Offer summary

Qualifications:

At least 3 years of hands-on experience with AWS security implementations., Solid understanding of cloud security principles and compliance standards such as CIS and NIST., Bilingual proficiency in Spanish and English, both written and verbal., Demonstrated ability to work in a dynamic, fast-paced environment with cross-functional teams..

Key responsibilities:

Monitor, secure, and optimize AWS environments in alignment with industry best practices.

Perform regular risk assessments, vulnerability scans, and security audits.

Develop and maintain automation scripts using Python and policy-as-code with Rego.

Participate in incident response efforts and conduct forensic investigations as required.

Job description

It's you who can make an impact! Join our dynamic team as a Cloud Security Specialist and shape tomorrow's innovations! It is the dream job for those passionate about AWS and crave a vibrant team atmosphere. Apply yourself or drop us a line if you know someone who fits the role. Let's enjoy the engineering and vibrant international environment together!

We are a custom product engineering company that supports both multinational organizations and scaling startups to solve their most complex business challenges. With a global team of over 4,000 highly skilled developers, consultants, analysts and product owners, we engineer technology that redefines industries and shapes the way people live.

About the role:

As a Cloud Security Specialist, you'll become a part of a cross-functional development team engineering experiences of tomorrow.

Responsibilities:

Cloud Security Management:
Monitor, secure and optimize AWS environments, ensuring alignment with industry, best practices and internal definitions. Collaborate with other teams
Manage Cloud Security Posture Management (CSPM) tools, such as Sysdig or comparable solutions
Risk and Compliance:
Perform regular risk assessments, vulnerability scans and security audits
Implement and enforce compliance with GRC frameworks and regulatory standards (CIS, NIST and others)
Tool and Automation Integration:
Develop and maintain automation scripts using Python and policy-as-code with Rego to enhance security posture
Incident Response and Analysis:
Participate in incident response efforts and conduct forensic investigations as required
Proactively identify and mitigate potential security threats in cloud

Requirements:

At least 3 years of hands-on experience with AWS security implementations
Solid understanding of cloud security principles, GRC frameworks and compliance standards such as CIS and NIST
Bilingual proficiency in Spanish and English, both written and verbal
Demonstrated ability to work in a dynamic, fast-paced environment while collaborating with cross-functional teams

Desirable:

Experience with additional cloud platforms like Azure and/or GCP
Familiarity with CSPM tools (e.g., Sysdig) or equivalent solutions
Advanced knowledge of excel
Practical experience with Python scripting and Rego for policy definition and automation
Experience with Infrastructure as Code (IaC) tools (e.g., Terraform, CloudFormation) and container orchestration (e.g., Kubernetes)
Knowledge of security monitoring tools, SIEM, IDS/IPS, and threat modeling methodologies
Understanding of DevSecOps practices and integration of security within continuous delivery pipelines

Personal skills:

Technical Expertise: Deep knowledge of cloud architecture, security best practices and automation tools
Proactivity: Demonstrated initiative in identifying vulnerabilities, suggesting improvements and implementing preventive measures
Analytical Thinking: Strong problem-solving skills with the ability to perform detailed risk assessments and implement effective mitigation strategies
Communication: Excellent communication skills to effectively articulate security risks and collaborate with diverse teams
Adaptability: Ability to stay updated with emerging cloud security trends and adapt quickly to new technologies and threats
Attention to Detail: A meticulous approach to policy implementation, incident management and compliance auditing

What`s in it for you?

Care: your mental and physical health is our priority. We ensure comprehensive company-paid medical insurance and 4 additional undocumented sick leave days
Tailored education path: boost your skills and knowledge with our regular internal events (meetups, conferences, workshops), Udemy license, language courses and company-paid certifications
Growth environment: share your experience and level up your expertise with a community of skilled professionals, locally and globally
Flexibility: Own your schedule – you are the one to decide when to start your working day. Just don’t miss your regular team stand-up. We are there to support your work-life balance and provide 23 vacation days & short Fridays
Opportunities: we value our specialists and always find the best options for them. Our Internal Mobility Program helps change a project if needed to help you grow, excel professionally and fulfill your potential
Global impact: work on large-scale projects that redefine industries with international and fast-growing clients
Welcoming environment: feel empowered with a friendly team, open-door policy, informal atmosphere within the company and regular team-building events

About us:

Join a well-established company and a friendly team of professionals.

Our Delivery Center in Malaga is one of the leading IT hubs in Andalusia - it provides an exceptional mix of vibrant tech talent community, wide-open access to expertise advancement opportunities, hybrid/remote work setup & endless Mediterranean seashore summer.

Seize the perks of global opportunities, local atmosphere and industry-leading clients.

Be bold, not bored!

Interested already? We would love to get to know you! Submit your application. We can’t wait to see you at Ciklum.

Required profile