Auxiliar de Seguridad - Nightman Crew | Barcelona

¡ÚNETE A NUESTRO EQUIPO! Sobre nosotros Elecnor es una compañía global dedicada al desarrollo y construcción de proyectos y servicios en los sectores de infraestructuras, energías renovables y nuevas tecnologías. Nuestro propósito es generar cambio y bienestar, llevando energía, tecnología e infraestructuras a territorios de todo el mundo para impulsar su desarrollo. Ponemos la ingeniería y la innovación al servicio de las personas. En Elecnor creemos que las personas son la clave del éxito: su talento, iniciativa y energía nos permiten crecer de forma sostenible y ofrecer soluciones integrales, innovadoras y competitivas. Desde la Dirección Este buscamos un Técnico/a de Sistemas de Seguridad, para sumarse a nuestro equipo de Seguridad Electrónica y Redes de Elecnor Sistemas en Barcelona. 🛠 ¿Cómo será tu día a día? • Realizar instalación, configuración, puesta en marcha y mantenimiento de grandes redes, sistemas de CCTV, intrusión, controles de acceso, centrales de alarma, Megafonía EVAC, etc., • Realizar informes de todos los trabajos realizados (mantenimientos, instalaciones, replanteos, etc.), • Resolver las incidencias notificadas de una manera ágil o en caso contrario informar al responsable de las opciones para su subsanación., • Informar del progreso a jefes de obra e ingenieros., • Cumplir el plan de seguridad y salud y de las normas de prevención de riesgos laborales. 🧩 ¿Qué buscamos? • Formación: Grado Medio o Superior en Sistemas de Telecomunicaciones / Electricidad., • Experiencia laboral: Mínimo 3 años en funciones similares. ✅ ¿Qué ofrecemos? • Contrato indefinido: Te ofrecemos estabilidad laboral, proyectos a largo plazo donde poder aprender y desarrollarse profesionalmente en una empresa puntera en su sector., • Desarrollo y proyección profesional., • Posibilidad de crecimiento dentro de la empresa., • Excepcional ambiente de trabajo, que te ayudará a sentirte como 'en familia' desde el primer día. 📌 Ubicación: Barcelona / Granollers / Sant Esteve Sesrovires ¿Te interesa? Aplica aquí! Conócenos a través de: • Instagram: @grupo_elecnor, • Nuestra Web: ___ #GrupoElecnor #Empleo #DesarrolloProfesional #Talento #ElecnorTeam #CCTV #Ofertas #Seguridad #Security

Job Summary The Product Security Manager is responsible for developing and managing a central Secure Development Lifecycle program, to ensure security and privacy by design across the entire product portfolio, covering all stages from pre-market development to post-market surveillance. This role involves developing and implementing global security strategies, conducting risk assessments, overseeing the implementation of security controls, and ensuring compliance with industry standards and regulations. The Product Security Manager collaborates with cross-functional teams, and plays a crucial role in safeguarding the company's reputation, protecting patient data, and maintaining the trust of customers and stakeholders throughout the product lifecycle. Key Accountabilities The Product Security Manager key accountabilities are: • Manage the development and implementation of a comprehensive end-to-end Secure Development Lifecycle, ensuring that cybersecurity and privacy by design are embedded in all products (on-prem & digital), from pre-market to post-market, • Collaborate with cross-functional teams, including engineering, product management, and regulatory affairs, to develop a DevSecOps pipeline and culture, • Conduct third-party vendor and supply chain risk assessments to identify potential security threats and develop mitigation strategies, • Ensure compliance with industry standards and regulations, such as GDPR, HIPAA, NIST, and FDA cybersecurity guidelines, • Develop and deliver training programs to educate employees on product security best practices (lunch-and-learns, instructor led, table tops and more), • Represent the company in industry forums and working groups related to product security Networking/Key relationships The Product Security Manager interacts with different stakeholders including: • Company directors for strategy and risk management, • Product Security Director and the Data Privacy Officers to ensure alignment between company’s security and privacy compliance programs, • Product Security Officers to guarantee process harmonization across the different business units, • Regulatory Affairs to define procedures for product security, • Engineering (R&D) departments to provide support on Secure Development Lifecycle, • Quality Assurance department to provide support on security testing Minimum Knowledge & Experience required for the position: The qualifications required by the position are: • Engineer, computer science or other technical degree, or equivalent work experience The required work experiences by the position are: • 7+ years experience in product security, including at least 2 years in a leadership or management role, • 3+ years of software development experience The following work experience and qualifications are a plus: • Solid knowledge on relevant standards such as IEC 62443, GDPR, HIPAA, and ISO 27001, • Strong knowledge of Secure Development Lifecycle practices, standards and industry best practices, • Knowledge of medical device regulations, • Certifications such as CISSP, CISM, CCSP, CEH Skills & Capabilities: The skills and capabilities required by the position are: • Strong analytical and problem-solving skills to identify and address security challenges and vulnerabilities, • Effective communication skills to convey complex cybersecurity concepts to both technical and non-technical stakeholders, • Willingness to stay updated on the latest cybersecurity trends, threats, technologies, and regulations through continuous learning and professional development, • Ability to lead and collaborate with cross-functional teams, share information, and work together to enhance overall cybersecurity posture Travel requirements: Less than 25% of the time People Manager Core Competencies: Building Talent Planning and supporting the development of individuals’ knowledge, skills, and abilities so that they can fulfill current or future job responsibilities more effectively Customer Focus Ensuring that the internal or external customer’s perspective is a driving force behind strategic priorities, business decisions, organizational processes, and individual activities; crafting and implementing service practices that meet customers’ and own organization’s needs; promoting and operationalizing customer service as a value Decision Making Identifying and understanding problems and opportunities by gathering, analyzing, and interpreting quantitative and qualitative information; choosing the best course of action by establishing clear decision criteria, generating and evaluating alternatives, and making timely decisions; taking action that is consistent with available facts and constraints and optimizes probable consequences Driving for Results Setting high goals for personal and group accomplishment; using measurement methods to monitor progress toward goals; tenaciously working to meet or exceed goals while deriving satisfaction from that achievement and continuous improvement Driving Innovation Creating an environment (culture) that inspires people to generate novel solutions with measurable value for existing and potential customers (internal or external); encouraging experimentation with new ways to solve work problems and seize opportunities that result in unique and differentiated solutions Emotional Intelligence Essentials Establishing and sustaining trusting relationships by accurately perceiving and interpreting own and others’ emotions and behavior; leveraging insights to effectively manage own responses so that one’s behavior matches one’s values and delivers intended results People Manager Accountabilities: Effectively carries out the expectations of Werfen People Managers as defined in Werfen’s Role of the Manager program. Among others this includes maintaining regular, at minimum once a month, and transparent communication with the team through effective use of formal one-on-one meetings with direct reports and team meets. Managing performance issues and conflict proactively; uses judgement in consulting with department leadership and Human Resources. Responsibility for the team´s compliance in terms of training, and fulfilment of their tasks and objectives as well as onboarding of new employees and development of the existing team

Senior Cloud Engineer (AWS) – Barcelona / Hybrid (3 days remote) ✅ Requirements: • Degree in Computer Science, Engineering, or similar., • AWS certifications (Solutions Architect, DevOps Engineer)., • High level of English., • Minimum of 5 years of hands-on AWS experience, Container Orchestration, Infrastructure as Code, • Proven experience migrating application stacks to AWS., • Strong Linux/Unix administration background., • Experience with virtualization and containerization (VMware, Docker)., • Familiarity with monitoring tools (Splunk, Nagios) and application performance tuning (Tomcat, JBoss, Apache, NGINX)., • Good understanding of networking (TCP/IP, OSI)., • Experience working in Agile/Scrum teams; SAFe is a plus., • Strong scripting skills (Bash, Python)., • Knowledge of security/compliance frameworks (CIS, NIST) or telecom environments is an advantage. Our client offers: • International collaboration with teams across the globe, • Continuous training, coaching, and development programs, • Diverse, inclusive, people-oriented culture, • Hybrid working model (3 days remote), • Flexible hours + short Fridays, • On-site cafeteria and social benefits ♦️Responsibilities: • Design, implement, and manage a multi-account AWS Landing Zone and foundational cloud services., • Support complex application migrations to AWS (rehost / replatform / refactor)., • Manage and optimize Kubernetes clusters (Open Source / OpenShift) and Docker deployments., • Automate cloud infrastructure using Terraform, Ansible, and CI/CD pipelines., • Install, configure, and maintain Linux/Unix systems and cloud-native tooling., • Support cloud solutions across AWS, OpenStack, and other platforms., • Monitor and tune system and application performance; troubleshoot bottlenecks., • Implement and maintain security controls, backups, and disaster recovery processes., • Write and maintain automation scripts (Bash/Python)., • Work in Agile/Scrum teams; collaborate with multiple Agile Release Trains (SAFe experience is a plus).

Our client is a global leader in enterprise orchestration, helping over 400,000 businesses worldwide streamline their operations with its AI-powered platform. They are looking for a highly accomplished Security Engineer, Red Team. This is a full-time, permanent, remote position ideally based in Spain, Portugal, or Bulgaria. Requirements Bachelor's degree in Computer Science, Cybersecurity, or a related technical field. 5+ years in cybersecurity with a focus on offensive security, penetration testing, or red team operations. Advanced penetration testing certifications (OSCP, OSCE, GPEN, GXPN, or equivalent). Deep expertise in cloud security testing, particularly AWS environments. Proficiency in exploitation frameworks and tools (Nuclei, Metasploit, Burp, Cobalt Strike, custom tooling). Scripting and automation skills (Python, Go, Bash, or similar). Hands-on experience in vulnerability research and exploit development. Knowledge of threat modeling methodologies and attack path analysis. Advantage: AI/ML security testing experience. Experience with social engineering and phishing campaigns. Advanced security certifications (GCFA, GCIH, GIAC, CRTO, CRTE). Experience with threat intelligence and adversary emulation frameworks (MITRE ATT&CK). Active participation in the security research community and CVE discoveries. Knowledge of compliance frameworks and vendor relationship management. Responsibilities You'll simulate real-world adversarial attacks against our cloud architecture, AI model endpoints, and complex multi-tenant SaaS platform while playing a key role in strengthening our defenses during our Agentic AI Transformation. You will play a pivotal role in identifying security weaknesses, validating defensive capabilities, and improving our security posture through adversarial testing. Your findings will directly influence the product security architecture and drive security improvements across a diverse set of customer deployments. Adversarial Exercises and Penetration Testing: Conduct red team exercises and penetration tests to simulate real-world attacks and validate defensive controls Exploitation and Vulnerability Research: Perform vulnerability research and exploitation to validate attack paths and contribute to the security community Threat Modeling and Attack Simulation: Collaborate on threat modeling to anticipate attacker techniques and strengthen defensive strategies SecOps and Bug Bounty Collaboration: Partner with Security Operations and Bug Bounty teams to enhance detection, response, and organizational resilience External Testing Coordination: Coordinate external red team and penetration testing engagements and third-party security assessments Security Automation and Tooling: Develop automated tools and frameworks to scale offensive security operations across systems and applications This role offers the opportunity to conduct offensive security research against mission-critical systems deployed globally while working with AI and cloud technologies.

Job Summary The Cloud Security Engineer is responsible for designing, implementing, and operating security controls across cloud environments to ensure that applications, data, identities, and infrastructure are protected against modern threats. This role partners closely with Cloud Engineering, Security Operations, Architecture, DevOps, and IT teams to enforce secure-by-default patterns, automate guardrails, and maintain continuous compliance across cloud platforms. Key Accountabilities • Implement and maintain secure cloud configurations, controls, and guardrails aligned with Zero Trust and best practices., • Automate security enforcement using IaC, CI/CD integration, and policy‑as‑code tools., • Manage cloud identity and access security, including least‑privilege roles, workload identity, and privileged access., • Operate and tune cloud‑native threat protection, logging, and monitoring services in partnership with Security Operations., • Support incident response with cloud-specific visibility, forensics, and remediation actions., • Perform vulnerability scanning, misconfiguration detection, and drive remediation across cloud workloads., • Implement secure networking patterns such as private endpoints, WAFs, segmentation, and API protection., • Collaborate with DevOps, Cloud Engineering, and Architecture teams to embed security into cloud deployments and projects., • Document security patterns, runbooks, and provide guidance to engineering teams. Networking/Key relationships: • Governance, Risk and Compliance: Collaborate close with GRC to align controls to risk and compliance requirements., • Infrastructure Teams: Collaborate with IT to implement secure and resilient infrastructure on the Cloud., • Security Operations: Coordinate with IR/SOC team to enhance detection and response. Minimum Knowledge & Experience for the position: • Education: Bachelor’s degree in computer science, cybersecurity, or related field., • Experience: 3+ years of hands-on experience in cybersecurity role. Skills & Capabilities: • Strategic Thinking: Align operational goals with business risk and security strategy., • Technical Depth: Solid understanding of tools, threats, and mitigation techniques., • Communication: Clear and effective reporting to technical and executive audiences., • Collaboration: Strong cross-functional engagement and influence., • Continuous Learning: Commitment to continuous professional development. Travel requirements: • Up to 5% of time. Individual Contributor Core Competencies: Managing Work Effectively managing one’s time and resources to ensure that work is completed efficiently. Emotional Intelligence Essentials Establishing and sustaining trusting relationships by accurately perceiving and interpreting own and others’ emotions and behavior; leveraging insights to effectively manage own responses so that one’s behavior matches one’s values and delivers intended results. Building Partnerships Developing and leveraging relationships within and across work groups, including cross-functional groups, to achieve results. Decision Making Identifying and understanding problems and opportunities by gathering, analyzing, and interpreting quantitative and qualitative information; choosing the best course of action by establishing clear decision criteria, generating and evaluating alternatives, and making timely decisions; taking action that is consistent with available facts and constraints and optimizes probable consequences. Continuous Improvement Originating action to improve existing conditions and processes; identifying improvement opportunities, generating ideas and implementing solutions. Continuous Learning Actively identifying new areas for learning; regularly creating and taking advantage of learning opportunities; using newly gained knowledge and skill on the job and learning through their application.

We are looking for a Senior Payment Security Consultant to provide expert guidance on electronic payment security and PCI DSS compliance within an international and highly regulated environment. This role serves as a key reference point for payment security and compliance matters, working closely with multiple business areas and internal and external stakeholders. The ideal candidate is proactive, collaborative, and motivated to take on new challenges in complex and dynamic environments. Key Responsibilities • Provide expert knowledge on PCI DSS and electronic payment security., • Act as the primary point of contact for all departments regarding PCI DSS standards and related security requirements., • Manage and coordinate international electronic payment projects., • Coordinate payment channel inventories, assessments, and compliance reporting., • Identify, assess, and communicate risks related to payment security., • Provide security and compliance guidance to internal and external stakeholders., • Develop, maintain, and update international guidelines and standards for electronic payment security., • Prepare security reports for electronic payment systems., • Degree in Computer Science, Information Systems, Telecommunications, or a related field, with a focus on cybersecurity, information security, or IT risk management., • Strong knowledge of national and international security standards such as ISO 27001, COBIT, or equivalent frameworks., • Experience with security auditing methods and tools., • Knowledge of national and international electronic payment systems., • Professional certifications such as PCIP, ISO 27001 Lead Auditor, CISSP, CISM, CISA, T.I.S.P., or similar are a plus., • Ability to adapt quickly to change in agile environments., • Understanding of complex processes, ideally within retail or large-scale organizations., • Analytical, structured, and process-oriented working style., • Strong communication skills, initiative, creativity, and diplomatic abilities