Senior Cloud Security Engineer (Travel and Transportation)
New
F
FLYRTravel technology
Location: EU onlyFull-TimeSenior
Salary5,700 - 6,600 EUR per month
Apply NowOpens the employer's application page
Job Details
- Experience
- 5+ years in cloud security or platform engineering with a security focus
- Required Skills
- Terraform
Requirements
- Have 5+ years of experience in cloud security or platform engineering with a security focus.
- Have hands-on GCP experience, including GKE, IAM, audit logging, log sinks, Cloud Armor, and VPC networking.
- Have production experience with a CNAPP/CSPM platform, including policy authoring, integrations, and runtime protection; Wiz is preferred.
- Have hands-on experience administering a WAF/CDN/bot-management stack at scale.
- Use Terraform to build security-tooling and WAF modules, review changes, and manage configuration drift and legacy infrastructure.
- Have vulnerability-management experience across cloud, containers, and code, including SAST, SCA/dependency scanning, container hardening, and penetration-test remediation.
- Have experience routing cloud security signals to a SIEM or security-monitoring platform and integrating actionable alerts with PagerDuty and Slack.
- Use Python or Bash for automation and reporting; familiarity with Rego/OPA-style policy languages is also noted.
- Have production security incident-response experience, including writing runbooks and managing vendor escalations.
- Communicate clearly in writing and verbally, train engineering teams, and document security decisions.
Responsibilities
- Improve cloud security posture across GCP organizations and AWS accounts, including runtime sensors, policies, triage baselines, and integrations.
- Operate and evolve Cloudflare WAF, bot management, rate limiting, DNS/TLS, and origin routing for customer-facing production zones.
- Tune edge-security rules against production traffic, manage allow-list requests, and train other teams on the tooling.
- Maintain vulnerability intake, define remediation baselines, and drive findings to closure.
- Participate in cloud security incident response and maintain detection, triage, and mitigation runbooks.
- Own SonarCloud SAST reporting, Dependabot scanning, container base-image hardening, and SBOM/SCA tooling selection.
- Produce technical evidence for SOC 2, PCI DSS, ISO 27001, and NIS2, and map Wiz controls to frameworks.
- Train Platform, CloudOps, and Product Engineering teams, map service catalogues to owners, and automate recurring reporting.
- Advise on security for platform integrations and AI/RAG services, and contribute to the cloud-security roadmap and target-state architecture.
View Full Description & ApplyYou'll be redirected to the employer's site
