CLOUD ATTACK SURFACE MANAGEMENT ENGINEER | BARCELONA, ES

Cloud Attack Surface Management Engineer Are you a skilled Cloud Engineer with a strong background in cloud security and a passion for protecting organizations from cyber threats? Join the Allianz Cyber Defense Center and play a key role in enhancing our cloud security posture.
As a Cloud Attack Surface Management Engineer, you will help identify security vulnerabilities, integrate security solutions with CI/CD pipelines and SOAR platforms, and collaborate closely with cross-functional teams to strengthen our defenses across AWS, Azure, and other cloud environments.
If you're excited to work on cutting-edge security tools and drive innovation in cloud security, we want to hear from you! What you can find at Allianz Technology.
• Work Life - Balance.
We offer flexible working hours so you can start your working day according to your needs.
In addition, during the summer and every Friday of the year, you have the option of intensive working hours, which will allow you to enjoy more free time for yourself.
• International and Multicultural Environment.
We value the diversity and richness that comes from working in an international and multicultural environment.
With more than 52 different nationalities represented in our company, we offer our employees the opportunity to collaborate with people from all over the world, enriching the work environment and providing the opportunity to learn and grow in a truly global setting.
This diversity allows us to have a broader perspective, foster creativity and innovation, and promote an inclusive work environment where every voice is heard and valued.
• Professional Growth Opportunities.
We are committed to the professional development of our employees and provide numerous opportunities for growth within the company.
We value internal talent and promote internal advancement, offering training programs, mentoring, and skills development that allow our employees to advance in their careers.
• Compensation and Benefits Package.
It includes a company bonus plan, pension, employee stock program, and multiple employee discounts.
What will make you succeed in this position? • Extensive experience with AWS, Azure, and other cloud platforms.
• Proficiency in cloud security tools and technologies for vulnerability scanning and posture management.
• Experience with CI/CD pipelines and integrating security into the software development lifecycle.
• Strong programming and scripting skills (e.
., Python, Bash, PowerShell) for automation and tool development.
• Familiarity with SOAR technologies and automation processes.
• Experience with multi-cloud environments and managing security across diverse platforms.
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Relevant certifications (e.
., AWS Certified DevOps Engineer, Azure DevOps Engineer Expert, Certified Cloud Security Professional (CCSP)).
• Strong analytical and problem-solving abilities.
• Excellent communication and collaboration skills.
• Ability to work independently and as part of a team.
• Eagerness to learn and adapt in a fast-paced environment.
Your mission in the role will be.
As a Cloud Attack Surface Management Engineer you will play a crucial role in generating security findings within our cloud environments and integrating the cloud attack surface management tool with other applications.
Your responsibilities include.
• Findings Generation and Analysis.
• Develop and implement tools and processes to identify security vulnerabilities, misconfigurations, and compliance issues in AWS, Azure, and other cloud platforms.
• Implement guardrails to enforce security best practices and prevent misconfigurations.
• Collaborate closely with cloud platform teams to ensure alignment and effectiveness of security measures.
• Manage and maintain the ASM tool within the scope of APR, serving as a consultant and bridge to the Cloud Platform team, which owns the tool.
• Integration with Downstream Applications.
• Integrate security findings with CI/CD pipelines to ensure security is embedded in the development lifecycle.
• Collaborate with the security operations team to integrate findings with SOAR platforms for automated response and remediation.
• Work closely with development and operations teams to facilitate seamless integration of security solutions.
• Tool Development and Optimization.
• • Design and optimize tools and scripts to enhance the efficiency and effectiveness of cloud security posture management.
• Evaluate and implement new technologies and tools to improve cloud security operations.
• Collaboration and Support.
• • Collaborate with cross-functional teams to address security findings and enhance cloud security posture.
• Provide technical guidance and support to the Cloud Attack Surface Management Analyst and other team members.
About Allianz Technology Allianz Technology is the global IT service provider for Allianz and delivers IT solutions that drive the digitalization of the Group.
With more than employees located in 51 countries around the globe, Allianz Technology works together with other Allianz entities in pioneering the digitalization of the financial services industry.
e oversee the full digitalization spectrum - from one of the industry's largest IT infrastructure projects that includes data centers, networking and security, to application platforms that span from workplace services to digital interaction.
In short, we deliver full-scale, end-to-end IT solutions for Allianz in the digital age.
D&I statement Allianz Technology is proud to be an equal opportunity employer encouraging diversity in the working environment.
We are interested in your strengths and experience.
We welcome all applications from all people regardless of gender identity and/or expression, sexual orientation, ethnicity and cultural background, age, nationality, religion, disability, or philosophy of life.
Join us.
Let's care for tomorrow.
You.
IT | Ingeniería informática y tecnológica | Profesional / Senior | Non-Executive | Allianz Technology | Jornada completa | Indefinido