Cloud Security Engineer

Happyrobot.ai · MadridRemotosenior

En corto

▸Ingeniero de seguridad en nube que gestiona y mejora la postura de seguridad en AWS, Azure y GCP de forma proactiva.
▸Se encarga de triage de alertas en Wiz, políticas de código seguro en CI/CD y gestiona recuperaciones con equipos sin autoridad directa.
▸Destaca por ser el dueño del resultado end-to-end, no solo del reporte — con foco en escalabilidad y reducción de errores en producción.

English B2+

En ~1 minuto te damos: quién te entrevista, las preguntas probables con respuestas desde tu CV, y tu CV adaptado a esta vacante. Gratis, sin tarjeta.

🎧¿Llegás a la entrevista? Llevá el copiloto. Nuestra extensión escucha la entrevista en vivo y te muestra anclas de 3-4 palabras desde tu CV y tu preparación — mirás, conectás, hablás. Gratis. Ver la extensión →

¿Qué piden?

✓4–6 años en seguridad en nube o infraestructura.
✓Conocimiento experto en al menos un cloud (AWS, Azure o GCP): IAM, red, cifrado y logging.
✓Experiencia manejando CNAPP/CSPM con Wiz, incluyendo triage y remediación.
✓Terraform en producción con integración de policy-as-code (OPA/Rego, Checkov, tfsec).
✓Fundamentos de seguridad en Kubernetes: RBAC, admission control, escaneo de imágenes.
✓Manejo avanzado de scripting en Python o Go.

¿No cumplís todo? Es lo normal — tu dossier gratis te dice qué gaps tenés y cómo cubrirlos en la entrevista.

AWSAzureGCPWizTerraformOPARegoCheckovtfsecKubernetes

¿A quién escribirle en Happyrobot.ai?

Tu dossier gratis identifica a las personas que te entrevistarían — con su background, qué valoran y cómo escribirles para destacar antes de aplicar.

ABOUT HAPPYROBOT HappyRobot is the infrastructure for enterprises to build and orchestrate AI workforces. Our AI workers don't just communicate through voice and email - they make decisions, take action, and run operations autonomously across entire enterprise systems. Born in Y Combinator (S23) and backed by a16z, Base10, Prysm Capital and Eurazeo with over $150M raised, we power critical operations for global enterprises worldwide. Our platform is battle-tested in the most demanding environments, where AI has real consequences. We started in logistics, built our own voice stack, models, and orchestration layer from the ground up, and are now bringing that infrastructure to every enterprise that runs the real economy. Learn more about our vision in our manifesto. https://www.happyrobot.ai/blog/manifesto ROLE OVERVIEW We are looking for a Cloud Security Engineer to join our team. You will be the single accountable owner for cloud security posture across AWS, Azure, and GCP — bringing the technical depth and operational discipline to keep our infrastructure hardened, our findings remediated on SLA, and our security baseline consistent across every environment we run. This is not a governance or advisory role. Your deepest strength is the ability to own outcomes end-to-end: triaging Wiz findings by real-world exploitability, shipping policy-as-code gates that catch misconfigurations before they hit production, and getting remediation done by engineering teams you don't manage. That said, you operate with a platform mindset — building guardrails that scale rather than manually reviewing every change. What You'll Do - Cloud Posture Management Own the CNAPP end-to-end. Triage Wiz findings by exploitability and business impact, drive remediation across engineering teams to SLA and keep the backlog from accumulating. Be the person who actually gets findings closed, not just reported. - IaC Security Design and ship policy-as-code gates in the Terraform pipeline that block misconfigurations at PR and plan time, before they reach production. Use OPA/Rego, Checkov, tfsec, or equivalent — and calibrate gates to stop bad patterns without creating friction that causes teams to route around them. - Multi-Cloud Baseline Define, document, and enforce a consistent security baseline across AWS, Azure, and GCP — covering IAM, networking, KMS/encryption, and logging. Own the documentation that supports enterprise customer security reviews and audit evidence requests. - Kubernetes & Container Security Harden clusters, images, and admission paths across EKS, AKS, and GKE. Set and enforce RBAC policies, admission controls, and image scanning standards. - Remediation Leadership Drive fixes through engineering teams you don't have direct authority over. Track SLAs, communicate risk clearly to technical and non-technical stakeholders, and escalate when needed — without creating noise. - Shift-Left Guardrails Grow the share of cloud infrastructure managed via Terraform with active security checks, quarter over quarter. Trend new critical misconfigurations reaching production to zero. Must Have - 4–6 years in cloud security or platform/infrastructure security. - Expert depth in at least one major cloud provider (AWS, Azure, or GCP): IAM, networking, KMS/encryption, and logging. - Hands-on experience with a CNAPP/CSPM — Wiz strongly preferred — including triage, prioritization, and driving remediation with engineering teams. - Terraform in production plus policy-as-code experience (OPA/Rego, Checkov, tfsec, or similar) integrated in CI/CD. - Kubernetes security fundamentals: RBAC, admission control, and image scanning. - Scripting proficiency in Python or Go. - English B2+ (professional working proficiency). Nice to Have - Working experience across 2+ cloud providers — we deploy on AWS, Azure, and GCP. - Cross-cloud and Kubernetes certifications: CCSK, CKA, CKS, AWS Security Specialty, or equival

No apliques sin prepararte

Investigamos quién te entrevista, adaptamos tu CV y te ensayamos en vivo — gratis la primera.