Iberdrola

3 weeks ago

Senior Cloud Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 11 hours agoStatus: Live

Job Summary

Lead hands-on cloud security for SaaS products on Google Cloud by embedding Security by Design, guiding DevSecOps practices, and serving as the technical authority for cloud security across software architects, cloud engineers, and product teams.

Location: Doha

Workplace: Onsite

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Sr. Manager level

Key Responsibilities

•Act as the primary technical authority for cloud security and partner with software architects to perform threat modeling and embed Security by Design principles.
•Design, configure, and maintain the native Google Cloud security stack (Cloud Armor, conditional IAM, VPC Service Controls, Secret Manager, Security Command Center).
•Define and implement robust protections for SaaS applications, focusing on API security, WAF configurations, DDoS mitigation, and secure multi-tenant isolation.
•Guide and implement security automations and controls within CI/CD pipelines (SAST, DAST, container/artifact scanning).
•Conduct continuous internal security assessments of infrastructure and deployed applications, identify vulnerabilities, provide remediation strategies, and act as a key responder during security events.

Pay and Benefits

Perks:Health InsuranceRelocation

Key Requirements

•5-7+ years in cybersecurity with at least 3+ years securing Google Cloud (GCP) environments
•Deep hands-on experience with native GCP security stack: IAM, Cloud Armor, VPC Service Controls, Secret Manager, Security Command Center (SCC)
•Experience in AppSec and web vulnerabilities (OWASP Top 10), API security, WAF configurations, DDoS mitigation, and multi-tenant isolation
•DevSecOps integration in CI/CD pipelines (SAST, DAST, container/artifact scanning) with Infrastructure as Code (Terraform)
•Google Cloud Professional Cloud Security Engineer certification preferred; CISSP/CCSP or OSWE a plus

Experience:5-7 yearsCloud securityGCPSaaSDevSecOpsMulti-tenant

Education:Bachelor's

Skills:LeadershipOwnershipPragmatismProblem-solvingCommunication

Certifications:Google Cloud Professional Cloud Security EngineerCISSPCCSPOSWE

Languages:English

Tech Stack:GCPCloud ArmorIAMVPC Service ControlsSecret ManagerSecurity Command CenterTerraformSASTDASTCI/CDGitHub ActionsGitLab CI

Company Brief

Iberdrola

Iberdrola is a multinational electric utility focused on generation, distribution and commercialization of electricity, with significant investments in renewable energy, grid modernization and international power markets serving residential, commercial and industrial customers.

Industry: Utilities

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: Bilbao, Spain

Founded: 1992

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Iberdrola

3 weeks ago

Senior Cloud Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 11 hours agoStatus: Live

Job Summary

Location: Doha

Workplace: Onsite

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Sr. Manager level

Key Responsibilities

•Act as the primary technical authority for cloud security and partner with software architects to perform threat modeling and embed Security by Design principles.
•Design, configure, and maintain the native Google Cloud security stack (Cloud Armor, conditional IAM, VPC Service Controls, Secret Manager, Security Command Center).
•Define and implement robust protections for SaaS applications, focusing on API security, WAF configurations, DDoS mitigation, and secure multi-tenant isolation.
•Guide and implement security automations and controls within CI/CD pipelines (SAST, DAST, container/artifact scanning).
•Conduct continuous internal security assessments of infrastructure and deployed applications, identify vulnerabilities, provide remediation strategies, and act as a key responder during security events.

Pay and Benefits

Perks:Health InsuranceRelocation

Key Requirements

•5-7+ years in cybersecurity with at least 3+ years securing Google Cloud (GCP) environments
•Deep hands-on experience with native GCP security stack: IAM, Cloud Armor, VPC Service Controls, Secret Manager, Security Command Center (SCC)
•Experience in AppSec and web vulnerabilities (OWASP Top 10), API security, WAF configurations, DDoS mitigation, and multi-tenant isolation
•DevSecOps integration in CI/CD pipelines (SAST, DAST, container/artifact scanning) with Infrastructure as Code (Terraform)
•Google Cloud Professional Cloud Security Engineer certification preferred; CISSP/CCSP or OSWE a plus

Experience:5-7 yearsCloud securityGCPSaaSDevSecOpsMulti-tenant

Education:Bachelor's

Skills:LeadershipOwnershipPragmatismProblem-solvingCommunication

Certifications:Google Cloud Professional Cloud Security EngineerCISSPCCSPOSWE

Languages:English

Tech Stack:GCPCloud ArmorIAMVPC Service ControlsSecret ManagerSecurity Command CenterTerraformSASTDASTCI/CDGitHub ActionsGitLab CI

Company Brief

Iberdrola

Industry: Utilities

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: Bilbao, Spain

Founded: 1992

Website LinkedIn