Senior Cloud Security Engineer (Cloud Defense)
Allianz · Madrid, Spain +1 · 17d ago
About the Job
Join theAllianz Cyber Defense Center (ACDC) and play a key role in securing cloud environments at scale for one of the world’s leading insurance companies.
As a Senior Cloud Security Engineer, you will be part of the Cloud Defense team, working across AWS, Azure, and GCP to protect critical workloads and SaaS platforms. You will contribute across the full security lifecycle—from prevention to detection and response—helping us stay ahead in an ever-evolving threat landscape.
This is a hands-on, high-impact role where you will work at the intersection of cloud security engineering, threat detection, and automation, collaborating with international teams in a fast-paced and continuously evolving environment.
What you do
- Analyze and investigate cloud security findings across AWS, Azure, and GCP, prioritizing based on risk and business impact
- Manage and remediate cloud security posture issues, including misconfigurations, identity risks, and exposure scenarios
- Handle and respond to active threat detections, correlating signals across multiple data sources
- Monitor and improve SaaS security posture, identifying risks such as identity drift or third-party access issues
- Develop and enhance detection use cases within SIEM and contribute to SOAR automation workflows
- Collaborate with engineering and platform teams to implement security guardrails and enforce best practices
- Support shift-left security initiatives by integrating security into infrastructure pipelines (IaC, CI/CD)
- Contribute to continuous improvement through automation, documentation, and knowledge sharing
What you bring
- Hands-on experience securing cloud environments (AWS, Azure and/or GCP), including IAM, networking and workload protection
- Strong understanding of cloud threat detection and attacker techniques (e.g., credential abuse, lateral movement, misconfiguration exploitation)
- Experience with CNAPP/CSPM platforms (e.g., Wiz, Prisma Cloud, Lacework or similar)
- Proven ability to manage security incidents end-to-end, from investigation to containment and reporting
- Experience designing or working with event-driven detection and SIEM/SOAR environments
- Knowledge of microservices and cloud-native architectures, with a focus on scalability and resilience
- Hands-on experience with Kubernetes, Docker and cloud platforms (AWS, Azure, GCP)
- Familiarity with Infrastructure as Code (Terraform, CI/CD, GitOps) and shift-left security practices
- Scripting or automation skills (e.g., Python or similar)
- Strong communication skills in English, with the ability to explain technical findings to non-security stakeholders
What we offer
- We offer a hybrid work model which recognizes the value of striking a balance between in-person collaboration and remote working incl. up to 25 days per year working from abroad.
- We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location).
- From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered.
- Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach.
About Allianz Technology
With its headquarters in Munich, Germany, Allianz Technology is Allianz's global IT service provider and delivers IT solutions that drive the group's digitalization. With more than 11,000 employees in over 20 countries around the world, Allianz Technology is tasked to run, optimize, transform, and innovate the infrastructure, applications, and services together with Allianz companies to co-create the best customer experience.
We service the entire spectrum of digitalization – from one of the industry's largest IT infrastructure projects that spans data centers, networks, and security, to application platforms ranging from workplace services to digital interaction.
In short: We deliver comprehensive end-to-end IT solutions for Allianz in the digital age. We are the backbone of Allianz.
Find us at: www.linkedin.com/company/allianz-technology.
Commitment to Integrity, Fairness & Inclusion
Allianz Technology is proud to be an equal opportunity employer dedicated to fostering an inclusive work environment for everyone. We embrace individuals of all gender identities and expressions, sexual orientations, ethnicities, ages, nationalities, religions, disabilities, and philosophies of life. Ultimately, our greatest strength as a company lies in the unique skills, experiences, and backgrounds our employees contribute.
To Recruitment Agencies:
Allianz Technology has an in-house recruitment team that sources great candidates directly. Therefore, Allianz Technology does not accept unsolicited resumes from agencies or search firm recruiters.
When we do work with recruitment agencies, that engagement is formalized by a contract. Fees will only be paid when there is a contract in place. Without a contract in place, we will not accept invoices on unsolicited resumes, even if the candidate was ultimately employed by Allianz.
102806 | Ingeniería informática y tecnológica | Profesional / Senior | Non-Executive | Allianz Technology | Jornada completa | Indefinido