Cybersecurity Consultant (Cloud Security) - Hybrid Madrid

Role Description

UST is a multinational company based in North America, certified as a Top Employer and Great Place to Work company with over 35,000 employees worldwide and presence in more than 35 countries. We are leaders in digital technology services, providing large-scale technological solutions to some of the world’s leading organizations.

We are currently looking for a Cybersecurity Consultant – Cloud Security & Identity to join our Cybersecurity team.

Location

Madrid (Hybrid model: 3 days at the office)

Key Responsibilities

Cloud Security (Azure & GCP)

• Evaluate and enhance the security posture of Azure subscriptions and GCP projects.
• Manage security policies, RBAC, Conditional Access, and Microsoft Defender for Cloud.
• Implement and maintain Google Security Command Center controls.
• Review IaaS, PaaS, and container environments to identify misconfigurations and security gaps.

CSPM & CNAPP

• Manage and optimize CSPM solutions such as Wiz, Prisma Cloud, or Defender CSPM.
• Operate CNAPP platforms integrating CWPP, KSPM, and DSPM capabilities.
• Define compliance frameworks and automate remediation initiatives aligned with CIS, NIST, and ISO 27001.
• Collaborate with DevSecOps teams to integrate security controls into CI/CD pipelines.

Identity & Access Management

• Design and implement Zero Trust identity architectures.
• Manage Azure AD / Microsoft Entra ID security controls, including MFA, SSO, Conditional Access, and PIM.
• Review privileged access and excessive permissions through CIEM practices.
• Implement controls to prevent privilege escalation and lateral movement.

Network Security

• Design and review cloud network segmentation strategies using VNets, VPCs, NSGs, Firewalls, and Private Endpoints.
• Assess hybrid connectivity solutions (ExpressRoute, VPN, Interconnect).
• Analyze traffic flows, firewall policies, WAF configurations, and DDoS protections.
• Support incident investigations and network forensics activities.

Consulting & Governance

• Conduct technical cloud security assessments and define remediation roadmaps.
• Develop security architectures, standards, policies, and procedures.
• Support internal and external stakeholders during secure cloud transformation initiatives.
• Participate in incident response activities and red team/blue team exercises.

Mandatory Requirements

• Bachelor’s degree in Computer Science, Telecommunications, Engineering, Information Systems, or a related field.
• Minimum of 4 years of experience in cloud security technical roles.
• Hands‑on experience securing Azure and/or Google Cloud environments in production.
• Proven experience with CSPM and CNAPP platforms.
• Strong knowledge of IAM, PIM, CIEM, and Zero Trust methodologies.
• Experience with:
  • Microsoft Azure
  • Google Cloud Platform (GCP)
  • Microsoft Entra ID / Azure AD
  • Defender for Cloud
  • Security Command Center
  • Cloud networking and segmentation
  • SIEM/SOAR solutions
  • Terraform and Infrastructure as Code
  • DevSecOps and CI/CD security
  • CIS Benchmarks, NIST, ISO 27001 and MITRE ATT&CK

Nice To Have

• AZ‑500 – Microsoft Azure Security Engineer
• SC‑100 – Microsoft Cybersecurity Architect
• Google Professional Cloud Security Engineer
• CCSP (ISC²)
• CISSP or CISM
• CEH or OSCP
• Experience participating in red team/blue team exercises.
• Strong automation mindset and security engineering background.

What can we offer?

• 23 days of Annual Leave plus the 24th and 31st of December as discretionary days!
• Numerous benefits (Health Care Plan, Internet Connectivity, Life and Accident Insurances).
• Flexible Benefits Program (Meals, Kindergarten, Transport, Online English Lessons, Health Care Plan…).
• Free access to several training platforms.
• Professional stability and career development plans.
• Referral Program with attractive rewards.
• The option to choose between 12 or 14 salary payments per year.
• Real Work-Life Balance measures (flexibility, remote work policy, compact working hours during summer, etc.).
• UST Club Platform discounts and gym access discounts.

At UST we are committed to equal opportunities in our selection processes and do not discriminate based on race, gender, disability, age, religion, sexual orientation, or nationality. We have a special commitment to Disability & Inclusion and encourage applications from candidates holding a disability certificate.

Skills

Microsoft Azure, ISO 27001, Google Cloud Platform, CIEM

#J-18808-Ljbffr