Cloud Security Engineer

Company Founded by CPAs, tax attorneys, and engineers, Taxbit is the leading innovator automating global tax reporting for the digital economy. Taxbit's AI-enabled platform streamlines compliance related to digital assets, payments, and other financial transactions. Its unique combination of deep subject matter expertise and AI-forward technology have made it a fast-growing disruptor trusted by the world's leading fintechs, marketplaces, digital asset players, Big 4 accounting firms, traditional enterprises, and government agencies. Backed by top-tier Silicon Valley VCs, Taxbit's team is located across offices in San Francisco, New York, Seattle, Salt Lake City, London, Madrid, and Singapore. Opportunity for Impact Taxbit is seeking a Cloud Security Engineer to be a critical partner in securing and scaling our cloud infrastructure. This role combines hands-on security engineering with close collaboration across engineering, product, and customer-facing teams—ideal for someone who thrives at the intersection of security, software, and real-world impact. You will work directly with engineering teams to design secure AWS architectures, build scalable security tooling, and embed security into the development lifecycle. You will act as a trusted advisor, helping teams navigate challenges from infrastructure hardening to application security and threat modeling. You will also build and evolve core security capabilities, including cloud-native security systems, automated detection and response, and scalable platform improvements that strengthen our overall security posture. We welcome individuals who are humble, hungry, and excited to tackle some of the industry's biggest challenges at the intersection of cloud infrastructure and security! Help us build the future of AI-powered compliance, automation, and operational excellence in an industry where precision matters. This role is based in Madrid. Candidates must be legally authorized to work in Spain or another European Union country without company-sponsored visa support (e.g., holders of a valid Residency and Work Visa or Permanent Resident status). Role and Responsibilities Security Engineering Partner closely with engineering teams to design secure, scalable AWS architectures and services. Work directly with customers and internal stakeholders on real-world deployment scenarios across AWS and other cloud environments, designing and implementing secure solutions tailored to their infrastructure. Act as a trusted security advisor throughout the software development lifecycle—from design to deployment. Lead threat modeling exercises for applications and infrastructure, identifying risks and driving mitigation strategies. Collaborate with developers to implement secure coding practices and application security controls. Design, build, and operate cloud-native security infrastructure across AWS environments. Develop automated security controls, detection mechanisms, and response capabilities. Build and maintain Infrastructure-as-Code (Terraform or AWS CDK) to enforce secure configurations at scale. Define and implement systems that generate high-quality security signals for threat detection and response. Own security problems end-to-end, from identifying gaps to delivering production-ready solutions. Contribute to DevSecOps practices by integrating security into CI/CD pipelines and developer workflows. Continuously improve security standards, engineering practices, and system reliability. Security Strategy & Enablement Serve as the voice of security across engineering, translating risks into actionable engineering work. Drive improvements in cloud security posture, including identity, network, and data protection. Educate and mentor engineers on secure design principles, threat modeling, and cloud security best practices. Help shape the security roadmap by leveraging insights from real-world engineering challenges. Professional Qualifications Fluent in English; native fluency in a mai