Security Architect

Looking for your next professional challenge as IT Security Architect?

We have an opportunity that might be just what you are looking for

About Us

At ALTIA, we are a team of more than 4,200 professionals across 30 locations in 10 countries.

We design and develop innovative digital solutions for over 1,000 organizations that drive transformation and progress.

Our purpose: to grow by helping others grow - sustainably and responsibly.

Our values: commitment, closeness, innovation, and collaboration - guide us every step of the way.

Learn more at www.altiacompany.com

WHAT WE ARE LOOKING FOR:

The consultant will act as a Senior Security Architect within the Compass Corporate programme, a multi-tenant SaaS business-process management platform. The role covers security architecture, application and infrastructure security, vulnerability management and security incidents in a Java microservices, Kubernetes and AWS environment with a weekly release cadence.

Key responsibilities include designing security architectures and threat models; defining security requirements and release acceptance criteria; operating DevSecOps controls in CI/CD pipelines; managing vulnerabilities and remediation; conducting application, API, cloud and container security assessments; hardening AWS and Amazon EKS environments; designing IAM, secrets, key and certificate-management controls; supporting incident response with CERT/SOC teams; producing security posture and compliance reporting; and assessing AI-based features for threats such as prompt injection and data leakage.

WHAT WE OFFER:

• Participation in an international and innovative project.
• A technical and collaborative environment with real impact.
• Career growth opportunities and continuous learning.
• Flexibility and autonomy, working with cutting-edge technologies.
• Team player culture within an agile, people-centered company.

Interested in joining a global, forward-thinking engineering team?

We would love to meet you

This job offer has been drafted with impartiality and non-discrimination on the basis of gender, race, ideology or any other grounds in mind. In particular, it complies with current regulations on gender equality between women and men (Royal Decree-Law 6/2019)

Minimum Requirements

Required technical knowledge

• Security architecture for distributed, microservice-based and multi-tenant platforms.
• OWASP Top 10 and ASVS; Java and JavaScript/TypeScript application and REST API security; Burp Suite.
• DevSecOps: GitLab CI/Jenkins, SonarQube, SAST, DAST, SCA, container-image scanning and secret detection.
• AWS security: IAM, KMS/CloudHSM, WAF, Shield, posture management and network segmentation.
• Kubernetes/Amazon EKS security, including RBAC, workload/pod security, network policies, Helm and container security.
• IAM protocols and corporate identity integration: OpenID Connect, OAuth 2.0, SAML and EU Login.
• HashiCorp Vault, CyberArk, certificate lifecycle and encryption-key management.
• Security of Kafka, Redis, Elasticsearch/OpenSearch, Consul, PostgreSQL/Aurora and Oracle.
• Incident response, digital forensics, MITRE ATT&CK, ISO 27001, PCI-DSS, CIS benchmarks and GDPR.
• Python security automation, Terraform and Ansible; security of AI/LLM-enabled applications.