{"id":1081128,"url":"https://alion.io/job/happyrobot-cloud-security-engineer","title":"Cloud Security Engineer","company":{"id":6917,"name":"HappyRobot","domain":"happyrobot.ai","url":"https://alion.io/company/happyrobot","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":83,"open_postings":27,"ghost_share":0,"stale_share":0.481,"repost_share":0,"time_to_fill_p50_days":80,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Madrid, Spain","Barcelona, Spain"],"countries":["ES"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":54000,"max_usd":127000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":714},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon EKS","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Azure AKS","optional":false},{"name":"Checkov","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"Google GKE","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Python","optional":false},{"name":"Shift-Left","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"SLI/SLO/SLA","optional":false},{"name":"Terraform","optional":false},{"name":"tfsec","optional":false},{"name":"Wiz","optional":false},{"name":"GDPR","optional":true},{"name":"ISO 27001","optional":true},{"name":"SIEM","optional":true},{"name":"SOC 2","optional":true},{"name":"TypeScript","optional":true}],"status":"live","first_seen_at":"2026-08-06T19:21:24Z","employer_posted_date":"2026-08-06","last_verified_at":"2026-10-16T11:51:29Z","board_verified":true,"closed_at":null,"days_open":70,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":70},"description":"About HappyRobot\nHappyRobot is the infrastructure for enterprises to build and orchestrate AI workforces. Our AI workers don't just communicate through voice and email - they make decisions, take action, and run operations autonomously across entire enterprise systems. Born in Y Combinator (S23) and backed by a16z, Base10, Prysm Capital and Eurazeo with over $200M raised, we power critical operations for global enterprises worldwide.\nOur platform is battle-tested in the most demanding environments, where AI has real consequences. We started in logistics, built our own voice stack, models, and orchestration layer from the ground up, and are now bringing that infrastructure to every enterprise that runs the real economy. Learn more about our vision inour manifesto.\nRole Overview\nWe are looking for a Cloud Security Engineer to join our team. You will be the single accountable owner for cloud security posture across AWS, Azure, and GCP - bringing the technical depth and operational discipline to keep our infrastructure hardened, our findings remediated on SLA, and our security baseline consistent across every environment we run.\nThis is not a governance or advisory role. Your deepest strength is the ability to own outcomes end-to-end: triaging Wiz findings by real-world exploitability, shipping policy-as-code gates that catch misconfigurations before they hit production, and getting remediation done by engineering teams you don't manage. That said, you operate with a platform mindset - building guardrails that scale rather than manually reviewing every change.\nWhat You'll Do\nCloud Posture Management Own the CNAPP end-to-end. Triage Wiz findings by exploitability and business impact, drive remediation across engineering teams to SLA and keep the backlog from accumulating. Be the person who actually gets findings closed, not just reported.\n\nIaC Security Design and ship policy-as-code gates in the Terraform pipeline that block misconfigurations at PR and plan time, before they reach production. Use OPA/Rego, Checkov, tfsec, or equivalent - and calibrate gates to stop bad patterns without creating friction that causes teams to route around them.\n\nMulti-Cloud Baseline Define, document, and enforce a consistent security baseline across AWS, Azure, and GCP - covering IAM, networking, KMS/encryption, and logging. Own the documentation that supports enterprise customer security reviews and audit evidence requests.\n\nKubernetes & Container Security Harden clusters, images, and admission paths across EKS, AKS, and GKE. Set and enforce RBAC policies, admission controls, and image scanning standards.\n\nRemediation Leadership Drive fixes through engineering teams you don't have direct authority over. Track SLAs, communicate risk clearly to technical and non-technical stakeholders, and escalate when needed - without creating noise.\n\nShift-Left Guardrails Grow the share of cloud infrastructure managed via Terraform with active security checks, quarter over quarter. Trend new critical misconfigurations reaching production to zero.\n\nMust Have\n4-6 years in cloud security or platform/infrastructure security.\n\nExpert depth in at least one major cloud provider (AWS, Azure, or GCP): IAM, networking, KMS/encryption, and logging.\n\nHands-on experience with a CNAPP/CSPM - Wiz strongly preferred - including triage, prioritization, and driving remediation with engineering teams.\n\nTerraform in production plus policy-as-code experience (OPA/Rego, Checkov, tfsec, or similar) integrated in CI/CD.\n\nKubernetes security fundamentals: RBAC, admission control, and image scanning.\n\nScripting proficiency in Python or Go.\n\nEnglish B2+ (professional working proficiency).\n\nNice to Have\nWorking experience across 2+ cloud providers - we deploy on AWS, Azure, and GCP.\n\nCross-cloud and Kubernetes certifications: CCSK, CKA, CKS, AWS Security Specialty, or equivalent.\n\nEKS/AKS/GKE hardening and container runtime security experience.\n\nTypeScript or Go beyond scripting.\n\nSIEM/detection exposure - we run RunReveal.\n\nSOC 2 / ISO 27001 cloud control evidence experience.\n\nWhy join us?\nJoin a world-class team of engineers and builders.\n\nBacked by top investors including a16z, Y Combinator, Base10, Prysm Capital and Eurazeo.\n\nHave ownership and autonomy of projects and are encouraged to ship.\n\nComprehensive Benefits including healthcare, dental, vision coverage.\n\nCompetitive salary + equity in a high-growth startup.\n\nOur Operating Principles\n\nExtreme Ownership\nWe take full responsibility for our work and outcomes. No excuses, no blame-shifting. If something needs fixing, we own it.\nCraftsmanship\nWe sweat the details because details compound. We never settle for \"just fine\" - whether it's a scoping document, a prototype demo, or a customer conversation.\nWe are \"Majos\"\nBe a good human. Friendly, genuine, kind. We're building something ambitious and it's better when we enjoy it together.\nUrgency with Focus\nMove fast, but in the right direction. Prioritize ruthlessly. Act decisively. Aim for the highest leverage action.\nTalent Density and Meritocracy\nEvery hire raises the bar. Ability over seniority. Ownership goes to those who earn it.\nFirst-Principles Thinking\nStrip problems to their fundamentals, ignore industry dogma, and rebuild from scratch when needed. It's how we build what others think is impossible.\nThe personal data provided in your application and during the selection process will be processed by Happyrobot, Inc., acting as Data Controller.\nBy sending us your CV, you consent to the processing of your personal data for the purpose of evaluating and selecting you as a candidate for the position. Your personal data will be treated confidentially and will only be used for the recruitment process of the selected job offer.\nIn relation to the period of conservation of your personal data, these will be eliminated after three months of inactivity in compliance with the GDPR and legislation on the protection of personal data.\nIf you wish to exercise your rights of access, rectification, deletion, portability or opposition in relation to your personal data, you can do so through  subject to the GDPR.\nFor more information, visit https://www.happyrobot.ai/privacy-policy\nBy submitting your request, you confirm that you have read and understood this clause and that you agree to the processing of your personal data as described.","description_format":"text","description_chars":6402,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":["Equity"],"hiring_locations":[{"name":"Spain","iso":"ES","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Conversational AI","AI Agents","Supply Chain AI"],"lifecycle":[{"event":"open","at":"2026-09-20T22:51:54Z"}],"visa":[],"liveness":{"score":47,"band":"ok","label":"Likely open","p_open":1,"p_active":0.785,"p_room":0.6,"age_days":70,"expected_fill_days":80,"reasons":["conf:2","velocity","win:late","crowd:"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/happyrobot-cloud-security-engineer","json_url":"https://alion.io/job/happyrobot-cloud-security-engineer.json","meta":{"generated_at":"2026-10-16T13:26:50Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12881,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6917},"rest":"https://alion.io/mcp/rest/get_company?id=6917"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhappyrobot-cloud-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhappyrobot-cloud-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhappyrobot-cloud-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/happyrobot-cloud-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhappyrobot-cloud-security-engineer"}]}