Happyrobot.Ai
Cloud Security Engineer
Madrid, Remote. Posted 3 months ago
The role
You will be the single accountable owner for cloud security posture across AWS, Azure, and GCP. You will triage findings, ship policy-as-code gates, and enforce security baselines across multi-cloud environments.
What you will do
- Own the CNAPP end-to-end and triage Wiz findings by exploitability and business impact
- Drive remediation across engineering teams to SLA
- Ship policy-as-code gates in the Terraform pipeline using OPA/Rego, Checkov, or tfsec
- Define, document, and enforce a consistent security baseline across AWS, Azure, and GCP
- Own documentation for enterprise customer security reviews and audit evidence requests
- Harden clusters, images, and admission paths across EKS, AKS, and GKE
- Set and enforce RBAC policies, admission controls, and image scanning standards
- Drive fixes through engineering teams and track SLAs
- Grow the share of cloud infrastructure managed via Terraform with active security checks
Required qualifications
- 4–6 years in cloud security or platform/infrastructure security
- Expert depth in at least one major cloud provider (AWS, Azure, or GCP): IAM, networking, KMS/encryption, and logging
- Hands-on experience with a CNAPP/CSPM
- Terraform in production plus policy-as-code experience (OPA/Rego, Checkov, tfsec, or similar) integrated in CI/CD
- Kubernetes security fundamentals: RBAC, admission control, and image scanning
- Scripting proficiency in Python or Go
- English B2+ (professional working proficiency)
Nice to have
- Working experience across 2+ cloud providers
- Cross-cloud and Kubernetes certifications: CCSK, CKA, CKS, AWS Security Specialty, or equivalent
- EKS/AKS/GKE hardening and container runtime security experience
- TypeScript or Go beyond scripting
- SIEM/detection exposure
Benefits
- Healthcare
- Dental
- Vision coverage
- Equity in a high-growth startup
About the company
HappyRobot is the infrastructure for enterprises to build and orchestrate AI workforces. They are backed by a16z, Y Combinator, Base10, Prysm Capital and Eurazeo.