Cloud Security Engineer (m/f/d)
Posted Updated 5
views
Summary
Cloud Security Engineer at Schwarz Digits (the Schwarz Group's IT and security division) in Barcelona: reviews and triages CSPM security findings across multi-cloud environments (GCP, STACKIT), filters false positives, designs a risk-based vulnerability prioritization scheme, and drives remediation to closure with engineering teams.
Schwarz Digits creates the technological foundation for digital sovereignty in Europe. As the IT and digital division of the Schwarz Group, we develop and manage the IT infrastructures for the retail divisions Lidl and Kaufland, as well as Schwarz Production and PreZero. At the same time, we operate as an independent provider in the external market to support companies across Europe in their digital transformation. We bundle our core services in the areas of Cloud, Cyber Security, Data & AI, Communication, and Workspace.
Join us and contribute to digital sovereignty in Europe. With us, you will work at the intersection of agility and security: You will benefit from fast decision-making processes, enjoy genuine creative freedom in your projects, and be able to build upon the stable foundation of the Schwarz Group.
Join us and contribute to digital sovereignty in Europe. With us, you will work at the intersection of agility and security: You will benefit from fast decision-making processes, enjoy genuine creative freedom in your projects, and be able to build upon the stable foundation of the Schwarz Group.
Your tasks
- You analyze and deeply understand security findings generated by our CSPM (Cloud Security Posture Management) solutions for multi-cloud environments (e.g., GCP, STACKIT).
- You ensure the quality of our results by reviewing a substantial backlog, accurately identifying and filtering out false positives.
- You work conceptually to design and implement a new, structured prioritization schema that allows us to manage vulnerabilities efficiently and systematically.
- You analyze security issues within their full technical context to evaluate the real-world impact and apply a strictly risk-based approach.
- You actively track remediation progress, drive accountability with asset/solution owners, and ensure timely closure of identified security gaps.
- You act as a reliable technical point of contact, providing hands-on remediation guidance to the teams throughout the entire process.
Your Profile
- You have professional experience in Cloud Security, ideally working with CSPM tools and scalable cloud architectures.
- You possess strong analytical and conceptual skills, enabling you to design prioritization and risk evaluation strategies from the ground up.
- Your deep technical understanding allows you to grasp infrastructure, code, and the broader context of vulnerabilities to easily distinguish a critical risk from a false positive.
- You stand out with excellent communication and diplomatic skills; you know how to approach technical teams, build rapport, and foster collaboration without creating friction.
- You possess strong persistence and follow-up skills to drive vulnerability resolution across different engineering teams.
- You are characterized by a proactive, structured, and goal-oriented mindset with a strong focus on tracking tasks to completion.
- You have business-fluent English skills for our international technical environment (knowledge of Spanish or German is a plus)
We look forward to receiving your application.
Carla Bastida Perez · Reference no. 48352
Stiftsbergstraße 1 · 74172 Neckarsulm, Germany