Aparcacoches Restaurante - RESTAURACIÓN Y COMERCIO

IT Security officer Location: Madrid Type: 3 days per week onsite (hybrid) • Role overview and responsibilities: The IT Security Officer supports the vision of I&O Security Management by developing and executing long-term security strategies, ensuring compliance with security standards, and managing risk assessments for projects and tools. The role includes collaboration with global security teams and supporting audits and control processes., • Security operations and protection: The officer leads security operations related to network components such as firewalls, IDS/IPS, WAF, and proxy configurations. Responsibilities include managing patch management, backup and restore, disaster recovery, malware monitoring, vulnerability detection, and improvement initiatives., • Detection and response: The role involves leading vulnerability management processes, coordinating threat hunting with external consultants, and managing security incidents including major incident support and forensic activities., • Qualifications and skills: Candidates should have a graduate degree in business or IT-related fields, 10+ years of IT security experience, and relevant security certifications (e.g., CISM, CISSP). Technical expertise in cloud, network, system, or industrial security, along with strong risk management, audit, and project management skills, are required. Behavioral competencies include effective communication, decision-making, leadership, and customer orientation.

About the Company: NTT DATA strives to hire exceptional, innovative, and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now. About the Role: We are currently looking for a consultant who will be working as a Security Officer to join our growing team in Madrid! Key Responsibilities: • Security Governance & Policy Management:, • Develop, implement, and maintain security policies, standards, and procedures enforced in eu-LISA, • Ensure alignment with industry regulations., • Risk Management - Compliance & Audit Readiness:, • Ensure compliance with legal, regulatory, and contractual security requirements., • Prepare for and support internal and external audits., • Collaboration with Development & IT Team:, • Work closely with DevOps, software engineers, and IT to ensure secure design and deployment., • Support secure SDLC practices and DevSecOps initiatives., • Monitoring & Reporting about vulnerabilities and security incidents:, • Manage and executes strategies to increase application security., • Review network architecture designs identify dataflow and performance deficiencies;, • Understand security vulnerabilities in various SW and HW platforms and make recommendations Requirements: • Over 5 years of experience in Cybersecurity., • Mandatory: English (above B2++)., • Nationality (EU State). We Offer: • Opportunities for professional development and continuous training., • An inclusive and multicultural work environment., • Participation in innovative and challenging projects at an international level., • Competitive benefits package. If you are passionate about cybersecurity and ready to start your career in an international environment, we invite you to apply and join our team!

aizoOn, società di consulenza tecnologica di innovazione, indipendente, che opera a livello globale ricerca un / una Offensive Security Consultant. Siamo alla ricerca di un Esperto in Vulnerabilità altamente qualificato da inserire nel nostro team di cybersecurity presso la sede di Barcellona o Madrid. La persona selezionata sarà responsabile dell’identificazione, analisi e valutazione delle vulnerabilità in sistemi, reti, applicazioni e ambienti cloud, proponendo soluzioni efficaci di mitigazione. Responsabilità principali • Eseguire analisi avanzate di vulnerabilità e test di penetrazione (pentesting)., • Interpretare i risultati tecnici dei pentest e delle vulnerabilità, comprendendone le implicazioni per il business., • Applicare metodologie riconosciute come OSSTM, OWASP, ecc., nelle attività di intrusione e valutazione della sicurezza., • Identificare e documentare debolezze tecniche, errori di configurazione, falle nei protocolli, problemi di sicurezza fisica, malware, ecc., • Proporre soluzioni di mitigazione o contenimento delle vulnerabilità rilevate., • Valutare la sicurezza in ambienti cloud, con focus sulle tecnologie leader di mercato., • Gestire procedure e team incaricati dell’esecuzione di analisi di sicurezza e test di penetrazione., • Fornire supporto tecnico e consulenza specialistica a clienti interni o esterni. PROFILO • Laurea in discipline tecnico-scientifiche., • Livello di inglese intermedio-alto o alto (orale e scritto)., • Padronanza dello spagnolo (obbligatorio); la conoscenza del catalano sarà considerata positivamente., • Esperienza minima di 2 anni in ruoli simili. COMPETENZE TECNICHE • Conoscenza avanzata delle tecniche di pentesting e analisi delle vulnerabilità., • Approfondita conoscenza di protocolli, reti, sistemi eterogenei e software., • Esperienza comprovata in ambito cloud security. Certificazioni desiderabili (non vincolanti) • OSCP – Offensive Security Certified Professional, • GPEN – GIAC Penetration Tester, • GWAPT – GIAC Web Application Penetration Tester Offriamo • Inserimento in un team tecnico altamente qualificato., • Partecipazione a progetti innovativi nel campo della cybersecurity., • Piano di carriera e formazione continua., • Buon clima lavorativo e politiche di lavoro flessibile., • Opportunità di lavorare da Barcellona o Madrid. Sede: Barcellona o Madrid (Spagna) Modalità: Ibrida. The job search refers to candidates of both genders.

AppSec Expert ¿Qué harás en tu calidad de Experto en seguridad de Aplicaciones? Definir y gobernar políticas de seguridad en desarrollo de software • Establecer estándares de codificación segura., • Incorporar requisitos de seguridad en metodologías ágiles, DevOps o DevSecOps., • Integrar controles de seguridad en el ciclo de vida de desarrollo. Gestión de herramientas y procesos • Implementar y administrar SAST, DAST etc., • Automatizar escaneos de seguridad en pipelines de CI/CD. Revisión y validación de seguridad • Realizar revisiones de código seguro., • Ejecutar pruebas de penetración en aplicaciones internas y externas (webs, móviles y APIs)., • Validar dependencias de terceros y librerías open source., • Definir gates de seguridad según criticidad del proyecto Educación y concienciación • Entrenar a los equipos de desarrollo en seguridad., • Crear guías de secure coding y cheat sheets internas., • Asesorar sobre librerías, frameworks y patrones seguros. Gestión de vulnerabilidades • Coordinar la remediación con los diferentes equipos de desarrollo., • Priorización y remediación de findings en colaboración con los equipos de desarrollo y el equipo de seguridad., • Proporcionar forensic input en caso de vulnerabilidad. Compliance y auditoría • Asegurar cumplimiento de normativas (ISO 27001, PCI-DSS, GDPR, NIS, etc.)., • Proveer métricas y reportes ¿Qué necesitamos? • Ingeniería Informática, con experiencia de entre 5-7 años en el sector de seguridad., • Conocimientos sólidos en OWASP Top 10, CWE, NIST SSDF., • Experiencia en desarrollo seguro (Java, PHP, JS, C#, Python, etc.)., • Manejo de pipelines CI/CD (Jenkins, GitHub Actions, GitLab, Azure DevOps)., • Experiencia con herramientas SAST, DAST, SCA, IAST., • Capacidad de interactuar con desarrolladores, arquitectos, QA, • Experiencia previa como desarrollador., • Excelentes habilidades de comunicación, organización y alto nivel de autonomía., • Se valorará positivamente: nivel de inglés alto. ¿Por qué idealista? Te incorporarás al equipo de seguridad de una compañía tecnológica de referencia en su sector, donde encontrarás el mejor ambiente de trabajo, un entorno informal y multicultural, con una plantilla joven y un equipo altamente cualificado. Además de tu salario, podrás acogerte a un plan de retribución flexible del que te podrás beneficiar desde el primer día. Formación inicial y continuada. Clases de idiomas. Tenemos compañeros/as de toda Europa. Somos remote friendly pero contamos con oficinas en el centro de Madrid, Barcelona, Vilafranca, Málaga, Elche, Zaragoza... Algo más sobre nosotros: • Talento: hemos llegado lejos porque contamos con personas brillantes y comprometidas., • Diversidad: nos encantan los colores y la diversidad forma parte de nuestro ADN desde el primer día., • Si valoras el respeto y el reconocimiento, este es tu lugar., • Transparencia: somos transparentes, lo que ves es lo que hay: no tenemos despachos ni símbolos de estatus. ¿Te lo vas a perder? ¡Esto es idealista!

GROUP BNP PARIBAS BNP Paribas Group is the top bank in the European Union and a major international banking establishment. It has close to 185,000 employees in 65 countries. In Spain we are more than 5,100 employees within 13 business lines. Spain IT Production Spain IT Production organization consists of CIB ITO & ITG IT Platforms and is responsible for providing IT Production services to our Clients in EMEA, ensuring a Digital Market evolution, in a secured and performant environment, and with a reliable quality. IT Production organisation includes Infrastructure services, Telecom & Workspace, Production Security and Application Production domains and associated transversal services (CTO Office, Control Tower, PMO and IT Continuity). In Spain, IT Production relies on a Platform with over 400 experts that provide full-stack support services ensuring a secure, stable, standardized, and efficient production. ABOUT THE JOB MISSION We are looking for a IT Security Expert to implement, maintain and follow security solutions deployment around the bank’s structured data. RESPONSIBILITIES The main activities and missions will be: • Assess the company's functional requirements and determine the technical configuration of the product according to the specifications, • Set up technical solutions and configurations to be implemented, adapted to functional needs., • Perform the test and approval phases of the applications developed and define design and the documentation, • Train IT teams on the maintenance of the solution and technical aspects (operation, risks, security, etc.), • Identify and implement standards, tools, methods, and procedures (quality, safety, ...) for studies, site development, • Providing technical assistance to persons in charge of maintaining operational daily tasks, • Define and draft technical documents ( technical specifications, etc.), • Lead and / or participate in the implementation and development of the platform, • Set up indicators to monitor the platform (KPI), • Identify and control risks associated with new versions and propose improvements REQUIREMENTS SKILLS • Technical, • IBM Guardium knowledge (Deployment, Design), • Operating system Microsoft Windows Server / Linux RHEL / AIX, • Development: Powershell, Python, • Language: Fluent english (oral and written), • Database: Oracle and SQL Server, • Knowledge of security SIEM security deployment (Elastic Stack for parsing security logs), • For this position, experience in setting up an IBM GUARDIUM infrastructure is required. Significant experience in managing large-scale infrastructure is most desirable. BENEFITS • Training programs, career plans and internal mobility opportunities, national and international thanks to our presence in different countries., • Diversity and Inclusion Committee that ensures an inclusive work environment. In recent years, several employee communities have been created to organize diversity and inclusion awareness actions (PRIDE, We Generations and MixCity)., • Corporate volunteering program (1 Million Hours 2 Help) in which employees can dedicate time out of their working hours to volunteer activities., • Flexible compensation plan., • Hybrid telecommuting model (50%)., • 32 vacation days. Diversity and inclusion commitment BNP Paribas Group in Spain is an equal opportunity employer and proud to provide equal employment opportunity to all job seekers. We are actively committed to ensuring that no individual is discriminated against on the grounds of age, disability, gender reassignment, marriage or civil partnership status, pregnancy and maternity/paternity, race, religion or belief, sex or sexual orientation. Equity and diversity are at the core of our recruitment policy because we believe that they foster creativity and efficiency, which in turn increase performance and productivity. We strive to reflect the society we live in, while keeping with the image of our clients.