Responsibilities
- Design, engineer, and operate endpoint and workload security capabilities across Windows, Linux, cloud, and containerized environments.
- Design and operate Linux and Kubernetes workload security capabilities covering runtime protection, visibility, vulnerability management, and behavioral detection.
- Develop, tune, and maintain Falco-based runtime detection rules and security policies using Sysdig Secure or equivalent technologies.
- Deploy security capabilities through Helm, Argo CD, GitOps, and controlled automation pipelines across environments.
- Partner with Detection Engineering and Incident Response teams to support detection, threat hunting, forensic investigation, and response use cases.
- Troubleshoot security and integration issues across endpoints, operating systems, container platforms, APIs, networks, cloud infrastructure, and distributed environments.
- Evaluate technologies, provide technical direction and design reviews, and mentor engineers across security initiatives.
Requirements
- Several years of experience in security engineering, EDR/XDR, workload protection, or cloud and container security.
- Strong knowledge of Windows and Linux security fundamentals.
- Hands-on Kubernetes and container security experience, including workloads, nodes, namespaces, RBAC, networking, and runtime behavior.
- Practical experience with Sysdig Secure, Falco, or similar workload and runtime security technologies.
- Experience with Kubernetes-based enterprise container platforms and cloud-native environments.
- Experience with Helm, Argo CD, GitOps, Azure DevOps, and CI/CD pipelines.
- Scripting, API, and automation experience using PowerShell, Python, Bash, or similar technologies.
- Good understanding of Azure and cloud security concepts, including identity, networking, workloads, and security controls.
- Ability to troubleshoot complex issues across operating systems, security technologies, container platforms, and cloud infrastructure.
- Strong communication and stakeholder collaboration skills.
- Experience with Microsoft Defender XDR, Defender for Cloud, Defender for Identity, or Defender for Cloud Apps is desirable.
- Experience with cybersecurity deception technologies such as Canarytokens or honey credentials is desirable.
- Experience with Terraform, container workload hardening, security API integrations, or SRE and Platform Engineering practices is desirable.
- Kubernetes and cloud-native security certifications such as CKA, CKS, or KCSA are desirable.
Benefits
- Flexible hybrid working model balancing office collaboration and remote work.
- Competitive compensation and benefits aligned with Swiss Re standards.
- Potential eligibility for additional rewards and a performance-based bonus.
- International, diverse, and inclusive work environment.
- Learning, technical excellence, and career development opportunities.
- Full-time role in Spain with a stated base salary range of EUR 60,000 to EUR 100,000.
- Applicants should submit their CV in English.
About Swiss Re
The Swiss Re Group is a leading wholesale provider of reinsurance, insurance and other insurance-based forms of risk transfer. Dealing direct and working through brokers, its global client base consists of insurance companies, mid-to-large-sized corporations and public sector clients. From standard products to tailor-made coverage across all lines of business, Swiss Re deploys its capital strength, expertise and innovation power to enable the risk taking upon which enterprise and progress in society depend. Founded in Zurich, Switzerland, in 1863, Swiss Re serves clients through a network of over 70 offices globally and is rated "AA-" by Standard & Poor's, "Aa3" by Moody's and "A+" by A.M. Best. Registered shares in the Swiss Re Group holding company, Swiss Re Ltd, are listed in accordance with the Main Standard on the SIX Swiss Exchange and trade under the symbol SREN. We're smarter together. For more information about Swiss Re Group, please visit: www.swissre.com, follow us on X @SwissRe and subscribe our YouTube channel @swissretv.