including SAST, DAST, dependency scanning, and secrets detection

Build and manage security tooling and policy-as-code controls across Terraform/Terragrunt-based infrastructure pipelines

Identify, validate, prioritize, and remediate vulnerabilities across applications, APIs, cloud infrastructure, and third-party integrations

Own cloud security across AWS and Kubernetes, including IAM design, network security, encryption, logging, and configuration drift management

Develop and tune detection and response capabilities using tools such as CloudTrail, GuardDuty, and Security Hub,



and lead security incident response activities

Drive SOC 2 and ISO ***** compliance programs, including control design, audit coordination, and documentation ownership

Support customer trust initiatives by responding to security questionnaires and explaining technical controls during audits and evaluations

Manage and mentor an internal Security Engineer responsible for corporate IT, identity, and endpoint security

You are a hands-on security engineer with deep technical expertise in cloud and application security, comfortable operating directly within code, infrastructure, and CI/CD pipelines. You combine strong execution skills with the ability to guide security strategy in a product-driven environment.

5+ years of experience in security engineering, application security, DevSecOps, or cloud security roles

Strong hands-on experience with AWS and Kubernetes security in production environments

Deep understanding of secure SDLC practices and CI/CD security integration

Ability to read, review, and work directly with application code and APIs for security remediation

Strong knowledge of IAM, network security, encryption, logging, and cloud security posture management

Experience working with incident response, detection engineering, and security monitoring tools

Leadership experience, including mentoring or managing security engineers

Comfortable working in Atlassian tools (Jira, Confluence) and modern SaaS engineering environments

Open and practical mindset toward AI tools and their use in security workflows

Fully remote-friendly role with adaptable working arrangements

Strong focus on learning, certifications, and professional development

Opportunity to work on high-impact cybersecurity problems at scale

Data Privacy Notice:

By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). If you would like more information about how your data is processed, please contact us.

📌 Senior Security Engineer (Remote) (Málaga)
🏢 Jobgether
📍 Málaga