Security Architect

h3Looking for your next professional challenge as IT Security Architect? /h3 pWe have an opportunity that might be just what you are looking for /p h3About Us /h3 pAt ALTIA, we are a team of more than 4,200 professionals across 30 locations in 10 countries. /p pWe design and develop innovative digital solutions for over 1,000 organizations that drive transformation and progress. /p pOur purpose: to grow by helping others grow
- sustainably and responsibly. /p pOur values: commitment, closeness, innovation, and collaboration
- guide us every step of the way. /p pLearn more at /p h3WHAT WE ARE LOOKING FOR: /h3 pThe consultant will act as a Senior Security Architect within the Compass Corporate programme, a multi-tenant SaaS business-process management platform. The role covers security architecture, application and infrastructure security, vulnerability management and security incidents in a Java microservices, Kubernetes and AWS environment with a weekly release cadence. /p pKey responsibilities include designing security architectures and threat models; defining security requirements and release acceptance criteria; operating DevSecOps controls in CI/CD pipelines; managing vulnerabilities and remediation; conducting application, API, cloud and container security assessments; hardening AWS and Amazon EKS environments; designing IAM, secrets, key and certificate-management controls; supporting incident response with CERT/SOC teams; producing security posture and compliance reporting; and assessing AI-based features for threats such as prompt injection and data leakage. /p h3WHAT

WE OFFER
/h3 ul liParticipation in an international and innovative project. /li liA technical and collaborative environment with real impact. /li liCareer growth opportunities and continuous learning. /li liFlexibility and autonomy, working with cutting-edge technologies. /li liTeam player culture within an agile, people-centered company. /li /ul pInterested in joining a global, forward-thinking engineering team? /p pWe would love to meet you /p pThis job offer has been drafted with impartiality and non-discrimination on the basis of gender, race, ideology or any other grounds in mind. In particular, it complies with current regulations on gender equality between women and men (Royal Decree-Law 6/2019) /p h3Minimum Requirements /h3 pRequired technical knowledge /p ul liSecurity architecture for distributed, microservice-based and multi-tenant platforms. /li liOWASP Top 10 and ASVS; Java and JavaScript/TypeScript application and REST API security; Burp Suite. /li liDevSecOps: GitLab CI/Jenkins, SonarQube, SAST, DAST, SCA, container-image scanning and secret detection. /li liAWS security: IAM, KMS/CloudHSM, WAF, Shield, posture management and network segmentation. /li liKubernetes/Amazon EKS security, including RBAC, workload/pod security, network policies, Helm and container security. /li liIAM protocols and corporate identity integration: OpenID Connect, OAuth 2.0, SAML and EU Login. /li liHashiCorp Vault, CyberArk, certificate lifecycle and encryption-key management. /li liSecurity of Kafka, Redis, Elasticsearch/OpenSearch, Consul, PostgreSQL/Aurora and Oracle. /li liIncident response, digital forensics, MITRE ATTCK, ISO 27001, PCI-DSS, CIS benchmarks and GDPR. /li liPython security automation, Terraform and Ansible; security of AI/LLM-enabled applications. /li /ul