Cloud Security & DevSecOps (Basque Country)

• Professional experience in Cloud Security and/or DevSecOps.

• Practical experience working with Microsoft Azure, especially:

  • Entra ID

  • Defender for Cloud

  • Key Vault

  • NSGs

  • Azure Policy

• Experience with Google Cloud Platform, especially:

  • IAM

  • Security Command Center

  • VPC Service Controls

  • Cloud Armor

• Experience with Kubernetes, including hardening, RBAC, network policies, and runtime monitoring.

• Experience with containers, secure image building, scanning, and private registries.

• Experience with Terraform or other IaC tools and analysis tools such as tfsec or Checkov.

• Experience with GitHub / GitHub Actions and integration of security controls in CI/CD.

• Knowledge of APIs and microservices architectures security.

• Knowledge of the main security risks in AI/ML systems, such as the OWASP LLM Top 10.

• Experience or knowledge in security telemetry and monitoring in cloud environments.

• English level: minimum B2.

• University degree or technical training related to Computer Science, Telecommunications, Cybersecurity, or similar.

• Cloud security certifications such as AZ-500, Google Professional Cloud Security Engineer, or CKS.

• Experience with cloud AI platforms such as Azure OpenAI or Vertex AI.

• Experience in cybersecurity projects within the financial sector or highly regulated environments.

• Knowledge of frameworks such as ISO 27017, ENS, or DORA.

• Experience with CSPM/CNAPP tools, such as Prisma Cloud, Wiz, or Defender for Cloud.

• Knowledge of security applied to AI models, ML pipelines, or inference environments.

We are looking for a Cloud Security & DevSecOps Engineer, specialized in Azure and GCP, to participate in cybersecurity projects in modern cloud environments, where automation, microservices, and Artificial Intelligence are part of the architecture.

We are looking for a technical and hands-on profile, oriented towards execution, automation, and the integration of security within the development cycle.

• Assurance and monitoring of Microsoft Azure and Google Cloud Platform environments.

• Identity management, access control, and secure configuration of cloud services.

• Identification and remediation of misconfigurations and risk exposures in cloud environments.

• Integration of security controls in CI/CD pipelines: code analysis, dependencies, secrets, and image signing.

• Hardening and monitoring of Kubernetes and container environments, including RBAC and network policies.

• Development and maintenance of secure Infrastructure as Code (IaC) using Terraform.

• Secure management of APIs and microservices architectures, including authentication, authorization, and monitoring.

• Automation of security tasks using GitHub Actions and DevOps tools.

• Identification and mitigation of risks specific to AI/ML environments, such as data exposure, inference APIs, prompt injection, or model poisoning.

• Instrumentation and analysis of security telemetry in cloud and AI environments.

• Configuration of alerts, dashboards, and incident response workflows in SIEM/SOAR platforms.

• Collaboration with Data and Machine Learning teams to integrate security from the initial design phases.

• Hybrid model in the Basque Country (Bilbao, Donostia, or Vitoria)

• Stable project in a technological and cybersecurity environment.