Vigilante de Seguridad - Location ADH - Barcelona

Job Purpose: We are seeking a highly skilled and experienced Cybersecurity Architect to join our global team. The ideal candidate will be responsible for designing, implementing, and managing comprehensive security solutions across our global infrastructure. This role requires a wide range of security generalist skills, including proven expertise in cloud and AI security, to protect our organization from evolving cyber threats. The responsibilities further include reviewing our current security measures and processes in all geographies TD SYNNEX operates in, driving enhancements, identifying and addressing areas of weakness, and responding promptly to possible security breaches. Primary duties include ensuring security- and privacy-by-design, zero trust architecture, information protection, application security, identity and access management, risk assessment, controls assurance, threat analytics, incident response and security awareness. Responsibilities: • Advises IT and Security leaders in evolving TD SYNNEX's security strategies, technologies and processes., • Design and implement robust security architectures for cloud, AI, and traditional IT environments. Ensure that security measures are integrated into all aspects of the organization's technology infrastructure., • Work closely with cross-functional teams, including IT, application development, and business units, to ensure the security of cloud environments, AI applications, and infrastructure., • Perform risk assessments of internal services, cloud and 3rd parties, drive remediation and improvements, • Develops the ISMS, security policies, standards and procedures, performs M&A due diligence, • Prepares and delivers security trainings to IT and Business colleagues Knowledge, Skills and Experience: • >10 to 15 Years of relevant work experience, • selection of security and technology certifications and/or equivalent proven work experience, • Formal knowledge of Architecture concepts such as TOGAF, Zachman or FEAF, • Proficiency in cloud security (AWS, Azure, GCP), AI security, network security, and endpoint protection, • Strong knowledge of security frameworks such as NIST CSF, ISO 27001, and SOC 2, • Experience with security information and event management (SIEM), intrusion detection, and user behavior analytics (UBA), • Expertise in scripting languages such as Python or PowerShell for automation, • Experience with secure software development lifecycle (SDLC) and DevSecOps practices and OWASP, • Knowledge of identity and access management (IAM), Cryptography and data loss prevention (DLP), • Exposure to offensive security practices, • Hands-on IT Infrastructure and Network skills At TD SYNNEX, our values guide everything we do: Together, We Own It, We Dare to Go, We Grow and Win, and above all, We Do the Right Thing. These principles shape how we work with each other, our partners, and our communities as we drive innovation and create lasting impact. What's In It For You? • Elective Benefits: Our programs are tailored to your country to best accommodate your lifestyle., • Grow Your Career: Accelerate your path to success (and keep up with the future) with formal programs on leadership and professional development, and many more on-demand courses., • Elevate Your Personal Well-Being: Boost your financial, physical, and mental well-being through seminars, events, and our global Life Empowerment Assistance Program., • Diversity, Equity & Inclusion: It's not just a phrase to us; valuing every voice is how we succeed. Join us in celebrating our global diversity through inclusive education, meaningful peer-to-peer conversations, and equitable growth and development opportunities., • Make the Most of our Global Organization: Network with other new co-workers within your first 30 days through our onboarding program., • Connect with Your Community: Participate in internal, peer-led inclusive communities and activities, including business resource groups, local volunteering events, and more environmental and social initiatives. Don't meet every single requirement? Apply anyway. At TD SYNNEX, we're proud to be recognized as a great place to work and a leader in the promotion and practice of diversity, equity and inclusion. If you're excited about working for our company and believe you're a good fit for this role, we encourage you to apply. You may be exactly the person we're looking for!

TD SYNNEX (NYSE: SNX) is the world's largest IT distributor, adopting AI at speed across Azure AI Foundry, AWS Bedrock, Copilot Studio, Databricks, and self-hosted agent environments. Our security model is runtime-first: instead of blocking AI adoption with slow approvals, we intercept, analyze, and enforce at the moment of execution — which means high-quality monitoring, triage, analytics, and reporting are what keep the system honest.As our AI and Cloud Security Analyst, you provide day-to-day L2 coverage of the AI security detection fabric — triaging and supporting investigation of AI-specific detections from runtime defense, behavioral/intent monitoring, model-security, and adversarial-testing platforms. You turn that telemetry into insight through data analytics and produce the OCR (operational, compliance, and risk) reporting that gives leadership, control owners, and auditors a continuous picture of AI and cloud risk. You also help monitor the security posture of our Azure, AWS, and GCP environments. You escalate to a dedicated L3 engineer and work alongside two AI & Cloud Security Architects.The analyst will report to AI & Cloud Security leadership and have strong working relationships with other Cybersecurity, IT and application development teams.ResponsibilitiesL2 coverage of the AI Security toolset. Monitor AI security detections across the detection fabric — runtime defense/AIDR events, intent and behavioral anomalies, model-level detections, and adversarial-testing signals. Validate detections, classify severity and impact, propose and implement policy updates, and escalate complex cases to L3 with complete, reusable context.Investigate AI-specific events across all five AI archetypes (embedded SaaS copilots, low-code/no-code agents, homegrown agentic pipelines, device-based coding agents, homegrown models): direct and indirect prompt injection, jailbreaks, sensitive-data leakage, RAG poisoning indicators, unauthorized MCP/tool activity, agent hijacking, and rogue or overprivileged agent behavior — using prompt/response logs, decision traces, identity context, and agent inventory the AI asset-intelligence layer: help maintain agent inventory hygiene, ownership attribution, MCP registry accuracy, and risk-scoring context that feeds runtime enforcement decisions and fast-track approval workflows.Data analytics. Query and correlate AI and security telemetry (KQL), identify anomalies and attack patterns, and build/maintain dashboards tracking the program's key metrics — detection volumes, runtime containment rate, mean time to detect/contain/resolve, agent-visibility coverage, approval-SLA performance, and top policy-violation categories — feeding tuning recommendations back to the L3 engineer.OCR reporting (operational, compliance, and risk). Produce recurring dashboards and executive summaries communicating AI-security posture, KPIs, and trends to stakeholders and control owners; support automated NIST AI RMF compliance evidence generation and audit/regulatory reporting, including EU AI Act–related evidence for EU scope.Maintain rigorous case documentation and shift/handover notes; contribute observed patterns to detection-rule tuning, runbook refinement, and the closed-loop improvement cycle (red-team findings policy and detection updates re-test validation).Build working fluency in the OWASP Top 10 for LLM Applications 2025, the OWASP Top 10 for Agentic Applications, and MITRE ATLAS as the shared investigation taxonomy.Monitor and triage cloud security alerts across Azure, AWS, and GCP from company CSPM platform — misconfigurations, security risks, exposed resources, excessive permissions, workload threats — and route, remediate, or escalate per playbook.Support cloud compliance monitoring and reporting against CIS Benchmarks and NIST 800-53 r5 / CSF 2.0 baselines, tracking remediation to closure and integrating cloud posture into the consolidated OCR reporting. Support L3 engineer with policy with cloud workload vulnerability triage (VMs, containers, images) and with Microsoft 365 / Google Workspace security-signal review.Partner with the L3 engineer, SOC, cloud teams, and incident responders on investigations and enrichment spanning cloud, identity, endpoint, and AI telemetry.Critical SkillsSolid security operations fundamentals: alert monitoring, triage, validation, incident classification, escalation, and case management against SLAs, working from runbooks in a follow-the-sun/handover model.Strong data analytics and reporting: KQL (and/or SQL) for querying and correlation; dashboard and report development; the ability to turn telemetry into clear, decision-ready operational, compliance, and risk reporting.Foundational AI/GenAI security awareness: LLM risks (prompt injection, jailbreaks, data leakage), agentic AI and MCP concepts, AI guardrails, and familiarity with the OWASP LLM Top 10 and MITRE ATLAS. Exposure to AI security platforms is a strong plus.Working knowledge of cloud security in at least one of Azure/AWS/GCP (multi-cloud exposure preferred), including CSPM/CWPP concepts and cloud identity basics.Scripting for automation and enrichment (PowerShell and/or Python).Familiarity with CIS Benchmarks and NIST (800-53, CSF); awareness of NIST AI RMF and the EU AI Act is beneficial, particularly for EU-based rigor, attention to detail, and clear English communication across a globally distributed team spanning multiple time zones.ExperienceSOC, security operations, cloud security, or security-analyst role with hands-on monitoring, triage, and investigation experience; exposure to AI/GenAI security is an advantage.Demonstrable experience producing analytics, dashboards, and reporting from security telemetry for technical and executive audiences.Experience supporting compliance or audit evidence collection (NIST, CIS, ISO, or similar) is a plus.Certifications are an advantage, not mandatory: CompTIA Security+, CySA+, SC-200, SC-900, AZ-500, AWS or GCP security/foundational credentials; AI-security coursework or credentials are a plus.Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent practical experience.Working conditionsWilling to work nonstandard business hours for projects, business impact issues and incident response.Some travel required.Flexible remote work.At Tech Data, a TD SYNNEX Company, our values guide everything we do: Together, We Own It, We Dare to Go, We Grow and Win, and above all, We Do the Right Thing. These principles shape how we work with each other, our partners, and our communities as we drive innovation and create lasting impact.What’s In It For You?Elective Benefits: Our programs are tailored to your country to best accommodate your lifestyle.Grow Your Career: Accelerate your path to success (and keep up with the future) with formal programs on leadership and professional development, and many more on-demand courses.Elevate Your Personal Well-Being: Boost your financial, physical, and mental well-being through seminars, events, and our global Life Empowerment Assistance Program.Diversity, Equity & Inclusion: It’s not just a phrase to us; valuing every voice is how we succeed. Join us in celebrating our global diversity through inclusive education, meaningful peer-to-peer conversations, and equitable growth and development opportunities.Make the Most of our Global Organization: Network with other new co-workers within your first 30 days through our onboarding program.Connect with Your Community: Participate in internal, peer-led inclusive communities and activities, including business resource groups, local volunteering events, and more environmental and social ’t meet every single requirement? Apply anyway. At Tech Data, a TD SYNNEX Company, we’re proud to be recognized as a great place to work and a leader in the promotion and practice of diversity, equity and inclusion. If you’re excited about working for our company and believe you’re a good fit for this role, we encourage you to apply. You may be exactly the person we’re looking for!We are an equal opportunity employer and committed to building a diverse team that represents and empowers a variety of backgrounds, perspectives, and skills. All qualified applicants will receive consideration for employment based on merit, without regard to race, colour, religion, national origin, gender, gender identity or expression, sexual orientation, protected veteran status, disability, genetics, age, or any other characteristic protected by law. To support our diversity and inclusion efforts, we may ask for voluntary gender disclosure information. This data will be used solely to improve our hiring practices and ensure fair treatment for all candidates. SummaryLocation: Chennai, India; San Jose, Costa Rica; Remote, Europe; Barcelona, SpainType: Full time

Job ID: R-151583Company: NTT DATALocation: Barcelona, SpainEmployment type: full timeCategory: Technical EngineeringIndustry: Professional ServicesPosted: 2026-10-15 Make an impact with NTT DATA Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion – it’s a place where you can grow, belong and thrive. Your day at NTT DATA The Senior Associate Collaboration Technical Services (TS) Systems Integration Specialist is a developing subject matter expert, responsible for ensuring that client solution requirements are resolved in line with Service Level Agreements (SLAs). This role performs configurations, actions installations and attends to break/fix events. This role works towards associate to professional level certification, whilst at the same time developing business knowledge. Key responsibilities: • Owns larger portions of an installation, break/fix incidents at a low to medium level of complexity during project lifecycle, • Takes responsibility for problem resolution and troubleshooting during project lifecycle, • Escalates complex problems to the relevant third parties., • Assists with the documentation of standard operating procedures relating to installations and fixes during ops handover, • Compiles and maintains project administration (Time Capture and feedback to stakeholders), • Conducts elementary presentations within the customer's organization., • Expected to take leadership from senior resources on relevant technologies according to specialization and best practice., • Performs any other related task as required. To thrive in this role, you need to have: • Developing fundamental project and administration ability, • Developing understanding and appreciation of technical design principles and compute layers., • Ability to develop an understanding of fundamental project and administration processes., • Display a strong learning orientation., • Good verbal communication skills., • Demonstrate a client service orientation., • Hands-on proactive in approach., • Knowledge on security concepts and application of those concepts., • Ability in configuring/managing security controls, such as SIEM, Firewall, IDS/IPS, EDR, NDR, UTM, Proxy, SOAR, Honeypots, decoys, and other security tools., • Developing knowledge on log collection mechanism such as Syslog, Log file, DB API., • Developing knowledge in security architecture., • Developing knowledge on log collection mechanism such as Syslog, Log file, DB API., • Developing knowledge in security architecture., • Developing knowledge in ETL concepts, data processing at scale and data stream pipelines through Terraform., • Ability in cloud services on at least one of the following providers: AWS, Azure, GCP., • Developing knowledge web service protocols and frameworks for high-availability, low-latency, resiliency, and auto-scaling., • Developing understanding any of the following - Java, Python, TypeScript, JavaScript, R, .NET, PowerShell., • Developing knowledge in serverless development., • Analytical skills and ability to communicate effectively., • Ability to solve problems in innovative ways while adhering to industry standards and practices., • Developing understanding practices on securing data and systems by applying appropriate authentication and authorization controls., • Developing understanding of Event Driven Development and asynchronous operations., • Developing understanding project fundamentals which are demonstrated in the execution of installations and other assignments., • Developing knowledge of security technologies and understanding of managed services concepts Academic qualifications and certifications: • Bachelor's degree or equivalent in Information Technology or Computing or a related field., • Vendor certification is mandatory., • Azure Certified Security Engineer / PCNSA / FCA / CCNA Security., • Cloud Security certifications and certifications like AZ-500, SC-200, Security+, CEH, CISSP, CISM or similar Certification in different networking technologies such as CCDP /CCNP Security, JNCIA, ACCA, PCNSE, PCNSA, FCP, CCSA, ITIL, Azure Security Engineer, Azure Certified DevOps Engineer, Azure Certified Network Engineer, Azure Administrator Associate, will be an advantage., • Certifications relevant to the services provided (certifications carry additional weightage on a candidate’s qualification for the role) Terraform, Azure, Sentinel, EDR Defender for Cloud, Microsoft Security, Devops Ci/CD Pipelins, Azure Governance (Defender for Cloud, Azure Policies, Secure Score and Compliance), Version Control (Git), Microservices (Kubernetes, Azure Containers), Azure / AWS/ GCP Infrastructure (IaaS, PaaS, SaaS), Azure Infrastructure as Code, Azure Administration, Hybrid Cloud, Networking (Firewalls, LAN, VPN), Automation, MS Office365, Power BI Administration, Scripting (PowerShell), ZTNA. Required experience: • Moderate level experience in SOC Analysis Operations., • Moderate level experience in SIEM usage for Moderate level experience in Azure or AWS or GCP., • Moderate level experience in Security technologies like Firewall, IPS, IDS, Proxy etc., • Moderate level experience in technical support to clients., • Moderate level experience in handling security incidents end to end., • Moderate level experience in Security Analysis or Engineering, • Moderate level experience in configuring/managing security controls, such as SIEM, Firewall, IDS/IPS, EDR, NDR, UTM, Proxy, SOAR, Honeypots, and other security tools. Workplace type: Hybrid Working About NTT DATA NTT DATA is a $30+ billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world’s leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. Our consulting and industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 70 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is part of NTT Group, which invests over $3 billion each year in R&D. Equal Opportunity Employer NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us. Apply today. Third parties fraudulently posing as NTT DATA recruiters NTT DATA recruiters will never ask job seekers or candidates for payment or banking information during the recruitment process, for any reason. Please remain vigilant of third parties who may attempt to impersonate NTT DATA recruiters whether in writing or by phone in order to deceptively obtain personal data or money from you. All email communications from an NTT DATA recruiter will come from an @ email address. If you suspect any fraudulent activity, please contact us.

Descripción del puesto / FuncionesBuscamos un/a Encryption Security Analyst con experiencia en plataformas de cifrado y entornos de infraestructura para incorporarse a un proyecto internacional dentro del sector asegurador. Participarás en la evolución de la plataforma corporativa de cifrado, colaborando en la implantación de nuevas soluciones y garantizando la disponibilidad, seguridad y rendimiento de servicios clave para el negocio.Si te apasiona la ciberseguridad, la protección de datos y trabajar con tecnologías de cifrado de última generación, esta oportunidad es para ti.Formarás parte del programa global de Encryption, dando soporte tanto a la operación diaria como a proyectos estratégicos basados en Thales CipherTrust Manager (CTM) y Luna HSM, colaborando con equipos internacionales para garantizar la seguridad de la infraestructura de cifrado.Responsabilidades:Participar en la definición, análisis e implantación de nuevos casos de uso sobre la plataforma de cifrado.Colaborar en la migración de soluciones de cifrado entre diferentes plataformas (agent-based y agentless).Integrar la plataforma de Encryption con herramientas corporativas como:Privileged Account Management (PAM)SIEMGestión de parchesVirtual Hosts ConsoleDar soporte técnico en sesiones de diseño, implantación y resolución de incidencias.Identificar riesgos, incompatibilidades o bloqueos técnicos y proponer soluciones de mitigación.Gestionar la incorporación de nuevas aplicaciones a la plataforma corporativa de cifrado.Garantizar el correcto funcionamiento de la plataforma en términos de rendimiento, disponibilidad, resiliencia y cumplimiento de SLA.Monitorizar la plataforma y gestionar incidencias, problemas y solicitudes de servicio.Participar en la recertificación de los servicios de cifrado y asegurar el cumplimiento de las políticas de seguridad.Requisitos mínimosAl menos 5 años de experiencia en un entorno técnico relacionado con infraestructura o ciberseguridad.Conocimientos sólidos de:Administración de bases de datos (DBA).Sistemas IT.Framework ITIL.Experiencia trabajando en entornos corporativos complejos.Capacidad para colaborar con equipos técnicos internacionales.Requisitos valorablesExperiencia con Thales CipherTrust Manager (CTM).Conocimiento de Luna HSM.Experiencia en plataformas de cifrado empresarial y gestión de claves criptográficas.Participación en proyectos de integración de soluciones de seguridad.Conocimientos de tecnologías como DKE (Double Key Encryption) o Confidential Computing.Experiencia con herramientas de gestión del cambio, CMDB, gestión de incidencias y plataformas SIEM.IdiomasNivel de inglés técnico, tanto escrito como hablado.UbicaciónUbicación: Barcelona / Cornellà. Por qué nosotros?¡Un día libre por tu cumpleaños para que lo celebres como quieras!Mejoras en permisos retribuidos para un mejor equilibrio personal y profesional.Acceso a seguro médico privado para tu tranquilidad.Días de vacaciones extra según tu antigüedad, porque valoramos tu descanso y bienestar.En Pasiona apostamos por la diversidad y la igualdad de oportunidades.Animamos a postularse a todas las personas, con independencia de su género, edad, discapacidad, orientación sexual, identidad de género, origen étnico, religión u otras circunstancias personales o sociales. Quiénes somos?Pasiona Consulting es una consultora tecnológica, partner de Microsoft, dedicada al diseño, desarrollo e implementación de aplicaciones de software a medida para clientes de múltiples sectores.