Att jobs in , MadridCreate job alerts

NTT DATA somos todas las personas que la formamos. Un equipo de más de 190.000 profesionales, tan diverso cómo diversos son los más de 50 países en los que estamos presentes y los diferentes sectores en los que desarrollamos nuestra actividad; telecomunicaciones, entidades financieras, industria, utilities, energía, administración pública y sanidad. ¿Nuestra misión? Ofrecer soluciones tecnológicas, de negocio, estrategia, desarrollo y mantenimiento de aplicaciones, siendo un referente en consultoría. Todo gracias a la colaboración entre equipos, la calidad humana de nuestra gente y a que no nos conformamos con lo establecido, buscamos siempre la innovación que nos acerca al futuro. Nuestra esencia nos ha llevado a la vanguardia de la tecnología, a romper paradigmas y a brindar las soluciones que realmente se corresponden a las necesidades de cada cliente. Nuestro talento nos ha hecho poder decir con orgullo que somos una de las empresas TOP de tecnologías en el mundo. Desde el área de Ciberseguridad buscamos incorporar un perfil Red Team Lead con al menos 5 años de experiencia en la ejecución de proyectos hacking y Red Team. ¿Cuál será tu reto? Te incorporarás a la línea de Privacy & Security by Design del equipo de Ciberseguridad en NTT DATA desde donde, a través de tu conocimiento experto en Red Team, podrás contribuir al crecimiento y liderazgo de nuestro equipo AOST (Advance Offensive Security Team) y mejora de los servicios de seguridad ofensiva que ofrecemos (ejercicios de red / purple team, pentesting externo/interno avanzado sobre infraestructuras, sistemas o aplicaciones, ejercicios de simulación de adversarios,…). Participarás en la ejecución de proyectos de ámbito nacional e internacional de alta complejidad y/o en aquellos en los que sea necesario un conocimiento diferenciador para el arranque del proyecto, siendo el referente técnico tanto a nivel interno como externo. Formarás parte de un gran equipo en el que se fomenta el crecimiento y desarrollo profesional. ¿Cuáles son los requisitos? • Titulación Universitaria en Informática o Telecomunicaciones. (Deseable Máster en Ciberseguridad)., • Experiencia de, al menos, 5 años en ejecución de proyectos de hacking y Red Team., • Conocimiento sólido y aplicación en proyectos de las siguientes metodologías / estándares de seguridad: MITRE ATT&CK, Cyber Kill Chain, PTES, OWASP, …., • Persona proactiva, con gran curiosidad por la seguridad ofensiva, la tecnología y con capacidad de transmitir conocimiento a perfiles con menos experiencia., • Se valora tener experiencia en desarrollo de malware como arsenal para ejercicios de Red Team y conocimiento de C&C como, por ejemplo, Cobalt Strike., • Se valora estar en posesión de algunas de las siguientes certificaciones de seguridad: OSCP, OSCE, OSED, eCPPTX, CRTO, CRTE, CRTP, CRTL, CARTP, GPEN, GXPN, CREST Certified Simulated Attack Specialist (CCSAS), …, • Se valora un buen nivel de inglés (B2 o superior). ¡NTT DATA es tu sitio! Porque hemos obtenido en España, por 10º año consecutivo, la certificación Top Employer, que nos reconoce como una de las mejores empresas en las que trabajar, gracias a nuestro compromiso por el talento. Únete a un equipo que apuesta por el desarrollo integral de sus profesionales, elige el modelo de trabajo que mejor se adapte a ti, y colabora en un entorno diverso, donde cada persona tiene su propia singularidad.

We are looking for you if you have... • Proven, extensive experience (e.g., 5+ years) working in a Security Operations Center or a similar cybersecurity role., • Expert-level proficiency with Microsoft Sentinel, including analytics rules, SOAR playbooks and custom workbooks., • Mastery of Kusto Query Language (KQL) for advanced threat hunting, complex data analysis and creating sophisticated detection rules., • In-depth, hands-on experience with the Microsoft 365 Defender suite, Sentinel, especially Microsoft Defender for Endpoint (MDE) for threat and vulnerability management, EDR investigation and response actions., • Deep understanding of modern attack vectors, MITRE ATT&CK framework and cyber kill chain methodologies., • Strong knowledge of networking protocols, operating system internals (Windows/Linux) and cloud security principles (especially Azure)., • Demonstrated ability to lead complex incident investigations from detection to resolution., • Excellent communication skills and the ability to mentor junior analysts., • Fluent in English (Minimun B2 - C1 level preferred). You'll get extra points for... • Work experience in SOC (Security Operations Center), • Experience in working with SIEM tooling (Security information and Event Management), • Programming, scripting and/or data management skills, • Professional certifications such as Microsoft SC-200, AZ-500, CISSP, GCIH, or GCIA, • Higher education, • Ability to make decisions independently, • Ability to work in a group, • Ability to work under time-pressure, • Willingness to take up working in shifts, • Experience with other components of the Microsoft security stack (Microsoft Defender for Identity, Defender for Cloud Apps), • Experience with other cloud platforms (AWS, GCP), • Experience integrating threat intelligence platforms (TIPs) with a SIEM Your responsibilities • Security event analysis (scenario-based), • Anomaly detection, • Product maintenance and development The team you'll join We are looking for a talented and enthusiastic Senior Security Analyst to join our team within the new ING Hubs Spain (based in Madrid). Security Analytics is great place for learning and gaining experience in the Security field, which is considered one of the most prestigious areas in IT. Team’s tasks include performing the analysis of security events as well as anomalies’ detection on the infrastructure, application and network levels. The main objective of the team is to detect incidents and ensure the ING Group’s security, while constantly engaging in the process of improving the quality and effectiveness of provided services. Get to know us The ING Hubs are now a truly global network of more than 13,000 employees located in the Philippines, Poland, Romania, Slovakia and Türkiye. For ING to achieve its strategic and commercial goals, it is essential that our Hubs strategy & workforce composition allows us to maximise our use of scarce resources in a competitive landscape and helps us to standardise and achieve faster time-to-market. Therefore, we would like to announce that ING Hubs BV is in the process of establishing a new branch in Spain. This provides a great opportunity to expand Hubs’ footprint and support ING’s scalable, sizeable and sustainable Tech and Ops Strategy. The new branch will be located in Madrid and will commence with Tech capabilities.

¡Hola! ¿Tienes experiencia en el ámbito de la ciberseguridad? ¿Cuentas con formación y experiencia en Centros de Operaciones de Seguridad? Si es así esta puede ser tu oportunidad. Grupo Eulen selecciona un analista SOC de Nivel 3 con conocimientos avanzados en áreas clavecomo threat hunting, detección avanzada de amenazas, diseño de capacidades defensivas en el SIEM, incluyendo automatización a través de plataformas SOAR. Este perfil actúa como un referente técnico dentro del equipo con gran peso en la evolución operativa y tecnológica del SOC. Su función principal es reforzar la capacidad de detección y análisis proactivo frente a amenazas avanzadas, asegurando una defensa alineada con modelos como MITRE ATT&CK y guías de ciberinteligencia. Opera en colaboración con analistas de Nivel 2 y equipos especializados, y es responsable de integrar la inteligencia en capacidades técnicas de forma tangible. Funciones: • Coordinar técnicamente con otras áreas (Ciberinteligencia, gestión de vulnerabilidades, ingeniería, etc.) para asegurar una detección alineada con los riesgos actuales y las campañas de amenazas activas., • Liderar la revisión técnica de incidentes complejos escalados desde Nivel 2 o investigaciones en curso, asegurando profundidad analítica y calidad en la documentación., • Desarrollo de casos de uso del SIEM, revisando la lógica de detección, cobertura MITRE ATT&CK, y su alineación con la inteligencia de amenazas disponible., • Diseñar y validar playbooks de automatización en SOAR, asegurando que las respuestas automáticas y semi-automáticas se ajusten a los procedimientos del SOC y reduzcan la carga operativa., • Hunting proactivo., • Liderar y guiar técnicamente al equipo de analistas (niveles 2), resolviendo dudas, recomendando enfoques y promoviendo buenas prácticas de análisis y detección., • Impulsar la mejora continua del SOC, proponiendo nuevas capacidades técnicas, herramientas o metodologías para aumentar la eficacia del equipo., • Participar en la definición y estandarización de procedimientos técnicos (detección, análisis, escalamiento, documentación) para asegurar una operación coherente y de calidad., • Participa activamente en las lecciones aprendidas post-incidente y consultas transversales en materia de ciberseguridad., • Responsable de mantener la base de conocimiento del SOC (casos de uso y playbooks) Te ofrecemos • Incorporación a una empresa líder en el sector, • Contrato fijo ordinario con inicio inmediato, • Horario de lunes a viernes en turno de mañanas, • Posibilidad de teletrabajo 1 o 2 días por semana, • Formación continua por parte de la empresa, • Salario competitivo según valía y experiencia Buscamos: • Experiencia en búsquedas avanzadas (SPL) para análisis de logs y correlaciones., • Experiencia en dashboards, informes y visualizaciones en Splunk., • Conocimiento de CIM (Common Information Model) y normalización de datos, así como experiencia en Splunk ES., • Creación y mantenimiento de playbooks automatizados para respuesta a incidente (SOAR Splunk)., • Experiencia en análisis de incidentes de ciberseguridad (malware, phishing, ransomware, intrusiones, exfiltración)., • Capacidad para trabajar bajo presión y priorizar incidentes críticos., • Trabajo en equipo, coordinación con otros analistas y niveles superiores, • Comunicación efectiva, tanto técnica como hacia áreas de negocio., • Deseables certificaciones Splunk Core Certified, Splunk ES Certified, CompTIA Security+, CEH, GCIA/GCFA. En Grupo EULEN, nos comprometemos a garantizar la igualdad de oportunidades en todos los procesos de selección, promoviendo la equidad en cada etapa. Trabajamos activamente para implementar medidas que fomenten un entorno inclusivo y diverso. Este compromiso de la empresa refleja nuestra convicción de que un equipo diverso enriquece nuestra cultura organizacional y potencia nuestro impacto positivo en la sociedad. ¡Reconocemos el talento de las personas!

Please submit your CV in English. Thank you. Your Mission As a Tier 2 SOC Analyst, you will serve as a subject matter expert in our technology stack while optimizing security tools and detection workflows, mentoring junior analysts on complex investigation techniques, and driving continuous improvement initiatives across our multi-client SOC environment. This role demands advance analytical skills to conduct in-depth analysis of escalated security incidents from Tier 1 analysts, performing advanced threat investigations to determine attack vectors, assess impact scope, and develop comprehensive remediation strategies. Your responsibilities will be: • General responsibilities, • Recommend improvements for Standard Operating Procedures (SOPs), • Propose enhancement on tools and workflow, • Respond in a timely manner (within documented SLA) to support tickets., • Document actions in tickets to effectively communicate information internally and to customers., • Adhere to policies, procedures, and security best practices., • Take responsibility for customer satisfaction and overall success of managed services., • Be available, ready, and able to accept incoming clients calls, • Mentor fellow Security Engineers and Security Analysts., • Service improvement, • Optimize SIEM rules and detection logic to reduce false positives and improve detection accuracy Support rules factory program in improving the global set of detection, • Validate Go-to-Active and Go-to-Prod gates of our new clients to ensure a smooth transition to operation, • Continuously improve incident templates in terms of content for the clients and in terms of, • automation to best support the operation, • Support rollout of new set of rules for our clients, • Qualify, analyze, and provide recommendations for new standard data source requests, • Support Product teams to build best new services to fit with Operations capabilities (needs,, • scalability, efficiency), • Threat Monitoring, • Manage escalated cases from T1 Analysts, • Analyze and respond to security events from SIEM, EDR, FWs, IDS, IPS, AV and other security data, • sources., • Deliver high quality Incident Handling and investigation, • Conduct threat hunting activities using advanced analytics and threat intelligence, • Provide 24/7 on-call support for critical security incidents outside business hours You are • A team-player willing to iterate on our internal processes to improve the team’s efficiency, • Experience in international/global environment, • At ease with solving complex problems, • Dynamic, with strong interpersonal and communication skills, • Autonomous, self-taught and transparent, • Able to handle and prioritize parallel tasks with multiple interfaces, • Fluent in English You have • Minimum 4 years of hands-on experience in cybersecurity operations, incident response, or threat analysis, bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or equivalent experience and, • Proven track record in a SOC and international/global environment, • Advanced proficiency with SIEM platforms (Splunk, QRadar, Sentinel, etc.), • Extensive experience with EDR/XDR solutions (CrowdStrike, SentinelOne, Microsoft Defender, etc.), • Deep understanding of network security technologies (firewalls, IDS/IPS, network monitoring), • Strong knowledge of Windows and Linux/Unix operating systems and forensics, • Experience with cloud security (AWS, Azure, GCP) and containerization technologies, • Familiarity with OT/ICS environments and industrial control systems security, • Proficiency in scripting languages (Python, PowerShell, Bash) for automation, • Understanding of threat intelligence platforms and MITRE ATT&CK framework If you are seeking a culture that supports growth, fosters success, and moves the industry forward, then Kudelski Security is where you need to be! As the premier provider of cybersecurity service and solutions, Kudelski Security has the most comprehensive ecosystem of security products and partners to deliver unparalleled services. Our rich and successful history with our clients is based on innovation and trust, serving clients of varying sizes and industries, including commercial, government and education. We have the proven expertise to plan, build, and run successful security programs across Data & Cloud security, Application Security, Microsoft 365 security, Data Privacy, Managed Security services, and IoT/OT security. Kudelski remains committed to advocating Diversity, Equality, and Inclusion within our organization and throughout the industry. With Kudelski, you can expect • Immersion in an incredible culture and the vibe of a fast moving and growing organization full of opportunity., • Opportunity to work with talented peers., • Creative problem-solving and the ability to tackle unique, complex projects., • Competitive compensation with a benefits package that protects you and your loved ones and allows you to pursue career growth with tuition reimbursement., • Generous time off for rest, relaxation, and hobbies., • Colleagues from across the globe who are interested in helping clients protect their companies so they can focus on fulfilling their mission. About Kudelski Security Kudelski Security, a division of the Kudelski Group (SIX: KUD.S), is an innovative, independent Swiss provider of tailored cyber and media security solutions to enterprises and public sector institutions. Our team of security experts delivers end-to-end consulting, technology, managed services, and threat intelligence to help organizations build and run successful security programs. Our global reach and cyber solutions focus is reinforced by key international partnerships. Kudelski Security is headquartered in Phoenix, Arizona and Cheseaux-sur-Lausanne, Switzerland. For more information, please visit:

Your Mission As a Tier 2 SOC Analyst, you will serve as a subject matter expert in our technology stack while optimizing security tools and detection workflows, mentoring junior analysts on complex investigation techniques, and driving continuous improvement initiatives across our multi-client SOC environment. This role demands advance analytical skills to conduct in-depth analysis of escalated security incidents from Tier 1 analysts, performing advanced threat investigations to determine attack vectors, assess impact scope, and develop comprehensive remediation strategies. Your responsibilities will be: • General responsibilities, • Recommend improvements for Standard Operating Procedures (SOPs), • Propose enhancement on tools and workflow, • Respond in a timely manner (within documented SLA) to support tickets., • Document actions in tickets to effectively communicate information internally and to customers., • Adhere to policies, procedures, and security best practices., • Take responsibility for customer satisfaction and overall success of managed services., • Be available, ready, and able to accept incoming clients calls, • Mentor fellow Security Engineers and Security Analysts., • Service improvement, • Optimize SIEM rules and detection logic to reduce false positives and improve detection accuracy Support rules factory program in improving the global set of detection, • Validate Go-to-Active and Go-to-Prod gates of our new clients to ensure a smooth transition to operation, • Continuously improve incident templates in terms of content for the clients and in terms of, • automation to best support the operation, • Support rollout of new set of rules for our clients, • Qualify, analyze, and provide recommendations for new standard data source requests, • Support Product teams to build best new services to fit with Operations capabilities (needs,, • scalability, efficiency), • Threat Monitoring, • Manage escalated cases from T1 Analysts, • Analyze and respond to security events from SIEM, EDR, FWs, IDS, IPS, AV and other security data, • sources., • Deliver high quality Incident Handling and investigation, • Conduct threat hunting activities using advanced analytics and threat intelligence, • Provide 24/7 on-call support for critical security incidents outside business hours You are • A team-player willing to iterate on our internal processes to improve the team’s efficiency, • Experience in international/global environment, • At ease with solving complex problems, • Dynamic, with strong interpersonal and communication skills, • Autonomous, self-taught and transparent, • Able to handle and prioritize parallel tasks with multiple interfaces, • Fluent in English You have • Minimum 4 years of hands-on experience in cybersecurity operations, incident response, or threat analysis, bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or equivalent experience and, • Proven track record in a SOC and international/global environment, • Advanced proficiency with SIEM platforms (Splunk, QRadar, Sentinel, etc.), • Extensive experience with EDR/XDR solutions (CrowdStrike, SentinelOne, Microsoft Defender, etc.), • Deep understanding of network security technologies (firewalls, IDS/IPS, network monitoring), • Strong knowledge of Windows and Linux/Unix operating systems and forensics, • Experience with cloud security (AWS, Azure, GCP) and containerization technologies, • Familiarity with OT/ICS environments and industrial control systems security, • Proficiency in scripting languages (Python, PowerShell, Bash) for automation, • Understanding of threat intelligence platforms and MITRE ATT&CK framework If you are seeking a culture that supports growth, fosters success, and moves the industry forward, then Kudelski Security is where you need to be! As the premier provider of cybersecurity service and solutions, Kudelski Security has the most comprehensive ecosystem of security products and partners to deliver unparalleled services. Our rich and successful history with our clients is based on innovation and trust, serving clients of varying sizes and industries, including commercial, government and education. We have the proven expertise to plan, build, and run successful security programs across Data & Cloud security, Application Security, Microsoft 365 security, Data Privacy, Managed Security services, and IoT/OT security. Kudelski remains committed to advocating Diversity, Equality, and Inclusion within our organization and throughout the industry. With Kudelski, you can expect • Immersion in an incredible culture and the vibe of a fast moving and growing organization full of opportunity., • Opportunity to work with talented peers., • Creative problem-solving and the ability to tackle unique, complex projects., • Competitive compensation with a benefits package that protects you and your loved ones and allows you to pursue career growth with tuition reimbursement., • Generous time off for rest, relaxation, and hobbies., • Colleagues from across the globe who are interested in helping clients protect their companies so they can focus on fulfilling their mission. About Kudelski Security Kudelski Security, a division of the Kudelski Group (SIX: KUD.S), is an innovative, independent Swiss provider of tailored cyber and media security solutions to enterprises and public sector institutions. Our team of security experts delivers end-to-end consulting, technology, managed services, and threat intelligence to help organizations build and run successful security programs. Our global reach and cyber solutions focus is reinforced by key international partnerships. Kudelski Security is headquartered in Phoenix, Arizona and Cheseaux-sur-Lausanne, Switzerland. For more information, please visit:

¡Hola! ¿Tienes experiencia en el ámbito de la ciberseguridad? ¿Cuentas con formación y experiencia en Centros de Operaciones de Seguridad? Si es así esta puede ser tu oportunidad. Grupo Eulen selecciona un/a Analista de ciberinteligencia y vulnerabilidades que actúe como referente técnico y analítico en el área de ciberinteligencia táctica y operativa, transformando los hallazgos recogidos en múltiples fuentes en productos de inteligencia avanzados que permiten identificar amenazas dirigidas, campañas activas, actores hostiles y riesgos geopolíticos o sectoriales relevantes. Deberá contar con un conocimiento experto del entorno de amenazas digitales y cibernéticas, así como con capacidades para liderar investigaciones complejas y colaborar de forma estrecha con equipos técnicos (SOC, ingeniería, respuesta a incidentes) y áreas de negocio (GRC, riesgo, crisis). El analista será responsable de recopilar, analizar y contextualizar amenazas, monitorizar filtraciones de datos y exposiciones de la organización, y priorizar vulnerabilidades para orientar acciones de mitigación. Su trabajo asegura que la empresa tome decisiones de seguridad basadas en riesgo real y contexto actualizado. Funciones: • Liderar investigaciones avanzadas sobre amenazas complejas detectadas en plataformas de vigilancia, aplicando análisis de contexto, atribución de, • actores y evaluación de intenciones., • Identificar campañas sostenidas, filtraciones u otros riesgos dirigidos a la organización o su sector., • Desarrollar informes de inteligencia operativa y táctica, incluyendo evaluaciones de riesgo, líneas base de amenaza, análisis de impacto y recomendaciones de mitigación., • Colaborar en los análisis escalados desde el SOC, aportando visión experta y completando análisis técnico, geopolítico o motivacional si es necesario., • Colaborar con respuesta a incidentes y gestión de crisis, sirviendo como enlace entre vigilancia y decisiones operativas., • Proponer mejoras de procedimientos y casos de uso de vigilancia, adaptando los servicios a nuevas amenazas, tecnologías o contextos., • Asegurar la trazabilidad, documentación y validación de fuentes e hipótesis, siguiendo buenas prácticas del ciclo de inteligencia., • Contextualización, priorización y comunicación de vulnerabilidades en base a su riesgo real de explotación. Te ofrecemos • Incorporación a una empresa líder en el sector, • Contrato fijo ordinario con inicio inmediato, • Horario de lunes a viernes en turno de mañanas, • Posibilidad de teletrabajo 1 o 2 días por semana, • Formación continua por parte de la empresa, • Salario competitivo según valía y experiencia Buscamos: • Ciberinteligencia: análisis de actores, campañas y TTPs, uso de marcos como MITRE ATT&CK., • Gestión de vulnerabilidades y riesgos: priorización basada en riesgo real, exposición y criticidad de activos., • Monitoreo de filtraciones y data leaks: experiencia con herramientas OSINT, Dark Web Intelligence, feeds de credenciales comprometidas., • Herramientas de Threat Intelligence y Vulnerability Management: OpenCTI, MISP, Qualys, etc. En Grupo EULEN, nos comprometemos a garantizar la igualdad de oportunidades en todos los procesos de selección, promoviendo la equidad en cada etapa. Trabajamos activamente para implementar medidas que fomenten un entorno inclusivo y diverso. Este compromiso de la empresa refleja nuestra convicción de que un equipo diverso enriquece nuestra cultura organizacional y potencia nuestro impacto positivo en la sociedad. ¡Reconocemos el talento de las personas!

S21sec by Thales is looking for a Threat Hunter and Incident Responder to be a key member of these services, able to track APT groups within customer and investigate and perform forensic work within critical incidents on customer. Job Summary: The role combines proactive threat hunting with reactive incident response, ensuring both early detection and effective containment of cyber threats. To actively reduce dwell time, minimize business impact, and increase resilience by combining proactive hunting with decisive and structured response to cyber incidents Job Responsabilities: Conduct proactive threat hunting across endpoints, networks, and cloud environments to identify hidden adversary activity and advanced persistent threats (APTs). Analyze logs, telemetry, and threat intelligence to detect anomalies, suspicious behaviors, and emerging attack techniques. Develop and refine hunting hypotheses, detection rules, and queries aligned with MITRE ATT&CK tactics and techniques. Lead and support incident response investigations, including triage, forensic analysis, root-cause identification, containment, and remediation. Perform host- and network-level analysis (malware, memory, packet captures, system artifacts) to assess the scope and impact of intrusions. Job Requirements: Strong knowledge of operating systems internals (Windows, Linux, macOS) and network protocols (TCP/IP, HTTP, DNS, etc.). Proficiency with SIEM, EDR, and log analysis platforms (e.g., Splunk, Sentinel, Elastic, CrowdStrike, Carbon Black). Experience in threat hunting methodologies and creating detection queries mapped to MITRE ATT&CK. Hands-on experience with incident response: triage, containment, forensics, and malware analysis. Ability to analyze artifacts and evidence (registry, memory, disk, logs, network captures). Education and Training Skills: Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or equivalent experience. 3–5+ years of experience in cybersecurity, ideally within Threat Hunting, Incident Response, or DFIR roles. Languages: EN - C1 At S21sec we consider ourselves disruptive when it comes to organising the way we want to work. That's why we are constantly innovating our policies, to enable employees to enjoy a real work-life balance. Tell us what you want, and you will find it at S21sec. • Would you like to have up to 43 days off per year? At S21sec you can organise your working day to increase the 24 days of holiday we offer you. How?, • You can spread your annual working hours over the year and enjoy one Friday off per month or 12 Fridays off per year., • You can choose between an intensive working day of 7 hours a day from Monday to Friday in July and August, or continue with the same working day as before and then add 5 days off to enjoy during the current year., • Do you want to maximise your net salary? At S21sec you can decide which Flexible Remuneration package (Restaurant Card, Transport Card, Childcare Vouchers and Training Vouchers) best suits your needs. • Do you want to continue your training and expand your certifications? At S21sec you have an Annual Training Plan (based on technical certifications, languages, soft skills training...). • Do you like to share what you learn? At S21sec we count on the voluntary participation of the Speakers programme. • Do you want to work with clear and transparent objectives? At S21sec we have an Annual Bonus Policy, based on KPIs. • Do you want to choose how to develop professionally at S21sec? Because we are not all the same, at S21sec you can decide whether to develop your career in Cybersecurity by focusing on team management or specialise in one of the technical areas with our experts. If you are passionate about cybersecurity, we are the company for you. We are waiting for you!

Evolutio nace después de más de 30 años prestando servicios en el mercado español con la marca BT (British Telecom) con una nueva visión: ser el socio de confianza que acompaña a las empresas en el proceso de Transformación asociado a la adopción de las tecnologías Cloud. Nuestro portfolio incluye soluciones NETWORK EDGE de última generación, infraestructura CLOUD que pone en valor su agilidad y economía de costes, las últimas soluciones para mejorar la EXPERIENCIA DIGITAL de sus clientes, y el diseño e implantación de la estrategia de CIBERSEGURIDAD más adecuada para su empresa. Qué buscamos? Buscamos un Analista de Seguridad Perimetral que se incorpore al equipo de SOC dedicado a un importante cliente de la administración pública. Requisitos imprescindibles • Experiencia laboral de al menos 3 años en el Sector de las Telecomunicaciones / Seguridad., • Experiencia laboral de al menos 3 años en puesto similar en SOC equivalente., • Certificaciones de fabricantes a nivel profesional. Conocimientos Técnicos fundamentales • Seguridad Perimetral: Experiencia en configuración y mantenimiento de firewalls (FW), proxies, balanceadores, IPS/IDS (Palo Alto y Fortinet)., • SIEM y Correlación de Eventos: Dominio de herramientas como Splunk, QRadar, ArcSight, Sentinel, incluyendo la creación de reglas de correlación, tuning y detección de falsos positivos., • Gestión de Vulnerabilidades y Threat Intelligence: Experiencia con herramientas como Tenable, Qualys, Rapid7 y plataformas de inteligencia de amenazas (MISP, VirusTotal, MITRE ATT&CK)., • Protocolos de Red y Seguridad: Profundo conocimiento en TCP/IP, DNS, HTTP/HTTPS, SSL/TLS, VPNs, SSH y detección de ataques en tráfico de red. Funciones -Administración avanzada en plataformas de perimetral (FW, Proxy, Balanceadores, IPS/IDS) -Técnico experto en gestión de casos con fabricante (Palo Alto, Fortinet, F5, Forescout...) -Análisis de pilotos y nuevas soluciones -Colaborador en oficina de proyectos -Configuración de nuevas capacidades y análisis de servicios -Gestión de vulnerabilidades y análisis avanzado de eventos de seguridad Requisitos deseables • Certificaciones Palo Alto, Fortinet, Forescout, F5, BlueCoat, Mcafee. -Certificación ITIL nivel intermedio (MALC), CISSP, CISM, CEH, CHFI. Datos de interés • Modalidad: hibrido., • Guardias rotativas., • Turnos rotativos de mañana (7h a 15h) y tunos de tarde (10h a 18h) de lunes a viernes. ¿Qué ofrecemos? 🏡 Teletrabajo y oficina. 🥳 Concilia tu vida laboral y personal. 👨‍🎓 Quieres certificarte? Apúntate a nuestro amplio catálogo de certificaciones! Desde Evolutio nos haremos cargo de tus exámenes de certificación y además, tendrás acceso a My Academy, nuestra plataforma de formación continua. 🎁 Disfruta de nuestros beneficios sociales gratuitos: servicio médico, seguro de vida y accidentes, plan de pensiones, etc. 🌟 Benefíciate de nuestro plan de retribución flexible: tickets restaurante, seguro médico para familiares, abono transporte, cheque guardería y formación. ✈️️ Tendrás 23 días laborables de vacaciones + 1 día extra cada 3 años. ️💰 Recomienda talento para nuestras ofertas de empleo. Participa en nuestro programa de referencias profesionales Talent Ambassadors y consigue tu gratificación. 🚀 Apostamos por tu crecimiento profesional, desarrolla tu plan de carrera o muévete a otros departamentos. Conocemos los retos a los que nuestros clientes se enfrentan y cómo la tecnología les puede ayudar. Sólo nos faltas tú, ¡Únete a nuestro equipo!

CyberProof is a cyber security services and platform company whose mission is to help our customers react faster and smarter – and stay ahead of security threats, by creating secure digital ecosystems. CyberProof automates processes to detect and prioritize threats early and respond rapidly and decisively. CyberProof is part of the UST Global family. Some of the world’s largest enterprises trust us to create and maintain secure digital ecosystems using our comprehensive cyber security platform and mitigation services. We are looking for a talented Senior Threat Hunter who will be part of our growing managed services group, which monitors, investigates, and resolves security incidents, violations, and suspicious activities. The successful candidate will be responsible for proactively identifying and mitigating cyber threats, adversary activity, and potential risks that evade traditional security defenses. Main tasks and accountabilities will be: • Proactively drive hunting and analysis against the available dataset from various sources including, network, endpoint, and cloud environments to look for indicators of security breaches., • Leverage internal and external resources to research threats, vulnerabilities, and intelligence on various attackers and attack techniques, to form hunting workflows and mitigation steps., • Innovate new processes and workflows to deploy proactivity in all aspects to address complex threats and risks., • Design and implement data mining techniques to extract meaningful insights from large data sets., • Develop and maintain an understanding of the latest cybersecurity technologies, trends and threats., • Participate in the development of reports and dashboards that provide insights into the cybersecurity posture of the client., • Collaborate with cross-functional teams to develop and implement new tools, techniques, and response workflows to enhance cybersecurity. What do we expect from you? • Proven experience of 7+ years as Cyber Threat Hunter or Incident Response, including high skills in forensics and investigation of network, endpoint and cloud logs., • Deep and proven knowledge and understanding of TTPs, attack frameworks (e.g., MITRE ATT&CK), and advanced threat actors., • Experience with security applications such as data lake, SIEM tools and EDR platforms., • Deep and proven knowledge of operating systems essentials including Linux/Unix and Windows., • Experience analyzing network traffic, packet captures, and log data., • Proven skills on Hunting on Cloud assets – AWS, GCP, Azure., • Strong understanding of Python libraries commonly used in data science, such as Pandas, and MsticPY., • Advantageous to have in-depth knowledge of Jupyter Notebooks and experience in utilizing them for data analysis, visualization, and prototyping., • Critical thinking, problem-solving skills and innovative way of thinking., • Excellent communication skills to explain technical findings to both technical and non-technical audiences., • Excellent organization, time management, and attention to detail., • Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent experience)., • Relevant certification (e.g., GIAC GCIH, GCFA, GREM, OSCP, CEH) is an advantage., • Fluent in English What do we offer? • 23 days of Annual Leave plus the 24th and 31st of December as discretionary days., • Numerous benefits (Heath Care Plan, teleworking compensation, Life and Accident Insurances)., • `Retribución Flexible´ Program: (Meals, Kinder Garden, Transport, online English lessons, Heath Care Plan…), • Free access to several training platforms, • Professional stability and career plans, • Referral program, • The option to pick between 12 or 14 payments along the year., • Real Work Life Balance measures (flexibility, WFH or remote work policy, compacted hours during summertime…)

Global Exchange Tecnologías Digitales (GETD) es la división tecnológica digital del Grupo Global Exchange, una multinacional española que opera en el mercado de divisas para prestar servicios de cambio de moneda extranjera al público turista en aeropuertos internacionales. Operamos en 29 países de 5 continentes y tenemos una red de más de 340 oficinas. En la actualidad, integramos el área de tecnología y de negocio digital para ofrecer las soluciones más innovadoras al negocio. Nuestro desarrollo profesional se centra en la formación continua, en la incorporación de metodologías ágiles y de las últimas tecnologías, así como en la contratación de perfiles diversos y versátiles para adaptarnos a la realidad cambiante del sector. Actualmente estamos buscando ampliar nuestro equipo de Blue Team en el área de Ciberseguridad ¿A quién buscamos? A una persona con formación en el área IT, desde Formación Profesional hasta Máster (muy valorable) Muy valorable: • Conocimiento de reglas Sigma y Yara., • Conocimientos de Mitre Att&ck., • Conocimientos de WAF, EDR, IPS/IDS, • Conocimiento de OpenCTI o MISP, • Certificaciones de Seguridad (CompTIA Security+, CompTIA CySA+, BTL2, PJMR) Requisitos técnicos: • Conocimiento de Firewall, IPS, WAF., • Conocimiento de análisis de Malware., • Conocimiento de APTs., • Creación de casos de usos en SIEM., • Conocimiento en Threat Hunting., • Experiencia en la configuración de fuentes e ingesta de datos en SIEM., • Investigación de eventos de seguridad en Sistemas Linux y Windows Funciones del puesto: • Categorizar y priorizar eventos en base al nivel de exposición y al nivel de impacto., • Integrar e ingestar logs de distintas fuentes al SIEM., • Crear los casos de uso y categorizarlos de acuerdo al Framework de Mitre Att&ck, • Monitorizar de forma continua y proactiva, buscando actores maliciosos en nuestra infraestructura., • Investigación de eventos de seguridad., • Formar parte del equipo de respuesta a incidentes de seguridad., • Gestionar herramientas de Seguridad (EDR, Threat Intelligence, SOC)., • Escalamiento de alertas y monitoreo. ¿Quieres más información? Apúntate a la oferta y te contactamos En cumplimiento de lo dispuesto en la normativa vigente en materia de protección de datos, le informamos que los datos personales que facilite en el marco del presente proceso de selección serán tratados por Eurodivisas Corporación, S.L., en calidad de responsable del tratamiento, con la finalidad de gestionar su candidatura, evaluar su perfil profesional y, en su caso, incluirle en futuros procesos de selección. La base jurídica para este tratamiento es el consentimiento del interesado y/o la aplicación de medidas precontractuales. Los datos no serán cedidos a terceros, salvo obligación legal, y se conservarán durante el tiempo estrictamente necesario para cumplir con la finalidad mencionada. Puede ejercer sus derechos de acceso, rectificación, supresión, oposición, limitación del tratamiento, portabilidad, así como retirar su consentimiento en cualquier momento, dirigiéndose por escrito a la siguiente dirección de correo electrónico: , adjuntando copia de su documento de identidad e identificando el derecho o conjunto de derechos que desea ejercer. Para más información sobre el tratamiento de sus datos personales, consulte nuestra política de privacidad a través del siguiente enlace:

Time left to apply: End Date: August 31, 2025 (7 days left to apply) Job requisition id: R9549 Location: Madrid (Hybrid) Cybersecurity professional services, consultancy, and assessments such as penetration testing, threat modelling, controls assessments, and maturity reviews are increasingly vital to all organizations. NCC Group is an expert in providing cybersecurity assessments and advice, as well as in applied security research. To support our growth, NCC Group is seeking a Technical Solution Engineer / Solutions Architect to join our professional service technical solution team. This role is crucial in understanding client challenges, NCC Group’s cybersecurity service portfolio, and how these can be combined to develop our clients’ cybersecurity maturity. • Supporting sales team members, acting as a technical lead/advisor to clients during the sales cycle, and articulating how NCC Group's services and solutions meet business and security challenges, both face-to-face and remotely., • Leading the development of scalable, repeatable, and costed solutions across NCC Group’s professional service catalog., • Developing high-quality written and verbal technical responses to RFx and client-facing documentation including Statements of Work (SoWs), presentations, and scoping questionnaires., • Collaborating with sales, delivery, bid management, and legal stakeholders to shape competitive and compelling solution responses aligned with client procurement strategies., • Contributing to internal initiatives to enhance the maturity and capability of the global presales function, including tooling, templates, and best practices., • Supporting the wider presales team in more complex, multi-phased engagements., • Identifying trends and gaps in the market that could enable NCC Group to gain a competitive advantage., • Acting as an escalation and support team for delivery consultants when engaging with customers on technical solutions., • Proven experience in presales, solution architecture, or technical consultancy within cybersecurity or technology services., • Strong understanding of cybersecurity domains including offensive security, defensive operations, incident response, cloud security, and GRC., • Ability to design and communicate complex solutions clearly and persuasively to technical and non-technical stakeholders., • Experience in responding to RFPs and shaping solutions for complex, multi-service opportunities., • Commercial awareness to balance client requirements, risk, and margin., • Excellent written communication, presentation, and interpersonal skills., • Strong stakeholder management skills with experience influencing across functions and seniority levels., • Security certifications such as CISSP, CISM, OSCP, or similar., • Experience working within regulated sectors (e.g., Financial Services, Energy, Critical National Infrastructure)., • Familiarity with industry standards and frameworks (e.g., NIST, ISO 27001, Cyber Essentials, MITRE ATT&CK)., • Financial & Investment - Pension, Life Assurance, Share Save Scheme, Maternity & Paternity leave., • Community & Volunteering Programmes. We review every application received and will contact you if your skills and experience match what we’re looking for. If you don’t hear from us within 10 days, please don’t be too disappointed – we may keep your CV in our database for future vacancies, and we encourage you to keep an eye on our career opportunities as there may be other suitable roles. If you do not want us to retain your details, please email All personal data is held in accordance with the NCC Group Privacy Policy (candidate-privacy-notice-261023.pdf). We are committed to diversity and flexibility in the workplace. If you require any reasonable adjustments during the application process, please let us know at any stage. Please note that this role involves mandatory pre-employment background checks due to the nature of the work NCC Group does. To apply, you must be willing and able to undergo the vetting process. This role will be subject to BS7858 screening as a mandatory requirement. The NCC Group family has over 2,200 members worldwide, providing trusted advisory services to 15,000 customers. Originating in the UK, we now have offices in North America, Canada, Europe, Asia-Pacific, and the United Arab Emirates. We are passionate about helping our customers protect their brand, value, and reputation against evolving threats. We invest in our people and our business. Our values and code of ethics underpin our operations – we work together, are creatively brilliant, and embrace diversity. We aim to create an environment where all colleagues feel safe to be authentic, share their experiences, and have equal opportunities to succeed. #J-18808-Ljbffr