Location: Remote/Malta (depending on candidate)
Contract: Full-time
Level: Senior / Strong Mid-Senior

About the Role

We are looking for an experienced Cloud Security & DevSecOps Engineer to strengthen the security of our AWS infrastructure and applications within a growing B2B iGaming technology environment.

This is a hands-on technical role for someone who can identify vulnerabilities, implement security controls, automate processes and improve infrastructure resilience. The focus is on building a proactive security framework and embedding security throughout development and deployment operations.

Key Responsibilities

- Assess and secure AWS environments, including IAM, VPC, EC2, ECS, Fargate, RDS and S3.

- Identify and remediate vulnerabilities, misconfigurations and potential security risks.

- Implement AWS security services such as GuardDuty, Security Hub, Inspector, CloudTrail, WAF and KMS.

- Strengthen access controls, encryption, secrets management and network security.

- Introduce automated vulnerability scanning, threat detection and security monitoring.

- Integrate security checks into CI/CD pipelines, including code, dependency, secrets and container scanning.

- Secure Docker containers, cloud workloads, APIs and deployment environments.

- Improve infrastructure hardening, patch management, backups and disaster recovery security.

- Develop incident response procedures, security alerts and remediation processes.

- Maintain security policies and support audits and compliance requirements.

Requirements

- 4+ years of experience in Cloud Security, DevSecOps or Infrastructure Security.

- Strong hands-on AWS security experience and knowledge of IAM,



VPC, encryption and cloud architecture.

- Experience securing Linux servers, Docker containers, EC2, ECS and Fargate.

- Practical experience implementing security automation within CI/CD pipelines.

- Knowledge of vulnerability management, threat detection and incident response.

- Experience with Terraform or other Infrastructure as Code tools.

- Python, Bash or similar scripting skills.

- Good understanding of web and API security, including OWASP Top 10.

- Ability to independently assess risks and implement practical security solutions.

Nice to Have

- AWS Security Specialty certification or equivalent.

- Experience in iGaming, FinTech, Payments or other high-traffic transactional environments.

- Knowledge of ISO 27001, SOC 2 or PCI DSS.

- Experience with Kubernetes, SIEM platforms and security monitoring tools.

- Familiarity with penetration testing and security assessment methodologies.

First 90 Days

- First 30 days: Assess AWS infrastructure, identify security gaps and deliver a prioritised remediation plan.

- Days 31–60: Address critical vulnerabilities, strengthen access controls and introduce security automation.

- Days 61–90: Establish continuous monitoring, improve incident response and deliver a longer-term security roadmap.

What We're Looking For

A proactive, hands-on engineer who can take ownership of cloud security improvements from assessment through implementation. This is not a purely advisory or compliance-focused role; we need someone capable of designing solutions, implementing controls, automating security processes and continuously improving infrastructure protection.

📌 Cloud Security (España)
🏢 Recruiter4you
📍 España