Att jobs in Ciutat MeridianaCreate job alerts

This position is part of the Product Security Department and is responsible for assessing and improving the security posture of the organization's products, applications, cloud environments, and enterprise infrastructure through offensive security activities. The primary responsibility of this position is to identify, validate, and communicate security vulnerabilities before they can be exploited by attackers. The role involves performing penetration tests, security assessments, and adversary simulations across traditional IT environments, cloud platforms, modern applications, and Artificial Intelligence (AI) systems. The engineer will collaborate with development, infrastructure, cloud, and engineering teams to improve the organization's overall security posture by providing actionable remediation guidance and security best practices. • Plan and execute penetration tests of healthcare products, applications, medical devices, and supporting infrastructure in accordance with defined testing methodologies and project timelines., • Perform security assessments of web applications, APIs, desktop applications, embedded systems, cloud environments, and AI-enabled products to identify exploitable vulnerabilities and security weaknesses., • Evaluate the security of cloud-native architectures, identity services, and containerized environments supporting healthcare solutions., • Assess Artificial Intelligence features and applications for security risks, including prompt injection, unauthorized access, sensitive data exposure, and misuse of AI models., • Contribute to the continuous improvement of penetration testing methodologies, tooling, automation, and testing procedures to address emerging technologies and evolving threats., • Stay current with the latest offensive security techniques, healthcare cybersecurity threats, cloud technologies, and AI security research to ensure testing methodologies remain effective and aligned with industry best practices., • Collaborate with product development and engineering teams to communicate security findings, provide technical guidance, and support secure product development throughout the product lifecycle., • Validate the effectiveness of implemented security fixes through remediation verification and follow-up security testing., • Produce high-quality technical reports that clearly describe findings, risk levels, exploitation evidence, and practical remediation recommendations for engineering teams. Networking/Key relationships A cybersecurity engineer interacts with different stakeholders including: • Software Development teams to coordinate security assessments, communicate technical findings, and support the remediation and validation of identified vulnerabilities., • Quality Assurance (QA) teams to integrate penetration testing activities into product release cycles and verify security fixes prior to deployment., • Cloud Engineering and DevOps teams to assess cloud infrastructure, containerized environments, CI/CD pipelines, and cloud-native services, providing recommendations to improve security posture., • Product Owners (PO) and Product Security Officers (PSO) to define assessment scope, prioritize security risks based on business impact, and support secure product releases., • Product Security Architects (PSA) to align penetration testing activities with organizational security strategies, threat models, and vulnerability management processes. Minimum Knowledge & Experience required for the position: The qualifications required for this position are: • Bachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience. Minimum professional experience: • 4+ years in Offensive Security, Penetration Testing or Red Teaming. Experience in several of the following areas: • API and Web Application pentesting., • Cloud security (AWS, GCP and Azure)., • Docker and Kubernetes security, • AI security assessments., • Active Directory, • Reverse Engineering and Binary Exploitation capabilities. The following work experience and qualifications are a plus: • Certifications such as: eJPT, OSCP, CPTS, CRTO, CRTE, or equivalent., • Knowledge of security frameworks such as OWASP and MITRE ATT&CK. Additional valuable experience • Experience in Red Teaming Operations, • Experience in CTFs in platforms such as Hack The Box, • Knowledge of relevant standards such as ISO 27001., • Knowledge of medical device regulations (FDA, GDPR)., • Solid knowledge on SW testing process and secure methodology (SSDLC). Skills & Capabilities: The skills and capabilities required by the position are: • Strong analytical and problem-solving skills to identify, validate, and assess security vulnerabilities and recommend effective remediation strategies., • Effective communication skills to convey complex cybersecurity concepts to both technical and non-technical stakeholders., • Willingness to stay updated on the latest cybersecurity trends, threats and technologies through continuous learning and professional development., • Ability to collaborate with cross-functional teams, share information, and work together to enhance overall cybersecurity posture., • Strong interpersonal skills with the ability to build trust, foster teamwork, and contribute positively to a collaborative working environment. Travel requirements: Less than 10% of the time

NTT DATA es una consultora multinacional que ofrece soluciones tecnológicas, de negocio, estrategia, desarrollo y mantenimiento de aplicaciones, siendo referente en consultoría. Digital Technology es la unidad enfocada a acompañar a las grandes organizaciones iberoamericanas en su transformación digital, generando dividendos digitales a través de la tecnología y el diseño, con enfoque práctico y orientado al negocio. Para lograrlo, buscamos personas que compartan nuestra curiosidad permanente, pasión por la tecnología, excelencia constante y visión estratégica. 🔍 Buscamos incorporar un perfil: Red Team Lead, con al menos 5 años de experiencia en la ejecución de proyectos hacking y Red Team para sumarse a nuestro equipo de Ciberseguridad! ¿Qué harás? Te incorporarás a la línea de Privacy & Security by Design del equipo de Ciberseguridad en NTT DATA desde donde, a través de tu conocimiento experto en Red Team, podrás contribuir al crecimiento y liderazgo de nuestro equipo AOST (Advance Offensive Security Team) y mejora de los servicios de seguridad ofensiva que ofrecemos (ejercicios de red / purple team, pentesting externo/interno avanzado sobre infraestructuras, sistemas o aplicaciones, ejercicios de simulación de adversarios,…). Participarás en la ejecución de proyectos de ámbito nacional e internacional de alta complejidad y/o en aquellos en los que sea necesario un conocimiento diferenciador para el arranque del proyecto, siendo el referente técnico tanto a nivel interno como externo. Formarás parte de un gran equipo en el que se fomenta el crecimiento y desarrollo profesional. Requisitos: • Titulación Universitaria en Informática o Telecomunicaciones. (Deseable Máster en Ciberseguridad)., • Experiencia de, al menos, 5 años en ejecución de proyectos de hacking y Red Team., • Conocimiento sólido y aplicación en proyectos de las siguientes metodologías / estándares de seguridad: MITRE ATT&CK, Cyber Kill Chain, PTES, OWASP, …., • Persona proactiva, con gran curiosidad por la seguridad ofensiva, la tecnología y con capacidad de transmitir conocimiento a perfiles con menos experiencia., • Se valora tener experiencia en desarrollo de malware como arsenal para ejercicios de Red Team y conocimiento de C&C como, por ejemplo, Cobalt Strike., • Se valora estar en posesión de algunas de las siguientes certificaciones de seguridad: OSCP, OSCE, OSED, eCPPTX, CRTO, CRTE, CRTP, CRTL, CARTP, GPEN, GXPN, CREST Certified Simulated Attack Specialist (CCSAS), …, • Se valora un buen nivel de inglés (B2 o superior). Lo que te ofrecemos: 🧠 Formar parte de un equipo de élite, especializado en la unión entre estrategia y tecnología. 💼 Contrato indefinido con revisiones de categoría y salario anuales. 🎓 Certificaciones bonificadas (Adaptada a cada división). 📝 Acceso a nuestra plataforma formativa NTT DATA University (formaciones técnicas, metodológicas, idiomas y soft skills). 👩🏽 💻 Trabajo híbrido y horario flexible para que conciliemos mejor. 📅 Jornada intensiva (8:00 a 15:00) los viernes y durante el verano. 🏥 Beneficios corporativos: complementos salariales adicionales, retribución flexible, seguro médico, etc. 🔝 Global Top Employer 2025 — por 10º año consecutivo en España. 🌊 Programas solidarios y actividades sociales a través de nuestro portal de voluntarios de The Blue Wave impulsando un impacto positivo. 🌏 Innovación diversa y cultura inclusiva en NTT DATA creemos que cada persona es única. Apostamos por una cultura inclusiva que valora la diversidad y fomenta un entorno donde todos podamos explorar y potenciar nuestra singularidad. 🚀 Únete al equipo de Digital Technology en NTT DATA.

Defensive Security Engineer - Barcelona Since 2011, SQUAD Group has been a key player in the cybersecurity landscape. We partner with leading organizations to protect their information systems through a comprehensive 360° offering of consulting, integration, expertise, and managed services. Our mission: Securing Together! We believe in a collaborative approach to cybersecurity, where experts and clients work hand-in-hand to anticipate threats and protect critical infrastructure. As part of our growing team, we're seeking a Defensive Security Engineer. Based in Barcelona, this role will put you at the core of a top-tier Incident Response team, defending the digital assets of a company that connects hundreds of millions of people every month. Your Responsibilities As a member of the Incident Response team, your mission will be to strengthen the defensive posture and ensure an effective response to any potential threat. • Actively participate in the entire incident response lifecycle, from preparation and detection to containment, eradication, and recovery., • Contribute to the development and refinement of incident response policies, playbooks, and escalation procedures., • Collaborate on the management and optimization of defensive security technologies, including EDR, SIEM, DLP, and NIDS., • Gather and analyze threat intelligence to enhance detection and prevention efforts., • Work closely with the SOC team and other security departments to ensure alignment and operational efficiency., • Prepare regular reports on incidents and alerts, sharing valuable insights to drive improvements in security controls. Who We're Looking For • You have experience as a security analyst with a proven track record of resolving incidents in large-scale enterprise environments., • You're proficient with security tools like EDR, SIEM, and NIDS., • You have a strong understanding of AWS Cloud security technologies and controls (SCPs, Security Groups, IAM, etc.)., • You are familiar with security frameworks and methodologies such as MITRE ATT&CK, ENISA, or NIST., • You have solid knowledge of security for networks, protocols, and applications., • You understand the software development lifecycle (SDLC) and automation with modern tools like Kubernetes, GitHub Actions, and Infrastructure as Code., • You are an analytical, autonomous, and proactive individual with a hacker mindset., • You are fluent in English (both written and spoken)., • Spanish language skills are considered a plus. Why Join Squad? • Personalized Growth: We help you build a training and certification plan aligned with your professional goals through our SquadeXpérience., • Expertise Development: Participate in internal events like our MixYourTalent webinars and monthly CTF sessions., • Visibility: Attend major industry conferences and contribute to our #TheExpert technical blog., • Culture: Enjoy a dynamic and close-knit environment with after-work events and team gatherings that foster great camaraderie.

Buscamos un/a Experto/a en Amenazas para incorporarse a nuestro equipo de ciberseguridad. La persona seleccionada será responsable de recopilar, analizar y correlacionar información de ciberamenazas provenientes de múltiples fuentes internas y externas, con el objetivo de evaluar el nivel de exposición, apoyar la toma de decisiones y proponer medidas de mitigación dentro del marco operativo de la organización. Este rol será clave para identificar tendencias, anomalías y eventos relevantes, así como para dar soporte en comités de crisis y contribuir a la mejora continua del estado de protección. Requisitos Formación y experiencia • Ingeniería informática, telecomunicaciones o similar en el ámbito IT., • Certificaciones ciberseguridad., • Experiencia previa en análisis de ciberamenazas, inteligencia de amenazas (Threat Intelligence) o áreas similares., • Conocimientos sólidos en ciberseguridad, operaciones de seguridad y gestión de incidentes. Conocimientos técnicos • Manejo de herramientas de Threat Intelligence y plataformas de compartición de información., • Conocimientos de correlación de eventos, vulnerabilidades y exposición de activos., • Capacidad para interpretar logs y fuentes de datos de seguridad., • Familiaridad con marcos de amenazas (MITRE ATT&CK, Kill Chain, etc.). Habilidades • Capacidad analítica y pensamiento crítico., • Excelentes habilidades de redacción técnica., • Capacidad para priorizar en función del contexto operativo., • Trabajo colaborativo con equipos de seguridad, operaciones y crisis.

Company A leading international retailer with more than 575.000 employees worldwide in 33 different countries and over 13.700 stores, has stablished an IT HUB in Barcelona as part of his IT division, responsible for the selection and provision of IT infrastructure, IT platforms and business applications. With our agile mentality we are looking for people that is willing to make an impact on projects and solutions used worldwide by millions of customers. Agrupa Global Talent collaborates with our client to attract the best talent for its ITHUB located in Barcelona. We are looking for open-minded colleagues with passion for technology. We offer you diverse and exciting career opportunities in a dynamic work environment that stands for development and progress. Elevate your career with us, where development and progress are at the heart of everything we do. If you feel ready and think this opportunity is for you, we would be happy to meet you. Your Tasks • Coordinate and communicate IT security incidents across teams and countries, managing the incident response process., • Detect and analyze potential security incidents, ensuring effective containment., • Reconstruct cyber-attacks and malware, analyze sensitive data, and derive remediation actions., • Develop mechanisms to detect anomalies and attacks, initiating preventive measures to alert in time., • Monitor the general threat landscape on the Internet and provide actionable recommendations., • Advise internal projects on security-related issues., • Conduct IT forensic investigations., • Create meaningful reports on IT security incidents. Job requirements • Our client’s Cyber Defense Center is fully built and up and running. We are now looking to strengthen the team with an Incident Response expert to cover the weekday afternoon shift. This is a hands-on, experienced technical role focused on advanced incident, and continuous improvement rather than tier-one alert triage., • You will join a large Cyber Security organization with excellent opportunities for growth, development, and promotion based on performance and training. Continuous learning is essential in this field, and the company supports this with a wide range of education and training options to enhance both soft and hard skills., • 5+ years of professional experience in Incident Response, leading medium to critical security incident response., • Hands-on experience in incident response, including triage, containment, remediation, and end-to-end security investigations., • Experience partnering with Escalation Management, Product Development/Engineering, IT, Legal, Cloud Ops, and wider cybersecurity teams to lead remediation., • University degree in Information Technology or comparable education., • Strong English skills, fluent business English (speaking and writing) at advanced level (B2+)., • Further education in IT forensics and security incident management., • Expert knowledge in SIEM systems (preferably Splunk), SOAR tools, and EDR solutions., • Strong technical expertise in deployed technologies and cyber attack techniques., • Knowledge of national and international IT standards and frameworks (ISO 27001, NIST Cyber Security Framework, BSI Grundschutz, ITIL, OWASP, MITRE ATT&CK)., • High communicative and analytical skills, ability to work independently, and strong team spirit., • Confidence and persuasiveness., • Commitment to continuous education and professional development., • Would be a plus: Strong digital forensics skills, including analysis, timeline reconstruction, and interpreting artefacts across Windows, macOS, Linux, and cloud environments., • Would be a plus: Experience in cloud incident response including familiarity with cloud-native logging, identity systems, and investigation techniques., • Would be a plus: Knowledge of application security, including investigating application-layer attacks, abuse cases, and SaaS-specific threats. Shift options • Morning shift (5:45 – 14:00h), from Monday to Friday (no rotation)., • Afternoon shift (13:45 – 22:00h), from Monday to Friday (no rotation). What We Offer • These are hybrid mode permanent positions. 2 days/week at the office., • You will be part of an international team composed by people from different countries and backgrounds, where you’ll be able to share your experience and knowledge to carry-out teamwork and meet the objectives., • On top of this, you’ll have a personal follow-up with your management team to help you understanding all business-related questions and guide you in your professional career., • We offer a competitive compensation and benefits package: lunch vouchers, health and dental insurance, transport, wellbeing, etc. Contact If you are interested, please apply directly or send your CV to xavier.salra@agrupaglobal.com

Company A leading international retailer with more than 575.000 employees worldwide in 33 different countries and over 13.700 stores, has stablished an IT HUB in Barcelona as part of his IT division, responsible for the selection and provision of IT infrastructure, IT platforms and business applications. With our agile mentality we are looking for people that is willing to make an impact on projects and solutions used worldwide by millions of customers. Agrupa Global Talent collaborates with our client to attract the best talent for its ITHUB located in Barcelona. We are looking for open-minded colleagues with passion for technology. We offer you diverse and exciting career opportunities in a dynamic work environment that stands for development and progress. Elevate your career with us, where development and progress are at the heart of everything we do. If you feel ready and think this opportunity is for you, we would be happy to meet you. Your Tasks • Coordinate and communicate IT security incidents across teams and countries, managing the incident response process., • Detect and analyze potential security incidents, ensuring effective containment., • Reconstruct cyber-attacks and malware, analyze sensitive data, and derive remediation actions., • Develop mechanisms to detect anomalies and attacks, initiating preventive measures to alert in time., • Monitor the general threat landscape on the Internet and provide actionable recommendations., • Advise internal projects on security-related issues., • Conduct IT forensic investigations., • Create meaningful reports on IT security incidents. Job requirements • Our client’s Cyber Defense Center is fully built and up and running. We are now looking to strengthen the team with an Incident Response expert to cover the weekday afternoon shift. This is a hands-on, experienced technical role focused on advanced incident, and continuous improvement rather than tier-one alert triage., • You will join a large Cyber Security organization with excellent opportunities for growth, development, and promotion based on performance and training. Continuous learning is essential in this field, and the company supports this with a wide range of education and training options to enhance both soft and hard skills., • 5+ years of professional experience in Incident Response, leading medium to critical security incident response., • Hands-on experience in incident response, including triage, containment, remediation, and end-to-end security investigations., • Experience partnering with Escalation Management, Product Development/Engineering, IT, Legal, Cloud Ops, and wider cybersecurity teams to lead remediation., • University degree in Information Technology or comparable education., • Strong English skills, fluent business English (speaking and writing) at advanced level (B2+)., • Further education in IT forensics and security incident management., • Expert knowledge in SIEM systems (preferably Splunk), SOAR tools, and EDR solutions., • Strong technical expertise in deployed technologies and cyber attack techniques., • Knowledge of national and international IT standards and frameworks (ISO 27001, NIST Cyber Security Framework, BSI Grundschutz, ITIL, OWASP, MITRE ATT&CK)., • High communicative and analytical skills, ability to work independently, and strong team spirit., • Confidence and persuasiveness., • Commitment to continuous education and professional development., • Would be a plus: Strong digital forensics skills, including analysis, timeline reconstruction, and interpreting artefacts across Windows, macOS, Linux, and cloud environments., • Would be a plus: Experience in cloud incident response including familiarity with cloud-native logging, identity systems, and investigation techniques., • Would be a plus: Knowledge of application security, including investigating application-layer attacks, abuse cases, and SaaS-specific threats. Shift options • Morning shift (5:45 – 14:00h), from Monday to Friday (no rotation)., • Afternoon shift (13:45 – 22:00h), from Monday to Friday (no rotation). What We Offer • These are hybrid mode permanent positions. 2 days/week at the office., • You will be part of an international team composed by people from different countries and backgrounds, where you’ll be able to share your experience and knowledge to carry-out teamwork and meet the objectives., • On top of this, you’ll have a personal follow-up with your management team to help you understanding all business-related questions and guide you in your professional career., • We offer a competitive compensation and benefits package: lunch vouchers, health and dental insurance, transport, wellbeing, etc. Contact If you are interested, please apply directly or send your CV to

Defensive Security Engineer - Barcelona Since 2011, SQUAD Group has been a key player in the cybersecurity landscape. We partner with leading organizations to protect their information systems through a comprehensive 360° offering of consulting, integration, expertise, and managed services. Our mission: Securing Together! We believe in a collaborative approach to cybersecurity, where experts and clients work hand-in-hand to anticipate threats and protect critical infrastructure. As part of our growing team, we're seeking a Defensive Security Engineer. Based in Barcelona, this role will put you at the core of a top-tier Incident Response team, defending the digital assets of a company that connects hundreds of millions of people every month. Your Responsibilities As a member of the Incident Response team, your mission will be to strengthen the defensive posture and ensure an effective response to any potential threat. • Actively participate in the entire incident response lifecycle, from preparation and detection to containment, eradication, and recovery., • Contribute to the development and refinement of incident response policies, playbooks, and escalation procedures., • Collaborate on the management and optimization of defensive security technologies, including EDR, SIEM, DLP, and NIDS., • Gather and analyze threat intelligence to enhance detection and prevention efforts., • Work closely with the SOC team and other security departments to ensure alignment and operational efficiency., • Prepare regular reports on incidents and alerts, sharing valuable insights to drive improvements in security controls. Who We're Looking For • You have experience as a security analyst with a proven track record of resolving incidents in large-scale enterprise environments., • You're proficient with security tools like EDR, SIEM, and NIDS., • You have a strong understanding of AWS Cloud security technologies and controls (SCPs, Security Groups, IAM, etc.)., • You are familiar with security frameworks and methodologies such as MITRE ATT&CK, ENISA, or NIST., • You have solid knowledge of security for networks, protocols, and applications., • You understand the software development lifecycle (SDLC) and automation with modern tools like Kubernetes, GitHub Actions, and Infrastructure as Code., • You are an analytical, autonomous, and proactive individual with a hacker mindset., • You are fluent in English (both written and spoken)., • Spanish language skills are considered a plus. Why Join Squad? • Personalized Growth: We help you build a training and certification plan aligned with your professional goals through our SquadeXpérience., • Expertise Development: Participate in internal events like our MixYourTalent webinars and monthly CTF sessions., • Visibility: Attend major industry conferences and contribute to our #TheExpert technical blog., • Culture: Enjoy a dynamic and close-knit environment with after-work events and team gatherings that foster great camaraderie.

¿Quieres llevar tus habilidades como analista CSIRT al siguiente nivel? En ALTEN tenemos claro que el éxito de nuestros proyectos se debe a las personas que forman nuestro equipo. Por eso, si tienes más de 2 años de experiencia en análisis de ciberseguridad, gestión de incidentes y operaciones de SOC/CERT, nos comprometemos a impulsar tu talento, satisfacer tus expectativas laborales y hacerte sentir como en casa. ¿Qué hacemos en el equipo? En la unidad de Ciberseguridad y Respuesta a Incidentes, gestionamos, analizamos y mitigamos incidentes de seguridad en tiempo real. Nos especializamos en proteger los activos críticos de nuestros clientes frente a amenazas digitales, asegurando la continuidad del negocio y minimizando riesgos. Trabajamos estrechamente con equipos multidisciplinarios para garantizar una respuesta efectiva y adaptada a las necesidades de cada organización. ¿Cuáles serían tus funciones? • Diseñar y coordinar planes de contención, análisis, erradicación y recuperación de incidentes., • Colaborar con equipos internos y externos en la investigación de incidentes complejos., • Gestionar como Incident Handler en respuesta a incidentes., • Generar informes detallados sobre eventos, incidentes y tendencias de seguridad., • Proponer mejoras a las políticas y procedimientos de ciberseguridad., • Contribuir a la actualización y mantenimiento de indicadores de compromiso (IoCs)., • Participar en simulaciones de respuesta a incidentes y ejercicios de ciberseguridad., • Crear y revisar informes técnicos y forenses., • Diseñar nuevos casos de uso y playbooks, trabajando en coordinación con los equipos N1. ¿Cuál sería el modelo de trabajo? Remoto, preferentemente en Madrid para ir puntualmente ¿Qué buscamos? • Más de 2 años de experiencia en análisis de ciberseguridad, gestión de incidentes y operaciones de SOC/CERT., • Experiencia previa en entornos de alta criticidad, preferentemente en el sector bancario., • Conocimientos avanzados en Respuesta a Incidentes, análisis de malware y análisis forense digital., • Experiencia en diseño de casos de uso y playbooks de respuesta a incidentes., • Conocimiento en diseño de flujos de trabajo entre distintos equipos operativos., • Familiaridad con marcos y estándares de seguridad como NIST, ISO 27001 y MITRE ATT&CK., • Experiencia en gestión/operación de herramientas SIEM (Splunk, QRadar, etc.) y soluciones EDR/XDR., • Experiencia en creación de informes técnicos, forenses y periciales., • Titulación en Ingeniería Informática, Telecomunicaciones o equivalente., • Se valorarán certificaciones como GEIR, GCFA, GCFE, GCIH, CEH, CompTIA Security+ o similares., • Conocimientos en scripting para automatización de tareas (Python, PowerShell, Bash). ¿Qué podemos ofrecerte? • Formar parte de una gran empresa competitiva y en continuo crecimiento., • Integración en un equipo de profesionales altamente cualificado, con un buen clima laboral, innovador y dinámico., • Formación especializada y desarrollo profesional continuo. ¿Quiénes somos? Somos un equipo. Formamos parte de ALTEN, una multinacional europea especializada en proporcionar servicios de consultoría, tecnología de la información y servicios de ingeniería a las principales compañías del mercado español. Si te gustan las cifras, te diremos que tenemos una facturación mundial de más de 3.650 millones de euros, contamos con 57.400 profesionales y estamos presentes en más de 30 países. Además, en ALTEN nos enorgullecemos de ofrecer igualdad de oportunidades con independencia de género, edad, diversidad de capacidades o país de origen. Nuestro compromiso está con el talento y con las personas que lo tienen. Si crees que eres talento, ¡apúntate!

This position is part of the Product Security Department and is responsible for assessing and improving the security posture of the organization's products, applications, cloud environments, and enterprise infrastructure through offensive security activities. The primary responsibility of this position is to identify, validate, and communicate security vulnerabilities before they can be exploited by attackers. The role involves performing penetration tests, security assessments, and adversary simulations across traditional IT environments, cloud platforms, modern applications, and Artificial Intelligence (AI) systems. The engineer will collaborate with development, infrastructure, cloud, and engineering teams to improve the organization's overall security posture by providing actionable remediation guidance and security best practices. • Plan and execute penetration tests of healthcare products, applications, medical devices, and supporting infrastructure in accordance with defined testing methodologies and project timelines., • Perform security assessments of web applications, APIs, desktop applications, embedded systems, cloud environments, and AI-enabled products to identify exploitable vulnerabilities and security weaknesses., • Evaluate the security of cloud-native architectures, identity services, and containerized environments supporting healthcare solutions., • Assess Artificial Intelligence features and applications for security risks, including prompt injection, unauthorized access, sensitive data exposure, and misuse of AI models., • Contribute to the continuous improvement of penetration testing methodologies, tooling, automation, and testing procedures to address emerging technologies and evolving threats., • Stay current with the latest offensive security techniques, healthcare cybersecurity threats, cloud technologies, and AI security research to ensure testing methodologies remain effective and aligned with industry best practices., • Collaborate with product development and engineering teams to communicate security findings, provide technical guidance, and support secure product development throughout the product lifecycle., • Validate the effectiveness of implemented security fixes through remediation verification and follow-up security testing., • Produce high-quality technical reports that clearly describe findings, risk levels, exploitation evidence, and practical remediation recommendations for engineering teams. Networking/Key relationships A cybersecurity engineer interacts with different stakeholders including: • Software Development teams to coordinate security assessments, communicate technical findings, and support the remediation and validation of identified vulnerabilities., • Quality Assurance (QA) teams to integrate penetration testing activities into product release cycles and verify security fixes prior to deployment., • Cloud Engineering and DevOps teams to assess cloud infrastructure, containerized environments, CI/CD pipelines, and cloud-native services, providing recommendations to improve security posture., • Product Owners (PO) and Product Security Officers (PSO) to define assessment scope, prioritize security risks based on business impact, and support secure product releases., • Product Security Architects (PSA) to align penetration testing activities with organizational security strategies, threat models, and vulnerability management processes. Minimum Knowledge & Experience required for the position: The qualifications required for this position are: • Bachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience. Minimum professional experience: • 4+ years in Offensive Security, Penetration Testing or Red Teaming. Experience in several of the following areas: • API and Web Application pentesting., • Cloud security (AWS, GCP and Azure)., • Docker and Kubernetes security, • AI security assessments., • Active Directory, • Reverse Engineering and Binary Exploitation capabilities. The following work experience and qualifications are a plus: • Certifications such as: eJPT, OSCP, CPTS, CRTO, CRTE, or equivalent., • Knowledge of security frameworks such as OWASP and MITRE ATT&CK. Additional valuable experience • Experience in Red Teaming Operations, • Experience in CTFs in platforms such as Hack The Box, • Knowledge of relevant standards such as ISO 27001., • Knowledge of medical device regulations (FDA, GDPR)., • Solid knowledge on SW testing process and secure methodology (SSDLC). Skills & Capabilities: The skills and capabilities required by the position are: • Strong analytical and problem-solving skills to identify, validate, and assess security vulnerabilities and recommend effective remediation strategies., • Effective communication skills to convey complex cybersecurity concepts to both technical and non-technical stakeholders., • Willingness to stay updated on the latest cybersecurity trends, threats and technologies through continuous learning and professional development., • Ability to collaborate with cross-functional teams, share information, and work together to enhance overall cybersecurity posture., • Strong interpersonal skills with the ability to build trust, foster teamwork, and contribute positively to a collaborative working environment. Travel requirements: Less than 10% of the time

The Role As Client Advisor in our Pop Up , you will play an important role in delivering an exceptional client experience and representing the Majorica brand during this temporary retail project. Collaborate proactively with the team and support the overall performance of the space. Team player att

Company A leading international retailer with more than 575.000 employees worldwide in 33 different countries and over 13.700 stores, has stablished an IT HUB in Barcelona as part of his IT division, responsible for the selection and provision of IT infrastructure, IT platforms and business applications. With our agile mentality we are looking for people that is willing to make an impact on projects and solutions used worldwide by millions of customers. Agrupa Global Talent collaborates with our client to attract the best talent for its ITHUB located in Barcelona. We are looking for open-minded colleagues with passion for technology. We offer you diverse and exciting career opportunities in a dynamic work environment that stands for development and progress. Elevate your career with us, where development and progress are at the heart of everything we do. If you feel ready and think this opportunity is for you, we would be happy to meet you. Your Tasks • Coordinate and communicate IT security incidents across teams and countries, managing the incident response process., • Detect and analyze potential security incidents, ensuring effective containment., • Reconstruct cyber-attacks and malware, analyze sensitive data, and derive remediation actions., • Develop mechanisms to detect anomalies and attacks, initiating preventive measures to alert in time., • Monitor the general threat landscape on the Internet and provide actionable recommendations., • Advise internal projects on security-related issues., • Conduct IT forensic investigations., • Create meaningful reports on IT security incidents. Job requirements • Our client’s Cyber Defense Center is fully built and up and running. We are now looking to strengthen the team with an Incident Response expert to cover the weekday afternoon shift. This is a hands-on, experienced technical role focused on advanced incident, and continuous improvement rather than tier-one alert triage., • You will join a large Cyber Security organization with excellent opportunities for growth, development, and promotion based on performance and training. Continuous learning is essential in this field, and the company supports this with a wide range of education and training options to enhance both soft and hard skills., • 5+ years of professional experience in Incident Response, leading medium to critical security incident response., • Hands-on experience in incident response, including triage, containment, remediation, and end-to-end security investigations., • Experience partnering with Escalation Management, Product Development/Engineering, IT, Legal, Cloud Ops, and wider cybersecurity teams to lead remediation., • University degree in Information Technology or comparable education., • Strong English skills, fluent business English (speaking and writing) at advanced level (B2+)., • Further education in IT forensics and security incident management., • Expert knowledge in SIEM systems (preferably Splunk), SOAR tools, and EDR solutions., • Strong technical expertise in deployed technologies and cyber attack techniques., • Knowledge of national and international IT standards and frameworks (ISO 27001, NIST Cyber Security Framework, BSI Grundschutz, ITIL, OWASP, MITRE ATT&CK)., • High communicative and analytical skills, ability to work independently, and strong team spirit., • Confidence and persuasiveness., • Commitment to continuous education and professional development., • Would be a plus: Strong digital forensics skills, including analysis, timeline reconstruction, and interpreting artefacts across Windows, macOS, Linux, and cloud environments., • Would be a plus: Experience in cloud incident response including familiarity with cloud-native logging, identity systems, and investigation techniques., • Would be a plus: Knowledge of application security, including investigating application-layer attacks, abuse cases, and SaaS-specific threats. Shift options • Morning shift (5:45 – 14:00h), from Monday to Friday (no rotation)., • Afternoon shift (13:45 – 22:00h), from Monday to Friday (no rotation). What We Offer • These are hybrid mode permanent positions. 2 days/week at the office., • You will be part of an international team composed by people from different countries and backgrounds, where you’ll be able to share your experience and knowledge to carry-out teamwork and meet the objectives., • On top of this, you’ll have a personal follow-up with your management team to help you understanding all business-related questions and guide you in your professional career., • We offer a competitive compensation and benefits package: lunch vouchers, health and dental insurance, transport, wellbeing, etc. Contact If you are interested, please apply directly or send your CV to

NTT DATA es una consultora multinacional que ofrece soluciones tecnológicas, de negocio, estrategia, desarrollo y mantenimiento de aplicaciones, siendo referente en consultoría. Digital Technology es la unidad enfocada a acompañar a las grandes organizaciones iberoamericanas en su transformación digital, generando dividendos digitales a través de la tecnología y el diseño, con enfoque práctico y orientado al negocio. Para lograrlo, buscamos personas que compartan nuestra curiosidad permanente, pasión por la tecnología, excelencia constante y visión estratégica. 🔍 Buscamos incorporar un perfil: Red Team Lead, con al menos 5 años de experiencia en la ejecución de proyectos hacking y Red Team para sumarse a nuestro equipo de Ciberseguridad! ¿Qué harás? Te incorporarás a la línea de Privacy & Security by Design del equipo de Ciberseguridad en NTT DATA desde donde, a través de tu conocimiento experto en Red Team, podrás contribuir al crecimiento y liderazgo de nuestro equipo AOST (Advance Offensive Security Team) y mejora de los servicios de seguridad ofensiva que ofrecemos (ejercicios de red / purple team, pentesting externo/interno avanzado sobre infraestructuras, sistemas o aplicaciones, ejercicios de simulación de adversarios,…). Participarás en la ejecución de proyectos de ámbito nacional e internacional de alta complejidad y/o en aquellos en los que sea necesario un conocimiento diferenciador para el arranque del proyecto, siendo el referente técnico tanto a nivel interno como externo. Formarás parte de un gran equipo en el que se fomenta el crecimiento y desarrollo profesional. Requisitos: • Titulación Universitaria en Informática o Telecomunicaciones. (Deseable Máster en Ciberseguridad)., • Experiencia de, al menos, 5 años en ejecución de proyectos de hacking y Red Team., • Conocimiento sólido y aplicación en proyectos de las siguientes metodologías / estándares de seguridad: MITRE ATT&CK, Cyber Kill Chain, PTES, OWASP, …., • Persona proactiva, con gran curiosidad por la seguridad ofensiva, la tecnología y con capacidad de transmitir conocimiento a perfiles con menos experiencia., • Se valora tener experiencia en desarrollo de malware como arsenal para ejercicios de Red Team y conocimiento de C&C como, por ejemplo, Cobalt Strike., • Se valora estar en posesión de algunas de las siguientes certificaciones de seguridad: OSCP, OSCE, OSED, eCPPTX, CRTO, CRTE, CRTP, CRTL, CARTP, GPEN, GXPN, CREST Certified Simulated Attack Specialist (CCSAS), …, • Se valora un buen nivel de inglés (B2 o superior). Lo que te ofrecemos: 🧠 Formar parte de un equipo de élite, especializado en la unión entre estrategia y tecnología. 💼 Contrato indefinido con revisiones de categoría y salario anuales. 🎓 Certificaciones bonificadas (Adaptada a cada división). 📝 Acceso a nuestra plataforma formativa NTT DATA University (formaciones técnicas, metodológicas, idiomas y soft skills). 👩🏽 💻 Trabajo híbrido y horario flexible para que conciliemos mejor. 📅 Jornada intensiva (8:00 a 15:00) los viernes y durante el verano. 🏥 Beneficios corporativos: complementos salariales adicionales, retribución flexible, seguro médico, etc. 🔝 Global Top Employer 2025 — por 10º año consecutivo en España. 🌊 Programas solidarios y actividades sociales a través de nuestro portal de voluntarios de The Blue Wave impulsando un impacto positivo. 🌏 Innovación diversa y cultura inclusiva en NTT DATA creemos que cada persona es única. Apostamos por una cultura inclusiva que valora la diversidad y fomenta un entorno donde todos podamos explorar y potenciar nuestra singularidad. 🚀 Únete al equipo de Digital Technology en NTT DATA.

BarcelonaSecurity Trust – Corporate Security /Full-time /HybridContentsquare is the all-in-one experience intelligence platform designed to be easily used by anyone who cares about digital journeys. With our flexible and scalable platform, organizations quickly get a deep understanding of their customers’ whole online journey.We are a global leader in the experience analytics space, with a growing presence across 15 offices worldwide. We’re here to stay—and we’re looking for team members who are excited to drive impact and help us scale even further.Our aim is to create an inclusive workplace where everyone learns and succeeds. Contentsquare has built a community of individuals who are daring, understanding, and deliberate. We invite you to join us in making the complex simpler—for our customers, their customers, and each other.Important note: Be careful of scammers pretending to be from Contentsquare. We will never ask for money or contact you through random texts. Any communication from our in house Talent Acquisition team will only ever come from our contentsquare.com or @contentsquare-ext.com domain. For more information, visit our careers blog.The Contentsquare Security team is looking for an application security engineer (Appsec) who can work closely with the development team, product managers and diverse third-party groups (including bug bounty hunters).Contentsquare provides a globally leading SaaS service and commits to the highest security standards for its customers. We are ISO 27001 and ISO 27701 certified and maintain robust security initiatives (SOC 2 Type 2 report, private bug bounty program, SIEM, advanced security awareness, etc.). Working alongside other cybersecurity experts, your mission will be to ensure the security of Contentsquare’s products and for keeping Contentsquare’s users and customers safe. You will work out of our Barcelona office.What you'll do Conduct continuous, automated security audits of our global SaaS applications to identify misconfigurations and ensure strict adherence to industry-standard security benchmarks and internal best practices.Serve as a strategic security consultant to product and engineering teams, facilitating complex threat modeling sessions and AppSec reviews during the design phase to proactively mitigate risks.Perform deep-dive, security-focused code reviews and mentor developers on secure coding patterns to minimize the introduction of high-impact vulnerabilities.Architect and manage the end-to-end vulnerability lifecycle, developing sophisticated automation for the triage, reporting, and remediation tracking of security flaws across cloud infrastructure and application layers.Orchestrate and optimize AI-driven security workflows, leveraging LLMs and autonomous agents to conduct scaleable, proactive vulnerability discovery and validation within our CI/CD pipelines.Lead "Shift-Left" initiatives by integrating security checkpoints into the automation stack, developing custom security-as-code tools that empower developers to own security outcomes.Oversee the strategic direction of our private and public bug-bounty programs, ensuring high-quality engagement with the researcher community and rapid internal response to critical findings.Coordinate specialized external penetration testing engagements and customer-driven security assessments, acting as the primary technical point of contact for complex security inquiries.Drive the technical response to application-level security incidents, conducting root-cause analysis to prevent recurrence and enhance our defensive posture.What you'll need 3+ years of professional experience in Application Security Operations within a high-growth SaaS or cloud-native environment.Advanced proficiency in securing modern technical stacks, with specific expertise in NestJS, Vue.js, and Angular frameworks.Hands-on experience with enterprise security tooling, including Snyk, Datadog ASM/AppSec (WAF), Google SecOps, and Crowdstrike.Deep architectural understanding of AWS and Azure environments, including Kubernetes/Docker container security and Infrastructure as Code (Terraform).Demonstrated ability to apply AI and LLM technologies to automate security tasks, such as automated vulnerability validation or code analysis at scale.Expertise in scripting and development (Python, Node.js, Shell) to build custom security tooling and integrations.Comprehensive knowledge of web protocols, OWASP Top 10, and advanced threat frameworks (MITRE ATT&CK, NIST CSF).Proven track record in ethical hacking, CTF competitions, or bug bounty hunting, showcasing a high level of technical tenacity and analytical rigor.Exceptional cross-functional collaboration skills, with the ability to articulate complex security risks to both technical and non-technical stakeholders.Fluency in English is mandatoryWhy you should join ContentsquareWe invest in our people through career development, mentorship, social events, philanthropic activities, and competitive benefits. We are always assessing the perks we offer to ensure we’re aligned with the employees' needs.Here are a few we want to highlight:- Virtual onboarding, Hackathon, and various opportunities to interact with your team and global colleagues both on and offsite each year- Work flexibility: hybrid and remote work policies- Generous paid time-off policy (every location is different)- Lifestyle allowance- A Culture Crew in every country we’re based in to coordinate regular activities for employees to get to know each other and bond outside of work- Every full-time employee receives stock options, allowing them to share in the company’s success- We have multiple Employee Resource Groups, that offer a safe space for individuals who share common identities, life experiences, or allyship to connect, support one another, and passionately advocate for the issues close to their hearts- And more benefits tailored to each countryContentsquare is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to sex, gender identity or expression, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law.Your personal data is used by Contentsquare for recruitment purposes only. Read our Job Candidate Privacy Notice to find out more about data protection at Contentsquare and your rights. You can exercise your rights by using our dedicated Data Subject Rights Portal here. Your personal data will be securely stored in our hosting provider’s data center in Oregon (US west). We have implemented appropriate transfer mechanisms under applicable data protection laws.Contentsquare may use AI-assisted tools to help review and screen applications. All decisions involving hiring are made by human reviewers, and your personal data will be processed in accordance with our Candidate Privacy Policy.We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Defensive Security Engineer - Barcelona Since 2011, SQUAD Group has been a key player in the cybersecurity landscape. We partner with leading organizations to protect their information systems through a comprehensive 360° offering of consulting, integration, expertise, and managed services. Our mission: Securing Together! We believe in a collaborative approach to cybersecurity, where experts and clients work hand-in-hand to anticipate threats and protect critical infrastructure. As part of our growing team, we're seeking a Defensive Security Engineer. Based in Barcelona, this role will put you at the core of a top-tier Incident Response team, defending the digital assets of a company that connects hundreds of millions of people every month. Your Responsibilities As a member of the Incident Response team, your mission will be to strengthen the defensive posture and ensure an effective response to any potential threat. • Actively participate in the entire incident response lifecycle, from preparation and detection to containment, eradication, and recovery., • Contribute to the development and refinement of incident response policies, playbooks, and escalation procedures., • Collaborate on the management and optimization of defensive security technologies, including EDR, SIEM, DLP, and NIDS., • Gather and analyze threat intelligence to enhance detection and prevention efforts., • Work closely with the SOC team and other security departments to ensure alignment and operational efficiency., • Prepare regular reports on incidents and alerts, sharing valuable insights to drive improvements in security controls. Who We're Looking For • You have experience as a security analyst with a proven track record of resolving incidents in large-scale enterprise environments., • You're proficient with security tools like EDR, SIEM, and NIDS., • You have a strong understanding of AWS Cloud security technologies and controls (SCPs, Security Groups, IAM, etc.)., • You are familiar with security frameworks and methodologies such as MITRE ATT&CK, ENISA, or NIST., • You have solid knowledge of security for networks, protocols, and applications., • You understand the software development lifecycle (SDLC) and automation with modern tools like Kubernetes, GitHub Actions, and Infrastructure as Code., • You are an analytical, autonomous, and proactive individual with a hacker mindset., • You are fluent in English (both written and spoken)., • Spanish language skills are considered a plus. Why Join Squad? • Personalized Growth: We help you build a training and certification plan aligned with your professional goals through our SquadeXpérience., • Expertise Development: Participate in internal events like our MixYourTalent webinars and monthly CTF sessions., • Visibility: Attend major industry conferences and contribute to our #TheExpert technical blog., • Culture: Enjoy a dynamic and close-knit environment with after-work events and team gatherings that foster great camaraderie.

Johnson & Johnson in Barcelona is seeking a Principal Cyber Threat Intelligence to lead advanced intelligence analyses within the Cyber Threat Intelligence team, supporting the broader Cyber Defense organization. Ideal candidates bring a decade of CTI or threat research, deep knowledge of MITRE ATT&CK, OSINT capabilities, and experience using AI-enabled workflows to deliver actionable insights for security, product teams, and executives. #J-18808-Ljbffr

Descripción del trabajo At One eSecurity, we are a market-leading specialist in Threat Detection and Digital Forensics & Incident Response (DFIR). Our commitment to excellence, innovation, and passion drives everything we do We’re looking for a top-tier, fully remote cybersecurity professional with 5+ years of experience in DFIR. If you have a sharp eye for advanced threats and hands‑on expertise in incident response, join us and make an impact! Keys responsibilities: • Lead complex cyber incident investigations across enterprise, cloud, and hybrid environments., • Coordinate and provide technical leadership during high‑severity incidents, including ransomware, intrusions, insider threats, and APT activity., • Perform advanced digital forensics, threat hunting, malware triage, and root cause analysis across endpoints, networks, cloud, and identity platforms., • Develop detection strategies and improve detection coverage aligned with adversary TTPs and MITRE ATT&CK., • Translate threat intelligence into actionable detections, hunting hypotheses, and incident response playbooks., • Mentor analysts and support incident response operations across Tier 1–3 teams., • Lead post‑incident reviews and contribute to continuous improvement of IR processes, tooling, and operational standards., • Produce high‑quality technical and executive‑level reports and recommendations., • Drive automation and operational efficiency through scripting and security engineering improvements. Requiered experience & qualifications: • 7+ years of experience in DFIR, Incident Response, Threat Hunting, SOC, or related cybersecurity functions., • Strong experience leading complex cyber incident investigations in enterprise environments., • Deep understanding of attacker TTPs, intrusion methodologies, and modern threat actor tradecraft., • Hands‑on investigation experience across:, • Windows, Linux, and macOS, • Active Directory / Entra ID, • AWS, Azure, or GCP, • Microsoft 365 / Google Workspace, • Enterprise EDR/XDR platforms, • Strong analytical, communication, and problem‑solving skills., • Ability to operate effectively under pressure and communicate with both technical and executive stakeholders., • Experience mentoring analysts and leading technical response activities. Technical skills: • DFIR & Endpoint Forensics (Velociraptor, GRR, KAPE, Volatility, FTK, EnCase, X-Ways, Volatility, Axiom), • Deep knowledge of raw forensic artifacts and operating system internals (Windows, Linux, macOS), with the ability to manually parse and validate artifacts independently of commercial DFIR tooling (MFT, Registry, EVTX, Prefetch, Amcache, Shimcache, SRUM, USN Journal, browser artifacts, memory structures, file system metadata, and timeline reconstruction), • Detection Engineering & Threat Hunting, • SIEM/XDR and EDR platforms, • Network traffic analysis and network forensics, • Malware triage and reverse engineering, • Scripting and automation (Python, PowerShell, Bash), • Cyber Threat Intelligence and ATT&CK‑based detection methodologies Nice to have • Experience in regulated or critical infrastructure environments., • Experience supporting global incident response operations., • Offensive security or adversary emulation experience. Certifications GCFA, GCIH, or equivalent certifications are highly valued. Languages • English and Spanish(required) What We Offer What makes us different from other companies? • Exciting professional DFIR projects for the largest corporations across the globe., • Flexible schedules and tele‑working., • A top team of highly recognized professionals in the field., • An attractive salary. #J-18808-Ljbffr

Descripción del trabajo NTT DATA es una consultora multinacional que ofrece soluciones tecnológicas, de negocio, estrategia, desarrollo y mantenimiento de aplicaciones, siendo referente en consultoría. Digital Technology es la unidad enfocada a acompañar a las grandes organizaciones iberoamericanas en su transformación digital, generando dividendos digitales a través de la tecnología y el diseño, con enfoque práctico y orientado al negocio. Para lograrlo, buscamos personas que compartan nuestra curiosidad permanente, pasión por la tecnología, excelencia constante y visión estratégica. Buscamos incorporar un perfil: Red Team Lead, con al menos 5 años de experiencia en la ejecución de proyectos hacking y Red Team para sumarse a nuestro equipo de Ciberseguridad! ¿Qué harás? Te incorporarás a la línea de Privacy & Security by Design del equipo de Ciberseguridad en NTT DATA desde donde, a través de tu conocimiento experto en Red Team, podrás contribuir al crecimiento y liderazgo de nuestro equipo AOST (Advance Offensive Security Team) y mejora de los servicios de seguridad ofensiva que ofrecemos (ejercicios de red / purple team, pentesting externo/interno avanzado sobre infraestructuras, sistemas o aplicaciones, ejercicios de simulación de adversarios, ...). Participarás en la ejecución de proyectos de ámbito nacional e internacional de alta complejidad y/o en aquellos en los que sea necesario un conocimiento diferenciador para el arranque del proyecto, siendo el referente técnico tanto a nivel interno como externo. Formarás parte de un gran equipo en el que se fomenta el crecimiento y desarrollo profesional. Requisitos: • Titulación Universitaria en Informática o Telecomunicaciones. (Deseable Máster en Ciberseguridad)., • Experiencia de, al menos, 5 años en ejecución de proyectos de hacking y Red Team., • Conocimiento sólido y aplicación en proyectos de las siguientes metodologías / estándares de seguridad: MITRE ATT&CK, Cyber Kill Chain, PTES, OWASP, ..., • Persona proactiva, con gran curiosidad por la seguridad ofensiva, la tecnología y con capacidad de transmitir conocimiento a perfiles con menos experiencia., • Se valora tener experiencia en desarrollo de malware como arsenal para ejercicios de Red Team y conocimiento de C&C como, por ejemplo, Cobalt Strike., • Se valora estar en posesión de algunas de las siguientes certificaciones de seguridad: OSCP, OSCE, OSED, eCPPTX, CRTO, CRTE, CRTP, CRTL, CARTP, GPEN, GXPN, CREST Certified Simulated Attack Specialist (CCSAS), ..., • Se valora un buen nivel de inglés (B2 o superior). Lo que te ofrecemos: #J-18808-Ljbffr

Johnson & Johnson, Barcelona, cataluña, Spain At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit. Job Function: Technology Enterprise Strategy & Security Job Sub Function: Security & Controls Job Category: Scientific/Technology All Job Posting Locations: Barcelona, Spain; Limerick, Ireland; Warsaw, Masovian, Poland Job Description: Johnson & Johnson is seeking a Principal Cyber Threat Intelligence to perform advanced technical intelligence analysis as part of the Cyber Threat Intelligence (CTI) team, supporting the broader Cyber Defense organization. If you are driven by purpose and passionate about protecting a global enterprise, we invite you to join our team. We are committed to delivering world‑class intelligence capabilities and continuously strengthening our program through investment in our people, processes, and technology. • Conduct intelligence collection, research, and analysis to identify emerging threats, adversary activity, vulnerabilities, and trends relevant to the organization., • Produce finished intelligence reports and briefings based on independent research and in response to requests for information that clearly communicate cyber threats, business impact, and recommended actions., • Lead targeted threat research projects synthesizing information from internal incident data and security telemetry to generate actionable insights that enable security teams, product owners, and business leaders to take effective risk reduction actions., • Partner with cyber defense, vulnerability management, and engineering teams to integrate intelligence into threat hunting, detection engineering, security operations, and exposure reduction initiatives., • Drive the development of AI-enabled and automated intelligence workflows that improve threat identification, analysis, reporting, prioritization, and escalation processes., • Use Large Language Model (LLM) and Agentic AI tools to process and analyze data for quicker intelligence outcomes., • Build strong relationships with security and business stakeholders to ensure intelligence and research activities align with organizational priorities, risk management objectives, and operational needs., • Collaborate with industry peers, government partners, and trusted intelligence-sharing communities to enhance situational awareness, expand collection capabilities, and improve organizational resilience., • Serve a diverse set of stakeholders ranging from executive leadership and business partners to security practitioners, tailoring intelligence products and recommendations to support strategic, operational, and tactical decision‑making., • A minimum of a bachelor’s degree or equivalent related experience is required., • A minimum of 10 years of professional experience is required., • A minimum of 7 years of cyber threat intelligence or threat research experience is preferred., • Excellent threat intelligence writing and briefing skills are required., • A solid grasp of the current threat landscape including the latest tactics, techniques, and procedures is required., • Significant experience researching, acquiring, and implementing threat intelligence on nation state and criminal cyber threat actors is required., • Strong knowledge of the intelligence lifecycle, intelligence analysis, and related methodologies is required., • Experience with structured analysis techniques (e.g., Diamond Model, Cyber Kill Chain) as well as a proven understanding of the MITRE ATT&CK framework is required., • Experience with the utilization of Open-Source Intelligence (OSINT) as well as closed intelligence sources (e.g., Google Threat Intel, Flashpoint, Silobreaker) is required., • Experience analyzing internal incident data to perform enrichment (e.g. attribution) analysis and to identify trends that drive security improvements is required., • Experience utilizing LLM and Agentic AI tools to facilitate intelligence analysis projects as well as time spent working with automation or data science teams to craft intel-driven workflows is preferred., • Experience analyzing raw data points from technical security controls, to include web proxy, firewalls, IPS, IDS, enterprise antivirus solutions, etc. – is preferred., • Experience with security detection and response technology (SOAR & SIEM) and Threat Intelligence Platform (TIP) products is preferred., • Knowledge of geopolitics and its intersection with the cyber threat landscape is preferred., • Security certifications such as CISSP, SANS GSEC, GCTI, and GCFA or similar industry-recognized credentials are preferred., • Experience working with virtual, global teams - including diverse groups of people with multifaceted backgrounds and cultural experience is preferred. Required Skills: Preferred Skills: Business Process Design, Crisis Management, Critical Thinking, Information Security Auditing, Information Security Management System (ISMS), Information Technology (IT) Security Assessments, Information Technology Strategies, Mentorship, Organizing, Presentation Design, Process Optimization, Root Cause Analysis (RCA), Security Architecture Design, Security Policies, Technical Credibility, Vulnerability Management zł205,000.00 - zł354,200.00 • An annual bonus with set target (% of pay) depending on pay grade / location, where the actual amount is based on the employees’ and companies’ performance of the previous calendar year, or sales commissions., • Moreover, we offer vacation days, parental leave for a minimum of 12 weeks, bereavement leave, caregiver leave, volunteer leave, well-being reimbursement, programs for financial, physical and mental health., • We also offer service anniversary and recognition awards, and subject to the terms of their respective plans, employees and in some location’s eligible dependents can participate in several insurance plans. Amounts and actual benefits may vary by location and are subject to change. Location: Warsaw, Masovian, Poland; Barcelona, Spain; Limerick, Ireland Type: Full time #J-18808-Ljbffr

Buscamos un/a Experto/a en Amenazas para incorporarse a nuestro equipo de ciberseguridad. La persona seleccionada será responsable de recopilar, analizar y correlacionar información de ciberamenazas provenientes de múltiples fuentes internas y externas, con el objetivo de evaluar el nivel de exposición, apoyar la toma de decisiones y proponer medidas de mitigación dentro del marco operativo de la organización.Este rol será clave para identificar tendencias, anomalías y eventos relevantes, así como para dar soporte en comités de crisis y contribuir a la mejora continua del estado de protección.Formación y experienciaIngeniería informática, telecomunicaciones o similar en el ámbito IT.Certificaciones ciberseguridad.Experiencia previa en análisis de ciberamenazas, inteligencia de amenazas (Threat Intelligence) o áreas similares.Conocimientos sólidos en ciberseguridad, operaciones de seguridad y gestión de incidentes.Conocimientos técnicosManejo de herramientas de Threat Intelligence y plataformas de compartición de información.Conocimientos de correlación de eventos, vulnerabilidades y exposición de activos.Capacidad para interpretar logs y fuentes de datos de seguridad.Familiaridad con marcos de amenazas (MITRE ATT&CK, Kill Chain, etc.).Capacidad analítica y pensamiento crítico.Excelentes habilidades de redacción técnica.Capacidad para priorizar en función del contexto operativo.Trabajo colaborativo con equipos de seguridad, operaciones y crisis.#J-18808-Ljbffr

Experiencia, cualificaciones y habilidades interpersonales, ¿tiene todo lo necesario para triunfar en esta oportunidad? Descúbralo a continuación.Buscamos un/a Experto/a en Amenazas para incorporarse a nuestro equipo de ciberseguridad. La persona seleccionada será responsable de recopilar, analizar y correlacionar información de ciberamenazas provenientes de múltiples fuentes internas y externas, con el objetivo de evaluar el nivel de exposición, apoyar la toma de decisiones y proponer medidas de mitigación dentro del marco operativo de la organización.Este rol será clave para identificar tendencias, anomalías y eventos relevantes, así como para dar soporte en comités de crisis y contribuir a la mejora continua del estado de protección.RequisitosFormación y experienciaIngeniería informática, telecomunicaciones o similar en el ámbito IT.Certificaciones ciberseguridad.Experiencia previa en análisis de ciberamenazas, inteligencia de amenazas (Threat Intelligence) o áreas similares.Conocimientos sólidos en ciberseguridad, operaciones de seguridad y gestión de incidentes.Conocimientos técnicosManejo de herramientas de Threat Intelligence y plataformas de compartición de información.Conocimientos de correlación de eventos, vulnerabilidades y exposición de activos.Capacidad para interpretar logs y fuentes de datos de seguridad.Familiaridad con marcos de amenazas (MITRE ATT&CK, Kill Chain, etc.).HabilidadesCapacidad analítica y pensamiento crítico.Excelentes habilidades de redacción técnica.Capacidad para priorizar en función del contexto operativo. xqysrnhTrabajo colaborativo con equipos de seguridad, operaciones y crisis.

CaixaBank es un grupo financiero con un modelo de banca universal socialmente responsable con visión a largo plazo, basado en la calidad, la cercanía y la especialización, que ofrece una propuesta de valor de productos y servicios adaptada para cada segmento, asumiendo la innovación como un reto estratégico y un rasgo diferencial de su cultura, y cuyo posicionamiento líder en banca minorista en España y Portugal le permite tener un rol clave en la contribución al crecimiento económico sostenible. Qué proyectos desarrollamos?Javier Gonzalez Pascual te cuenta qué están buscando. Si necesitas más información puedes contactar a través de: javier.gonzalez.pascual@caixabank.com o en el 682 00 15 22ObjetivoEl objetivo de esta convocatoria es cubrir una vacante de gestor/a en el departamento de Ciberseguridad, en la dirección de Detección, Respuesta y Recuperación del Grupo CaixaBank, para poder dar respuesta a ciberincidentes así como mitigar posibles futuros impactos analizando las técnicas y las tácticas de los atacantes.Misión del departamentoSomos responsables de prevenir y defender a la Entidad, a nuestros clientes y a nuestros empleados ante cualquier tipo de amenaza perpetrada por medios digitales y tecnológicos.Los ámbitos de actuación principales son la detección, la respuesta ante ciberincidentes y la preparación para la recuperación ante un evento disruptivo grave:Analítica de seguridad Definir y controlar los procesos de analítica de seguridad con fines de prevención, detección y respuesta.DetecciónDefinición de los controles de detección de ataques o anomalías que podrían ser indicios de fases iniciales de ciberataques, alineados con la matriz MITRE Att&ck.CSIRT (Computer Security Incident Response Team) Definición, control y ejecución de playbooks ante ciberamenazas y ciberataques. Tambien se definen los procesos de recuperación ante ciberataques para su ejecución por parte de los equipos IT.Operación en ciberseguridad (Cyber SOC) Entendimiento de un CyberSOC y de la operación de playbooks de análisis y respuesta ante eventos de ciberseguridad asi como la revisión de estos para aplicar mejoras.Cyber Threat Intelligence Proceso de Threat Intelligence como input a los procesos de prevención ante ciberataques, que identifica los actores maliciosos con potencial impacto en la entidad, mide el nivel de impacto en base a las tácticas y técnicas y vulnerabilidades de las cuales que hace uso, mantiene un scoring de riesgo por actor y en general de riesgo como métrica anticipativa de ciber-riesgo.Ubicación del puestoEl puesto de trabajo está ubicado en los Servicios Centrales de CaixaBank en Madrid o Barcelona.Perfil del candidato: debe tener, en especial, la capacidad de formar parte de procesos cyber de respuesta a incidentes, es decir, la capacidad de definición de procesos, análisis y respuesta a incidentes.ResponsabilidadesDefinición y control de los procesos de respuesta ante ciber-incidentesDefinición de los playbooks técnicos de respuesta a ciber-incidentes, adaptando los existentes y creando nuevos para cubrir las nuevas ciber-amenazas.Definición de las soluciones para cubrir las necesidades de respuesta en los diferentes entornos tecnológicos corporativosDefinición y control de los procesos de análisis y respuesta del equipo de operación de ciberseguridad (Cyber SOC)Definición y control de los procesos del centro de respuesta a incidentes de ciberseguridad (CSIRT)Definición y control de los entornos de simulación de ciber-ataques para asegurarse de la completitud y efectividad los controles de prevención y detección implantados.Definición y control de los procesos de recuperación post-incidente en base a los playbooks de respuesta a ciber-incidente definidos.Debe tener conocimiento de la matriz de MITRE de detección y ataque, debe tener conocimientos de técnicas y tácticas de ciber-ataques, así como conocimientos de análisis forense.Requisitos mínimosTitulación técnica o superior en informática o telecomunicaciones.Experiencia en gestión de SOC, CSIRT o DFIRConocimientos y experiencia en respuesta a incidentes.Experiencia en dirección de proyectos tecnológicos.Capacidad de trabajo en equipos trasversales.Capacidad de comunicación y habilidades relacionales.Capacidad analítica y de síntesis con visión estratégica.Adaptación al cambio.Disponibilidad para viajar.Inglés hablado y escrito.Competencias claveTécnicas y tácticas de ciber-ataquesMetodologías de trabajo Agile.Buenas prácticas y regulaciones/estándares de seguridad.Formación y certificaciones relacionadas con ciberseguridad.SIEM (Sentinel, Splunk, QRadar, etc.).EDR/XDR.Cloud (Azure, AWS, GCP).Herramientas forenses.SOAR.Herramientas Threat Intelligence. Qué ofrecemos?Job profileEstablecer, aplicar y controlar las políticas de seguridad para predecir, identificar y mitigar los riesgos de seguridad emergentes en la organización, incluyendo la seguridad operacional y fraude, que derivan de la actividad bancaria, así como la ciberseguridad, que deriva de los nuevos riesgos de internetCompetenciasH INVESTIGACIÓN DE TENDENCIAS E IMPACTOS DE IA AL NEGOCIOH GESTIÓN DE CONFLICTOS, AMENAZAS Y VULNERABILIDADESH PLATAFORMAS DE SEGURIDADS.1.1 ALIANZAS – COLABORACIÓN Y TRANSVERSALIDADS.1.4 ALIANZAS – COMUNICACIÓNS.1.3 ALIANZAS – INFLUENCIAS.1.2 ALIANZAS – ORIENTACIÓN A CLIENTES.2.1 HUMANISMO – COMUNICACIÓN Y EMPATÍAS.2.2 HUMANISMO – LIDERAZGO Y DESARROLLO DE EQUIPOS / AUTOLIDERAZGOH ARQUITECTURA DE SEGURIDADS.4.1 ANTICIPACIÓN – ANTICIPACIÓN Y GESTIÓN DEL CAMBIOS.3.1 EMPODERAMIENTO – FOCO EN RESULTADOSH DOCUMENTACIÓN TÉCNICAH SEGURIDAD DE APLICACIONESS.5.1 DIVERSIDAD – IMPULSO DE LA DIVERSIDADH CLOUD AND INFRAESTRUCTURE SECURITYH TECNOLOGÍAS DE SEGURIDAD DE LA INFORMACIÓNH ANALÍTICA AVANZADA Y MODELOS PREDICTIVOSH PROCEDIMIENTOS DE CIBERSEGURIDADH REDES Y SEGURIDADH CIBERFRAUDEH IMPLANTACIÓN SOLUCIONES DE MERCADO DE IAH GESTIÓN Y MONITORIZACIÓN DE PLATAFORMAS DE SEGURIDADH IA LITERACY

NTT DATA es una consultora multinacional que ofrece soluciones tecnológicas, de negocio, estrategia, desarrollo y mantenimiento de aplicaciones, siendo referente en consultoría.Digital Technology es la unidad enfocada a acompañar a las grandes organizaciones iberoamericanas en su transformación digital, generando dividendos digitales a través de la tecnología y el diseño, con enfoque práctico y orientado al negocio.Para lograrlo, buscamos personas que compartan nuestra curiosidad permanente, pasión por la tecnología, excelencia constante y visión estratégica.Job Overview🔍 Buscamos un perfil de: SOC Manager, para sumarse a nuestro gran equipo de ciberseguridad!Responsibilities and QualificationsEvaluar el estado actual del SOC (gap assessment) y definir hoja de ruta a corto, mediano y largo plazo.Formalizar y mejorar procedimientos: playbooks, runbooks, SLAs y modelos de escalamiento.Fortalecer el uso de herramientas de monitorización (SIEM/EDR/IDS) orientadas a calidad de alertas.Implementar programas de reducción de falsos positivos y optimización de casos de uso.Integrar fuentes de threat intelligence para detección más precisa y contextualizada.Establecer capacidades de post-incident review para retroalimentar mejoras.Diseñar y ejecutar el roadmap de madurez del SOC (personas, procesos, tecnología).Transicionar el SOC de un enfoque reactivo a proactivo y basado en riesgos.Implementar y mejorar prácticas alineadas a NIST, MITRE ATT&CK e ISO 27035.Establecer métricas de desempeño y medir progresivamente la evolución del SOC.Reducir dependencias manuales mediante automatización y orquestación (SOAR).Desarrollar capacidades de threat hunting, inteligencia y análisis avanzado.Titulación universitaria en Ingeniería Informática, Ciberseguridad o áreas afines.Poseer experiencia comprobable en: gestión de cambios en procesos, implementación de SIEM/SOAR o evolución de casos de uso.🧠 Formar parte de un equipo de élite, especializado en la unión entre estrategia y tecnología.💼 Contrato indefinido con revisiones de categoría y salario anuales.🎓 Certificaciones bonificadas (Adaptada a cada división).📝 Acceso a nuestra plataforma formativa NTT DATA University (formaciones técnicas, metodológicas, idiomas y soft skills).👩🏽 💻 Trabajo híbrido y horario flexible para que conciliemos mejor.📅 Jornada intensiva (8:00 a 15:00) los viernes y durante el verano.🏥 Beneficios corporativos: complementos salariales adicionales, retribución flexible, seguro médico, etc.🔝 Global Top Employer 2025 — por 10º año consecutivo en España.🌊 Programas solidarios y actividades sociales a través de nuestro portal de voluntarios de The Blue Wave impulsando un impacto positivo.🌏 Innovación diversa y cultura inclusiva en NTT DATA creemos que cada persona es única. Apostamos por una cultura inclusiva que valora la diversidad y fomenta un entorno donde todos podamos explorar y potenciar nuestra singularidad.#J-18808-Ljbffr

Information Security Advisor – BarcelonaSince 2011, SQUAD Group has been a key player in the cybersecurity landscape. We partner with leading organizations to protect their information systems through a comprehensive 360° offering of consulting, integration, expertise, and managed services.Our mission: Securing Together!We believe in a collaborative approach to cybersecurity, where experts and clients work hand‑in‑hand to anticipate threats and protect critical infrastructure.As part of our growing Security Advisory practice, we are looking for an Information Security Advisor to join our team in Barcelona.Your ResponsibilitiesAs an Information Security Advisor, you’ll be a trusted partner to both central security teams and local business stakeholders. Your goal: ensure that security practices, tools, and policies are effectively understood, applied, and continuously improved.Lead and contribute to threat modelling activities, identifying potential attack paths and helping design secure architectures.Support and advise engineering and product teams on cloud security best practices, with a strong focus on AWS environments.Participate in security assessments and policy reviews, helping translate technical findings into actionable recommendations.Collaborate on tool evaluation and integration (e.G. vulnerability management, monitoring, or compliance tools).Provide guidance during incidents and contribute to post‑incident analysis and prevention measures.Act as a security ambassador, fostering awareness, knowledge sharing, and a proactive security culture across teams.Who You AreYou have between 4 and 7 years of experience in cybersecurity, ideally in advisory, governance, or technical security roles.You have hands‑on experience with Threat Modelling (e.G. STRIDE, DREAD, MITRE ATT&CK).You understand AWS Cloud Security fundamentals (IAM, Security Hub, GuardDuty, SCPs, network segmentation...).You are familiar with information security frameworks (ISO 27001, NIST, OWASP, GDPR).You have basic knowledge of secure coding and web application security principles.You’re proactive, analytical, and enjoy collaborating with multidisciplinary teams.You are fluent in English (spoken and written); Spanish orFrench is a plus.Why Join SQUAD?Personalized Growth: A dedicated training and certification plan aligned with your career objectives through our SquadeXpérience.Expertise Development: Participate in internal events like our MixYourTalent webinars and monthly CTF sessions.Visibility: Attend major industry conferences and contribute to our #TheExpert technical blog.Culture: Enjoy a dynamic, close‑knit environment with after‑work events and team gatherings that foster collaboration and fun.Seniority levelMid‑Senior levelEmployment typeFull‑timeJob functionConsultingIndustriesIT Services and IT Consulting#J-18808-Ljbffr

Build a career powered by innovations that matter! At Novanta, our innovations power technology products that are transforming healthcare and advanced manufacturing—improving productivity, enhancing people’s lives and redefining what’s possible. We create for our global customers engineered components and sub-systems that deliver extreme precision and performance for a range of mission-critical applications—from minimally invasive surgery to robotics to 3D metal printing.Novanta is one global team with over 26 offices located in The Americas, Europe and Asia-Pacific. Looking for a great place to work? You have found it with a culture that embraces teamwork, collaboration and empowerment. Come explore Novanta.Business Unit OverviewThis position is part of Novanta's Corporate and Shared Services global teams. Novanta's Corporate and Shared Services teams play an important role in executing the company's strategic mission and operations. Included in Corporate and Shared Services are the business functions including Finance, Accounting, Human Resources, Information Technology, Legal, Compliance, Corporate Development and Corporate Marketing. The Corporate and Shared Services teams work closely with all Novanta business units to support operating initiatives contributing to the organization's financial success.Job SummaryAs a Security Automation & AI Engineer, you will be responsible for designing, building, and maintaining automated workflows and AI-driven solutions that enhance the efficiency and effectiveness of Novanta's global security operations. Working closely with the Security Operations team, you will develop SOAR playbooks, detection-as-code pipelines, and intelligent automation that accelerate threat detection, incident response, and vulnerability management across the enterprise.You will also serve as a key liaison between Security and R&D Engineering, gaining deep understanding of CI/CD pipelines and software development workflows to embed security automation into the development lifecycle. Your goal is to reduce manual operational burden, improve detection coverage, and enable the security team to scale its capabilities in line with Novanta's growth, while maintaining the confidentiality, integrity, and availability of our data and ensuring compliance with industry standards and regulations.Primary ResponsibilitiesDesign, develop, and maintain security automation workflows and SOAR playbooks to streamline alert triage, enrichment, containment, and remediation processes.Build and maintain detection-as-code pipelines, enabling programmatic creation, testing, version control, and deployment of detection rules across SIEM and EDR platforms.Develop AI-assisted investigation tools and scripts that auto-correlate signals across security platforms (SIEM, EDR, DLP, IAM) to accelerate incident response.Automate vulnerability management workflows, including scan orchestration, prioritisation scoring, remediation tracking, and reporting to support the vulnerability management function.Serve as the security team's subject matter expert on R&D CI/CD pipelines (GitHub, Azure DevOps, build/release workflows), understanding how software is developed, tested, and deployed across Novanta's business units.Identify and implement opportunities to embed automated security checks and controls into CI/CD pipelines, shifting security left in the development lifecycle.Build and maintain API-level integrations between security tools and platforms, ensuring data flows efficiently without manual intervention.Collaborate cross-functionally with IT, R&D Engineering, Cloud, and DevOps teams to align security automation initiatives with broader technology strategies.Provide security automation expertise and communicate complex technical solutions to management and the leadership team.Contribute to the creation and continuous improvement of security automation documentation, runbooks, and operational procedures.Evaluate emerging AI and automation technologies for applicability to security operations, and lead proof-of-concept initiatives.Support the broader security operations team during incident response and threat hunting activities as needed.Required Education, Experience & KnowledgeEducation – Bachelor's degree in Computer Science, Cybersecurity, Software Engineering, or a related field (or equivalent practical experience).Experience – 3–5 years of experience in security operations, security engineering, or DevSecOps, with a demonstrated focus on automation and tooling development.Programming – Strong proficiency in Python; experience with PowerShell, Bash, or other scripting languages. Ability to write production-quality, maintainable code.CI/CD & DevOps – Hands-on experience with CI/CD platforms (e.g., GitHub Actions, Azure DevOps Pipelines, Jenkins) and version control systems (Git). Understanding of software development lifecycle and DevOps practices.Security Tooling – Experience with SIEM platforms, EDR solutions, and/or SOAR platforms. Familiarity with DLP and IAM tools is a plus.Cloud & Infrastructure – Working knowledge of cloud platforms (AWS, Azure, or GCP) and infrastructure-as-code concepts.APIs & Integration – Strong experience building and consuming RESTful APIs for tool integration and data orchestration.AI/ML Awareness – Familiarity with AI/ML concepts and their practical application in cybersecurity (e.g., anomaly detection, automated classification, LLM-based workflows). Experience with AI frameworks or platforms is a plus.Frameworks – Understanding of security frameworks such as NIST, MITRE ATT&CK, and CIS. Knowledge of GDPR and its impact on security across a global company.Certifications (preferred) – Relevant certifications such as GIAC (GCSA, GMON), PCSAE (Palo Alto Certified Security Automation Engineer), AWS Security Specialty, or equivalent.SkillsDealing with Ambiguity – Can effectively cope with change; can shift gears comfortably; can decide and act without having the total picture; comfortable handling risk and uncertainty in fast-paced security environments.Analytical & Problem-Solving Mindset – Approaches problems systematically; breaks down complex workflows into automatable components; uses data to drive decisions and measure the effectiveness of automation.Champions Customer Value Creation – Delivers innovative automation solutions that improve security outcomes for internal stakeholders. Seeks feedback from SOC analysts, threat hunters, and engineers to optimise workflows.Functional/Technical Skills – Has the functional and technical knowledge and skills to design, build, and maintain production-grade security automation at a high level of accomplishment.Collaboration & Communication – Works effectively across global, cross-functional teams. Can translate complex automation concepts into clear language for technical and non-technical audiences alike.Written Communications – Can write clearly and succinctly in a variety of communication settings and styles; produces high-quality technical documentation and runbooks.Continuous Learning – Demonstrates curiosity and a commitment to staying current with emerging security automation, AI, and DevSecOps trends and technologies.Novanta is proud to be an equal employment opportunity and affirmative action workplace. We consider all qualified applicants without regard to race, color, religion, sex (including pregnancy), sexual orientation, gender identity or expression, national origin, military and veteran status, disability, genetics, or any other category protected by federal law or Novanta policy.Please call +1 781-266-5700 if you need a disability accommodation for any part of the employment process.SummaryLocation: Barcelona, SpainType: Full time

Defensive Security Engineer - BarcelonaSince 2011, SQUAD Group has been a key player in the cybersecurity landscape. We partner with leading organizations to protect their information systems through a comprehensive 360° offering of consulting, integration, expertise, and managed services.Our mission: Securing Together!We believe in a collaborative approach to cybersecurity, where experts and clients work hand-in-hand to anticipate threats and protect critical infrastructure.As part of our growing team, we're seeking a Defensive Security Engineer. Based in Barcelona, this role will put you at the core of a top-tier Incident Response team, defending the digital assets of a company that connects hundreds of millions of people every month.Your ResponsibilitiesAs a member of the Incident Response team, your mission will be to strengthen the defensive posture and ensure an effective response to any potential threat.Actively participate in the entire incident response lifecycle, from preparation and detection to containment, eradication, and recovery.Contribute to the development and refinement of incident response policies, playbooks, and escalation procedures.Collaborate on the management and optimization of defensive security technologies, including EDR, SIEM, DLP, and NIDS.Gather and analyze threat intelligence to enhance detection and prevention efforts.Work closely with the SOC team and other security departments to ensure alignment and operational efficiency.Prepare regular reports on incidents and alerts, sharing valuable insights to drive improvements in security controls.Who We're Looking ForYou have experience as a security analyst with a proven track record of resolving incidents in large-scale enterprise environments.You're proficient with security tools like EDR, SIEM, and NIDS.You have a strong understanding of AWS Cloud security technologies and controls (SCPs, Security Groups, IAM, etc.).You are familiar with security frameworks and methodologies such as MITRE ATT&CK, ENISA, or NIST.You have solid knowledge of security for networks, protocols, and applications.You understand the software development lifecycle (SDLC) and automation with modern tools like Kubernetes, GitHub Actions, and Infrastructure as Code.You are an analytical, autonomous, and proactive individual with a hacker mindset.You are fluent in English (both written and spoken).Spanish language skills are considered a plus.Why Join Squad?Personalized Growth: We help you build a training and certification plan aligned with your professional goals through our SquadeXpérience.Expertise Development: Participate in internal events like our MixYourTalent webinars and monthly CTF sessions.Visibility: Attend major industry conferences and contribute to our #TheExpert technical blog.Culture: Enjoy a dynamic and close-knit environment with after-work events and team gatherings that foster great camaraderie.

¿Quieres llevar tus habilidades como analista CSIRT al siguiente nivel?Por favor, lea detenidamente la información de esta oferta de empleo para entender exactamente qué se espera de los posibles candidatos.En ALTEN tenemos claro que el éxito de nuestros proyectos se debe a las personas que forman nuestro equipo. Por eso, si tienes más de 2 años de experiencia en análisis de ciberseguridad, gestión de incidentes y operaciones de SOC/CERT, nos comprometemos a impulsar tu talento, satisfacer tus expectativas laborales y hacerte sentir como en casa.¿Qué hacemos en el equipo?En la unidad de Ciberseguridad y Respuesta a Incidentes, gestionamos, analizamos y mitigamos incidentes de seguridad en tiempo real. Nos especializamos en proteger los activos críticos de nuestros clientes frente a amenazas digitales, asegurando la continuidad del negocio y minimizando riesgos. Trabajamos estrechamente con equipos multidisciplinarios para garantizar una respuesta efectiva y adaptada a las necesidades de cada organización.¿Cuáles serían tus funciones?Diseñar y coordinar planes de contención, análisis, erradicación y recuperación de incidentes.Colaborar con equipos internos y externos en la investigación de incidentes complejos.Gestionar como Incident Handler en respuesta a incidentes.Generar informes detallados sobre eventos, incidentes y tendencias de seguridad.Proponer mejoras a las políticas y procedimientos de ciberseguridad.Contribuir a la actualización y mantenimiento de indicadores de compromiso (IoCs).Participar en simulaciones de respuesta a incidentes y ejercicios de ciberseguridad.Crear y revisar informes técnicos y forenses.Diseñar nuevos casos de uso y playbooks, trabajando en coordinación con los equipos N1.¿Cuál sería el modelo de trabajo?Remoto, preferentemente en Madrid para ir puntualmente¿Qué buscamos?Más de 2 años de experiencia en análisis de ciberseguridad, gestión de incidentes y operaciones de SOC/CERT.Experiencia previa en entornos de alta criticidad, preferentemente en el sector bancario.Conocimientos avanzados en Respuesta a Incidentes, análisis de malware y análisis forense digital.Experiencia en diseño de casos de uso y playbooks de respuesta a incidentes.Conocimiento en diseño de flujos de trabajo entre distintos equipos operativos.Familiaridad con marcos y estándares de seguridad como NIST, ISO 27001 y MITRE ATT&CK.Experiencia en gestión/operación de herramientas SIEM (Splunk, QRadar, etc.) y soluciones EDR/XDR.Experiencia en creación de informes técnicos, forenses y periciales.Titulación en Ingeniería Informática, Telecomunicaciones o equivalente.Se valorarán certificaciones como GEIR, GCFA, GCFE, GCIH, CEH, CompTIA Security+ o similares.Conocimientos en scripting para automatización de tareas (Python, PowerShell, Bash).¿Qué podemos ofrecerte?Formar parte de una gran empresa competitiva y en continuo crecimiento.Integración en un equipo de profesionales altamente cualificado, con un buen clima laboral, innovador y dinámico.Formación especializada y desarrollo profesional continuo.¿Quiénes somos?Somos un equipo. Formamos parte de ALTEN, una multinacional europea especializada en proporcionar servicios de consultoría, tecnología de la información y servicios de ingeniería a las principales compañías del mercado español.Si te gustan las cifras, te diremos que tenemos una facturación mundial de más de 3.650 millones de euros, contamos con 57.400 profesionales y estamos presentes en más de 30 países.Además, en ALTEN nos enorgullecemos de ofrecer igualdad de oportunidades con independencia de género, edad, diversidad de capacidades o país de origen. Nuestro compromiso está con el talento y con las personas que lo tienen. xhfqzwm Si crees que eres talento, ¡apúntate!

Are you passionate about cybersecurity and eager to make a real impact in a dynamic environment? Look no further! We are on the lookout for a Senior Cloud Security Engineer who is ready to take the lead in proactively identifying and mitigating security threats and safeguarding our sensitive data. Join forces with our Platform and Data teams and be at the forefront of safeguarding our customer and our N26, our Infrastructure Security team is on a mission to detect and remediate IT and cloud infrastructure security threats. We're dedicated to providing efficient and effective services that empower our N26 tech teams to thrive. • Once here you willDrive the Cloud Infrastructure Security function roadmap in alignment with the Product Manager, Tech Lead, and Engineering Manager., • Own, define and drive initiatives, solutions, processes and frameworks to proactively identify and mitigate security threats within our AWS infrastructure which leads to an overall improvement of our security , deploy and maintain state-of-the-art cloud-native security solutions, incorporating end-to-end data protection, advanced threat detection, automated controls, alerting and remediation mechanisms to ensure continuous compliance and protection across our cloud infrastructure., • Perform regular and proactive research to detect new attack vectors., • Perform Threat Modeling Sessions, assess and classify identify security threats and define threats mitigation solutions in alignment with the stakeholders., • Monitor for vulnerabilities, perform ongoing risk assessment and collaborate with cross-functional teams to mitigate the risk., • Define the pentesting scope and scenarios., • Develop and maintain documentation providing clear guidelines to strengthen security posture and ensure consistent, secure cloud operations across the a first class service to our main stakeholders in our support portal., • Be part of our security incident response on-call rotation (voluntary) and lead security incidents., • Cloud Security: Competent understanding and experience of securing at minimum AWS cloud infrastructure environments, CI/CD pipelines, containerized environment and Linux systems., • Risk Assessment: Experience with assessing security findings and mitigation strategies, • Security Savvy: Competent knowledge of common security frameworks and tactics, including STRIDE, MITRE ATT&CK, and OWASP., • Data Security: Understanding of cloud data security challenges and best practices across cloud cloud environments., • Tool Mastery: Experience in deploying and customising security tools to address threats and reduce risk (CSPM/CNAPP, vulnerability scanners, IDS/IPS, endpoint security, KSPM, container runtime security, etc.), • Automation Pro: Proficiency in using CI/CD pipelines (e.g., Terraform) for implementing automated security testing and change management., • Cloud Deployment: Hands-on Experience with modern cloud technology components and deployment patterns: virtual machines, containers, Kubernetes, serverless, infrastructure as code, etc., • Scripting Skills: Proficiency in Python, Bash, or GO for scripting, • Hacker: Experience with ethical hacking and penetration test methodologies., • Teamwork & Collaboration Agile Mindset: Familiarity with agile methodologies and project management., • Collaborative Spirit: Demonstrated ability to collaborate across teams and segments to achieve complex objectives., • Hands-On: A hands-on attitude with a knack for driving solutions to completion., • Communicator: Excellent oral and written communication skills., • Growth-Driven: A growth mindset focused on learning and pushing the team forward., • Community Contributor: Contributions to the security community, such as open-source tools, research papers, conference talks, etc. A Master's degree in cybersecurity or a related field or a Bachelor's degree in computer science or a related field with an advanced security you're ready to embark on a thrilling journey in the world of IT security and make a meaningful impact, we want to hear from you! Join our team at N26 and help us protect what matters most. Accelerate your career growth by joining one of Europe's most talked about disruptors ð. Employee benefits that range from a competitive personal development budget, work from home budget, discounts to fitness & wellness memberships, language apps and public transportation. As an N26 employee you will have access to a Premium subscription on your personal N26 bank account. As well as subscriptions for friends and family members. Additional day of annual leave for each year of service. A high degree of autonomy and access to cutting edge technologies - all while working with a friendly team of peers of diverse nationalities, life experiences and family statuses. A relocation package with visa support for those who need it. N26 has reimagined banking for today's digital world. Technology and design empower everything we do and it's how we are building the global banking platform the world loves to use. We've eliminated physical branches, paperwork, and hidden fees for an elegant digital experience and supreme savings. Giving people the power to live and bank their way is what gets us out of bed in the morning and inspires the work that we do. We are headquartered in Berlin with offices in multiple cities across Europe, including Vienna and Barcelona, and a 1,500-strong team of more than 80 good? We recognize that our strength lies in our people and the varied perspectives they bring to our workforce. We strive to build talented and diverse teams to drive our business success and empower our people to reach their full potential.We genuinely welcome and encourage applications from people of all backgrounds, cultures, genders, sexual orientations, abilities, neurodiversities, and ages. We're committed to creating an inclusive workspace where everyone feels valued and respected, free from harassment and discrimination. If there's anything you need to make the application process work for you, please let us know by reaching out to . Visit our website to learn more about Diversity, Equity, & Inclusion at N26. #J-18808-Ljbffr

Ciberseguridad Analista inteligencia de amenazas MindMatch Barcelona, cataluña, Spain Buscamos un/a ¿Tiene lo que se necesita para triunfar? La siguiente información debe ser leída atentamente por todos los candidatos. Experto/a en Amenazas para incorporarse a nuestro equipo de ciberseguridad. La persona seleccionada será responsable de recopilar, analizar y correlacionar información de ciberamenazas provenientes de múltiples fuentes internas y externas, con el objetivo de evaluar el nivel de exposición, apoyar la toma de decisiones y proponer medidas de mitigación dentro del marco operativo de la organización. Este rol será clave para identificar tendencias, anomalías y eventos relevantes, así como para dar soporte en comités de crisis y contribuir a la mejora continua del estado de protección. • Formación y experiencia, • Ingeniería informática, telecomunicaciones o similar en el ámbito IT., • Certificaciones ciberseguridad., • Experiencia previa en análisis de ciberamenazas, inteligencia de amenazas (Threat Intelligence) o áreas similares., • Conocimientos sólidos en ciberseguridad, operaciones de seguridad y gestión de incidentes., • Conocimientos técnicos, • Manejo de herramientas de Threat Intelligence y plataformas de compartición de información., • Conocimientos de correlación de eventos, vulnerabilidades y exposición de activos., • Capacidad para interpretar logs y fuentes de datos de seguridad., • Familiaridad con marcos de amenazas (MITRE ATT&CK, Kill Chain, etc.)., • Habilidades, • Capacidad analítica y pensamiento crítico., • Excelentes habilidades de redacción técnica., • Capacidad para priorizar en función del contexto operativo., • Trabajo colaborativo con equipos de seguridad, operaciones y crisis. #J-18808-Ljbffr

About The Job You know adversaries by how they operate — and you know how to turn that knowledge into action. As a Threat Intelligence Engineer — Intrusion Analysis & Detection , you will help transform threat actor behavior into concrete defensive value: stronger detections, smarter hunting hypotheses, and intelligence that helps defenders move faster and more effectively. Within the Allianz Cyber Defense Center (ACDC), you will join a team that is evolving toward an AI‑augmented, intelligence‑driven operating model. This is a high‑impact opportunity to shape and mature intrusion analysis capabilities, automate repetitive intelligence workflows, and directly influence how a global organization defends itself against real‑world threats. What You Do Analyze real‑world attacks, post‑incident findings, and emerging adversary tradecraft to identify relevant threat activity and convert retrospective analysis into forward‑looking intelligence. Translate threat intelligence into actionable detection content by producing detection rules and analytical guidance for deployment by detection engineering teams across platform‑native environments. Track threat actors and map tactics, techniques, and procedures to MITRE ATT&CK, identifying coverage gaps and generating meaningful hunting leads based on relevance to the Allianz environment. Build and maintain automation for repetitive intelligence workflows using SOAR platforms, Power Automate, N8N, Python, scripting, and API integrations to improve speed, quality, and consistency. Apply AI in daily analytical workflows to categorize incoming intelligence, enrich indicators, correlate reporting with tracked topics, and accelerate decision‑making. Communicate findings clearly through dashboards, written intelligence notes, and operational briefings so that detection engineers, incident responders, IT administrators, and leadership can act confidently. Support the full IOC lifecycle and contribute during active security incidents by providing timely analytical input, validation, and triage support as part of on‑call rotations. What You Bring Hands‑on experience in intrusion analysis, including the investigation of real‑world attack patterns, adversary behavior, and post‑incident evidence. Proven ability to turn intelligence into action through detection engineering, including authoring, tuning, or validating detection rules in production environments. Strong knowledge of MITRE ATT&CK, especially at procedure level, and a solid understanding of the telemetry required to detect adversary activity effectively. Practical coding and automation skills, ideally in Python, scripting, and API‑driven workflows, with a builder mindset focused on improving efficiency through automation. Good understanding of the Threat Intelligence Lifecycle and structured analytical techniques, including models such as the Diamond Model and Kill Chain. Experience working with or exposure to tools such as Google SecOps, CrowdStrike Falcon / Intelligence, Google Threat Intelligence / VirusTotal, Recorded Future, MISP, or similar platforms. A proactive, outcome‑driven mindset with the ability to stay composed under pressure, communicate clearly during incidents, and collaborate effectively across technical teams. What We Offer Hybrid work model with up to 25 days per year working from abroad. Performance‑based compensation and benefits, including a company bonus scheme, pension, employee shares program, and employee discounts (details vary by location). Lifelong learning and international career mobility through career development and digital learning programs. Flexible working, healthcare, parental leave benefits, and support to balance family and career while returning from career breaks. Commitment to Integrity, Fairness & Inclusion Allianz Technology is proud to be an equal opportunity employer dedicated to fostering an inclusive work environment for everyone. We embrace individuals of all gender identities and expressions, sexual orientations, ethnicities, ages, nationalities, religions, disabilities, and philosophies of life. We welcome applications regardless of race, ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations. #J-18808-Ljbffr

You know adversaries by how they operate — and you know how to turn that knowledge into action. As a Threat Intelligence Engineer — Intrusion Analysis & Detection, you will help transform threat actor behavior into concrete defensive value: stronger detections, smarter hunting hypotheses, and intelligence that helps defenders move faster and more effectively. Within the Allianz Cyber Defense Center (ACDC), you will join a team that is evolving toward an AI‑augmented, intelligence‑driven operating model. This is a high‑impact opportunity to shape and mature intrusion analysis capabilities, automate repetitive intelligence workflows, and directly influence how a global organization defends itself against real‑world threats. • Analyze real‑world attacks, post‑incident findings, and emerging adversary tradecraft to identify relevant threat activity and convert retrospective analysis into forward‑looking intelligence., • Translate threat intelligence into actionable detection content by producing detection rules and analytical guidance for deployment by detection engineering teams across platform‑native environments., • Track threat actors and map tactics, techniques, and procedures to MITRE ATT&CK, identifying coverage gaps and generating meaningful hunting leads based on relevance to the Allianz environment., • Build and maintain automation for repetitive intelligence workflows using SOAR platforms, Power Automate, N8N, Python, scripting, and API integrations to improve speed, quality, and consistency., • Apply AI in daily analytical workflows to categorize incoming intelligence, enrich indicators, correlate reporting with tracked topics, and accelerate decision‑making., • Communicate findings clearly through dashboards, written intelligence notes, and operational briefings so that detection engineers, incident responders, IT administrators, and leadership can act confidently., • Support the full IOC lifecycle and contribute during active security incidents by providing timely analytical input, validation, and triage support as part of on‑call rotations., • Hands‑on experience in intrusion analysis, including the investigation of real‑world attack patterns, adversary behavior, and post‑incident evidence., • Proven ability to turn intelligence into action through detection engineering, including authoring, tuning, or validating detection rules in production environments., • Strong knowledge of MITRE ATT&CK, especially at procedure level, and a solid understanding of the telemetry required to detect adversary activity effectively., • Practical coding and automation skills, ideally in Python, scripting, and API‑driven workflows, with a builder mindset focused on improving efficiency through automation., • Good understanding of the Threat Intelligence Lifecycle and structured analytical techniques, including models such as the Diamond Model and Kill Chain., • Experience working with or exposure to tools such as Google SecOps, CrowdStrike Falcon / Intelligence, Google Threat Intelligence / VirusTotal, Recorded Future, MISP, or similar platforms., • A proactive, outcome‑driven mindset with the ability to stay composed under pressure, communicate clearly during incidents, and collaborate effectively across technical teams., • Hybrid work model with up to 25 days per year working from abroad., • Performance‑based compensation and benefits, including a company bonus scheme, pension, employee shares program, and employee discounts (details vary by location)., • Lifelong learning and international career mobility through career development and digital learning programs., • Flexible working, healthcare, parental leave benefits, and support to balance family and career while returning from career breaks. Allianz Technology is proud to be an equal opportunity employer dedicated to fostering an inclusive work environment for everyone. We embrace individuals of all gender identities and expressions, sexual orientations, ethnicities, ages, nationalities, religions, disabilities, and philosophies of life. We welcome applications regardless of race, ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations. #J-18808-Ljbffr

Quiénes somos? Cajamar Tecnología A.I.E. es una empresa de Grupo Cajamar conformada por más de 300 profesionales y cuya actividad principal se centra en, IA generativa como palanca principal para digitalizar procesos y Analítica del Data, gestión de plataformas tecnológicas y arquitectura empresarial, análisis, desarrollo y mantenimiento de sistemas informáticos, implantación de soluciones digitales y servicios colaborativos y soporte a usuarios y calidad del servicio TI. Qué necesitamos? Titulación: Licenciados y grados en Informática, Telecomunicaciones o similar Conocimientos y/o experiencia: Experiencia liderando equipos de Threat Intelligence, Vigilancia Digital y Ciber Fraude. Conocimiento de infraestructuras cloud y TTPs utilizados por los Threat actors para comprometer este tipo de arquitecturas. Experiencia de, al menos, 10 años en identificación, modelado y gestión de amenazas. Capacidad de análisis e investigación, así como respuesta ante incidentes. Experiencia a nivel de análisis de malware, identificación de TTPs y extracción de IOCs. Experiencia a la hora de realizar informes técnicos y ejecutivos. Experiencia en la definición de modelos de Identificación y Gestión de Amenazas. Análisis forense digital de los clientes que hayan sufrido fraude digital. Experiencia en el diseño e implantación de sistemas de gestión automática y bloqueo de IOCs. Conocimiento de las últimas amenazas del sector bancario a nivel tecnológico y fraude, así como la identificación de grupos y APT que nos afecten. Conocimiento avanzado de MITRE ATT&CK y MITRE D3FEND. Investigación OSINT para la identificación de actores y amenazas. Recolección de información e infiltración para conocer TTPs del adversario. Conocimiento y experiencia en despliegue, dimensionamiento y gestión de arquitecturas TIPs (MISP, Minemeld, Maltiverse, SocRadar…). Experiencia en Hunting sobre plataformas XDR y/o SIEM (Splunk, QRadar, XSIAM, Cortex XDR, ElasticSearch…). Conocimiento y experiencia en dimensionamiento, despliegue y gestión de arquitecturas BAS (Mandiant, Cymulate..) y creación de reglas. Conocimiento en plataformas de Gestión de Vulnerabilidades (Qualys, Nessus…) Conocimiento medio/avanzado en automatización de procesos. Conocimiento medio/avanzado en desarrollo en Python. Experiencia en construccion y ejecucion de reglas Yara. Conocimiento medio de sistemas operativos y plataformas de virtualización, contenedores y/u orquestación (Linux, Windows, Docker, Kubernetes, Openshift...). Nivel medio/avanzado de inglés. Conocimiento en Protocolos y tecnologías de red. Valorable conocimiento en modelos LLM e IA. Valorable experiencia en entornos sujetos a regulaciones del sistema financiero (DORA, SWIFT, PCI...) Competencias: Certificaciones de seguridad (CEH, CTIA, SANS, FOR578...) Imprescindible capacidad de trabajo en equipo. Pensamiento crítico con alta capacidad de observación y análisis. Buenas habilidades de comunicación escrita y verbal. Buena capacidad de planificación y orientación tanto al objetivo como al proceso. Actitud y orientación a la calidad y al detalle. Qué funciones se realizarás? Investigar amenazas, IoC y TTP Analizar indicadores y técnicas de actores maliciosos para apoyar la caza de amenazas, desarrollo de firmas y la plataforma TIP.Mantenimiento del modelo actual de la entidad para la Identificación y Gestión de Amenazas.Mantenimiento del sistema de bloqueo automático de IOCs de la entidad.Gestionar proyectos de integración de plataformas de seguridad sobre Inteligencia de amenazas, Vigilancia Digital y/o Fraude.Apoyar evaluaciones de ciberseguridad Realizar análisis técnicos y emitir recomendaciones para distintos niveles de la organización.Participar en la respuesta a incidentes Integrarse al equipo de respuesta cuando sea necesario, aportando inteligencia operativa durante incidentes activos.Evaluar y mejorar la información técnica Revisar y optimizar datos técnicos para maximizar su utilidad en la defensa cibernética.Colaborar con gestión de vulnerabilidades Mantener informado al equipo sobre amenazas emergentes que puedan afectar la exposición de la organización. Qué te ofrecemos?Oportunidad de integrarte en un equipo de profesionales, comprometidos en un proyecto de presente y futuro cuyo entorno de trabajo colaborativo y dinámico te facilitará diversidad de posibilidades de crecimiento y desarrollo profesional. Formación continua y disponibilidad de itinerario personalizado. Posibilidad de Jornada y Horario flexible, según proyecto. Compensación y beneficios sociales: Retribución flexible (Seguros de Salud, Cheque Guardería, etc.), y condiciones financieras especiales. Programas de acompañamiento y Bienestar atendiendo a tus necesidades personales. Acceso a diversos Programas de Voluntariado donde podrás involucrarte dejando una huella positiva Posibilidad de trabajo híbrido. Contrato indefinido en un proyecto confiable y en continua evolución con una remuneración acorde a tu experiencia y aportación de valor. Entidad:Cajamar TecnologíaIncorporación: Inmediata Centro de trabajo: Almería, Barcelona, Málaga, Valencia o Madrid ¡¡¡Por todo esto y muchas cosas más, te esperamos!!! Solo tienes que clicar en SOLICITAR. Nos gustaría que formases parte de nuestro GRAN EQUIPO Somos diferentes porque hacemos banca de personas. Requisition ID10694- Posted05/15/2026-8841 - SOC-Servicios Centrales-Provincia (5)Almería , Barcelona , Madrid , Málaga , Valencia

Labhouse is a Barcelona-based startup studio building AI-powered mobile apps used by hundreds of thousands of people worldwide. Our products — including Invoice Fly and Summary AI — are designed to make everyday tasks faster, smarter, and simpler through a subscription model that puts the user first. We were founded by Andrés Bou and Horacio Martos, the duo behind SocialPoint (acquired by Take-Two Interactive), and we operate with the mindset of a product company: small teams, high ownership, and a relentless focus on building things that matter. We are building the next generation of consumer apps powered by AI, and we are looking for a VP of Growth to own the growth engine across our entire portfolio. Would you like to make an impact as part of a company that builds the best mobile apps used by millions of users worldwide? If so, discover your next challenge below. As VP of Growth, you will lead the full growth strategy across Labhouse's portfolio of apps, reporting directly to the Co-CEO. You will own the Growth org – currently composed of the Performance Marketing team – and work hand-in-hand with the Creative and Product teams to scale multiple apps profitably. • Define and execute the growth strategy across all Labhouse apps, • Lead, mentor, and scale the Performance Marketing team, • Own the full UA budget (8-figure annual spend) across Meta, Google, TikTok, ad networks and emerging channels, • Drive ROAS, LTV/CAC, payback periods and overall growth efficiency at the portfolio level, • Partner with Creative to build a high-velocity creative testing engine, • Partner with Product to align acquisition, monetization, and retention strategies, • Build the reporting, attribution and experimentation frameworks that allow us to scale with confidence, • Identify and unlock new growth channels as we expand the portfolio, • Bachelor's degree in Business, Engineering, Economics, Marketing or a related field. A strong quantitative foundation is a plus., • 8+ years in growth/performance marketing roles, with at least 3 years in leadership positions, • Proven track record scaling consumer mobile apps from 0 to meaningful revenue, • Hands-on experience managing performance marketing budgets of at least $1M/month, • Deep, hands-on expertise across Meta, Google (UAC), TikTok and ad networks – you don't need to execute day-to-day, but you can, and you go deep into the detail when needed, • Strong understanding of mobile attribution, MMPs (AppsFlyer, Adjust, Kochava), SKAdNetwork and the post-ATT landscape, • Subscription app experience is strongly preferred, • Data-driven mindset: comfortable building cohort analyses, LTV models, and unit economics from scratch, • Strong leadership and team-building skills, • Fluent English (working language at Labhouse), • Ability to translate complex growth dynamics into clear narratives, • Comfortable challenging and being challenged, • Experience with AI-powered creative production workflows, • Background scaling multiple apps in parallel (portfolio approach), • Spanish is a plus, • Direct reporting line to the Co-CEO and a seat at the strategic table, • Full ownership of growth across a fast-growing portfolio of AI apps, • Competitive compensation package, • A team of senior operators with a proven track record of building and exiting category-defining companies, • The chance to shape the growth engine of one of the most ambitious AI app studios in Europe, • Remote work from anywhere in Spain. If you are based in Barcelona, we would love for you to join us at the office (Barcelona Tech City) at least two days a week., • Competitive compensation, • Permanent contract with competitive compensation., • A young and top entrepreneurial team in a dynamic startup environment., • Opportunity to lead, grow, and take on big challenges., • Work with cutting-edge technologies, including the chance to integrate AI models into new apps., • Intro call with Talent, • Interview with the Co-CEO, • Case study / deep-dive on growth strategy, • Final interview with founders and key stakeholders Labhouse is proud to be an equal-opportunity employer. However you identify or whatever your journey to this point, we welcome all candidates to apply for the position that inspires them. Come join us and help us build a company that everyone is proud to be part of. #J-18808-Ljbffr

CaixaBank busca un gestor/a para el departamento de Ciberseguridad en la dirección de Detección, Respuesta y Recuperación para responder a ciberincidentes y mitigar impactos analizando tácticas de atacantes. Ubicación en Madrid o Barcelona.Se exige titulación técnica, experiencia en SOC/CSIRT/DFIR, conocimiento de MITRE ATT&CK y buenas habilidades de comunicación y trabajo en equipo. Se valorarán certificaciones y dominio del inglés.#J-18808-Ljbffr

Schwarz Digits creates the technological foundation for digital sovereignty in Europe. As the IT and digital division of the Schwarz Group, we develop and manage the IT infrastructures for the retail divisions Lidl and Kaufland, as well as Schwarz Production and PreZero. At the same time, we operate as an independent provider in the external market to support companies across Europe in their digital transformation. We bundle our core services in the areas of Cloud, Cyber Security, Data & AI, Communication, and Workspace.Join us and contribute to digital sovereignty in Europe. With us, you will work at the intersection of agility and security: You will benefit from fast decision-making processes, enjoy genuine creative freedom in your projects, and be able to build upon the stable foundation of the Schwarz Group.Your tasksCoordinate and communicate IT security incidents across teams and countries, managing the incident response process.Detect and analyze potential security incidents, ensuring effective containment.Reconstruct cyber-attacks and malware, analyze sensitive data, and derive remediation actions.Develop mechanisms to detect anomalies and attacks, initiating preventive measures to alert in time.Monitor the general threat landscape on the Internet and provide actionable recommendations.Advise internal projects on security-related issues.Conduct IT forensic investigations.Create meaningful reports on IT security incidents.Your ProfileOur Cyber Defense Center is fully built and up and running. We are now looking to strengthen the team with an Incident Response expert to cover the weekday afternoon shift. This is a hands‑on, experienced technical role focused on advanced incident, and continuous improvement rather than tier‑one alert triage.You will join a large Cyber Security organization with excellent opportunities for growth, development, and promotion based on performance and training. Continuous learning is essential in this field, and the company supports this with a wide range of education and training options to enhance both soft and hard skills.5+ years of professional experience in Incident Response, leading medium to critical security incident response.Hands‑on experience in incident response, including triage, containment, remediation, and end‑to‑end security investigations.Experience partnering with Escalation Management, Product Development/Engineering, IT, Legal, Cloud Ops, and wider cybersecurity teams to lead remediation.University degree in Information Technology or comparable education.Strong English skills, fluent business English (speaking and writing) at advanced level (B2+).Further education in IT forensics and security incident management.Expert knowledge in SIEM systems (preferably Splunk), SOAR tools, and EDR solutions.Strong technical expertise in deployed technologies and cyber attack techniques.Knowledge of national and international IT standards and frameworks (ISO 27001, NIST Cyber Security Framework, BSI Grundschutz, ITIL, OWASP, MITRE ATT&CK).High communicative and analytical skills, ability to work independently, and strong team spirit.Confidence and persuasiveness with communication skills in English. German will be well considered but it is not mandatory.Commitment to continuous education and professional development.Would be a plus: Strong digital forensics skills, including analysis, timeline reconstruction, and interpreting artefacts across Windows, macOS, Linux, and cloud environments.Would be a plus: Experience in cloud incident response including familiarity with cloud‑native logging, identity systems, and investigation techniques.Would be a plus: Knowledge of application security, including investigating application‑layer attacks, abuse cases, and SaaS‑specific threats.Working Hours: Afternoon shift (13:45 – 22:00h), from Monday to Friday (no rotation).#J-18808-Ljbffr

Sway Sourcing – En Modern Partner för Framtidens Rekrytering och KonsultlösningarHos Sway Sourcing står ni som kund, konsult, kandidat och samarbetspartner i centrum för allt vi gör. Vi är ett ungt och modernt företag som brinner för nära samarbeten och långsiktiga relationer. Vår målsättning är att leverera en förstklassig service som överträffar era förväntningar och gör oss till det självklara valet varje gång ni behöver rekrytera, hitta nya uppdrag eller stärka ert team.About the role 💼We are looking for a German-speaking Sales Team Lead (player-manager) to join a fast-growing European B2B SaaS company within hospitality tech.This is a step-up role for a Senior Account Executive looking to move into leadership. You will initially spend the first 3–6 months as an individual contributor, building deep product and market understanding, before transitioning into a Team Lead role combining sales and leadership.Your responsibilities 🔧You will play a dual role combining hands-on sales with team leadership.Initially own the full sales cycle as an individual contributorTransition into leading and developing a team of AEs and SDRsDrive performance through 1:1s, coaching, and pipeline reviewsSupport deals and improve win rates through hands-on involvementCollaborate with Marketing, Product, and Customer Success to optimize go-to-marketContribute to scaling processes, forecasting, and revenue growthYour profile / Required skills ✅Several years of experience in B2B SaaS salesProven top performance as an individual contributor (AE)Experience coaching or informally leading othersStrong skills in pipeline management, forecasting, and CRMExperience from fast-paced or scaling environmentsNative or C2 German (mandatory)Meritorious skills ⭐Experience within hospitality SaaS (strongly preferred)Experience in international sales environmentsPrevious formal leadership experiencePersonal qualities 🤝You are a high-performing seller with leadership ambitions. You combine strong commercial drive with a coaching mindset and are motivated by growing into a leadership role while still staying close to the business.Offer & development 🚀OTE: ~€120,000 (50/50 split, flexible depending on profile)Clear path from Senior AE → Team Lead within 3–6 monthsHybrid setup (Barcelona, 1–2 days/week in office)High-impact role in a fast-scaling SaaS companyStrong internal performance culture and top-performing teamLocationBarcelona (hybrid)ScopeFull-time, 100%StartAs agreedSway Sourcing är en innovativ rekryteringspartner som specialiserar sig på att matcha rätt talang med rätt företag – snabbt och effektivt. Vårt huvudfokus ligger inom Ekonomi, Administration, HR, Marknad och IT, men vi har även den breda expertis och flexibilitet som krävs för att leverera skräddarsydda rekryteringslösningar inom alla branscher.Trots att vi är en relativt ny aktör har vi redan byggt förtroende hos många av Sveriges största företag och arbetar både nationellt och internationellt. Med baser i Sverige och Spanien erbjuder vi en unik kombination av lokal expertis och global räckvidd. Vårt starka nätverk och djupa branschinsikter gör oss till en självklar partner för företag som vill ligga steget före i sin rekrytering.

¿Quieres llevar tus habilidades como analista CSIRT al siguiente nivel? Por favor, verifique que tiene el nivel de experiencia y las cualificaciones adecuadas leyendo la descripción completa de esta oportunidad a continuación. En ALTEN tenemos claro que el éxito de nuestros proyectos se debe a las personas que forman nuestro equipo. Por eso, si tienes más de 2 años de experiencia en análisis de ciberseguridad, gestión de incidentes y operaciones de SOC/CERT, nos comprometemos a impulsar tu talento, satisfacer tus expectativas laborales y hacerte sentir como en casa. ¿Qué hacemos en el equipo? En la unidad de Ciberseguridad y Respuesta a Incidentes, gestionamos, analizamos y mitigamos incidentes de seguridad en tiempo real. Nos especializamos en proteger los activos críticos de nuestros clientes frente a amenazas digitales, asegurando la continuidad del negocio y minimizando riesgos. Trabajamos estrechamente con equipos multidisciplinarios para garantizar una respuesta efectiva y adaptada a las necesidades de cada organización. ¿Cuáles serían tus funciones? • Diseñar y coordinar planes de contención, análisis, erradicación y recuperación de incidentes., • Colaborar con equipos internos y externos en la investigación de incidentes complejos., • Gestionar como Incident Handler en respuesta a incidentes., • Generar informes detallados sobre eventos, incidentes y tendencias de seguridad., • Proponer mejoras a las políticas y procedimientos de ciberseguridad., • Contribuir a la actualización y mantenimiento de indicadores de compromiso (IoCs)., • Participar en simulaciones de respuesta a incidentes y ejercicios de ciberseguridad., • Crear y revisar informes técnicos y forenses., • Diseñar nuevos casos de uso y playbooks, trabajando en coordinación con los equipos N1. ¿Cuál sería el modelo de trabajo? Remoto, preferentemente en Madrid para ir puntualmente ¿Qué buscamos? • Más de 2 años de experiencia en análisis de ciberseguridad, gestión de incidentes y operaciones de SOC/CERT., • Experiencia previa en entornos de alta criticidad, preferentemente en el sector bancario., • Conocimientos avanzados en Respuesta a Incidentes, análisis de malware y análisis forense digital., • Experiencia en diseño de casos de uso y playbooks de respuesta a incidentes., • Conocimiento en diseño de flujos de trabajo entre distintos equipos operativos., • Familiaridad con marcos y estándares de seguridad como NIST, ISO 27001 y MITRE ATT&CK., • Experiencia en gestión/operación de herramientas SIEM (Splunk, QRadar, etc.) y soluciones EDR/XDR., • Experiencia en creación de informes técnicos, forenses y periciales., • Titulación en Ingeniería Informática, Telecomunicaciones o equivalente., • Se valorarán certificaciones como GEIR, GCFA, GCFE, GCIH, CEH, CompTIA Security+ o similares., • Conocimientos en scripting para automatización de tareas (Python, PowerShell, Bash). ¿Qué podemos ofrecerte? • Formar parte de una gran empresa competitiva y en continuo crecimiento., • Integración en un equipo de profesionales altamente cualificado, con un buen clima laboral, innovador y dinámico., • Formación especializada y desarrollo profesional continuo. ¿Quiénes somos? Somos un equipo. Formamos parte de ALTEN, una multinacional europea especializada en proporcionar servicios de consultoría, tecnología de la información y servicios de ingeniería a las principales compañías del mercado español. Si te gustan las cifras, te diremos que tenemos una facturación mundial de más de 3.650 millones de euros, contamos con 57.400 profesionales y estamos presentes en más de 30 países. Además, en ALTEN nos enorgullecemos de ofrecer igualdad de oportunidades con independencia de género, edad, diversidad de capacidades o país de origen. Nuestro compromiso está con el talento y con las personas que lo tienen. xqziphu Si crees que eres talento, ¡apúntate!

Squad Conseil Et Expertises busca un Analista SOC Senior para un rol 100% remoto desde España. Se exige 5–7 años en SOC, experiencia en SIEM/EDR/SOAR, scripting (Python/PowerShell) y conocimiento de MITRE ATT&CK.

Schwarz Digits creates the technological foundation for digital sovereignty in Europe. As the IT and digital division of the Schwarz Group, we develop and manage the IT infrastructures for the retail divisions Lidl and Kaufland, as well as Schwarz Production and PreZero. At the same time, we operate as an independent provider in the external market to support companies across Europe in their digital transformation. We bundle our core services in the areas of Cloud, Cyber Security, Data & AI, Communication, and Workspace. Join us and contribute to digital sovereignty in Europe. With us, you will work at the intersection of agility and security: You will benefit from fast decision‑making processes, enjoy genuine creative freedom in your projects, and be able to build upon the stable foundation of the Schwarz Group. • Coordinate and communicate IT security incidents across teams and countries, managing the incident response process., • Detect and analyze potential security incidents, ensuring effective containment., • Reconstruct cyber‑attacks and malware, analyze sensitive data, and derive remediation actions., • Develop mechanisms to detect anomalies and attacks, initiating preventive measures to alert in time., • Monitor the general threat landscape on the Internet and provide actionable recommendations., • Advise internal projects on security‑related issues., • Conduct IT forensic investigations., • Create meaningful reports on IT security incidents., • Our Cyber Defense Center is fully built and up and running. We are now looking to strengthen the team with an Incident Response expert to cover the weekday afternoon shift. This is a hands‑on, experienced technical role focused on advanced incident, and continuous improvement rather than tier‑one alert triage., • You will join a large Cyber Security organization with excellent opportunities for growth, development, and promotion based on performance and training. Continuous learning is essential in this field, and the company supports this with a wide range of education and training options to enhance both soft and hard skills., • 5+ years of professional experience in Incident Response, leading medium to critical security incident response., • Hands‑on experience in incident response, including triage, containment, remediation, and end‑to‑end security investigations., • Experience partnering with Escalation Management, Product Development/Engineering, IT, Legal, Cloud Ops, and wider cybersecurity teams to lead remediation., • University degree in Information Technology or comparable education., • Strong English skills, fluent business English (speaking and writing) at advanced level (B2+)., • Further education in IT forensics and security incident management., • Expert knowledge in SIEM systems (preferably Splunk), SOAR tools, and EDR solutions., • Strong technical expertise in deployed technologies and cyber attack techniques., • Knowledge of national and international IT standards and frameworks (ISO 27001, NIST Cyber Security Framework, BSI Grundschutz, ITIL, OWASP, MITRE ATT&CK)., • High communicative and analytical skills, ability to work independently, and strong team spirit., • Confidence and persuasiveness with communication skills in English. German will be well considered but it is not mandatory., • Commitment to continuous education and professional development., • Would be a plus: Strong digital forensics skills, including analysis, timeline reconstruction, and interpreting artefacts across Windows, macOS, Linux, and cloud environments., • Would be a plus: Experience in cloud incident response including familiarity with cloud‑native logging, identity systems, and investigation techniques., • Would be a plus: Knowledge of application security, including investigating application‑layer attacks, abuse cases, and SaaS‑specific threats., • Working Hours: Morning shift (05:45 - 14:00h), from Monday to Friday (no rotation). #J-18808-Ljbffr

Genom att sätta dina hemgångsmål kan du själv bestämma hur mycket tid som läggs på arbetet, samtidigt som du oavsett hur länge du jobbar får betalt för en hel arbetsdag!. Vi jobbar med provision utan tak, så det är din egen insats som avgör din inkomst!. Jobba som säljare i Barcelona o

I rollen som säljare hos oss vill vi se vilja, driv, kreativitet och ett ”outside-of-the-box” tänk. Du kommer utöver det delta i utbildningar och feedbacksamtal från din teamleader, detta för att ständigt utvecklas och växa i rollen som säljare hos oss. Drivs mot uppsatta mål, resultati

Att cliente- control accesos lunes a viernes Indef IMAN Corporación Mollet del Vallès, España. Necesitamos incorporar Aux de control accesos- Att cliente para un nuevo cliente ubicado en la zona de Mollet - Montmeló.

Vi söker dig som är sugen på att arbeta i en stor och snabbväxande koncern och är redo att kavla upp ärmarna när det behövs. Daglig coaching och löpande utbildningar för att du ska få de bästa förutsättningarna att lyckas i ditt arbete. Drivs mot uppsatta mål, resultatinriktad och ut�

Si tiene experiencia en Att al cliente o eres estudiante universitario y te lo puedes combinar. Aux Control de Accesos en Vacarisses - Att cliente.

Älskar du sol, hav och nya utmaningar? Vi söker en driven säljare som vill kombinera karriär med livet i pulserande Barcelona. ¡Inscríbase sin demora! Se espera un gran volumen de solicitantes para el puesto que se detalla a continuación, no espere para enviar su CV. Om oss Vi är Europas marknadsledande leverantör av energilösningar till privatpersoner. 1KOMMA5°-gruppen driver visionen om en klimatneutral europeisk villamarknad enligt Parisavtalet 2030. 1KOMMA5° levererar och installerar energismarta lösningar såsom solceller, laddboxar och ellagring samt AI energistyrsystemet Heartbeat. Företaget grundades 2021 och har idag över 2 200 anställda på över 75 olika platser i Norden, Europa och Australand. Företaget värderades till Unicorn redan 2023, som det mest snabbväxande clean‑techbolaget någonsin. Om rollen Vår innesäljsavdelning är en fantastisk plats att arbeta på där teamkänsla och glädje står i centrum. Här arbetar du tillsammans med både mötesbokare och innesäljare i en inspirerande miljö som präglas av samarbete och gemenskap. Vi sitter i ett öppet kontorslandskap som ger den perfekta inramningen för att trivas och växa. Med stark sammanhållning, bra stöd från kollegor och tydliga utvecklingsmöjligheter kan du räkna med att din karriär tar fart samtidigt som du har kul på vägen. Som innesäljare kommer du att guida kunder genom hela försäljningsprocessen, från det första intresseväckandet till färdigt avtal, och säkerställa att varje steg sker smidigt och professionellt. Din arbetsdag kommer att präglas av samtal med kunder där ni tillsammans kommer fram till en lösning som passar just dom. Förutom säljmöten innebär tjänsten även att du kommer designa solcellsanläggningar, skapa offerter och följa upp på varje projekt. Vi söker dig Är erfaren och trygg i din säljroll sedan tidigare. Du behärskar kunddialogen och motiveras av en nöjd kund vid avslutad affär. Du är social och trivs i en fartfylld roll där du får forma din egen lön. Vi tror att du • Viss arbetslivserfarenhet inom försäljning, • Har god telefonvana samt datavana, • Behärskar svenska och engelska Meriterande • Erfarenhet av att jobba i CRM-system, • Har jobbat inom solcellsbranschen tidigare Övrigt START: Enligt överenskommelse PLATS: Plaza Cataluña, Carrer de Fontanella, 21, L'Eixample, 08010 Barcelona, España OMFATTNING: 100% MÅLLÖN: 3600-4000 € (grundlön + provision) 1KOMMA5° strävar efter att vara en attraktiv arbetsgivare som är fri från diskriminering och ger lika möjligheter för alla. I vår personalsammansättning vill vi spegla samhället i övrigt och välkomnar både kvinnor och män i olika åldrar och med olika bakgrund till att bli vår kollega. För att säkerställa att våra medarbetares värdegrund stämmer överens med 1KOMMA5º tar vi en bakgrundskontroll som en del av rekryteringsprocessen. xcskxlj Vi tar endast emot och bearbetar ansökningar via annons och inte via mejl. #J-18808-Ljbffr

Reescribe tu carrera en Recursos Humanos con Adecco.Por favor, presente su candidatura sin demora si su perfil encaja bien con este puesto, debido al alto nivel de interés.Tienes experiencia de cara al público y te manejas bien con herramientas digitales?.Te gustaría dar un giro a tu carrera y fo

NTT Data somos todas las personas que la formamos.Nuestra misión? Ofrecer soluciones tecnológicas, de negocio, estrategia, desarrollo y mantenimiento de aplicaciones, siendo un referente en consultoría.Todo gracias a la colaboración entre equipos, la calidad humana de nuestra gente y a que no no

CUATRECASAS, firma de abogados internacional con marcada implantación en España, Portugal y América Latina, cuenta con un equipo multidisciplinar y diverso de más de 1900 profesionales en 26 oficinas con 29 nacionalidades de 12 países, que cubren todas las disciplinas del derecho de empresa y t