Att jobs in BurjassotCreate job alerts

Anteriad is a B2B sales & marketing agency, working with some of the biggest names in the tech sector. With talented and ambitious people from 40 countries on staff, we work in a dynamic and creative environment where you can thrive. Here at Anteriad, we focus on the well-being of our employees and organize a number of team-building activities. You'll be based on our stunning campus in Las Rozas. We provide free transport from Moncloa, and you can enjoy a complimentary breakfast at the office, and train with our fitness class after work. Our roof terrace with mountain views is where we hold our weekly Friday BBQ, with delicious food and great conversation with colleagues from around the world . We are now looking for new key players to take part in our mission to change the industry, and to grow and evolve with us as an organization. Do you want to take this challenge with u s? The role of a Business Development Representative (BDR) consists of calling US companies and speaking to the IT managers. There is no selling on the phone. The aim of the call is to generate a "lead": setting up a meeting between the IT manager and our client's sales representative. During our signature Warm Handover™, you will work hand in hand with the sales experts from our clients - such as Intel, Dell, Fujitsu -, learning with the best of the best about the industry while building up your network of decision-makers around the glo be. Here’s what you’ll • do:Engage with key decision-makers: Connect and initiate conversations with IT managers on the phone to understand their current tech se, • tup.Spark interest: Present our client's innovative IT solutions and show how they can help in optimizing processes and increase productiv, • ity.Create high-value opportunities: Set up meetings between prospects and our client's sales experts to move the conversation forw ard.In order to prepare you to take on this role, we have an excellent four-week onboarding process to prepare you to excel as a BDR.Uncapped Commission Sys tem:Performance matters to us and it pays off.On average, our US team members earn €687 per month in incentives, which is an additional annual income of €8,244 on top of the base sal ary.High-performing colleagues with only one year of experience on our team earn over €840 monthly in compensati ons.Our commission model is uncapped – your commitment determines your success - the more leads you generate, the more money you earn, without a cap. Per iod. Your Pro • file:C2 En, • glishStrong communication and interpersonal s, • killsExperience in sales and/or telemarketing is a plus, but not a requir, • ementExperience in customer service is a plus, but not a requir, • ementPrevious CRM experience is desirable, but not a requir, • ementTarget-driven mentality & can-do att, • itudeAbility to work independently and as part of a, • teamThe place of residence must be in the Madrid region (Comunidad de Ma, • drid)Able to work in Spain legally (full- time)At Anteriad we guarantee access and recruitment processes that comply with the principle of equal treatment and opportunities, and we promote the balanced presence of women and men in all areas of the com pany. We may use artificial intelligence (AI) tools to support parts of the hiring process, which allows candidates to provide structured responses via an automated conversational tool. These tools assist our recruitment team but do not replace human judgement. Final hiring decisions are made by our team after reviewing all information. For full information on how your personal data is processed, your rights, and our Data Protection Officer's contact details, please rea_ Notice Anteriad promotes a work environment open for all, we encourage candidates with disabilities to apply. We want to work wi th you! Monday to Friday:14:00h – 20:00h (3 • 0 hours) Permanent • contractMonthly salary (ca. 1780€/month) + Uncapped commissi, • on systemInternal training provided by our Learning & Development d, • epartmentFlexibility: Option to work some days from home under the condition of comp, • any rulesGood working atmosphere/ International en, • vironmentTeam-building a, • ctivitiesFree transportation from Moncloa and from El Pinar de las Rozas’ Cercanías Station by Corpo, • rate Bus.Well-being initiatives: Free fitness courses and in-house phys, • iotherapyFree breakfast be, • fore workBarbecue on Friday a fternoons 21 .3 90€ /yearToThanks to our commission system, the monthly salary comes wi thout a cap

Anteriad – där innovation möter gemenskap! Vi är en ledande B2B-försäljnings- och marknadsföringsbyrå som samarbetar med några av världens största IT-företag. Hos oss blir du en del av ett internationellt team med kollegor från över 40 länder – en dynamisk och kreativ arbetsmiljö där idéer växer och människor utvecklas. Vad gör oss unika? • Fantastisk arbetsplats: Vårt moderna kontor i Las Rozas, strax utanför Madrid, erbjuder gratis daglig transport., • Starta dagen rätt: Njut av en kostnadsfri frukost varje morgon., • Fredagsfeeling: Avsluta veckan med BBQ på vår takterrass med utsikt över bergen – god mat och härliga samtal med kollegor från hela världen. Vi söker nu passionerade och drivna personer som vill vara med och förändra branschen tillsammans med oss. Hos Anteriad får du inte bara ett jobb – du får en möjlighet att växa, utvecklas och göra skillnad. Är du redo att ta nästa steg i din karriär? Kom och bli en del av vårt uppdrag. Tillsammans skapar vi framtidens B2B-marknadsföring! Arbetsbeskrivning Rollen som Business Development Representative (BDR) består av att ringa till företag i Norden, främst i Sverige, och prata med IT-chefer. Det förekommer ingen försäljning på telefon. Vårt jobb är att samla information genom att ställa rätt frågor om relevanta IT-relaterade ämnen. Målet med samtalet är att generera ett ”lead”: att boka in ett möte mellan IT-chefen och vår kunds säljrepresentant. Under vår signatur Warm Handover™ kommer du att arbeta hand i hand med försäljningsexperter från våra kunder - som Intel, Dell, Fujitsu - och lära dig det bästa av det bästa om branschen samtidigt som du bygger upp ditt nätverk av beslutsfattare runt om i världen. För att förbereda dig för att ta dig an denna roll har vi en utmärkt fyra veckors onboardingprocess för att förbereda dig för att utmärka dig som en Anteriad BDR. Obegränsat provisionssystem Som BDR på Anteriad skapar du din egen lycka. Vårt provisionssystem utan tak innebär att ju fler leads du genererar, desto mer pengar tjänar du. De tre nivåerna av provision per lead skapar en progressiv struktur som gör det möjligt för BDR att sätta upp och uppnå mål. Detta uppmuntrar inte bara konsekvent hög prestanda utan ger också en väg för professionell tillväxt inom organisationen. Under rekryteringsprocessen kan vi komma att använda artificiella intelligensverktyg (AI) för att granska ansökningar, analysera CV:n eller bedöma svar. Dessa verktyg stödjer vårt rekryteringsteam men ersätter inte mänskligt omdöme. Slutliga anställningsbeslut fattas alltid av människor. Om du vill ha mer information om hur dina uppgifter behandlas är du välkommen att kontakta oss. Din profil: • Modersmålsnivå i svenska, • Engelska på hög nivå, • Hög nivå av norska, danska eller finska är ett stort plus, • Erfarenhet av försäljning och/eller telemarketing är ett plus, • Målstyrd mentalitet och kan-göra-attityd, • Möjlighet att arbeta lagligt i Spanien På Anteriad säkerställer vi att tillgången till våra rekryteringsprocesser sker i enlighet med principen om likabehandling och lika möjligheter. Vi främjar även en jämn representation av kvinnor och män inom alla delar av företaget. Vi kan använda verktyg baserade på artificiell intelligens (AI) för att stödja delar av rekryteringsprocessen. Dessa verktyg gör det möjligt för kandidater att lämna strukturerade svar via ett automatiserat konversationsverktyg. Verktygen fungerar som ett stöd för vårt rekryteringsteam men ersätter inte mänskligt omdöme. Det slutliga rekryteringsbeslutet fattas alltid av vårt team efter en samlad bedömning av all tillgänglig information. För fullständig information om hur vi behandlar dina personuppgifter, vilka rättigheter du har samt kontaktuppgifter till vårt dataskyddsombud, vänligen läs vårt_ Anteriad främjar en inkluderande arbetsmiljö där alla är välkomna. Vi uppmuntrar personer med funktionsnedsättning att söka våra tjänster. Vi ser fram emot att få arbeta tillsammans med dig! Måndag till torsdag: 08:00h – 17:00h (1 timmes lunch) Fredag: 08:00h – 14:00h • Tillsvidareanställning, • Månadslön (ca 1780€/månad) + Obegränsat Provisionssystem, • Möjlighet att arbeta hemifrån vissa dagar under förutsättning att företagets regler följs, • Intern utbildning som tillhandahålls av vår Learning & Development -avdelning, • Bra arbetsatmosfär - människor från hela världen, • Gratis lektioner i spanska, • Gratis yoga- och fitnesskurser + gratis tillgång till företagets fysioterapeut, • Fri tillgång till lärplattform (Skillsofts Percipio), • Grillfest på fredag eftermiddag, • Gratis transport från Moncloa och från El Pinar de las Rozas Cercanías Station med företagsbuss. Anteriad främjar en arbetsmiljö som är öppen för alla, vi uppmuntrar kandidater med funktionsnedsättning att ansöka, vi vill arbeta med dig! 21.390€ /år till Tack vare vårt provisionssystem kommer månadslönen utan tak

🛡️ Microsoft Sentinel Security Engineer 📍 Remote | 🌍 International Project | 🗣️ Spanish Required At wBrain, we are looking for an experienced Microsoft Sentinel Security Engineer to join an international cybersecurity project. This role is ideal for professionals with strong expertise in Microsoft Sentinel, SIEM/SOAR technologies, and cloud security, who are looking to work in a fully remote and collaborative environment. 🎯 Responsibilities • Design, implement, and maintain Microsoft Sentinel solutions., • Develop and optimize analytics rules, workbooks, watchlists, and automation playbooks., • Integrate security logs from cloud, on-premises, and third-party environments., • Investigate security incidents and support threat detection and response activities., • Fine-tune detection rules to reduce false positives and improve SOC efficiency., • Collaborate with cybersecurity, infrastructure, and cloud teams to strengthen the organization's security posture., • Produce technical documentation and operational procedures., • Support continuous improvement of security monitoring and incident response capabilities. ✅ Requirements • Proven experience working with Microsoft Sentinel., • Strong knowledge of SIEM and SOAR concepts., • Experience with Microsoft Defender XDR and the Microsoft Security ecosystem., • Hands-on experience with Kusto Query Language (KQL)., • Experience creating Analytics Rules, Workbooks, Automation Rules, and Playbooks., • Knowledge of Microsoft Azure security services., • Experience integrating multiple log sources into Sentinel., • Understanding of incident response and threat detection methodologies., • Excellent analytical and problem-solving skills., • Ability to work independently in a remote international environment. 🌟 Nice to Have • Microsoft security certifications (SC-200, AZ-500, SC-100 or similar)., • Experience in SOC environments., • Knowledge of Microsoft Defender for Cloud., • Familiarity with Logic Apps and automation., • Experience with MITRE ATT&CK framework., • Scripting knowledge (PowerShell or Python). 🌍 Languages • Spanish – Mandatory, • English – Professional working proficiency ℹ️ Opportunity Details • Location: Remote ( Must be in Spain ), • Project: International, • Contract: Full-time, • Start Date: ASAP 📩 Apply Now If you're interested in this opportunity, please send your CV to andre.cabral@workerbrain.com with the subject: Microsoft Sentinel Security Engineer

Company Background Kudelski Security is a leading cyber security solutions company, providing a combination of consulting, technology, managed services, and innovation to enterprise and public sector clients around the world with a relentless commitment to developing & delivering innovative solutions to our clients. Kudelski Security has built a set of cyber capabilities within Europe and the United States and has been successful in developing a strong cyber presence in both regions. We intend to continue to grow our business globally, largely through expansion of our Managed Detection and Response (MDR) offerings. Our MDR solutions leverage a combination of market-leading cybersecurity technologies that are integrated with our own proprietary systems. Position Summary As a member of the Product Management team, the MRX Architect will act as our Subject Matter Expert for Kudelski Security's Managed Risk and Exposure (MRX) offering, our umbrella of services covering Continuous Threat Exposure Management (CTEM), spanning attack surface and exposure management, risk-based vulnerability management (RBVM), credential leak and identity exposure monitoring, and posture management. The architect will be responsible for evaluating new technology, understanding capabilities, and working to automate the deployment and management of the technology at scale, end-to-end. A key focus of the role is defining and driving the dynamics between MRX and our MDR offering, including data and signal sharing in both directions to ensure the two offerings work together as a cohesive, unified capability. To succeed, the architect will collaborate very closely with the Product, Operational, Detection, Engineering and GTM teams. Responsibilities • Own and be fully responsible for the end-to-end technical and operational integration of CTEM technologies (exposure management, RBVM, credential leak/identity exposure, cyber threat & campaign intelligence and posture management) into our MRX backend platform and services., • Act as our internal SME on the CTEM domain, staying current on the market, vendor capabilities, and emerging exposure management practices., • Define and drive the dynamics between MRX and MDR, including the design of bi-directional data and signal sharing., • Evaluate new exposure management, RBVM, credential leak, posture management and CRQ products and features for potential integration into Kudelski Security's offerings, in close collaboration with the Product Management team., • Contribute to the overall MRX strategy with the Product team, advocate for its implementation, and support alignment across teams to meet strategic objectives., • Assess the risk visibility, prioritization, and exposure reduction capability of new technologies Kudelski Security may integrate, in collaboration with the MDR Detection Engineering team., • Understand and mitigate technical and operational hurdles to integrating CTEM technologies, in collaboration with the platform and service architects., • Collaborate with Engineering on the implementation of MRX services, ensuring solutions for integrated technologies are designed and built to scale., • Ensure the smooth transition of newly integrated technology into day-to-day MRX operations, collaborating with cross-functional groups., • Act as the technical point of contact with our exposure management and RBVM technology partners, partnering with Product Management to influence roadmap and integration priorities. Your Key Qualities and Skills • Passionate about cyber security and the development of new solutions to the growing cyber threats that organizations face., • 5 to 8 years of hands-on professional experience in cybersecurity engineering, with proven expertise in designing, integrating and implementing secure systems., • Hands-on experience with tools supporting CTEM methodologies such as risk-based vulnerability management, attack surface/exposure management, breach simulation & attack path analysis, credential leak or identity exposure monitoring, or posture management., • Hands-on experience with one or more exposure management/RBVM vendors is a huge plus (e.g. Tenable, Qualys, Rapid7, CrowdStrike Falcon Exposure Management, Microsoft Security Exposure Management)., • Understanding of how exposure/risk data can be integrated with detection and response (MDR) workflows is a huge plus., • Experience in an MDR / MSSP environment is a huge plus., • Hands-on and interested in the “nuts and bolts” of how to integrate technology into an MRX offering that is designed for scale and efficiency., • Self-motivated, self-directed, and highly motivated proven technology professional familiar with agile development and the Cyber Security / Innovative Technology industry., • Experience with scripting and automation., • Able to work internally and externally to drive the integration of new technology into our capabilities., • A strong understanding of MITRE ATT&CK., • Successful track record of designing and implementing tools and systems to support Security Operations Centers (SOCs.), • Ability to plan and execute at both strategic and operational levels., • Ability to explain complex technical topics in a clear and simple manner, ensuring understanding across both technical and non-technical stakeholders., • Strong verbal and written communication skills. Why you’ll love it here If you are seeking a culture that supports growth, fosters success, and moves the industry forward, then Kudelski is where you need to be! Our rich and successful history with our clients is based on innovation and trust, serving clients of varying sizes and industries, including commercial, government and education. Kudelski remains committed to advocating Diversity, Equity, and Inclusion within our organization and throughout the industry. With Kudelski, you can expect • Immersion in an incredible culture and the vibe of a fast moving and growing organization full of opportunity., • Opportunity to work with innovative, talented peers., • Creative problem-solving and the ability to tackle unique, complex projects., • Competitive compensation with a benefits package that protects you and your loved ones and allows you to pursue career growth with tuition reimbursement., • Generous time off for rest, relaxation, and hobbies., • Colleagues from across the globe are interested in helping clients protect their companies so they can focus on fulfilling their mission. Kudelski Security is an equal opportunity employer. All qualified applicants for employment will be considered without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, status as an individual with a disability, veteran status, or any other basis protected by federal, state, or local law. EEO M / F / D / V

¿Te interesaría seguir desarrollándote como Especialista en Cyberseguridad OT/IT en una empresa industrial líder focalizada en el desarrollo tecnológico de alto valor añadido dentro del sector de las energías renovables? Desde Oxigent Technologies seleccionamos un/a Especialista en Cyberseguridad OT/IT para actuar como referente técnico de ciberseguridad, liderando la arquitectura de seguridad OT/IT, los servicios gestionados sobre la suite Fortinet y la implantación de modelos SecDevOps e IA segura. ¿Cuáles serán tus funciones principales? • Liderar y gestionar los Servicios Gestionados Fortinet: Actuar como referente técnico de la suite completa (FortiGate, FortiManager, FortiEDR, FortiSASE, FortiAI, etc.), evolucionando el modelo MSS (SLAs, playbooks, SIEM/SOAR) y realizando troubleshooting avanzado., • Definir la arquitectura de seguridad OT/IT: Asesorar de forma remota en el diseño de nuevas plantas e infraestructuras renovables bajo normativas como IEC 62443 y MITRE ATT&CK for ICS, incorporando requisitos técnicos en contratos de fabricantes SCADA/DCS., • Asegurar la conformidad y el análisis de riesgos: Mantener el modelo de amenazas alineado con marcos normativos clave (NIS2, ENS, ISO 27001, CRA)., • Implementar prácticas SecDevOps: Integrar SAST/DAST en pipelines CI/CD, gestión de secretos y seguridad como código (IaC security, policy-as-code) en entornos híbridos GCP y Azure., • Gestionar Identidad, Accesos y Gobierno de Datos/IA: Diseñar esquemas de MFA, PAM y OS Login para usuarios privilegiados, operar Microsoft Purview / Entra ID y definir el marco de gobierno para el despliegue seguro de IA y agentes de IA (EU-AI Act)., • Auditar comunicaciones e interfaces industriales: Diseñar la conectividad segura de las plantas (SD-WAN, VPN IPsec/SSL) y asegurar los protocolos OT/ICS (Modbus TCP, DNP3, IEC 61850, OPC-UA). Para ello, ¿qué vas a necesitar? • +7 años de experiencia en ciberseguridad, con al menos 4 años en entornos OT/ICS dentro de infraestructuras críticas (energía, utilities o industria)., • Experiencia demostrable con plataformas Fortinet en entornos productivos de alta disponibilidad., • Implantaciones reales de SecDevOps (SAST/DAST, IaC) y dominio técnico de entornos Azure / M365 / GCP., • Conocimientos sólidos en regulación y cumplimiento: NIS2, ENS, ISO 27001, CRA y EU-AI Act., • Manejo avanzado de herramientas de Identidad y Gobierno (Microsoft Purview, Sentinel, Entra ID, PAM/MFA) y protocolos industriales (OPC-UA, IEC 61850, Modbus TCP, DNP3)., • Ingles B2. ¿Qué te ofrecemos? • Contratación indefinida a través de Oxigent., • Salario acorde a la experiencia aportada (hasta 64.000 euros brutos al año)., • Horario flexible de entrada y salida., • Modalidad de trabajo Hibrida., • Cheque Formación para desarrollarte en las áreas profesionales que más te interesen., • Seguro médico privado., • Retribución flexible aplicable a seguro médico, restaurante, transporte, guardería y formación., • Aplicación de acceso a gimnasios y actividades deportivas en toda España con descuentos. ¡Únete a nuestro equipo! Una empresa comprometida con la sostenibilidad, la innovación tecnológica y la igualdad de oportunidades.

—¿Cómo me has encontrado? —Todavía no te había encontrado. Solo estaba buscándote. —Pero... si no había generado ninguna alerta. —Precisamente. 😎 Si has sonreído al leer esta conversación, probablemente entiendas muy bien de qué va este puesto. Seguro que alguna vez has pensado que la mejor amenaza es la que nadie sabe que está ahí... En PROCESIA buscamos un/a Consultor/a Experto/a Threat para incorporarse a un proyecto estratégico de ciberseguridad, donde el objetivo no es esperar a que ocurra un incidente, sino adelantarse a él. Y ¿Qué harás? Buscarás aquello que otros mecanismos todavía no han visto. • Desarrollarás campañas de Threat Hunting, formularás hipótesis de investigación basadas en MITRE ATT&CK, analizarás comportamientos anómalos en red y endpoints, investigarás amenazas persistentes avanzadas (APT) y contribuirás a mejorar continuamente la capacidad de detección del SOC., • También trabajarás con tecnologías y herramientas como GLORIA, CARMEN, microCLAUDIA, MARTA, MARIA, analizadores de red y fuentes de inteligencia procedentes de CERTs, CSIRTs y OSINT, colaborando estrechamente con el resto del equipo especializado para transformar cada investigación en nuevas capacidades de detección. ¿Qué buscamos? • Queremos conocerte si cuentas con una sólida experiencia en Threat Hunting, investigación avanzada de amenazas, diseño y despliegue de unidades de caza, identificación de amenazas persistentes avanzadas y aplicación del marco MITRE ATT&CK., • Valoraremos especialmente certificaciones como CTIA (Cyber Threat Intelligence Analyst) o MAD (Threat Hunter - MITRE ATT&CK Defender). ¿Qué encontrarás en PROCESIA? Un proyecto estable, 100 % remoto, donde investigar, cuestionar y aprender forman parte del trabajo diario. Contrato indefinido desde el primer día, seguro médico privado, clases de inglés, apoyo a certificaciones, plan de carrera que no acompañan de un power point y un equipo que entiende que las mejores investigaciones no siempre empiezan con una alerta... sino con una buena pregunta.

Your Mission As a Tier 2 SOC Analyst, you will serve as a subject matter expert in our technology stack while optimizing security tools and detection workflows, mentoring junior analysts on complex investigation techniques, and driving continuous improvement initiatives across our multi-client SOC environment. This role demands advance analytical skills to conduct in-depth analysis of escalated security incidents from Tier 1 analysts, performing advanced threat investigations to determine attack vectors, assess impact scope, and develop comprehensive remediation strategies. Your responsibilities will be: • General responsibilities, • Use AI to support continuous improvement work: refining incident templates, proposing workflow enhancements, and contributing to SOP updates., • Propose enhancement on tools and workflow, • Respond in a timely manner (within documented SLA) to support tickets., • Document actions in tickets to effectively communicate information internally and to customers., • Adhere to policies, procedures, and security best practices., • Take responsibility for customer satisfaction and overall success of managed services., • Be available, ready, and able to accept incoming clients calls, • Mentor fellow Security Engineers and Security Analysts., • Service improvement, • Optimize SIEM rules and detection logic to reduce false positives and improve detection accuracy Support rules factory program in improving the global set of detection, • Validate Go-to-Active and Go-to-Prod gates of our new clients to ensure a smooth transition to operation, • Continuously improve incident templates in terms of content for the clients and in terms of, • automation to best support the operation, • Support rollout of new set of rules for our clients, • Qualify, analyze, and provide recommendations for new standard data source requests, • Support Product teams to build best new services to fit with Operations capabilities (needs,, • scalability, efficiency), • Threat Monitoring, • Manage escalated cases from T1 Analysts, • Analyze and respond to security events from SIEM, EDR, FWs, IDS, IPS, AV and other security data, • sources., • Use approved AI tools to summarize complex incident timelines and consolidate evidence across sources (SIEM/EDR/network) to speed up escalated investigations., • Use AI-assisted analysis to identify patterns, likely attack paths, and investigation hypotheses, supporting deeper incident scoping and threat hunting activities., • Deliver high quality Incident Handling and investigation, • Conduct threat hunting activities using advanced analytics and threat intelligence, • Provide 24/7 on-call support for critical security incidents outside business hours You are • A team-player willing to iterate on our internal processes to improve the team’s efficiency, • Experience in international/global environment, • At ease with solving complex problems, • Dynamic, with strong interpersonal and communication skills, • Autonomous, self-taught and transparent, • Able to handle and prioritize parallel tasks with multiple interfaces, • Fluent in English You have • Minimum 4 years of hands-on experience in cybersecurity operations, incident response, or threat analysis, bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or equivalent experience and, • Proven track record in a SOC and international/global environment, • Advanced proficiency with SIEM platforms (Splunk, QRadar, Sentinel, etc.), • Extensive experience with EDR/XDR solutions (CrowdStrike, SentinelOne, Microsoft Defender, etc.), • Deep understanding of network security technologies (firewalls, IDS/IPS, network monitoring), • Strong knowledge of Windows and Linux/Unix operating systems and forensics, • Experience with cloud security (AWS, Azure, GCP) and containerization technologies, • Familiarity with OT/ICS environments and industrial control systems security, • Proficiency in scripting languages (Python, PowerShell, Bash) for automation, • Understanding of threat intelligence platforms and MITRE ATT&CK framework, • Spanish or any other language Why you’ll love it here If you are seeking a culture that supports growth, fosters success, and moves the industry forward, then Kudelski Security is where you need to be! As the premier provider of cybersecurity service and solutions, Kudelski Security has the most comprehensive ecosystem of security products and partners to deliver unparalleled services. Our rich and successful history with our clients is based on innovation and trust, serving clients of varying sizes and industries, including commercial, government and education. We have the proven expertise to plan, build, and run successful security programs across Data & Cloud security, Application Security, Microsoft 365 security, Data Privacy, Managed Security services, and IoT/OT security. Kudelski remains committed to advocating Diversity, Equality, and Inclusion within our organization and throughout the industry. With Kudelski, you can expect • Immersion in an incredible culture and the vibe of a fast moving and growing organization full of opportunity., • Opportunity to work with talented peers., • Creative problem-solving and the ability to tackle unique, complex projects., • Competitive compensation with a benefits package that protects you and your loved ones and allows you to pursue career growth with tuition reimbursement., • Generous time off for rest, relaxation, and hobbies., • Colleagues from across the globe who are interested in helping clients protect their companies so they can focus on fulfilling their mission. About Kudelski Security Kudelski Security, a division of the Kudelski Group (SIX: KUD.S), is an innovative, independent Swiss provider of tailored cyber and media security solutions to enterprises and public sector institutions. Our team of security experts delivers end-to-end consulting, technology, managed services, and threat intelligence to help organizations build and run successful security programs. Our global reach and cyber solutions focus is reinforced by key international partnerships. Kudelski Security is headquartered in Phoenix, Arizona and Cheseaux-sur-Lausanne, Switzerland. For more information, please visit: www.kudelskisecurity.com

Querido Consultor SIEM: Soy el SIEM con el que podrías trabajar si decides venir a PROCESIA. Llevo tiempo haciendo aquello para lo que fui diseñado: recibir millones de eventos, analizarlos, correlacionarlos y ayudar a detectar aquello que no debería pasar desapercibido. Pero lo mejor de mi trabajo nunca ha dependido solo de la tecnología: • Siempre ha dependido de las personas que están al otro lado., • De quienes saben cuándo una nueva fuente de información puede marcar la diferencia., • De quienes convierten una regla en una detección útil., • De quienes revisan, ajustan, optimizan y vuelven a empezar porque saben que una buena capacidad de detección nunca está terminada. Tengo la suerte de formar parte de un proyecto donde evolucionar no es una excepción, sino la forma habitual de trabajar. Y ahora estoy buscando a la próxima persona con la que seguir creciendo. ¿Cómo me imagino a quien ocupará este puesto? • Alguien con experiencia administrando plataformas SIEM de forma avanzada., • Que disfrute integrando nuevas fuentes de información, normalizando datos y desarrollando reglas de correlación que realmente aporten valor., • Que conozca el marco MITRE ATT&CK y entienda que una buena cobertura de detección siempre puede mejorarse., • Certificaciones como Splunk Enterprise Security Certified Admin, IBM QRadar SIEM, Microsoft SC-200, CrowdStrike Certified Falcon Administrator, Cortex XSIAM o BTL2. ¿Y qué puedo ofrecerte? • Un proyecto estable donde nunca dejaré de darte nuevos retos., • Un equipo especializado que comparte conocimiento y con el que aprenderás tanto como yo aprenderé contigo., • Trabajaremos 100 % en remoto, con la flexibilidad necesaria para que puedas centrarte en lo importante., • Además, me acompañarás mientras sigo creciendo con nuevas integraciones, casos de uso y capacidades de detección, utilizando tecnologías como GLORIA, CARMEN y otras plataformas de monitorización e integración., • Y, aunque esto ya no depende de mí, quienes me rodean en PROCESIA también quieren ponértelo fácil: contrato indefinido desde el primer día, seguro médico privado, clases de inglés, apoyo para certificaciones técnicas, plan de carrera personalizado y un entorno donde las ideas tienen tanto valor como la experiencia. Antes de despedirme... Dicen que una buena plataforma SIEM es la que pasa desapercibida porque todo funciona como debe. Yo prefiero pensar que una buena plataforma SIEM es la que tiene la suerte de contar con las personas adecuadas detrás. Ojalá una de ellas seas tú. Te estaré esperando.

Arkia Digital es un holding de negocios digitales con más de 20 años de experiencia y presencia en más de 60 mercados. Bajo el paraguas de Arkia conviven cuatro compañías especializadas: Linkadia (user acquisition mobile y adtech), WEN (Agencia Digital y venture partner), Kyomu (laboratorio de producto digital B2C B2B) y Summer (agencia creativa y experiencial). Juntas, desarrollamos, escalamos y monetizamos productos y servicios digitales, tanto propios como de nuestros clientes. Buscamos un/a Head de Apps con experiencia real gestionando el ciclo de vida completo de apps nativas: lanzamiento, ASO, monetización in-app (suscripción, freemium, ads), integración de MMPs (AppsFlyer, Adjust, Kochava, Singular, etc.) y cumplimiento de políticas de Apple App Store y Google Play. No buscamos un perfil de estrategia de negocio generalista, buscamos a alguien que haya vivido dentro de App Store Connect y Google Play Console, que sepa leer un dashboard de atribución por sí solo y entienda por qué una app cae de ranking de un día para otro. El rol lidera el departamento de Apps dentro de Arkia y tiene autonomía real: define el modelo, construye el equipo que necesite (implementación en clientes y estructura interna propia) y responde directamente ante la dirección del grupo. ¿QUÉ HARÁS? Lanzamientos propios con Kyomu: • Definición del modelo de monetización in-app (suscripción, paid, freemium, ads), pricing y paywall design, • Conceptualización y roadmap de producto para nuevos lanzamientos, • Decisiones de negocio sobre qué apps se lanzan, cuándo y con qué estructura de ingresos, • Integración de tecnologías de terceros (SDK, MMP, Ads solutions, etc.) y propias para su correcta ejecución Gestión de apps de clientes con Linkadia: • ASO técnico: keywords, creative testing, experimentos de store listing, • Gestión de campañas de UA coordinado con el departamento de Tráfico: Meta, Google Ads, TikTok Ads, Programática, CTV, etc…, • Integración y QA de SDKs de atribución (MMPs) y resolución de problemas de tracking, • Estrategia de crecimiento y publicidad adaptada a cada cliente Red propia de distribución • Apertura y gestión de una red de distribución de apps con y sin MMP, en modelo indirecto (no cliente final), comisionando por volumen, • Relación directa con desarrolladores de apps para captación y promoción, tanto de forma directa como a través de la red (Arkia Apps Network), • Desarrollo de negocio y función comercial activa Equipo • Construcción del equipo necesario según las necesidades del departamento, tanto para implementación en clientes como a nivel interno ¿QUÉ BUSCAMOS? • 3-5+ años gestionando apps nativas en producción (no solo producto web o webapps), • Experiencia demostrable con al menos un MMP (AppsFlyer, Adjust, Kochava o similar), • Conocimiento profundo de las políticas y mecánicas de Apple App Store y Google Play: proceso de revisión, in-app purchases, suscripciones server-side, ATT/privacy, • Experiencia gestionando monetización in-app en sus distintos modelos (suscripción, freemium, ads), • Visión de negocio y autonomía para tomar decisiones sin supervisión constante, • Capacidad para construir y liderar equipo, • Disponibilidad para viajar a eventos del sector ¿QUÉ OFRECEMOS? • Puesto de liderazgo con autonomía real sobre el departamento y su equipo, • Exposición internacional: eventos del sector, relación directa con desarrolladores y partners globales, • Formar parte de un grupo con verticales complementarias (UA/adtech, growth, producto B2C, creatividad) y capacidad de ejecución rápida Si te motiva construir un negocio desde cero, liderar un equipo y asumir un rol con impacto directo en el crecimiento de la compañía, ¡queremos conocerte!

About HBX Group HBX Group is a leading independent B2B travel technology marketplace connecting travel businesses globally through advanced technology, data-driven solutions, and a network of interconnected products and services. Our Cyber Security team is responsible for protecting global platforms, cloud infrastructure, corporate environments, data assets, and emerging AI-enabled services. Role Overview The Red Team Security Expert is responsible for proactively assessing and validating HBX Group's security posture across corporate, cloud, application, and AI-enabled environments. The role combines penetration testing, adversary emulation, offensive security assessments, Purple Team activities, security research, and AI security testing. The successful candidate will work closely with Blue Team, Security Architecture, DevOps, Engineering, Data, and AI teams to identify weaknesses, validate security controls, and strengthen cyber resilience. Offensive Security Assessments • Conduct penetration testing activities across web applications, APIs, cloud platforms, infrastructure services and corporate environments., • Identify, validate and assess security vulnerabilities, attack paths and exposure risks affecting business services and technology platforms., • Perform security assessments throughout the technology lifecycle to support secure development and deployment practices., • Collaborate with engineering and infrastructure teams to ensure vulnerabilities are effectively remediated and validated. AI Security & Emerging Threats • Assess risks related to Generative AI, Large Language Models (LLMs), AI agents, and machine learning systems., • Identify and mitigate threats such as:, • Prompt injection attacks, • Data poisoning, • Model manipulation, • AI supply chain attacks, • Sensitive data leakage through AI platforms, • Shadow AI usage, • Partner with AI and Data teams to implement secure-by-design AI solutions., • Contribute to AI governance, monitoring, and security controls., • Stay up to date on emerging AI security frameworks and industry best practices. Adversary Emulation & Red Team Operations • Plan and execute realistic Red Team engagements that emulate real-world threat actors and attack scenarios., • Leverage MITRE ATT&CK methodologies to assess detection, prevention and response capabilities., • Evaluate security controls across on-premises, cloud and hybrid environments., • Support cyber resilience initiatives through controlled attack simulations and adversary emulation exercises. Application Security & Code Review • Perform web application, API and source code security assessments., • Identify weaknesses associated with authentication, authorisation, session management and secure coding practices., • Support agile delivery teams by providing security findings and remediation guidance during development cycles., • Help improve the organisation's ability to identify and mitigate vulnerabilities early in the software development lifecycle. Cloud & Platform Security • Perform offensive security assessments across AWS, Azure and GCP environments., • Assess Kubernetes clusters, Docker environments and cloud-native architectures., • Review Infrastructure-as-Code deployments and cloud configurations for security weaknesses., • Identify privilege escalation opportunities, misconfigurations and potential attack paths., • Support cloud security validation and architecture review activities. Security Research & Automation • Research emerging attack techniques, exploitation methods and offensive security tools., • Develop and maintain automation, scripts and testing utilities to improve offensive security capabilities., • Support continuous improvement of Red Team methodologies and testing approaches., • Contribute to knowledge sharing, research initiatives and internal security innovation. Purple Team Collaboration • Collaborate with Blue Team teams to validate detections and strengthen defensive capabilities., • Support the development and testing of monitoring rules, alerting mechanisms and incident response processes., • Simulate realistic attack techniques to improve visibility and detection coverage., • Promote continuous improvement through joint Red Team and Blue Team exercises. What You Will Bring • Previous experience in a Red Team, Penetration Testing, Offensive Security, Application Security or equivalent security-focused role., • Strong understanding of offensive security methodologies, attack techniques and adversary emulation practices., • Up-to-date knowledge of cyber security threats, exploitation techniques and offensive tooling., • Experience performing vulnerability assessments, penetration testing and security validation activities., • Knowledge of application security, secure development practices and source code reviews., • Good understanding of DevOps and Agile principles, with the ability to support security activities in fast-moving delivery environments., • Knowledge of cloud and container technologies, including Kubernetes, Docker and cloud environments such as AWS, GCP or Azure., • Experience using scripting languages and automation tools to improve offensive security capabilities and testing efficiency. Desired skills • Ability to translate technical security findings into clear risk-based recommendations., • Strong analytical mindset, with the ability to investigate complex attack scenarios and identify realistic exploitation paths., • Good collaboration skills, with the ability to work effectively with Security, Engineering, DevOps and infrastructure teams., • Proactive approach to learning and staying current with emerging threats, attack techniques and security technologies., • Ability to balance security requirements with business priorities in agile and cloud-based environments. Personal attributes • Ownership and accountability when managing security findings, assessments and remediation activities., • Clear communication style, especially when explaining technical risks to non-security stakeholders., • Continuous improvement mindset, with a focus on advancing offensive security practices and organisational resilience., • Team-oriented approach and willingness to collaborate across technical and business areas.

At One eSecurity, we are a market-leading specialist in Threat Detection and Digital Forensics & Incident Response (DFIR). Our commitment to excellence, innovation, and passion drives everything we do We’re looking for a top-tier, fully remote cybersecurity professional with 5+ years of experience in DFIR. If you have a sharp eye for advanced threats and hands-on expertise in incident response, join us and make an impact! Keys responsibilities: • Lead complex cyber incident investigations across enterprise, cloud, and hybrid environments., • Coordinate and provide technical leadership during high-severity incidents, including ransomware, intrusions, insider threats, and APT activity., • Perform advanced digital forensics, threat hunting, malware triage, and root cause analysis across endpoints, networks, cloud, and identity platforms., • Develop detection strategies and improve detection coverage aligned with adversary TTPs and MITRE ATT&CK., • Translate threat intelligence into actionable detections, hunting hypotheses, and incident response playbooks., • Mentor analysts and support incident response operations across Tier 1–3 teams., • Lead post-incident reviews and contribute to continuous improvement of IR processes, tooling, and operational standards., • Produce high-quality technical and executive-level reports and recommendations., • Drive automation and operational efficiency through scripting and security engineering improvements. Requiered experience & qualifications: • 7+ years of experience in DFIR, Incident Response, Threat Hunting, SOC, or related cybersecurity functions., • Strong experience leading complex cyber incident investigations in enterprise environments., • Deep understanding of attacker TTPs, intrusion methodologies, and modern threat actor tradecraft., • Hands-on investigation experience across:, • Windows, Linux, and macOS, • Active Directory / Entra ID, • AWS, Azure, or GCP, • Microsoft 365 / Google Workspace, • Enterprise EDR/XDR platforms, • Strong analytical, communication, and problem-solving skills., • Ability to operate effectively under pressure and communicate with both technical and executive stakeholders., • Experience mentoring analysts and leading technical response activities. Technical skills: • DFIR & Endpoint Forensics (Velociraptor, GRR, KAPE, Volatility, FTK, EnCase, X-Ways, Volatility, Axiom), • Deep knowledge of raw forensic artifacts and operating system internals (Windows, Linux, macOS), with the ability to manually parse and validate artifacts independently of commercial DFIR tooling (MFT, Registry, EVTX, Prefetch, Amcache, Shimcache, SRUM, USN Journal, browser artifacts, memory structures, file system metadata, and timeline reconstruction), • Detection Engineering & Threat Hunting, • SIEM/XDR and EDR platforms, • Network traffic analysis and network forensics, • Malware triage and reverse engineering, • Scripting and automation (Python, PowerShell, Bash), • Cyber Threat Intelligence and ATT&CK-based detection methodologies Nice to have • Experience in regulated or critical infrastructure environments., • Experience supporting global incident response operations., • Offensive security or adversary emulation experience. Certifications GCFA, GCIH, or equivalent certifications are highly valued. Languages • English and Spanish(required) What We Offer What makes us different from other companies? • Exciting professional DFIR projects for the largest corporations across the globe., • Flexible schedules and tele-working. -A top team of highly recognized professionals in the field. • An attractive salary.

Your Mission As a Tier 2 SOC Analyst, you will serve as a subject matter expert in our technology stack while optimizing security tools and detection workflows, mentoring junior analysts on complex investigation techniques, and driving continuous improvement initiatives across our multi-client SOC environment. This role demands advance analytical skills to conduct in-depth analysis of escalated security incidents from Tier 1 analysts, performing advanced threat investigations to determine attack vectors, assess impact scope, and develop comprehensive remediation strategies. Your responsibilities will be: • General responsibilities, • Use AI to support continuous improvement work: refining incident templates, proposing workflow enhancements, and contributing to SOP updates., • Propose enhancement on tools and workflow, • Respond in a timely manner (within documented SLA) to support tickets., • Document actions in tickets to effectively communicate information internally and to customers., • Adhere to policies, procedures, and security best practices., • Take responsibility for customer satisfaction and overall success of managed services., • Be available, ready, and able to accept incoming clients calls, • Mentor fellow Security Engineers and Security Analysts., • Service improvement, • Optimize SIEM rules and detection logic to reduce false positives and improve detection accuracy Support rules factory program in improving the global set of detection, • Validate Go-to-Active and Go-to-Prod gates of our new clients to ensure a smooth transition to operation, • Continuously improve incident templates in terms of content for the clients and in terms of, • automation to best support the operation, • Support rollout of new set of rules for our clients, • Qualify, analyze, and provide recommendations for new standard data source requests, • Support Product teams to build best new services to fit with Operations capabilities (needs,, • scalability, efficiency), • Threat Monitoring, • Manage escalated cases from T1 Analysts, • Analyze and respond to security events from SIEM, EDR, FWs, IDS, IPS, AV and other security data, • sources., • Use approved AI tools to summarize complex incident timelines and consolidate evidence across sources (SIEM/EDR/network) to speed up escalated investigations., • Use AI-assisted analysis to identify patterns, likely attack paths, and investigation hypotheses, supporting deeper incident scoping and threat hunting activities., • Deliver high quality Incident Handling and investigation, • Conduct threat hunting activities using advanced analytics and threat intelligence, • Provide 24/7 on-call support for critical security incidents outside business hours You are • A team-player willing to iterate on our internal processes to improve the team’s efficiency, • Experience in international/global environment, • At ease with solving complex problems, • Dynamic, with strong interpersonal and communication skills, • Autonomous, self-taught and transparent, • Able to handle and prioritize parallel tasks with multiple interfaces, • Fluent in English You have • Minimum 4 years of hands-on experience in cybersecurity operations, incident response, or threat analysis, bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or equivalent experience and, • Proven track record in a SOC and international/global environment, • Advanced proficiency with SIEM platforms (Splunk, QRadar, Sentinel, etc.), • Extensive experience with EDR/XDR solutions (CrowdStrike, SentinelOne, Microsoft Defender, etc.), • Deep understanding of network security technologies (firewalls, IDS/IPS, network monitoring), • Strong knowledge of Windows and Linux/Unix operating systems and forensics, • Experience with cloud security (AWS, Azure, GCP) and containerization technologies, • Familiarity with OT/ICS environments and industrial control systems security, • Proficiency in scripting languages (Python, PowerShell, Bash) for automation, • Understanding of threat intelligence platforms and MITRE ATT&CK framework, • Spanish or any other language Why you’ll love it here If you are seeking a culture that supports growth, fosters success, and moves the industry forward, then Kudelski Security is where you need to be! As the premier provider of cybersecurity service and solutions, Kudelski Security has the most comprehensive ecosystem of security products and partners to deliver unparalleled services. Our rich and successful history with our clients is based on innovation and trust, serving clients of varying sizes and industries, including commercial, government and education. We have the proven expertise to plan, build, and run successful security programs across Data & Cloud security, Application Security, Microsoft 365 security, Data Privacy, Managed Security services, and IoT/OT security. Kudelski remains committed to advocating Diversity, Equality, and Inclusion within our organization and throughout the industry. With Kudelski, you can expect • Immersion in an incredible culture and the vibe of a fast moving and growing organization full of opportunity., • Opportunity to work with talented peers., • Creative problem-solving and the ability to tackle unique, complex projects., • Competitive compensation with a benefits package that protects you and your loved ones and allows you to pursue career growth with tuition reimbursement., • Generous time off for rest, relaxation, and hobbies., • Colleagues from across the globe who are interested in helping clients protect their companies so they can focus on fulfilling their mission. About Kudelski Security Kudelski Security, a division of the Kudelski Group (SIX: KUD.S), is an innovative, independent Swiss provider of tailored cyber and media security solutions to enterprises and public sector institutions. Our team of security experts delivers end-to-end consulting, technology, managed services, and threat intelligence to help organizations build and run successful security programs. Our global reach and cyber solutions focus is reinforced by key international partnerships. Kudelski Security is headquartered in Phoenix, Arizona and Cheseaux-sur-Lausanne, Switzerland. For more information, please visit: www.kudelskisecurity.com

Company Background Kudelski Security is a leading cyber security solutions company, providing a combination of consulting, technology, managed services, and innovation to enterprise and public sector clients around the world with a relentless commitment to developing & delivering innovative solutions to our clients. Kudelski Security has built a set of cyber capabilities within Europe and the United States and has been successful in developing a strong cyber presence in both regions. We intend to continue to grow our business globally, largely through expansion of our Managed Detection and Response (MDR) offerings. Our MDR solutions leverage a combination of market-leading cybersecurity technologies that are integrated with our own proprietary systems. Position Summary As a member of the Product Management team, the MRX Architect will act as our Subject Matter Expert for Kudelski Security's Managed Risk and Exposure (MRX) offering, our umbrella of services covering Continuous Threat Exposure Management (CTEM), spanning attack surface and exposure management, risk-based vulnerability management (RBVM), credential leak and identity exposure monitoring, and posture management. The architect will be responsible for evaluating new technology, understanding capabilities, and working to automate the deployment and management of the technology at scale, end-to-end. A key focus of the role is defining and driving the dynamics between MRX and our MDR offering, including data and signal sharing in both directions to ensure the two offerings work together as a cohesive, unified capability. To succeed, the architect will collaborate very closely with the Product, Operational, Detection, Engineering and GTM teams. Responsibilities • Own and be fully responsible for the end-to-end technical and operational integration of CTEM technologies (exposure management, RBVM, credential leak/identity exposure, cyber threat & campaign intelligence and posture management) into our MRX backend platform and services., • Act as our internal SME on the CTEM domain, staying current on the market, vendor capabilities, and emerging exposure management practices., • Define and drive the dynamics between MRX and MDR, including the design of bi-directional data and signal sharing., • Evaluate new exposure management, RBVM, credential leak, posture management and CRQ products and features for potential integration into Kudelski Security's offerings, in close collaboration with the Product Management team., • Contribute to the overall MRX strategy with the Product team, advocate for its implementation, and support alignment across teams to meet strategic objectives., • Assess the risk visibility, prioritization, and exposure reduction capability of new technologies Kudelski Security may integrate, in collaboration with the MDR Detection Engineering team., • Understand and mitigate technical and operational hurdles to integrating CTEM technologies, in collaboration with the platform and service architects., • Collaborate with Engineering on the implementation of MRX services, ensuring solutions for integrated technologies are designed and built to scale., • Ensure the smooth transition of newly integrated technology into day-to-day MRX operations, collaborating with cross-functional groups., • Act as the technical point of contact with our exposure management and RBVM technology partners, partnering with Product Management to influence roadmap and integration priorities. Your Key Qualities and Skills • Passionate about cyber security and the development of new solutions to the growing cyber threats that organizations face., • 5 to 8 years of hands-on professional experience in cybersecurity engineering, with proven expertise in designing, integrating and implementing secure systems., • Hands-on experience with tools supporting CTEM methodologies such as risk-based vulnerability management, attack surface/exposure management, breach simulation & attack path analysis, credential leak or identity exposure monitoring, or posture management., • Hands-on experience with one or more exposure management/RBVM vendors is a huge plus (e.g. Tenable, Qualys, Rapid7, CrowdStrike Falcon Exposure Management, Microsoft Security Exposure Management)., • Understanding of how exposure/risk data can be integrated with detection and response (MDR) workflows is a huge plus., • Experience in an MDR / MSSP environment is a huge plus., • Hands-on and interested in the “nuts and bolts” of how to integrate technology into an MRX offering that is designed for scale and efficiency., • Self-motivated, self-directed, and highly motivated proven technology professional familiar with agile development and the Cyber Security / Innovative Technology industry., • Experience with scripting and automation., • Able to work internally and externally to drive the integration of new technology into our capabilities., • A strong understanding of MITRE ATT&CK., • Successful track record of designing and implementing tools and systems to support Security Operations Centers (SOCs.), • Ability to plan and execute at both strategic and operational levels., • Ability to explain complex technical topics in a clear and simple manner, ensuring understanding across both technical and non-technical stakeholders., • Strong verbal and written communication skills. Why you’ll love it here If you are seeking a culture that supports growth, fosters success, and moves the industry forward, then Kudelski is where you need to be! Our rich and successful history with our clients is based on innovation and trust, serving clients of varying sizes and industries, including commercial, government and education. Kudelski remains committed to advocating Diversity, Equity, and Inclusion within our organization and throughout the industry. With Kudelski, you can expect • Immersion in an incredible culture and the vibe of a fast moving and growing organization full of opportunity., • Opportunity to work with innovative, talented peers., • Creative problem-solving and the ability to tackle unique, complex projects., • Competitive compensation with a benefits package that protects you and your loved ones and allows you to pursue career growth with tuition reimbursement., • Generous time off for rest, relaxation, and hobbies., • Colleagues from across the globe are interested in helping clients protect their companies so they can focus on fulfilling their mission. Kudelski Security is an equal opportunity employer. All qualified applicants for employment will be considered without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, status as an individual with a disability, veteran status, or any other basis protected by federal, state, or local law. EEO M / F / D / V

Your Mission As a Tier 2 SOC Analyst, you will serve as a subject matter expert in our technology stack while optimizing security tools and detection workflows, mentoring junior analysts on complex investigation techniques, and driving continuous improvement initiatives across our multi-client SOC environment. This role demands advance analytical skills to conduct in-depth analysis of escalated security incidents from Tier 1 analysts, performing advanced threat investigations to determine attack vectors, assess impact scope, and develop comprehensive remediation strategies. Your responsibilities will be: • General responsibilities, • Use AI to support continuous improvement work: refining incident templates, proposing workflow enhancements, and contributing to SOP updates., • Propose enhancement on tools and workflow, • Respond in a timely manner (within documented SLA) to support tickets., • Document actions in tickets to effectively communicate information internally and to customers., • Adhere to policies, procedures, and security best practices., • Take responsibility for customer satisfaction and overall success of managed services., • Be available, ready, and able to accept incoming clients calls, • Mentor fellow Security Engineers and Security Analysts., • Service improvement, • Optimize SIEM rules and detection logic to reduce false positives and improve detection accuracy Support rules factory program in improving the global set of detection, • Validate Go-to-Active and Go-to-Prod gates of our new clients to ensure a smooth transition to operation, • Continuously improve incident templates in terms of content for the clients and in terms of, • automation to best support the operation, • Support rollout of new set of rules for our clients, • Qualify, analyze, and provide recommendations for new standard data source requests, • Support Product teams to build best new services to fit with Operations capabilities (needs,, • scalability, efficiency), • Threat Monitoring, • Manage escalated cases from T1 Analysts, • Analyze and respond to security events from SIEM, EDR, FWs, IDS, IPS, AV and other security data, • sources., • Use approved AI tools to summarize complex incident timelines and consolidate evidence across sources (SIEM/EDR/network) to speed up escalated investigations., • Use AI-assisted analysis to identify patterns, likely attack paths, and investigation hypotheses, supporting deeper incident scoping and threat hunting activities., • Deliver high quality Incident Handling and investigation, • Conduct threat hunting activities using advanced analytics and threat intelligence, • Provide 24/7 on-call support for critical security incidents outside business hours You are • A team-player willing to iterate on our internal processes to improve the team’s efficiency, • Experience in international/global environment, • At ease with solving complex problems, • Dynamic, with strong interpersonal and communication skills, • Autonomous, self-taught and transparent, • Able to handle and prioritize parallel tasks with multiple interfaces, • Fluent in English You have • Minimum 4 years of hands-on experience in cybersecurity operations, incident response, or threat analysis, bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or equivalent experience and, • Proven track record in a SOC and international/global environment, • Advanced proficiency with SIEM platforms (Splunk, QRadar, Sentinel, etc.), • Extensive experience with EDR/XDR solutions (CrowdStrike, SentinelOne, Microsoft Defender, etc.), • Deep understanding of network security technologies (firewalls, IDS/IPS, network monitoring), • Strong knowledge of Windows and Linux/Unix operating systems and forensics, • Experience with cloud security (AWS, Azure, GCP) and containerization technologies, • Familiarity with OT/ICS environments and industrial control systems security, • Proficiency in scripting languages (Python, PowerShell, Bash) for automation, • Understanding of threat intelligence platforms and MITRE ATT&CK framework, • Spanish or any other language Why you’ll love it here If you are seeking a culture that supports growth, fosters success, and moves the industry forward, then Kudelski Security is where you need to be! As the premier provider of cybersecurity service and solutions, Kudelski Security has the most comprehensive ecosystem of security products and partners to deliver unparalleled services. Our rich and successful history with our clients is based on innovation and trust, serving clients of varying sizes and industries, including commercial, government and education. We have the proven expertise to plan, build, and run successful security programs across Data & Cloud security, Application Security, Microsoft 365 security, Data Privacy, Managed Security services, and IoT/OT security. Kudelski remains committed to advocating Diversity, Equality, and Inclusion within our organization and throughout the industry. With Kudelski, you can expect • Immersion in an incredible culture and the vibe of a fast moving and growing organization full of opportunity., • Opportunity to work with talented peers., • Creative problem-solving and the ability to tackle unique, complex projects., • Competitive compensation with a benefits package that protects you and your loved ones and allows you to pursue career growth with tuition reimbursement., • Generous time off for rest, relaxation, and hobbies., • Colleagues from across the globe who are interested in helping clients protect their companies so they can focus on fulfilling their mission. About Kudelski Security Kudelski Security, a division of the Kudelski Group (SIX: KUD.S), is an innovative, independent Swiss provider of tailored cyber and media security solutions to enterprises and public sector institutions. Our team of security experts delivers end-to-end consulting, technology, managed services, and threat intelligence to help organizations build and run successful security programs. Our global reach and cyber solutions focus is reinforced by key international partnerships. Kudelski Security is headquartered in Phoenix, Arizona and Cheseaux-sur-Lausanne, Switzerland. For more information, please visit: www.kudelskisecurity.com

Arkia Digital es un holding de negocios digitales con más de 20 años de experiencia y presencia en más de 60 mercados. Bajo el paraguas de Arkia conviven cuatro compañías especializadas: Linkadia (user acquisition mobile y adtech), WEN (Agencia Digital y venture partner), Kyomu (laboratorio de producto digital B2C B2B) y Summer (agencia creativa y experiencial). Juntas, desarrollamos, escalamos y monetizamos productos y servicios digitales, tanto propios como de nuestros clientes. Buscamos un/a Head de Apps con experiencia real gestionando el ciclo de vida completo de apps nativas: lanzamiento, ASO, monetización in-app (suscripción, freemium, ads), integración de MMPs (AppsFlyer, Adjust, Kochava, Singular, etc.) y cumplimiento de políticas de Apple App Store y Google Play. No buscamos un perfil de estrategia de negocio generalista, buscamos a alguien que haya vivido dentro de App Store Connect y Google Play Console, que sepa leer un dashboard de atribución por sí solo y entienda por qué una app cae de ranking de un día para otro. El rol lidera el departamento de Apps dentro de Arkia y tiene autonomía real: define el modelo, construye el equipo que necesite (implementación en clientes y estructura interna propia) y responde directamente ante la dirección del grupo. ¿QUÉ HARÁS? Lanzamientos propios con Kyomu: • Definición del modelo de monetización in-app (suscripción, paid, freemium, ads), pricing y paywall design, • Conceptualización y roadmap de producto para nuevos lanzamientos, • Decisiones de negocio sobre qué apps se lanzan, cuándo y con qué estructura de ingresos, • Integración de tecnologías de terceros (SDK, MMP, Ads solutions, etc.) y propias para su correcta ejecución Gestión de apps de clientes con Linkadia: • ASO técnico: keywords, creative testing, experimentos de store listing, • Gestión de campañas de UA coordinado con el departamento de Tráfico: Meta, Google Ads, TikTok Ads, Programática, CTV, etc…, • Integración y QA de SDKs de atribución (MMPs) y resolución de problemas de tracking, • Estrategia de crecimiento y publicidad adaptada a cada cliente Red propia de distribución • Apertura y gestión de una red de distribución de apps con y sin MMP, en modelo indirecto (no cliente final), comisionando por volumen, • Relación directa con desarrolladores de apps para captación y promoción, tanto de forma directa como a través de la red (Arkia Apps Network), • Desarrollo de negocio y función comercial activa Equipo • Construcción del equipo necesario según las necesidades del departamento, tanto para implementación en clientes como a nivel interno ¿QUÉ BUSCAMOS? • 3-5+ años gestionando apps nativas en producción (no solo producto web o webapps), • Experiencia demostrable con al menos un MMP (AppsFlyer, Adjust, Kochava o similar), • Conocimiento profundo de las políticas y mecánicas de Apple App Store y Google Play: proceso de revisión, in-app purchases, suscripciones server-side, ATT/privacy, • Experiencia gestionando monetización in-app en sus distintos modelos (suscripción, freemium, ads), • Visión de negocio y autonomía para tomar decisiones sin supervisión constante, • Capacidad para construir y liderar equipo, • Disponibilidad para viajar a eventos del sector ¿QUÉ OFRECEMOS? • Puesto de liderazgo con autonomía real sobre el departamento y su equipo, • Exposición internacional: eventos del sector, relación directa con desarrolladores y partners globales, • Formar parte de un grupo con verticales complementarias (UA/adtech, growth, producto B2C, creatividad) y capacidad de ejecución rápida Si te motiva construir un negocio desde cero, liderar un equipo y asumir un rol con impacto directo en el crecimiento de la compañía, ¡queremos conocerte!

Arkia Digital es un holding de negocios digitales con más de 20 años de experiencia y presencia en más de 60 mercados. Bajo el paraguas de Arkia conviven cuatro compañías especializadas: Linkadia (user acquisition mobile y adtech), WEN (Agencia Digital y venture partner), Kyomu (laboratorio de producto digital B2C B2B) y Summer (agencia creativa y experiencial). Juntas, desarrollamos, escalamos y monetizamos productos y servicios digitales, tanto propios como de nuestros clientes. Buscamos un/a Head de Apps con experiencia real gestionando el ciclo de vida completo de apps nativas: lanzamiento, ASO, monetización in-app (suscripción, freemium, ads), integración de MMPs (AppsFlyer, Adjust, Kochava, Singular, etc.) y cumplimiento de políticas de Apple App Store y Google Play. No buscamos un perfil de estrategia de negocio generalista, buscamos a alguien que haya vivido dentro de App Store Connect y Google Play Console, que sepa leer un dashboard de atribución por sí solo y entienda por qué una app cae de ranking de un día para otro. El rol lidera el departamento de Apps dentro de Arkia y tiene autonomía real: define el modelo, construye el equipo que necesite (implementación en clientes y estructura interna propia) y responde directamente ante la dirección del grupo. ¿QUÉ HARÁS? Lanzamientos propios con Kyomu: • Definición del modelo de monetización in-app (suscripción, paid, freemium, ads), pricing y paywall design, • Conceptualización y roadmap de producto para nuevos lanzamientos, • Decisiones de negocio sobre qué apps se lanzan, cuándo y con qué estructura de ingresos, • Integración de tecnologías de terceros (SDK, MMP, Ads solutions, etc.) y propias para su correcta ejecución Gestión de apps de clientes con Linkadia: • ASO técnico: keywords, creative testing, experimentos de store listing, • Gestión de campañas de UA coordinado con el departamento de Tráfico: Meta, Google Ads, TikTok Ads, Programática, CTV, etc…, • Integración y QA de SDKs de atribución (MMPs) y resolución de problemas de tracking, • Estrategia de crecimiento y publicidad adaptada a cada cliente Red propia de distribución • Apertura y gestión de una red de distribución de apps con y sin MMP, en modelo indirecto (no cliente final), comisionando por volumen, • Relación directa con desarrolladores de apps para captación y promoción, tanto de forma directa como a través de la red (Arkia Apps Network), • Desarrollo de negocio y función comercial activa Equipo • Construcción del equipo necesario según las necesidades del departamento, tanto para implementación en clientes como a nivel interno ¿QUÉ BUSCAMOS? • 3-5+ años gestionando apps nativas en producción (no solo producto web o webapps), • Experiencia demostrable con al menos un MMP (AppsFlyer, Adjust, Kochava o similar), • Conocimiento profundo de las políticas y mecánicas de Apple App Store y Google Play: proceso de revisión, in-app purchases, suscripciones server-side, ATT/privacy, • Experiencia gestionando monetización in-app en sus distintos modelos (suscripción, freemium, ads), • Visión de negocio y autonomía para tomar decisiones sin supervisión constante, • Capacidad para construir y liderar equipo, • Disponibilidad para viajar a eventos del sector ¿QUÉ OFRECEMOS? • Puesto de liderazgo con autonomía real sobre el departamento y su equipo, • Exposición internacional: eventos del sector, relación directa con desarrolladores y partners globales, • Formar parte de un grupo con verticales complementarias (UA/adtech, growth, producto B2C, creatividad) y capacidad de ejecución rápida Si te motiva construir un negocio desde cero, liderar un equipo y asumir un rol con impacto directo en el crecimiento de la compañía, ¡queremos conocerte!

About HBX Group HBX Group is a leading independent B2B travel technology marketplace connecting travel businesses globally through advanced technology, data-driven solutions, and a network of interconnected products and services. Our Cyber Security team is responsible for protecting global platforms, cloud infrastructure, corporate environments, data assets, and emerging AI-enabled services. Role Overview The Red Team Security Expert is responsible for proactively assessing and validating HBX Group's security posture across corporate, cloud, application, and AI-enabled environments. The role combines penetration testing, adversary emulation, offensive security assessments, Purple Team activities, security research, and AI security testing. The successful candidate will work closely with Blue Team, Security Architecture, DevOps, Engineering, Data, and AI teams to identify weaknesses, validate security controls, and strengthen cyber resilience. Offensive Security Assessments • Conduct penetration testing activities across web applications, APIs, cloud platforms, infrastructure services and corporate environments., • Identify, validate and assess security vulnerabilities, attack paths and exposure risks affecting business services and technology platforms., • Perform security assessments throughout the technology lifecycle to support secure development and deployment practices., • Collaborate with engineering and infrastructure teams to ensure vulnerabilities are effectively remediated and validated. AI Security & Emerging Threats • Assess risks related to Generative AI, Large Language Models (LLMs), AI agents, and machine learning systems., • Identify and mitigate threats such as:, • Prompt injection attacks, • Data poisoning, • Model manipulation, • AI supply chain attacks, • Sensitive data leakage through AI platforms, • Shadow AI usage, • Partner with AI and Data teams to implement secure-by-design AI solutions., • Contribute to AI governance, monitoring, and security controls., • Stay up to date on emerging AI security frameworks and industry best practices. Adversary Emulation & Red Team Operations • Plan and execute realistic Red Team engagements that emulate real-world threat actors and attack scenarios., • Leverage MITRE ATT&CK methodologies to assess detection, prevention and response capabilities., • Evaluate security controls across on-premises, cloud and hybrid environments., • Support cyber resilience initiatives through controlled attack simulations and adversary emulation exercises. Application Security & Code Review • Perform web application, API and source code security assessments., • Identify weaknesses associated with authentication, authorisation, session management and secure coding practices., • Support agile delivery teams by providing security findings and remediation guidance during development cycles., • Help improve the organisation's ability to identify and mitigate vulnerabilities early in the software development lifecycle. Cloud & Platform Security • Perform offensive security assessments across AWS, Azure and GCP environments., • Assess Kubernetes clusters, Docker environments and cloud-native architectures., • Review Infrastructure-as-Code deployments and cloud configurations for security weaknesses., • Identify privilege escalation opportunities, misconfigurations and potential attack paths., • Support cloud security validation and architecture review activities. Security Research & Automation • Research emerging attack techniques, exploitation methods and offensive security tools., • Develop and maintain automation, scripts and testing utilities to improve offensive security capabilities., • Support continuous improvement of Red Team methodologies and testing approaches., • Contribute to knowledge sharing, research initiatives and internal security innovation. Purple Team Collaboration • Collaborate with Blue Team teams to validate detections and strengthen defensive capabilities., • Support the development and testing of monitoring rules, alerting mechanisms and incident response processes., • Simulate realistic attack techniques to improve visibility and detection coverage., • Promote continuous improvement through joint Red Team and Blue Team exercises. What You Will Bring • Previous experience in a Red Team, Penetration Testing, Offensive Security, Application Security or equivalent security-focused role., • Strong understanding of offensive security methodologies, attack techniques and adversary emulation practices., • Up-to-date knowledge of cyber security threats, exploitation techniques and offensive tooling., • Experience performing vulnerability assessments, penetration testing and security validation activities., • Knowledge of application security, secure development practices and source code reviews., • Good understanding of DevOps and Agile principles, with the ability to support security activities in fast-moving delivery environments., • Knowledge of cloud and container technologies, including Kubernetes, Docker and cloud environments such as AWS, GCP or Azure., • Experience using scripting languages and automation tools to improve offensive security capabilities and testing efficiency. Desired skills • Ability to translate technical security findings into clear risk-based recommendations., • Strong analytical mindset, with the ability to investigate complex attack scenarios and identify realistic exploitation paths., • Good collaboration skills, with the ability to work effectively with Security, Engineering, DevOps and infrastructure teams., • Proactive approach to learning and staying current with emerging threats, attack techniques and security technologies., • Ability to balance security requirements with business priorities in agile and cloud-based environments. Personal attributes • Ownership and accountability when managing security findings, assessments and remediation activities., • Clear communication style, especially when explaining technical risks to non-security stakeholders., • Continuous improvement mindset, with a focus on advancing offensive security practices and organisational resilience., • Team-oriented approach and willingness to collaborate across technical and business areas.

At One eSecurity, we are a market-leading specialist in Threat Detection and Digital Forensics & Incident Response (DFIR). Our commitment to excellence, innovation, and passion drives everything we do We’re looking for a top-tier, fully remote cybersecurity professional with 5+ years of experience in DFIR. If you have a sharp eye for advanced threats and hands-on expertise in incident response, join us and make an impact! Keys responsibilities: • Lead complex cyber incident investigations across enterprise, cloud, and hybrid environments., • Coordinate and provide technical leadership during high-severity incidents, including ransomware, intrusions, insider threats, and APT activity., • Perform advanced digital forensics, threat hunting, malware triage, and root cause analysis across endpoints, networks, cloud, and identity platforms., • Develop detection strategies and improve detection coverage aligned with adversary TTPs and MITRE ATT&CK., • Translate threat intelligence into actionable detections, hunting hypotheses, and incident response playbooks., • Mentor analysts and support incident response operations across Tier 1–3 teams., • Lead post-incident reviews and contribute to continuous improvement of IR processes, tooling, and operational standards., • Produce high-quality technical and executive-level reports and recommendations., • Drive automation and operational efficiency through scripting and security engineering improvements. Requiered experience & qualifications: • 7+ years of experience in DFIR, Incident Response, Threat Hunting, SOC, or related cybersecurity functions., • Strong experience leading complex cyber incident investigations in enterprise environments., • Deep understanding of attacker TTPs, intrusion methodologies, and modern threat actor tradecraft., • Hands-on investigation experience across:, • Windows, Linux, and macOS, • Active Directory / Entra ID, • AWS, Azure, or GCP, • Microsoft 365 / Google Workspace, • Enterprise EDR/XDR platforms, • Strong analytical, communication, and problem-solving skills., • Ability to operate effectively under pressure and communicate with both technical and executive stakeholders., • Experience mentoring analysts and leading technical response activities. Technical skills: • DFIR & Endpoint Forensics (Velociraptor, GRR, KAPE, Volatility, FTK, EnCase, X-Ways, Volatility, Axiom), • Deep knowledge of raw forensic artifacts and operating system internals (Windows, Linux, macOS), with the ability to manually parse and validate artifacts independently of commercial DFIR tooling (MFT, Registry, EVTX, Prefetch, Amcache, Shimcache, SRUM, USN Journal, browser artifacts, memory structures, file system metadata, and timeline reconstruction), • Detection Engineering & Threat Hunting, • SIEM/XDR and EDR platforms, • Network traffic analysis and network forensics, • Malware triage and reverse engineering, • Scripting and automation (Python, PowerShell, Bash), • Cyber Threat Intelligence and ATT&CK-based detection methodologies Nice to have • Experience in regulated or critical infrastructure environments., • Experience supporting global incident response operations., • Offensive security or adversary emulation experience. Certifications GCFA, GCIH, or equivalent certifications are highly valued. Languages • English and Spanish(required) What We Offer What makes us different from other companies? • Exciting professional DFIR projects for the largest corporations across the globe., • Flexible schedules and tele-working. -A top team of highly recognized professionals in the field. • An attractive salary.

At One eSecurity, we are a market-leading specialist in Threat Detection and Digital Forensics & Incident Response (DFIR). Our commitment to excellence, innovation, and passion drives everything we do We’re looking for a top-tier, fully remote cybersecurity professional with 5+ years of experience in DFIR. If you have a sharp eye for advanced threats and hands-on expertise in incident response, join us and make an impact! Keys responsibilities: • Lead complex cyber incident investigations across enterprise, cloud, and hybrid environments., • Coordinate and provide technical leadership during high-severity incidents, including ransomware, intrusions, insider threats, and APT activity., • Perform advanced digital forensics, threat hunting, malware triage, and root cause analysis across endpoints, networks, cloud, and identity platforms., • Develop detection strategies and improve detection coverage aligned with adversary TTPs and MITRE ATT&CK., • Translate threat intelligence into actionable detections, hunting hypotheses, and incident response playbooks., • Mentor analysts and support incident response operations across Tier 1–3 teams., • Lead post-incident reviews and contribute to continuous improvement of IR processes, tooling, and operational standards., • Produce high-quality technical and executive-level reports and recommendations., • Drive automation and operational efficiency through scripting and security engineering improvements. Requiered experience & qualifications: • 7+ years of experience in DFIR, Incident Response, Threat Hunting, SOC, or related cybersecurity functions., • Strong experience leading complex cyber incident investigations in enterprise environments., • Deep understanding of attacker TTPs, intrusion methodologies, and modern threat actor tradecraft., • Hands-on investigation experience across:, • Windows, Linux, and macOS, • Active Directory / Entra ID, • AWS, Azure, or GCP, • Microsoft 365 / Google Workspace, • Enterprise EDR/XDR platforms, • Strong analytical, communication, and problem-solving skills., • Ability to operate effectively under pressure and communicate with both technical and executive stakeholders., • Experience mentoring analysts and leading technical response activities. Technical skills: • DFIR & Endpoint Forensics (Velociraptor, GRR, KAPE, Volatility, FTK, EnCase, X-Ways, Volatility, Axiom), • Deep knowledge of raw forensic artifacts and operating system internals (Windows, Linux, macOS), with the ability to manually parse and validate artifacts independently of commercial DFIR tooling (MFT, Registry, EVTX, Prefetch, Amcache, Shimcache, SRUM, USN Journal, browser artifacts, memory structures, file system metadata, and timeline reconstruction), • Detection Engineering & Threat Hunting, • SIEM/XDR and EDR platforms, • Network traffic analysis and network forensics, • Malware triage and reverse engineering, • Scripting and automation (Python, PowerShell, Bash), • Cyber Threat Intelligence and ATT&CK-based detection methodologies Nice to have • Experience in regulated or critical infrastructure environments., • Experience supporting global incident response operations., • Offensive security or adversary emulation experience. Certifications GCFA, GCIH, or equivalent certifications are highly valued. Languages • English and Spanish(required) What We Offer What makes us different from other companies? • Exciting professional DFIR projects for the largest corporations across the globe., • Flexible schedules and tele-working. -A top team of highly recognized professionals in the field. • An attractive salary.

Company Background Kudelski Security is a leading cyber security solutions company, providing a combination of consulting, technology, managed services, and innovation to enterprise and public sector clients around the world with a relentless commitment to developing & delivering innovative solutions to our clients. Kudelski Security has built a set of cyber capabilities within Europe and the United States and has been successful in developing a strong cyber presence in both regions. We intend to continue to grow our business globally, largely through expansion of our Managed Detection and Response (MDR) offerings. Our MDR solutions leverage a combination of market-leading cybersecurity technologies that are integrated with our own proprietary systems. Position Summary As a member of the Product Management team, the MRX Architect will act as our Subject Matter Expert for Kudelski Security's Managed Risk and Exposure (MRX) offering, our umbrella of services covering Continuous Threat Exposure Management (CTEM), spanning attack surface and exposure management, risk-based vulnerability management (RBVM), credential leak and identity exposure monitoring, and posture management. The architect will be responsible for evaluating new technology, understanding capabilities, and working to automate the deployment and management of the technology at scale, end-to-end. A key focus of the role is defining and driving the dynamics between MRX and our MDR offering, including data and signal sharing in both directions to ensure the two offerings work together as a cohesive, unified capability. To succeed, the architect will collaborate very closely with the Product, Operational, Detection, Engineering and GTM teams. Responsibilities • Own and be fully responsible for the end-to-end technical and operational integration of CTEM technologies (exposure management, RBVM, credential leak/identity exposure, cyber threat & campaign intelligence and posture management) into our MRX backend platform and services., • Act as our internal SME on the CTEM domain, staying current on the market, vendor capabilities, and emerging exposure management practices., • Define and drive the dynamics between MRX and MDR, including the design of bi-directional data and signal sharing., • Evaluate new exposure management, RBVM, credential leak, posture management and CRQ products and features for potential integration into Kudelski Security's offerings, in close collaboration with the Product Management team., • Contribute to the overall MRX strategy with the Product team, advocate for its implementation, and support alignment across teams to meet strategic objectives., • Assess the risk visibility, prioritization, and exposure reduction capability of new technologies Kudelski Security may integrate, in collaboration with the MDR Detection Engineering team., • Understand and mitigate technical and operational hurdles to integrating CTEM technologies, in collaboration with the platform and service architects., • Collaborate with Engineering on the implementation of MRX services, ensuring solutions for integrated technologies are designed and built to scale., • Ensure the smooth transition of newly integrated technology into day-to-day MRX operations, collaborating with cross-functional groups., • Act as the technical point of contact with our exposure management and RBVM technology partners, partnering with Product Management to influence roadmap and integration priorities. Your Key Qualities and Skills • Passionate about cyber security and the development of new solutions to the growing cyber threats that organizations face., • 5 to 8 years of hands-on professional experience in cybersecurity engineering, with proven expertise in designing, integrating and implementing secure systems., • Hands-on experience with tools supporting CTEM methodologies such as risk-based vulnerability management, attack surface/exposure management, breach simulation & attack path analysis, credential leak or identity exposure monitoring, or posture management., • Hands-on experience with one or more exposure management/RBVM vendors is a huge plus (e.g. Tenable, Qualys, Rapid7, CrowdStrike Falcon Exposure Management, Microsoft Security Exposure Management)., • Understanding of how exposure/risk data can be integrated with detection and response (MDR) workflows is a huge plus., • Experience in an MDR / MSSP environment is a huge plus., • Hands-on and interested in the “nuts and bolts” of how to integrate technology into an MRX offering that is designed for scale and efficiency., • Self-motivated, self-directed, and highly motivated proven technology professional familiar with agile development and the Cyber Security / Innovative Technology industry., • Experience with scripting and automation., • Able to work internally and externally to drive the integration of new technology into our capabilities., • A strong understanding of MITRE ATT&CK., • Successful track record of designing and implementing tools and systems to support Security Operations Centers (SOCs.), • Ability to plan and execute at both strategic and operational levels., • Ability to explain complex technical topics in a clear and simple manner, ensuring understanding across both technical and non-technical stakeholders., • Strong verbal and written communication skills. Why you’ll love it here If you are seeking a culture that supports growth, fosters success, and moves the industry forward, then Kudelski is where you need to be! Our rich and successful history with our clients is based on innovation and trust, serving clients of varying sizes and industries, including commercial, government and education. Kudelski remains committed to advocating Diversity, Equity, and Inclusion within our organization and throughout the industry. With Kudelski, you can expect • Immersion in an incredible culture and the vibe of a fast moving and growing organization full of opportunity., • Opportunity to work with innovative, talented peers., • Creative problem-solving and the ability to tackle unique, complex projects., • Competitive compensation with a benefits package that protects you and your loved ones and allows you to pursue career growth with tuition reimbursement., • Generous time off for rest, relaxation, and hobbies., • Colleagues from across the globe are interested in helping clients protect their companies so they can focus on fulfilling their mission. Kudelski Security is an equal opportunity employer. All qualified applicants for employment will be considered without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, status as an individual with a disability, veteran status, or any other basis protected by federal, state, or local law. EEO M / F / D / V

For an International Organization based in Valencia, NTT DATA is currently looking for Security Architect to work onsite. The candidate is expected to influence, drive, and collaborate with business and technical stakeholders to achieve practical architecture solutions that meet the secure by design and privacy by design principles. • Drive and support the solution architecture development process from context to physical architecture and ensure that all relevant security controls are embedded early in the SDLC phase., • Work with technical and business stakeholders to identify architectural attributes that may influence threat and attack vectors., • Collaborate with business and technical stakeholders to develop data flows, user profiles, data dictionaries, release notes, technical specification and process flows as input for threat modeling activities., • Perform threat modeling activities and communicate outcomes to platform engineers, Information Security Risk Management and Application Security team., • Develop technical road maps towards achieving mid to long term enterprise security architecture goals like zero trust architecture, automated threat modeling, secure by default, policy as code and pattern as code., • Develop security architecture patterns to address reoccurring security problems., • Develop security reference architecture documents based on the security technology stack., • Research new information security capabilities and technology for continuous improvement self and the organization., • Develop security patterns and security reference architecture documents based on organizational technology demand and knowledge gaps., • Collaborate with information security assurance team on developing practical and applicable information security baselines and referencing those baselines in Enterprise Security Architecture documentation., • Drive and document security architecture artifacts for protecting the crown jewels and strictly confidential assets., • Collaborate with DevOps team to define guardrails and process flows for configuration, development, delivery, and deployment pipelines., • Update and publish the Security Capability Matrix., • Familiarize architects and technical stakeholders with architectural artifacts., • Degree from an accredited university plus a minimum of 7 years of progressive work experience in either security architecture or red teaming., • Deep and hands-on understanding and expertise in at least 4 of the following 6 areas - Infrastructure, Application, Network, Cloud Security, Identity & Access Management and Security Automation., • An understanding of Azure Cloud and Microsoft 365 security controls, solutions, and future roadmaps., • Understanding of application security assessment methods: OWASP Top 10, OWASP Application Security Verification Standard (ASVS), OWASP Mobile Application Security Verification Standard (MASVS), Attack and Defense techniques., • Understanding and ability to perform threat modeling on a diverse category of architecture (Referencing STRIDE, DREAD, MITRE ATT&CK Frameworks), • Experience implementing and designing DEVSECOPS and Security Automation delivery pipelines with automation tools like SAST, DAST, SCA, Container Security tooling., • Familiarity with cloud security concepts like landing zones, Isolation concepts, NSGs/VCNs, conditional access, CI/CD pipelines., • Familiarity with Datacentric Architectural concepts (Data storage, data lakes, raw and transformational data vaults, data isolation, ETL/ELT ingestion pipelines)., • Ability to operate with a limited level of direct supervision., • Exercise independence of judgement and autonomy., • Familiarity with Zachman's abstract architectural concepts., • Strong critical thinking and problem-solving skills, • Strong written, verbal communication, and interpersonal skills, • Ability to translate business requirements into technical and security control requirements. English is the main working language. NTT DATA is a global consultancy company, employing over 17.000 professionals world-wide. Within the International Institutions we have framework contracts with European Institutions like: European Commission; European Parliament; European Court of Auditors; Europol; NATO; Court of Justice; EPO; European Council, United Nations, etc. #J-18808-Ljbffr

The employment relationship is governed by the collective agreement applicable in Spain for companies in IT and technology consulting (XIX Convenio colectivo estatal de empresas de consultoría, tecnologías de la información y estudios de mercado y de la opinión pública). Of course, we offer att

Your Mission A continuación, encontrará un desglose completo de todo lo que se requiere de los posibles candidatos, así como la forma de presentar su candidatura. ¡Mucha suerte! As a Tier 2 SOC Analyst, you will serve as a subject matter expert in our technology stack while optimizing security tools and detection workflows, mentoring junior analysts on complex investigation techniques, and driving continuous improvement initiatives across our multi-client SOC environment. This role demands advance analytical skills to conduct in-depth analysis of escalated security incidents from Tier 1 analysts, performing advanced threat investigations to determine attack vectors, assess impact scope, and develop comprehensive remediation strategies. Your responsibilities will be: • General responsibilities, • Use AI to support continuous improvement work: refining incident templates, proposing workflow enhancements, and contributing to SOP updates., • Propose enhancement on tools and workflow, • Respond in a timely manner (within documented SLA) to support tickets., • Document actions in tickets to effectively communicate information internally and to customers., • Adhere to policies, procedures, and security best practices., • Take responsibility for customer satisfaction and overall success of managed services., • Be available, ready, and able to accept incoming clients calls, • Mentor fellow Security Engineers and Security Analysts., • Service improvement, • Optimize SIEM rules and detection logic to reduce false positives and improve detection accuracy Support rules factory program in improving the global set of detection, • Validate Go-to-Active and Go-to-Prod gates of our new clients to ensure a smooth transition to operation, • Continuously improve incident templates in terms of content for the clients and in terms of, • automation to best support the operation, • Support rollout of new set of rules for our clients, • Qualify, analyze, and provide recommendations for new standard data source requests, • Support Product teams to build best new services to fit with Operations capabilities (needs,, • scalability, efficiency), • Threat Monitoring, • Manage escalated cases from T1 Analysts, • Analyze and respond to security events from SIEM, EDR, FWs, IDS, IPS, AV and other security data, • sources., • Use approved AI tools to summarize complex incident timelines and consolidate evidence across sources (SIEM/EDR/network) to speed up escalated investigations., • Use AI-assisted analysis to identify patterns, likely attack paths, and investigation hypotheses, supporting deeper incident scoping and threat hunting activities., • Deliver high quality Incident Handling and investigation, • Conduct threat hunting activities using advanced analytics and threat intelligence, • Provide 24/7 on-call support for critical security incidents outside business hours You are • A team-player willing to iterate on our internal processes to improve the team’s efficiency, • Experience in international/global environment, • At ease with solving complex problems, • Dynamic, with strong interpersonal and communication skills, • Autonomous, self-taught and transparent, • Able to handle and prioritize parallel tasks with multiple interfaces, • Fluent in English You have • Minimum 4 years of hands-on experience in cybersecurity operations, incident response, or threat analysis, bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or equivalent experience and, • Proven track record in a SOC and international/global environment, • Advanced proficiency with SIEM platforms (Splunk, QRadar, Sentinel, etc.), • Extensive experience with EDR/XDR solutions (CrowdStrike, SentinelOne, Microsoft Defender, etc.), • Deep understanding of network security technologies (firewalls, IDS/IPS, network monitoring), • Strong knowledge of Windows and Linux/Unix operating systems and forensics, • Experience with cloud security (AWS, Azure, GCP) and containerization technologies, • Familiarity with OT/ICS environments and industrial control systems security, • Proficiency in scripting languages (Python, PowerShell, Bash) for automation, • Understanding of threat intelligence platforms and MITRE ATT&CK framework, • Spanish or any other language Why you’ll love it here If you are seeking a culture that supports growth, fosters success, and moves the industry forward, then Kudelski Security is where you need to be! As the premier provider of cybersecurity service and solutions, Kudelski Security has the most comprehensive ecosystem of security products and partners to deliver unparalleled services. Our rich and successful history with our clients is based on innovation and trust, serving clients of varying sizes and industries, including commercial, government and education. We have the proven expertise to plan, build, and run successful security programs across Data & Cloud security, Application Security, Microsoft 365 security, Data Privacy, Managed Security services, and IoT/OT security. Kudelski remains committed to advocating Diversity, Equality, and Inclusion within our organization and throughout the industry. With Kudelski, you can expect • Immersion in an incredible culture and the vibe of a fast moving and growing organization full of opportunity., • Opportunity to work with talented peers., • Creative problem-solving and the ability to tackle unique, complex projects., • Competitive compensation with a benefits package that protects you and your loved ones and allows you to pursue career growth with tuition reimbursement., • Generous time off for rest, relaxation, and hobbies., • Colleagues from across the globe who are interested in helping clients protect their companies so they can focus on fulfilling their mission. About Kudelski Security Kudelski Security, a division of the Kudelski Group (SIX: KUD.S), is an innovative, independent Swiss provider of tailored cyber and media security solutions to enterprises and public sector institutions. Our team of security experts delivers end-to-end consulting, technology, managed services, and threat intelligence to help organizations build and run successful security programs. Our global reach and cyber solutions focus is reinforced by key international partnerships. xsgfvud Kudelski Security is headquartered in Phoenix, Arizona and Cheseaux-sur-Lausanne, Switzerland. For more information, please visit:

About HBX Group HBX Group is a leading independent B2B travel technology marketplace connecting travel businesses globally through advanced technology, data-driven solutions, and a network of interconnected products and services. Our Cyber Security team is responsible for protecting global platforms, cloud infrastructure, corporate environments, data assets, and emerging AI-enabled services. Role Overview The Red Team Security Expert is responsible for proactively assessing and validating HBX Group's security posture across corporate, cloud, application, and AI-enabled environments. The role combines penetration testing, adversary emulation, offensive security assessments, Purple Team activities, security research, and AI security testing. The successful candidate will work closely with Blue Team, Security Architecture, DevOps, Engineering, Data, and AI teams to identify weaknesses, validate security controls, and strengthen cyber resilience. Offensive Security Assessments • Conduct penetration testing activities across web applications, APIs, cloud platforms, infrastructure services and corporate environments., • Identify, validate and assess security vulnerabilities, attack paths and exposure risks affecting business services and technology platforms., • Perform security assessments throughout the technology lifecycle to support secure development and deployment practices., • Collaborate with engineering and infrastructure teams to ensure vulnerabilities are effectively remediated and validated. AI Security & Emerging Threats • Assess risks related to Generative AI, Large Language Models (LLMs), AI agents, and machine learning systems., • Identify and mitigate threats such as:, • Prompt injection attacks, • Data poisoning, • Model manipulation, • AI supply chain attacks, • Sensitive data leakage through AI platforms, • Shadow AI usage, • Partner with AI and Data teams to implement secure-by-design AI solutions., • Contribute to AI governance, monitoring, and security controls., • Stay up to date on emerging AI security frameworks and industry best practices. Adversary Emulation & Red Team Operations • Plan and execute realistic Red Team engagements that emulate real-world threat actors and attack scenarios., • Leverage MITRE ATT&CK methodologies to assess detection, prevention and response capabilities., • Evaluate security controls across on-premises, cloud and hybrid environments., • Support cyber resilience initiatives through controlled attack simulations and adversary emulation exercises. Application Security & Code Review • Perform web application, API and source code security assessments., • Identify weaknesses associated with authentication, authorisation, session management and secure coding practices., • Support agile delivery teams by providing security findings and remediation guidance during development cycles., • Help improve the organisation's ability to identify and mitigate vulnerabilities early in the software development lifecycle. Cloud & Platform Security • Perform offensive security assessments across AWS, Azure and GCP environments., • Assess Kubernetes clusters, Docker environments and cloud-native architectures., • Review Infrastructure-as-Code deployments and cloud configurations for security weaknesses., • Identify privilege escalation opportunities, misconfigurations and potential attack paths., • Support cloud security validation and architecture review activities. Security Research & Automation • Research emerging attack techniques, exploitation methods and offensive security tools., • Develop and maintain automation, scripts and testing utilities to improve offensive security capabilities., • Support continuous improvement of Red Team methodologies and testing approaches., • Contribute to knowledge sharing, research initiatives and internal security innovation. Purple Team Collaboration • Collaborate with Blue Team teams to validate detections and strengthen defensive capabilities., • Support the development and testing of monitoring rules, alerting mechanisms and incident response processes., • Simulate realistic attack techniques to improve visibility and detection coverage., • Promote continuous improvement through joint Red Team and Blue Team exercises. What You Will Bring • Previous experience in a Red Team, Penetration Testing, Offensive Security, Application Security or equivalent security-focused role., • Strong understanding of offensive security methodologies, attack techniques and adversary emulation practices., • Up-to-date knowledge of cyber security threats, exploitation techniques and offensive tooling., • Experience performing vulnerability assessments, penetration testing and security validation activities., • Knowledge of application security, secure development practices and source code reviews., • Good understanding of DevOps and Agile principles, with the ability to support security activities in fast-moving delivery environments., • Knowledge of cloud and container technologies, including Kubernetes, Docker and cloud environments such as AWS, GCP or Azure., • Experience using scripting languages and automation tools to improve offensive security capabilities and testing efficiency. Desired skills • Ability to translate technical security findings into clear risk-based recommendations., • Strong analytical mindset, with the ability to investigate complex attack scenarios and identify realistic exploitation paths., • Good collaboration skills, with the ability to work effectively with Security, Engineering, DevOps and infrastructure teams., • Proactive approach to learning and staying current with emerging threats, attack techniques and security technologies., • Ability to balance security requirements with business priorities in agile and cloud-based environments. Personal attributes • Ownership and accountability when managing security findings, assessments and remediation activities., • Clear communication style, especially when explaining technical risks to non-security stakeholders., • Continuous improvement mindset, with a focus on advancing offensive security practices and organisational resilience., • Team-oriented approach and willingness to collaborate across technical and business areas.

Security Expert (Red Team)Applylocations: Spain - Valenciatime type: Full timeposted on: Posted Todayjob requisition id: R- HBX Group is the world’s leading technology partner, connecting and empowering the world of travel. We’re game-changers, disruptors, the people who bring together local and global brands in accommodation, transport, activities and payments through our network of 300,000 hotels worldwide, 60,000 hard to reach high value clients such as tour operators, travel agents and loyalty schemes across 140 source markets. We are tech-driven, with a customer-first philosophy, and commercial teams whose knowledge and relationships on the ground are second to none. And of course we have an amazing team! Our people, Team HBX Group, are the beating heart of the company who we encourage to ‘move fast, dream big and make the difference’ every day. In fact, we believe that it is tech + data + people that truly sets us apart in the market, alongside our ‘global approach, local touch’ mentality. We’re headquartered in Palma, Mallorca and employ around 3,500 people worldwide.## JOB DESCRIPTION:The Red Team Security Expert is responsible for proactively assessing and validating HBX Group's security posture across corporate, cloud, application, and AI-enabled environments.The role combines penetration testing, adversary emulation, offensive security assessments, Purple Team activities, security research, and AI security testing. The successful candidate will work closely with Blue Team, Security Architecture, DevOps, Engineering, Data, and AI teams to identify weaknesses, validate security controls, and strengthen cyber resilience.Offensive Security Assessments Conduct penetration testing activities across web applications, APIs, cloud platforms, infrastructure services and corporate environments. Identify, validate and assess security vulnerabilities, attack paths and exposure risks affecting business services and technology platforms. Perform security assessments throughout the technology lifecycle to support secure development and deployment practices. Collaborate with engineering and infrastructure teams to ensure vulnerabilities are effectively remediated and validated.AI Security & Emerging Threats Assess risks related to Generative AI, Large Language Models (LLMs), AI agents, and machine learning systems. Identify and mitigate threats such as: Prompt injection attacks Data poisoning Model manipulation AI supply chain attacks Sensitive data leakage through AI platforms Shadow AI usage Partner with AI and Data teams to implement secure-by-design AI solutions. Contribute to AI governance, monitoring, and security controls. Stay up to date on emerging AI security frameworks and industry best practices.Adversary Emulation & Red Team Operations Plan and execute realistic Red Team engagements that emulate real-world threat actors and attack scenarios. Leverage MITRE ATT&CK methodologies to assess detection, prevention and response capabilities. Evaluate security controls across on-premises, cloud and hybrid environments. Support cyber resilience initiatives through controlled attack simulations and adversary emulation exercises.Application Security & Code Review Perform web application, API and source code security assessments. Identify weaknesses associated with authentication, authorisation, session management and secure coding practices. Support agile delivery teams by providing security findings and remediation guidance during development cycles. Help improve the organisation's ability to identify and mitigate vulnerabilities early in the software development lifecycle.Cloud & Platform Security Perform offensive security assessments across AWS, Azure and GCP environments. Assess Kubernetes clusters, Docker environments and cloud-native architectures. Review Infrastructure-as-Code deployments and cloud configurations for security weaknesses. Identify privilege escalation opportunities, misconfigurations and potential attack paths. Support cloud security validation and architecture review activities.Security Research & Automation Research emerging attack techniques, exploitation methods and offensive security tools. Develop and maintain automation, scripts and testing utilities to improve offensive security capabilities. Support continuous improvement of Red Team methodologies and testing approaches. Contribute to knowledge sharing, research initiatives and internal security innovation.Purple Team Collaboration Collaborate with Blue Team teams to validate detections and strengthen defensive capabilities. Support the development and testing of monitoring rules, alerting mechanisms and incident response processes. Simulate realistic attack techniques to improve visibility and detection coverage. Promote continuous improvement through joint Red Team and Blue Team exercises.What You Will Bring Previous experience in a Red Team, Penetration Testing, Offensive Security, Application Security or equivalent security-focused role. Strong understanding of offensive security methodologies, attack techniques and adversary emulation practices. Up-to-date knowledge of cyber security threats, exploitation techniques and offensive tooling. Experience performing vulnerability assessments, penetration testing and security validation activities. Knowledge of application security, secure development practices and source code reviews. Good understanding of DevOps and Agile principles, with the ability to support security activities in fast-moving delivery environments. Knowledge of cloud and container technologies, including Kubernetes, Docker and cloud environments such as AWS, GCP or Azure. Experience using scripting languages and automation tools to improve offensive security capabilities and testing efficiency.Desired skills Ability to translate technical security findings into clear risk-based recommendations. Strong analytical mindset, with the ability to investigate complex attack scenarios and identify realistic exploitation paths. Good collaboration skills, with the ability to work effectively with Security, Engineering, DevOps and infrastructure teams. Proactive approach to learning and staying current with emerging threats, attack techniques and security technologies. Ability to balance security requirements with business priorities in agile and cloud-based environments.You will have the opportunity to work for a company that is going through significant change in becoming the world ́s leading travel services provider. We are looking for people that are ready to ride the wave in this exciting journey.As well as an attractive benefits package you will be able to work: Within an innovative, engaging and multicultural environment. Have the opportunity to build strong and lasting business relationships and friendships from around the world. Have the opportunity in developing your career locally or within one of our beautiful working locations across the globe. #J-18808-Ljbffr