Controlador/a de Accesos - EMPLEABILIDAD Y TRABAJO TEMPORAL ETT SL - Málaga

EY GDS Spain is seeking a Senior Manager to lead Threat Detection and Response (TDR) managed services for large engagements. You will drive delivery, governance, and strategic initiatives while coaching junior team members and strengthening client relationships. You will guide teams in SIEM, SOAR, and threat intelligence, leveraging tools like Splunk and Azure Sentinel. Strong English and 12+ years in related roles are required. #J-18808-Ljbffr

ppWe are looking for a bPlatform Security Engineer /b to join our Platform team and own the technical security of our live infrastructure end-to-end. You will set the hardening baseline, lead vulnerability and penetration testing, drive disaster recovery readiness, and translate regulatory requirements into technical controls that hold up under audit. This is a hands-on, high-ownership role with direct impact on how securely we operate and grow. /ph3Key Responsibilities /h3ullipDefine and maintain security hardening baselines for Azure tenants, codify security guardrails for the Avarda Azure tenant including: landing zones, secure-by-design patterns, networks segmentation, security policy. Vulnerability scan for public products domains. /p /lilipDefine and maintain on-prem security hardening baselines: Server hardening, network segmentation and integration with Azure, identity security baselines, and produce compliance reports. /p /lilipLead pen/penetration testing technically: scope tests, triage findings, drive remediation, and report on progress. /p /lilipOwn the vulnerability management end-to-end: tooling, integration, prioritization, remediation tracking, reporting. /p /lilipOwn response to security alerts and incidents raised by supplier (like TRUESEC, BaffinBay), Microsoft Defender, and other detection sources — triage, lead remediation across infrastructure, and close the loop with the SOC and CISO function. Collaborate with supplier to evaluate and improve monitoring, alerting, and protection capabilities across security platforms. /p /lilipOwn the continuous security improvement backlog for our infra. — drive Azure Secure Score uplift, drive on-prem infra. Security improvement. /p /lilipDrive Disaster Recovery technical readiness: draft, test, and maintain DR plans alongside system owners and CISO function. /p /lilipDrive DevSecOps initiatives across CI/CD and software supply chain security, including security scanning, dependency/vulnerability detection, secrets management, and pipeline hardening. Serve as a security partner for developers and promote secure engineering practices. /p /lilipCompliance technical execution at infrastructure level: ISO 27001 / NIST CSF mapping, technical evidence and responses for internal and external audits. /p /lilipTechnical risk assessments for new infrastructure tooling, significant architectural changes, and vendor onboarding that touches infrastructure. /p /li /ulh3Qualifications and Experience /h3ullip5+ years in infrastructure security, platform security engineering, or security architecture roles spanning both cloud and on-prem environments. /p /lilipDeep, current Azure security expertise — Defender for Cloud, Microsoft Sentinel, Azure Policy, Entra ID, PIM, etc. /p /lilipOn-prem infrastructure security: Server hardening, network segmentation, certificate management. /p /lilipVulnerability management at scale: tooling, prioritization frameworks, working with system owners to close findings. /p /lilipPenetration test coordination: scoping, technical triage, remediation tracking. Hands-on with continuous testing platforms (Pentera or similar) appreciated. /p /lilipDisaster recovery: drafting plans, running tests, working with system owners. /p /lilipCompliance fluency: hands-on experience mapping ISO 27001 or NIST controls to technical infrastructure implementations and supporting external audits. /p /lilipDevSecOps fluency: shift-left scanning, secrets management, policy as code. /p /lilipThreat modelling at architecture level (STRIDE or equivalent, applied in practice). /p /lilipComfortable communicating with engineers, risk and compliance teams, and external auditors. /p /lilipBuilds rather than gatekeeps — ships secure tooling other engineers want to use, rather than policy documents they ignore. /p /lilipComfortable with multiple stakeholders. /p /lilipPragmatic over perfect — accepts that security wins by being adopted, not by being theoretically ideal. /p /lilipEnglish — professional working proficiency in writing and speaking (required). /p /lilipBachelor's degree in Computer Science, Software Engineering, or a related technical field. /p /li /ul /p #J-18808-Ljbffr

A leading international advisory firm is seeking a SecDevOps professional to connect cybersecurity and DevOps processes. This role involves automating security controls, supporting application migration to secure pipelines, and developing processes in a collaborative environment. Candidates should have more than 2 years of experience, expertise in container technologies, and a background in Python and CI/CD tools. The position is hybrid, located in Málaga, Spain, with relocation mandatory.#J-18808-Ljbffr

Bending Spoons is seeking security-minded engineers to assess and strengthen security across systems and infrastructure. You will identify vulnerabilities, implement countermeasures, and automate security into engineering workflows. La información a continuación detalla los requisitos del puesto, la experiencia esperada del candidato y las cualificaciones correspondientes. You’ll collaborate with privacy experts to translate regulatory requirements into practical safeguards and stay ahead of evolving threats. xcskxlj The role offers flexible start dates, part-time options, and a path to leadership as you contribute to major projects across #J-18808-Ljbffr Hay opciones de teletrabajo/trabajo desde casa disponibles para este puesto.

OverviewKeysight is on the forefront of technology innovation, delivering breakthroughs and trusted insights in electronic design, simulation, prototyping, test, manufacturing, and optimization. Our ~15,000 employees create world-class solutions in communications, 5G, automotive, energy, quantum, aerospace, defense, and semiconductor markets for customers in over 100 countries. Learn more about what we do.Our powerful, award-winning culture embraces a bold vision of where technology can take us and a passion for tackling challenging problems with industry-first solutions. Diversity, equity & inclusion are integral parts of our culture and drivers of innovation at Keysight. We believe that when people feel a sense of belonging, they can be more creative, innovative, and thrive at all points in their careers.ResponsibilitiesThe Keysight Information Security and Compliance team rises daily to the challenges of meeting the cyber security needs of a global, advanced technology company. The team delivers security solutions and services across a range of technology domains.The cyber security team is looking for an individual with a passion for applying their experience and skills to secure Keysight’s use of modern computing infrastructure and platforms. The role requires the ability to analytically assess technology needs of multiple teams, propose solutions to requirements, and help drive execution.Candidates should have a strong interest in cyber security, and 3+ years of practical experience with a variety of tools for securing different computing environments. An analytical approach to problems using data and critical thinking will be essential.A successful candidate will be a member of the Information Security and Compliance team and will have a key role in the development of enterprise security solutions, from whiteboard conception and design to testing, deployment, and overseeing the handoff to operations. Collaboration on projects with the rest of the security team and engagement with engineers from other departments will be frequent.QualificationsThe ideal candidate will possess at least 3 of the Required Qualifications:- BS or MS in Computer Science or Information Security or equivalent- 3+ years in Information Security Engineering roles- Ability to understand and explain technical details- Excellent communication skills, on both technical and non-technical issues- Ability to independently handle multiple tasks, prioritize and meet deadlinesThe best candidate will also have 3 or more of the Preferred Qualifications:- Experience with various information security applications and tools- Experience with networking architectures and protocols- Experience with IAM technologies- Experience with certificate management- Experience with cloud security operations- Experience with Linux/Windows/MacOS- Experience with Automation- Experience with Artificial Intelligence- Experience with log collection architectures- Experience developing security engineering standards and guides- Experience creating technical diagrams to define system integrations and architecture- Experience developing automation to integrate security tools and improve user efficiency- Experience with scripting and data languages (Python, Bash, JSON, etc)- Understanding of common data and network protocols (HTTP, TLS, DNS, SSH, etc)- Experience evaluating commercial and open source network security tools and services- Understanding of public keys, certificates, and authentication concepts#J-18808-Ljbffr

pErnst Young Advisory Services Sdn Bhd is looking for a Cyber Security - TDR Operations Manager to lead operations and deliver exceptional TDR services in Málaga. The role encompasses overseeing incident response processes, managing security tools, and leading the Security Operations Center while ensuring compliance with client SLAs. /ppThe ideal candidate will have 8–10 years of experience in SIEM solutions, excellent project management skills, and a strong command of English. /ppBenefits include career development opportunities, a hybrid work model, and well-being programs. /p #J-18808-Ljbffr

ph3Cyber Security TDR Senior Manager (Threat Detection and response - EY GDS Spain - Hybrid /h3 pLocation: Malaga /p pOther locations: Primary Location Only /p pRequisition ID: /p pbSenior Manager (Threat Detection and response - TDR) /b /p h3Opportunity /h3 pAs a Senior Manager in the Cyber Security Team, you will /p ul liLead the delivery and maintenance of Threat Detection and Response (TDR) Managed services, for shared pool projects or dedicated large engagements, using advanced technical capabilities /li liDemonstrate thought leadership for cyber security and go to market approach for TDR managed service operations business /li liIn-depth understanding and experience of managed service provide Governance support and accountability for the Operations, delivery and maintenance of tools and processes, driving compliance with, and contributing to, the development of relevant standards for overall practice. /li liAn important part of your role will be to actively establish, maintain and strengthen client’s relationships. You will also identify potential business opportunities for EY within existing engagements and elevate as appropriate. /li liYou will be responsible for overall client service quality delivery in accordance with EY quality guidelines methodologies. You will need to manage accounts and relationships on a day-to-day basis and explore new business opportunities for the firm. Establishing, strengthening, and nurturing relationships with clients (functional heads key influencers) and internally across service lines and proactively will also be a part of your day-to-day activities. You will assist in developing new methodologies and internal initiatives and help in creating a positive learning culture by coaching, counselling and developing junior team members. /li liIn line with EY’s commitment to quality, you’ll confirm that work is of the highest quality as per EY’s quality standards, by reviewing the work provided by junior members. /li /ul h3Client Responsibilities /h3 ul liProvide guidance and share knowledge with team members and participate in performing procedures focusing on complex, judgmental and/or specialized issues. Work with the team and the client to create plans for accomplishing engagement objectives and a strategy that complies with professional standards and addresses the risks inherent in the engagement. /li liBrief the engagement team on the client's environment and industry trends. Maintain relationships with client management to manage expectations of service, including work products, timing, and deliverables. Demonstrate a thorough understanding of complex information systems and apply it to client situations. /li liUse extensive knowledge of the client's business/industry to identify technological developments and evaluate impacts on the client's business. Demonstrate excellent project management skills, inspire teamwork and responsibility with engagement team members, and use current technology/tools to enhance the effectiveness of deliverables and services. Understand EY and its service lines and actively assess what the firm can deliver to serve clients. /li liAssist Partners Directors in driving the business development process on existing client engagements by gathering appropriate resources, gaining access to key contacts supervising proposal preparation. /li liCreate innovative insights for clients, adapts methods practices to fit operational team needs contributes to thought leadership documents. /li liFacilitate discussions / knowledge sharing with key client personnel and contribute to EY thought leadership. /li liPlan schedule client engagements. Determine and deploy the right team with adequate skill sets for executing engagements and periodically review status of engagements and work products. /li liMaintain a strong client focus by effectively serving client needs and developing productive working relationships with client personnel. Stay abreast of current business and economic developments and new pronouncements/standards relevant to the client's business. /li liDemonstrate industry expertise (deep understanding of the industry, emerging trends, issues/challenges, key players leading practices) /li liReview status updates and prepare management presentations /li liActively contribute to improving operational efficiency on projects internal initiatives. /li /ul h3People Responsibilities /h3 ul liIdentify buyers, influencers stakeholders in existing client engagements and build strong relationships. /li liDisplay teamwork, integrity and leadership. Work with team members to set goals and responsibilities for specific engagements. Foster teamwork and innovation. /li liDrive performance management for self and team. /li liDriving the quality culture agenda at GDS. /li liManage the performance management for the direct reports, as per the organization policies. /li liTraining and mentoring of project resources. /li liParticipating in the organization-wide people initiatives. /li /ul h3Key Responsibilities /h3 ul liTechnical leadership in SIEM, SOAR, Threat Intelligence, EDR and related Threat Framework technologies. /li liLeading large-scale projects and programs to deliver strategic programs, driving operational efficiencies, operational excellence and transformation projects in areas such as: performance improvement, cost-optimization, sales acceleration and implementing business change to drive both growth and profitability of our clients. /li liIn-depth understanding and experience of managed service model using ITIL framework. Ability to strategize and propose transition approach for large outsourcing global TDR deal /li liAbility to perform due-diligence for AS-IS assessment and define milestone-based improvement roadmap along with transformation team. /li liAbility to prepare solution and implementation approach, target operating model and technical architecture in response to customer requirements/RFP /li liProvide effort estimations, work break-down structure and implementation plan to respond to RFP/proposal /li liAbility to draft /review Statement of Work (SoW) like scoping, assumptions, milestones, pricing team compositions, governance, RACI etc. /li liPrepares technical and commercial bid presentations to region team and customer. /li liProven ability to articulate differentiator and defend the proposal during client presentation. /li liAbility to define reusable artefacts and standardize costing model, solution approach for multiyear large managed service deal /li liLead proof of concept and demonstrate managed services and TDR capability to increase winning probability /li liMust possess experience of delivering TDR support projects. This includes activities such as requirements analysis, defining architecture, technical design, development, and lead solution delivery using shared service model /li liDesired working experience on TDR tools such as Splunk, Azure Sentinel, Deep/Dark Web monitoring tools, Demisto, Phantom and other SOAR Tools. /li liB. Tech./ B.E./BCA/MCA/MSc/BSc/MBA/PGDM/ Ph.D. with sound technical skills /li liStrong command on verbal and written English language /li liApproximately +12 years experience in management consulting or similar advisory role in industry or the public sector /li liApproximately 8 - 10 years of Project Management experience of managing and delivering large-scale projects and/or programs, including project planning and monitoring, resource management (including project finances), benefits realization, etc. /li liExcellent stakeholder management and communication skills with a track record in managing complex stakeholder programs /li liGood understanding of project governance and change management principles. /li liAdditional professional qualifications, such as PRINCE2 or PMP, are desirable. /li liAdditional areas of interest include process improvement, agile methodologies, and business case development. /li liSignificant relevant experience in either an internal or external security engineering role, or similar /li liExperience in delivering Cyber solutions, providing comprehensive guidance / support / advice, and managing client requirements /li liProject management experience in a cyber security environment /li liAny two of the following certifications: CISSP, GCIH, GMON, GCIA, CISM. /li /ul h3Benefits /h3 pAdditionally, here’s what makes us stand out: /p ul libEmpowering Career Development /b: Unlock your potential with tailored training and development programs designed to elevate your skills and propel your career forward. We invest in your growth because your success is our success. /li libFlexible Work-Life Integration /b: Enjoy the freedom of our hybrid work model, allowing you to blend professional responsibilities with personal passions. We understand that life is more than just work, and we support you in achieving that balance. /li libComprehensive Well-Being Programs /b: Prioritize your health with our extensive wellness initiatives, including psychological support sessions and health resources. At EY GDS Spain, your well-being is at the heart of what we do. /li libMeaningful Volunteering Opportunities /b: Make a difference in your community through our engaging volunteering programs. Join us in giving back and building connections with like-minded colleagues. /li libRecognized Performance and Rewards /b: Celebrate your achievements with our recognition programs that honor both individual and team successes. We believe in acknowledging hard work and dedication, ensuring you feel valued every step of the way. /li /ul /p #J-18808-Ljbffr

ph3Your mission /h3 pAs an bInfrastructure Security Engineer /b, you will join our global information security team to bdesign, deploy, and maintain security controls /b for our bprivate cloud and on-premises infrastructure /b. Your role is critical in protecting our bservers, networks, and data centers /b from internal and external threats, ensuring operational resilience while enabling the organization to function securely. /p pYou will have full responsibility for the bengineering, maintenance, and day-to-day operations /b of security systems that protect our bdata and IT assets /b, with a focus on bpractical, hands-on implementation /b and continuous improvement. /p h3What You Will Do /h3 h3Design, Deployment, and Maintenance of Security Controls in a hybrid environment /h3 ul li pEngineer, deploy, maintain and improve bsecurity technologies /b, including: /p ul lipbWAF /b, bIDS/IPS /b, and bendpoint protection platforms /b (e.g., CrowdStrike, Cortex, SentinelOne). /p /li lipbSIEM solutions /b (e.g., Splunk, QRadar, ELK) for log aggregation, correlation, and alerting. /p /li lipbVulnerability management platforms /b for scanning, patching, and remediation. /p /li /ul /li li pAutomate routine security tasks (e.g., vulnerability scanning, patch management, configuration compliance) using bscripting (Python, Bash, PowerShell) /b and binfrastructure-as-code tools (Ansible, Terraform) /b. /p /li li pImprove infrastructure for bnew vulnerability scanning capabilities /b, ensuring comprehensive coverage of on-premises assets. /p /li /ul h3Operational Security and Incident Response /h3 ul li pLead the boperational management /b of security systems, ensuring high availability and rapid response to bsecurity product malfunctions /b (e.g., WAF latency, SIEM failures). /p /li li pAct as the bSecurity Subject Matter Expert (SME) /b in infrastructure projects, identifying security requirements, reviewing low-level designs, and shaping secure solutions. Also to provide support on all the different products and tools managed by the team for internal and external clients. /p /li li pProvide bon-call support /b exclusively for security product outages, including troubleshooting analysis and remediation for infrastructure-related issues. /p /li /ul h3Security Posture Improvement /h3 ul li pDrive the bsecurity roadmap /b for infrastructure, identifying gaps, proposing improvements, and implementing controls to mitigate risks. /p /li li pCollaborate with IT and operations teams to integrate security into bchange management, support cycles, and disaster recovery planning /b. /p /li li pDeploy and configure bnew security products /b (e.g., SOAR, HSM) from initial setup to knowledge transfer for the bSecurity Operations team /b. /p /li /ul h3Documentation and Knowledge Sharing /h3 ul li pMaintain bdetailed documentation /b for security systems, policies, and procedures. /p /li li pStay current with bemerging threats and vulnerabilities /b relevant to infrastructure and share knowledge within the team. /p /li /ul h3What you’ll bring /h3 pbMinimum 3 years of hands-on experience /b in bon-premises/hybrid infrastructure security /b, with a focus on: /p ul li pbDesign, deployment, and support /b of security technologies: Firewalls (e.g., Palo Alto, Fortinet), IDS/IPS, EPP/EDR (e.g., CrowdStrike, SentinelOne), SIEM (e.g., Splunk, QRadar), and vulnerability management platforms. /p /li li pbHardening and securing /b Windows/Linux servers, network devices, and physical data centers. /p /li li pbAutomation and scripting /b for security operations (Python, Bash, PowerShell, Ansible, Terraform). /p /li li pbHybrid environment security /b: Applying security controls to infrastructure and integrating with private/public cloud services. /p /li /ul pbPractical knowledge /b of: /p ul li pbSecurity controls /b: Network segmentation, access control, logging/monitoring, and incident response. /p /li li pbIndustry standards /b: NIST, MITRE, CIS benchmarks, ISO 27001, and ITIL change management processes. /p /li li pbSecurity appliance management /b: Configuration, troubleshooting, and lifecycle management of physical/virtual security appliances, Windows and Linux server administration. /p /li /ul pbRequired personal skills /b /p ul li pbTeam player /b: Reliable, collaborative, and supportive in a global team environment. /p /li li pbPassion for learning /b: Committed to staying ahead of bsecurity threats /b and evolving technologies. /p /li li pbSelf-organized /b: Ability to manage multiple tasks, prioritize effectively, and meet deadlines in a fast-paced environment. /p /li li pbConfidentiality /b: Strict adherence to handling sensitive company and personnel data. /p /li li pbStrong communication /b: Excellent technical writing and verbal skills in English; ability to explain complex security concepts to non-technical stakeholders. /p /li /ul pbEducation/Certifications: /b /p pbNon-essential but an asset /b /p ul liDegree in Computer Science, Cybersecurity, or related field (or equivalent experience). /li liSecurity certifications: Comptia Security +, CCNA CyberOps, Vendor related certifications. /li /ul /p #J-18808-Ljbffr