Security Engineer (m/f/x) at Allianz Direct Spain - Allianz - Madrid

Job description

Job Start: asap
Job Type: Full Time / Permanent
Non-executive position
Internal Applicants preferred period: 26.09.2025 - 10.10.2025

About us:

The world around us is changing rapidly and so is the insurance industry. Now’s the right time to make a bold move and shape the future of insurance – this is Allianz Direct! As a pan-European online insurer of the Allianz Group, launched in 2019, Allianz Direct is on its mission to become the most customer-oriented and efficient insurer on the market. Allianz Direct is truly changing the face of insurance, in customer experience, and in technology, processes, people and culture.

An international team of business experts and engineers who live and breathe an agile way of working, are seeking to improve and change the way you do insurance. Driven by customer obsession and love for data, Allianz Direct strives for delivering an exceptional experience with a personal touch.

So, what makes Allianz Direct so unique? We believe in the power of simplicity and convenience and by doing so we have managed to set new standards when it comes to online insurance. We are a fast-growing technology company with an insurance license, and by fast, we really mean it .

Job Purpose/Role:

We are looking for a Security Engineer who is looking to work hands-on to help the security team accelerate and support our business even faster.
To thrive in this dynamic role, you'll leverage your exceptional technical expertise in information security to bolster our defenses, safeguard our customers' data from cyber threats, and propel our application security program forward. You'll be an integral part of our team, working alongside our talented developers in a collaborative environment that values innovation and excellence.

Join us in shaping a secure future while making a meaningful impact in an exciting and rewarding setting.

While we look for support primarily in the areas of defensive security and application security, we recognize that a strong combination of both is rare, especially within a DevSecOps-focused environment.

We are therefore seeking a Security Engineer with substantial experience in either area who is eager to integrate security practices into the development lifecycle and committed to developing their skills in the other, ensuring seamless collaboration between security, development, and operations teams.

Key Responsibilities:

Continue building our application security program to keep pace with our product teams, fostering secure coding
practices and vulnerability assessments.
Conduct threat modeling of new services and infrastructure to identify vulnerabilities before they reach production,
while integrating security practices into the CI/CD pipeline.
Review code of highly critical services to support important product launches, ensuring compliance with relevant
regulations and standards.
Enhance our cloud-native threat detection capabilities and automate security processes using scripting and
Infrastructure as Code (IaC) tools.
Provide support during incident response and collaborate with development and operations teams to ensure security
is a shared responsibility, promoting a culture of adaptability and continuous learning.

Qualifications/Key skills:

University degree in Engineering Disciplines preferred.
Strong software development experience.
Experience in developing Application Security programs or Defensive Information Security capabilities (e.g., SOC,
SIEM, log analysis, incident response).
Experience in Cloud-native environments.
Skill in integrating security practices into CI/CD pipelines and automating processes with scripting.
Ability to communicate security issues and coach technical teams on best practices.
Knowledge of compliance with regulations and standards (e.g., GDPR, ISO 27001).
English proficiency required; additional languages are a plus.

Offers “Allianz”

Job description