Department: Digital Platforms Reports To: Chief Technology Officer (CTO) Location: DohaPosition DescriptionAt East-West Digital / Iberdrola Innovation Middle East, we are scaling our cloud platform and need a highly capable Senior Cloud Security Engineer. You will not act as a theoretical compliance auditor, but rather as a hands-on technical authority with cybersecurity in your DNA. By working shoulder-to-shoulder with engineering teams in a true DevSecOps approach, you will ensure our SaaS products on Google Cloud are secure by design, resilient against attacks, and built with robust, automated defenses from conception to deployment.<ul><li>Primary mission: Secure the design, deployment, and operation of our SaaS products on Google Cloud through hands-on implementation and technical leadership.</li><li>Key stakeholders: Software Architects, Cloud Engineers, Development Teams, and Product Managers.</li><li>Employment type: Full-time</li></ul>Jobs To Be Done<ul><li>Technical Leadership &amp; Architecture: Act as the primary technical authority for cloud security. Partner with software architects to perform Threat Modeling on new SaaS products and embed "Security by Design" principles.</li><li>Hands-on GCP Implementation: Design, configure, and maintain the native Google Cloud security stack (Cloud Armor, conditional IAM, VPC Service Controls, Secret Manager, Security Command Center).</li><li>SaaS &amp; AppSec: Define and implement robust protections for our SaaS applications, focusing on API security, WAF configurations, DDoS mitigation, and secure multi-tenant isolation.</li><li>DevSecOps Integration: Guide and implement security automations and controls within our CI/CD pipelines (SAST, DAST, container/artifact scanning).</li><li>Validation &amp; Incident Response: Conduct continuous internal security assessments of our infrastructure and deployed applications, identify vulnerabilities, provide pragmatic remediation strategies, and act as a key responder during security events.</li></ul>Education Requirements<ul><li>Minimum: Bachelor’s degree in Computer Science, Engineering, Cybersecurity, or equivalent deep, verifiable hands-on engineering experience.</li><li>Preferred: Master’s degree in Cybersecurity.</li><li>Licences/Accreditations: Google Cloud Professional Cloud Security Engineer (highly preferred). Other respected technical certifications (e.g., CISSP, CCSP, OSWE) are a plus.</li></ul>Experience<ul><li>Years of experience: 5–7+ years in Cybersecurity, with at least 3+ years of deeply hands-on experience exclusively securing Google Cloud (GCP) environments.</li><li>Domain exposure: Native GCP security stack (IAM, Cloud Armor, VPC Service Controls, SCC), SaaS architecture, web application vulnerabilities, DevSecOps pipelines, and Infrastructure as Code (Terraform).</li><li>Leadership/ownership: Proven track record of technically influencing and guiding senior software architects, and owning the end-to-end security posture of cloud-native, multi-tenant applications.</li></ul>Skills and Competencies<ul><li>Technical:</li><li>GCP Security Stack (Cloud Armor, IAM, VPC Service Controls, Secret Manager, SCC) — Must-have</li><li>AppSec &amp; Web Vulnerabilities (OWASP Top 10, API Security, WAF configuration) — Must-have</li><li>Infrastructure as Code (Terraform for security controls) — Must-have</li><li>DevSecOps integration (SAST/DAST within CI/CD pipelines) — Must-have</li><li>Scripting/Automation (Python, Go, or Bash) — Nice-to-haveNice-to-have</li><li>Behavioural: Attacker &amp; Builder Mindset (think like a hacker, build like an engineer), Technical Influence (ability to argue technically and gain respect without being a blocker), Pragmatism, and Ownership.</li><li>Tools/Systems: GCP Console/CLI, Terraform, Modern CI/CD systems (GitHub Actions, GitLab CI, etc.), Cloud-native security scanning tools.</li></ul>Why Us<ul><li>Career growth: You will be the guiding light for cloud security at East-West Digital / Iberdrola Innovation ME, shaping the security foundation of new SaaS products from the ground up. We provide continuous learning platforms and sponsor relevant certifications.</li><li>Culture: We have an engineering-first mindset where security is an enabler, not a roadblock. We value undeniable technical arguments over compliance checklists. You will work in an international, highly skilled environment at the QSTP</li><li>Rewards: Competitive tax-free salary in Qatar, comprehensive health benefits, relocation assistance, and modern workplace perks, among others.</li></ul> Mobility InformationPlease note that any applicant who is not a citizen of the country of the vacancy will be subject to compliance with the applicable immigration requirements to legally work in that country. Job Posting End Date: julio-31-2026

Avangrid is a leading sustainable energy company transitioning America toward a clean and connected future headquartered in Orange, CT, and has a footprint in 24 states with $40 billion in assets. Our primary businesses are Networks, which serves 3.3 million electric and natural gas customers in the Northeast, and Renewables, the third-largest renewable energy company in the U.S. with a diverse onshore and offshore renewable energy portfolio. With more than 7,000 employees, Avangrid has built a culture that blends diversity, equity and inclusion guided by the company&rsquo;s ESG+F framework and the UN Sustainable Development Goals. This has led to recognition by JUST Capital in 2021 and 2022 as one of America&rsquo;s best corporate citizens and second in utilities for our commitment to the environment and the communities we serve. Avangrid has been named one of the World&rsquo;s Most Ethical Companies for four consecutive years by the Ethisphere Institute.

Senior Cloud Security Engineer

Department: Digital Platforms Reports To: Chief Technology Officer (CTO) Location: DohaPosition DescriptionAt East-West Digital / Iberdrola Innovation Middle East, we are scaling our cloud platform and need a highly capable Senior Cloud Security Engineer. You will not act as a theoretical compliance auditor, but rather as a hands-on technical authority with cybersecurity in your DNA. By working shoulder-to-shoulder with engineering teams in a true DevSecOps approach, you will ensure our SaaS products on Google Cloud are secure by design, resilient against attacks, and built with robust, automated defenses from conception to deployment.<ul><li>Primary mission: Secure the design, deployment, and operation of our SaaS products on Google Cloud through hands-on implementation and technical leadership.</li><li>Key stakeholders: Software Architects, Cloud Engineers, Development Teams, and Product Managers.</li><li>Employment type: Full-time</li></ul>Jobs To Be Done<ul><li>Technical Leadership &amp; Architecture: Act as the primary technical authority for cloud security. Partner with software architects to perform Threat Modeling on new SaaS products and embed "Security by Design" principles.</li><li>Hands-on GCP Implementation: Design, configure, and maintain the native Google Cloud security stack (Cloud Armor, conditional IAM, VPC Service Controls, Secret Manager, Security Command Center).</li><li>SaaS &amp; AppSec: Define and implement robust protections for our SaaS applications, focusing on API security, WAF configurations, DDoS mitigation, and secure multi-tenant isolation.</li><li>DevSecOps Integration: Guide and implement security automations and controls within our CI/CD pipelines (SAST, DAST, container/artifact scanning).</li><li>Validation &amp; Incident Response: Conduct continuous internal security assessments of our infrastructure and deployed applications, identify vulnerabilities, provide pragmatic remediation strategies, and act as a key responder during security events.</li></ul>Education Requirements<ul><li>Minimum: Bachelor’s degree in Computer Science, Engineering, Cybersecurity, or equivalent deep, verifiable hands-on engineering experience.</li><li>Preferred: Master’s degree in Cybersecurity.</li><li>Licences/Accreditations: Google Cloud Professional Cloud Security Engineer (highly preferred). Other respected technical certifications (e.g., CISSP, CCSP, OSWE) are a plus.</li></ul>Experience<ul><li>Years of experience: 5–7+ years in Cybersecurity, with at least 3+ years of deeply hands-on experience exclusively securing Google Cloud (GCP) environments.</li><li>Domain exposure: Native GCP security stack (IAM, Cloud Armor, VPC Service Controls, SCC), SaaS architecture, web application vulnerabilities, DevSecOps pipelines, and Infrastructure as Code (Terraform).</li><li>Leadership/ownership: Proven track record of technically influencing and guiding senior software architects, and owning the end-to-end security posture of cloud-native, multi-tenant applications.</li></ul>Skills and Competencies<ul><li>Technical:</li><li>GCP Security Stack (Cloud Armor, IAM, VPC Service Controls, Secret Manager, SCC) — Must-have</li><li>AppSec &amp; Web Vulnerabilities (OWASP Top 10, API Security, WAF configuration) — Must-have</li><li>Infrastructure as Code (Terraform for security controls) — Must-have</li><li>DevSecOps integration (SAST/DAST within CI/CD pipelines) — Must-have</li><li>Scripting/Automation (Python, Go, or Bash) — Nice-to-haveNice-to-have</li><li>Behavioural: Attacker &amp; Builder Mindset (think like a hacker, build like an engineer), Technical Influence (ability to argue technically and gain respect without being a blocker), Pragmatism, and Ownership.</li><li>Tools/Systems: GCP Console/CLI, Terraform, Modern CI/CD systems (GitHub Actions, GitLab CI, etc.), Cloud-native security scanning tools.</li></ul>Why Us<ul><li>Career growth: You will be the guiding light for cloud security at East-West Digital / Iberdrola Innovation ME, shaping the security foundation of new SaaS products from the ground up. We provide continuous learning platforms and sponsor relevant certifications.</li><li>Culture: We have an engineering-first mindset where security is an enabler, not a roadblock. We value undeniable technical arguments over compliance checklists. You will work in an international, highly skilled environment at the QSTP</li><li>Rewards: Competitive tax-free salary in Qatar, comprehensive health benefits, relocation assistance, and modern workplace perks, among others.</li></ul> Mobility InformationPlease note that any applicant who is not a citizen of the country of the vacancy will be subject to compliance with the applicable immigration requirements to legally work in that country. Job Posting End Date: julio-31-2026

Senior Cloud Security Engineer

About the Job

About the Company

Iberdrola

Similar Jobs

Senior Software Developer

Senior Software Developer

Cloud Security Specialist

Cloud Security Specialist

Senior Cloud Engineer

Senior Cloud Engineer

Cloud Engineer

Cloud Engineer

Senior/Staff Network Security Engineer

Senior/Staff Network Security Engineer

Engineer IV, Cyber DevSecOps

Engineer IV, Cyber DevSecOps

Sr. Product Security Engineer

Sr. Product Security Engineer

Senior Cyber Security Cloud Engineer

Senior Cyber Security Cloud Engineer

Engineer, Cloud Security

Engineer, Cloud Security

Software Engineer

Software Engineer