Trabajos att en VicálvaroCrear alertas

UST is a multinational company based in North America, certified as a Top Employer and Great Place to Work company with over 35,000 employees worldwide and presence in more than 35 countries. We are leaders in digital technology services, providing large-scale technological solutions to some of the world’s leading organizations. We are currently looking for a Cybersecurity Consultant – Cloud Security & Identity to join our Cybersecurity team. Madrid (Hybrid model: 3 days at the office) • Evaluate and enhance the security posture of Azure subscriptions and GCP projects., • Manage security policies, RBAC, Conditional Access, and Microsoft Defender for Cloud., • Implement and maintain Google Security Command Center controls., • Review IaaS, PaaS, and container environments to identify misconfigurations and security gaps., • Manage and optimize CSPM solutions such as Wiz, Prisma Cloud, or Defender CSPM., • Operate CNAPP platforms integrating CWPP, KSPM, and DSPM capabilities., • Define compliance frameworks and automate remediation initiatives aligned with CIS, NIST, and ISO 27001., • Collaborate with DevSecOps teams to integrate security controls into CI/CD pipelines., • Design and implement Zero Trust identity architectures., • Manage Azure AD / Microsoft Entra ID security controls, including MFA, SSO, Conditional Access, and PIM., • Review privileged access and excessive permissions through CIEM practices., • Implement controls to prevent privilege escalation and lateral movement., • Design and review cloud network segmentation strategies using VNets, VPCs, NSGs, Firewalls, and Private Endpoints., • Assess hybrid connectivity solutions (ExpressRoute, VPN, Interconnect)., • Analyze traffic flows, firewall policies, WAF configurations, and DDoS protections., • Support incident investigations and network forensics activities., • Conduct technical cloud security assessments and define remediation roadmaps., • Develop security architectures, standards, policies, and procedures., • Support internal and external stakeholders during secure cloud transformation initiatives., • Participate in incident response activities and red team/blue team exercises., • Bachelor’s degree in Computer Science, Telecommunications, Engineering, Information Systems, or a related field., • Minimum of 4 years of experience in cloud security technical roles., • Hands‑on experience securing Azure and/or Google Cloud environments in production., • Proven experience with CSPM and CNAPP platforms., • Strong knowledge of IAM, PIM, CIEM, and Zero Trust methodologies., • Experience with:, • Microsoft Azure, • Google Cloud Platform (GCP), • Microsoft Entra ID / Azure AD, • Defender for Cloud, • Security Command Center, • Cloud networking and segmentation, • SIEM/SOAR solutions, • Terraform and Infrastructure as Code, • DevSecOps and CI/CD security, • CIS Benchmarks, NIST, ISO 27001 and MITRE ATT&CK, • AZ‑500 – Microsoft Azure Security Engineer, • SC‑100 – Microsoft Cybersecurity Architect, • Google Professional Cloud Security Engineer, • CCSP (ISC²), • CISSP or CISM, • CEH or OSCP, • Experience participating in red team/blue team exercises., • Strong automation mindset and security engineering background., • 23 days of Annual Leave plus the 24th and 31st of December as discretionary days!, • Numerous benefits (Health Care Plan, Internet Connectivity, Life and Accident Insurances)., • Flexible Benefits Program (Meals, Kindergarten, Transport, Online English Lessons, Health Care Plan…)., • Free access to several training platforms., • Professional stability and career development plans., • Referral Program with attractive rewards., • The option to choose between 12 or 14 salary payments per year., • Real Work-Life Balance measures (flexibility, remote work policy, compact working hours during summer, etc.)., • UST Club Platform discounts and gym access discounts. At UST we are committed to equal opportunities in our selection processes and do not discriminate based on race, gender, disability, age, religion, sexual orientation, or nationality. We have a special commitment to Disability & Inclusion and encourage applications from candidates holding a disability certificate. Microsoft Azure, ISO 27001, Google Cloud Platform, CIEM #J-18808-Ljbffr

We are a cutting-edge e-commerce company developing products for our technological platform. Our creative, smart, dedicated teams pool their knowledge and experience to deliver the best solutions to meet project needs while maintaining sustainable, long-lasting results. How? By making sure that our teams thrive and develop professionally. Strong advocates of hiring top talent and letting them do what they do best, we strive to create a workplace that allows for an open, collaborative, and respectful culture You will be responsible for collecting, normalizing, analyzing, and exploiting security logs from multiple sources across the organization, ensuring they are ingested into SIEM platforms and used to detect threats, anomalies, and security incidents. You will play a key role in threat detection, incident investigation, and forensic analysis by transforming raw logs into actionable insights through dashboards, alerts, and advanced log analysis. • Design, implement, and maintain log collection pipelines from multiple sources, including security, infrastructure, cloud, and application systems., • Ensure logs are ingested, parsed, normalized, and retained correctly across SIEM platforms such as FortiAnalyzer, Splunk, CrowdStrike, and others., • Maintain data quality and consistency across all log sources., • Design, build, and maintain dashboards and visualizations to provide visibility into security posture, threats, and operational metrics., • Create, tune, and maintain correlation rules and alerts based on:, • Attack patterns, • Indicators of compromise (IOCs), • Behavioral anomalies, • Custom detection use cases defined by the Information Security Team, • Continuously analyze logs to identify suspicious, anomalous, or out-of-the-ordinary behavior., • Proactively hunt for threats by performing advanced log searches and pattern analysis., • Support incident response and forensic investigations by:, • Searching historical logs, • Reconstructing attack timelines, • Identifying entry points, lateral movement, and attacker activity, • Collaborate with SOC Analysts, Dev Security, IAM, Threat Hunting, and other security roles during incident investigation and response., • Validate alerts and detections to reduce false positives and improve detection quality., • Ensure all detections, investigations, and findings are properly documented and tracked via tickets (Jira)., • Document new procedures or update existing ones for log management, detection, and investigation., • Ensure documentation is accurate, comprehensive, and delivered on time., • Create reports based on SIEM data for operational, technical, and management audiences., • Engage in ongoing training and professional development to stay current with emerging threats, attack techniques, and detection strategies., • Share knowledge and expertise with the team to foster a culture of security awareness and continuous improvement., • Adhere to the organization's different policies., • Keep your work organized and traceable through tickets (Jira)., • Studies in computer science, telecommunications, cybersecurity, or other related academic fields., • At least 3 years of work experience in SIEM operations, log analysis, or security monitoring roles., • Hands-on experience collecting and managing logs from multiple sources (endpoints, network devices, servers, cloud services, applications, authentication systems, etc.)., • At least 2 years of experience with Splunk is required (by operating and configuring rules and settings)., • At least 2 years of experience working with CrowdStrike is required., • Experience working with other SIEM and log platforms such as FortiAnalyzer, New Relic, ManageEngine AD Audit, Axonius, or similar., • Experience creating dashboards, visualizations, and reports based on log data., • Experience in defining and tuning alerts and correlation rules., • Knowledge of scripting or query languages used in SIEM platforms (e.g., SPL, KQL, SQL-like queries)., • YARA rules., • Regular expressions (regex)., • Familiarity with security tools generating logs, such as firewalls, EDR, IAM, cloud platforms, and application security tools., • Strong analytical mindset with the ability to identify patterns and anomalies in large datasets., • Experience supporting incident response and forensic investigations through log analysis., • Ability to work independently and as part of the Information Security Team under minimal supervision., • Eager to learn and continuously improve detection capabilities., • Strong documentation and reporting skills., • Solid foundations in networking, operating systems, authentication flows, and cybersecurity., • Ability to understand how logs reflect system and user behavior across different platforms., • Any cybersecurity certification., • Experience with log normalization standards and detection methodologies., • Familiarity with MITRE ATT&CK and threat detection frameworks., • Experience with threat hunting activities., • Familiarity with forensic analysis concepts and incident response workflow #J-18808-Ljbffr

Shine is the financial copilot for entrepreneurs and small business owners. Founded by serial entrepreneurs Rico Andersen and Martin Hegelund, Shine is a leading European fintech unicorn on a mission to restore the joy of running a business, by ending wasted time on financial admin. Shine offers a connected solution for invoicing, accounting, payroll, business accounts, payments, and financing, meaning business owners can focus their energy on growing a healthy business, not held back by manual admin. Part of something bigger Today we're part of Cegid, a European leader in cloud software for finance and accounting. Together we're building Europe's leading financial copilot for small businesses and their accountants. Shine already supports more than 400,000 small businesses. As part of Cegid, we now reach over one million small businesses and 15,000 accountants across Europe. We're a multicultural team working from France, Germany, Denmark and the Netherlands, contributing to a wider European network that spans Spain, Portugal and Belgium. Your hiring experience matters Just as we respect our customers' time, we respect yours. Your experience with Shine and Cegid should feel simple, transparent and genuinely supportive. If this sounds like somewhere you want to grow, we'd love to hear from you. At Shine, our Security team operates as a strategic driver rather than a support function. We work directly with leadership to integrate resilience into the company’s core, navigating the complex intersection of cloud-native architecture, AI innovation, and rigorous regulatory standards like DORA and ISO 27001. By partnering cross-functionally with Engineering and Risk, we aren’t just maintaining a perimeter; we are building a scalable, high-visibility security framework that defines the future of digital operational excellence in the fintech space. Shine Bank is looking for an Cyber Security Manager (Incident Response) to help shape and operate our information security and digital operational resilience framework. Reporting directly to the CISO, you will take a key role in implementing and maturing our Cyber Defence capabilities in close collaboration with IT, Risk, Internal Audit and Management. As Cyber Security Manager, you will own our defensive security technology stack and our incident-readiness capability. Design, write, and maintain incident response playbooks for our most relevant scenarios aligned with DORA ICT incident-management expectations. Ensure robust DDoS protection across our internet-facing and payment-critical services — selecting and managing mitigation solutions (e.g. Cloudflare, Akamai, AWS Shield) validating that protection holds up to the availability expectations regulators place on a payment institution. Plan and facilitate regular tabletop exercises and simulations across technical, operational, and executive stakeholders; capture findings and drive remediation to closure. Manage security vendor and MSSP relationships, contribute to the security technology roadmap and budget, and translate threat intelligence into concrete control improvements. Partner with the SOC Manager to ensure tooling supports detection and response use cases (mapped to MITRE ATT&CK). Provide the technical evidence and control assurance the Information Security (GRC) function needs for PCI-DSS, DORA, and ACPR-related obligations. Report on resilience metrics and the effectiveness of deployed controls to security leadership. Job located in Berlin or Madrid office, with possibility of two remote working days per week Hands-on background in technical / engineering security operations, ideally within regulated financial services, payments, or fintech. Practical experience deploying and operating EDR/XDR platforms (e.g. CrowdStrike, SentinelOne, Microsoft Defender) and other core defensive tooling. Hands-on experience with DDoS mitigation and edge/CDN security (e.g. Cloudflare, Akamai, AWS Shield/WAF) and an understanding of how to protect high-availability, customer-facing services. Demonstrated incident response experience — you have built playbooks and run tabletop exercises, not just read about them. Working knowledge of DORA, PCI-DSS, ISO 27001 and MITRE ATT&CK. Strong stakeholder and vendor management skills, with the ability to bridge technical detail and business risk. Fluent English required; German is a strong advantage. Equal Opportunity Employer We follow the principle of equal treatment to consider all job applicants and do not discriminate based on their gender, sexual orientation, color, racial or ethnic origin, religion, disability, etc. as per applicable law. A 30' first call with Talent Acquisition to get to know you better and share more about Shine. A 60' interview with your potential lead to discuss your past experiences and the role we are offering. A 30' Interview with our Chief Complience Officer to dive deeper into the technical aspects. A 60' business case presentation to highlight your skills and give you a hands-on feel for the role. A soft skills interview to see how we can best support your growth at Shine. #J-18808-Ljbffr

This job is with JTI, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. At JTI we celebrate differences, and everyone truly belongs. 46,000 people from all over the world are continuously building their unique success story with us. 83% of employees feel happy working at JTI. To make a difference with us, all you need to do is bring your human best. What will your story be? Apply now! Learn more: jti.com Department: Cyber Security Location: Madrid, Spain CYBER THREAT HUNTING MANAGER The Threat Hunting Manager is responsible for ensuring JTI has a strong, proactive threat detection and threat hunting capability across both on‑premise and cloud environments.The role is accountable for the effectiveness of detection and hunting outcomes, achieved by orchestrating a managed security service provider (MSSP) and a small internal technical team as a single, high‑performing function.This position focuses exclusively on Threat Detection and Threat Hunting. While it does not own Incident Response, Cyber Threat Intelligence, or Vulnerability Management, the role works closely with these teams to provide early detection insights, validate scope, and identify malicious activity as early as possible.The primary objective is to continuously improve JTI’s ability to detect advanced threats early, reduce attacker dwell time, and scale detection and hunting services enterprise‑wide. This includes governance of MSSP performance, technical leadership of the internal team, and close alignment with IT and business stakeholders to ensure detection capabilities reflect JTI’s risk landscape and business priorities. Responsibilities: • Provide technical leadership, strategic vision, and end‑to‑end accountability for the organisation’s threat detection and threat hunting capability. This includes orchestrating the Managed Security Service Provider (MSSP) and the internal technical team as a cohesive operating model, ensuring clear accountability, effective technical execution, and continuous improvement of detection and hunting outcomes across on‑premise and cloud environments, • Accountable for the effectiveness and quality of the organisation’s threat detection capability, delivered through both the Managed Security Service Provider (MSSP) and the internal technical team. This includes assessing detection coverage, determining the need for new analytic rules, designing and creating detections from scratch where required, and ensuring existing rules are continuously reviewed, optimised, and maintained to deliver high‑fidelity detections, reduce noise, and ensure consistent detection standards and outcomes across all detection providers, • Accountable for the effectiveness and coordination of the organisation’s threat hunting capability, delivered through both the Managed Security Service Provider (MSSP) and the internal technical team. This includes aligning and supervising MSSP‑led hunting activities, ensuring hunts are relevant, timely, and risk‑driven, while guiding and supporting the internal team in performing advanced, hypothesis‑based threat hunting to identify sophisticated or previously undetected threats, and ensuring consistent hunting standards and outcomes across both delivery models, • Accountable for integrating purple team activities into the threat detection and hunting lifecycle. This includes translating adversary simulations, attack scenarios, and identified gaps into actionable detection improvements, ensuring learnings from offensive testing directly enhance analytic rules, hunting hypotheses, and overall detection effectiveness, • Accountable for effective collaboration across Incident Response, Cyber Threat Intelligence, Vulnerability Management, and other security functions to ensure threat detection and hunting activities are aligned with broader security operations. This includes sharing context and insights, supporting investigation and scoping, informing prioritisation, and ensuring detection and hunting outputs meaningfully contribute to response, remediation, and risk reduction efforts Who we are looking for: Education & Experience: • Degree in Computer Science, Cybersecurity, or a related field (or equivalent experience), • 5–7+ years of experience in security monitoring, alert triage, and threat hunting, • Hands-on experience with SIEM, XDR, and other security platforms, • Experience supporting large, global organizations in hybrid environments, • Background in incident response, threat intelligence, or related security operations Skills & Competencies: • Strong analytical and problem-solving skills, • Ability to interpret complex security signals and drive clear outcomes, • Experience with change management and continuous improvement, • Excellent communication and presentation skills, • Strong ownership, accountability, and sense of urgency, • Knowledge of frameworks such as MITRE ATT&CK, Cyber Kill Chain, and Diamond Model, • Experience with EDR, identity protection, network, and cloud security technologies, • Understanding of threat actors and their tactics, techniques, and objectives, • Innovative, curious, and solution-oriented mindset, • Customer service-oriented attitude Are you ready to join us? Build your success story at JTI. Apply now! Next Steps: After applying, if selected, please anticipate the following within 1-3 weeks of the job posting closure: Phone screening with Talent Advisor > Assessment tests > Interviews > Offer. Each step is eliminatory and may vary by role type. At JTI, we strive to create a diverse and inclusive work environment. As an equal-opportunity employer, we welcome applicants from all backgrounds. If you need any specific support, alternative formats, or have other access requirements, please let us know.

This job is with JTI, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. At JTI we celebrate differences, and everyone truly belongs. 46,000 people from all over the world are continuously building their unique success story with us. 83% of employees feel happy working at JTI. To make a difference with us, all you need to do is bring your human best. What will your story be? Apply now! Learn more: jti.com Department: Cyber Security Location: Madrid, Spain CYBER THREAT HUNTING MANAGER The Threat Hunting Manager is responsible for ensuring JTI has a strong, proactive threat detection and threat hunting capability across both on‑premise and cloud environments.The role is accountable for the effectiveness of detection and hunting outcomes, achieved by orchestrating a managed security service provider (MSSP) and a small internal technical team as a single, high‑performing function.This position focuses exclusively on Threat Detection and Threat Hunting. While it does not own Incident Response, Cyber Threat Intelligence, or Vulnerability Management, the role works closely with these teams to provide early detection insights, validate scope, and identify malicious activity as early as possible.The primary objective is to continuously improve JTI’s ability to detect advanced threats early, reduce attacker dwell time, and scale detection and hunting services enterprise‑wide. This includes governance of MSSP performance, technical leadership of the internal team, and close alignment with IT and business stakeholders to ensure detection capabilities reflect JTI’s risk landscape and business priorities. Responsibilities: • Provide technical leadership, strategic vision, and end‑to‑end accountability for the organisation’s threat detection and threat hunting capability. This includes orchestrating the Managed Security Service Provider (MSSP) and the internal technical team as a cohesive operating model, ensuring clear accountability, effective technical execution, and continuous improvement of detection and hunting outcomes across on‑premise and cloud environments, • Accountable for the effectiveness and quality of the organisation’s threat detection capability, delivered through both the Managed Security Service Provider (MSSP) and the internal technical team. This includes assessing detection coverage, determining the need for new analytic rules, designing and creating detections from scratch where required, and ensuring existing rules are continuously reviewed, optimised, and maintained to deliver high‑fidelity detections, reduce noise, and ensure consistent detection standards and outcomes across all detection providers, • Accountable for the effectiveness and coordination of the organisation’s threat hunting capability, delivered through both the Managed Security Service Provider (MSSP) and the internal technical team. This includes aligning and supervising MSSP‑led hunting activities, ensuring hunts are relevant, timely, and risk‑driven, while guiding and supporting the internal team in performing advanced, hypothesis‑based threat hunting to identify sophisticated or previously undetected threats, and ensuring consistent hunting standards and outcomes across both delivery models, • Accountable for integrating purple team activities into the threat detection and hunting lifecycle. This includes translating adversary simulations, attack scenarios, and identified gaps into actionable detection improvements, ensuring learnings from offensive testing directly enhance analytic rules, hunting hypotheses, and overall detection effectiveness, • Accountable for effective collaboration across Incident Response, Cyber Threat Intelligence, Vulnerability Management, and other security functions to ensure threat detection and hunting activities are aligned with broader security operations. This includes sharing context and insights, supporting investigation and scoping, informing prioritisation, and ensuring detection and hunting outputs meaningfully contribute to response, remediation, and risk reduction efforts Who we are looking for: Education & Experience: • Degree in Computer Science, Cybersecurity, or a related field (or equivalent experience), • 5–7+ years of experience in security monitoring, alert triage, and threat hunting, • Hands-on experience with SIEM, XDR, and other security platforms, • Experience supporting large, global organizations in hybrid environments, • Background in incident response, threat intelligence, or related security operations Skills & Competencies: • Strong analytical and problem-solving skills, • Ability to interpret complex security signals and drive clear outcomes, • Experience with change management and continuous improvement, • Excellent communication and presentation skills, • Strong ownership, accountability, and sense of urgency, • Knowledge of frameworks such as MITRE ATT&CK, Cyber Kill Chain, and Diamond Model, • Experience with EDR, identity protection, network, and cloud security technologies, • Understanding of threat actors and their tactics, techniques, and objectives, • Innovative, curious, and solution-oriented mindset, • Customer service-oriented attitude Are you ready to join us? Build your success story at JTI. Apply now! Next Steps: After applying, if selected, please anticipate the following within 1-3 weeks of the job posting closure: Phone screening with Talent Advisor > Assessment tests > Interviews > Offer. Each step is eliminatory and may vary by role type. At JTI, we strive to create a diverse and inclusive work environment. As an equal-opportunity employer, we welcome applicants from all backgrounds. If you need any specific support, alternative formats, or have other access requirements, please let us know.

This job is with JTI, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. At JTI we celebrate differences, and everyone truly belongs. 46,000 people from all over the world are continuously building their unique success story with us. 83% of employees feel happy working at JTI. To make a difference with us, all you need to do is bring your human best. What will your story be? Apply now! Learn more: jti.com Department: Cyber Security Location: Madrid, Spain CYBER THREAT HUNTING MANAGER The Threat Hunting Manager is responsible for ensuring JTI has a strong, proactive threat detection and threat hunting capability across both on‑premise and cloud environments.The role is accountable for the effectiveness of detection and hunting outcomes, achieved by orchestrating a managed security service provider (MSSP) and a small internal technical team as a single, high‑performing function.This position focuses exclusively on Threat Detection and Threat Hunting. While it does not own Incident Response, Cyber Threat Intelligence, or Vulnerability Management, the role works closely with these teams to provide early detection insights, validate scope, and identify malicious activity as early as possible.The primary objective is to continuously improve JTI’s ability to detect advanced threats early, reduce attacker dwell time, and scale detection and hunting services enterprise‑wide. This includes governance of MSSP performance, technical leadership of the internal team, and close alignment with IT and business stakeholders to ensure detection capabilities reflect JTI’s risk landscape and business priorities. Responsibilities: • Provide technical leadership, strategic vision, and end‑to‑end accountability for the organisation’s threat detection and threat hunting capability. This includes orchestrating the Managed Security Service Provider (MSSP) and the internal technical team as a cohesive operating model, ensuring clear accountability, effective technical execution, and continuous improvement of detection and hunting outcomes across on‑premise and cloud environments, • Accountable for the effectiveness and quality of the organisation’s threat detection capability, delivered through both the Managed Security Service Provider (MSSP) and the internal technical team. This includes assessing detection coverage, determining the need for new analytic rules, designing and creating detections from scratch where required, and ensuring existing rules are continuously reviewed, optimised, and maintained to deliver high‑fidelity detections, reduce noise, and ensure consistent detection standards and outcomes across all detection providers, • Accountable for the effectiveness and coordination of the organisation’s threat hunting capability, delivered through both the Managed Security Service Provider (MSSP) and the internal technical team. This includes aligning and supervising MSSP‑led hunting activities, ensuring hunts are relevant, timely, and risk‑driven, while guiding and supporting the internal team in performing advanced, hypothesis‑based threat hunting to identify sophisticated or previously undetected threats, and ensuring consistent hunting standards and outcomes across both delivery models, • Accountable for integrating purple team activities into the threat detection and hunting lifecycle. This includes translating adversary simulations, attack scenarios, and identified gaps into actionable detection improvements, ensuring learnings from offensive testing directly enhance analytic rules, hunting hypotheses, and overall detection effectiveness, • Accountable for effective collaboration across Incident Response, Cyber Threat Intelligence, Vulnerability Management, and other security functions to ensure threat detection and hunting activities are aligned with broader security operations. This includes sharing context and insights, supporting investigation and scoping, informing prioritisation, and ensuring detection and hunting outputs meaningfully contribute to response, remediation, and risk reduction efforts Who we are looking for: Education & Experience: • Degree in Computer Science, Cybersecurity, or a related field (or equivalent experience), • 5–7+ years of experience in security monitoring, alert triage, and threat hunting, • Hands-on experience with SIEM, XDR, and other security platforms, • Experience supporting large, global organizations in hybrid environments, • Background in incident response, threat intelligence, or related security operations Skills & Competencies: • Strong analytical and problem-solving skills, • Ability to interpret complex security signals and drive clear outcomes, • Experience with change management and continuous improvement, • Excellent communication and presentation skills, • Strong ownership, accountability, and sense of urgency, • Knowledge of frameworks such as MITRE ATT&CK, Cyber Kill Chain, and Diamond Model, • Experience with EDR, identity protection, network, and cloud security technologies, • Understanding of threat actors and their tactics, techniques, and objectives, • Innovative, curious, and solution-oriented mindset, • Customer service-oriented attitude Are you ready to join us? Build your success story at JTI. Apply now! Next Steps: After applying, if selected, please anticipate the following within 1-3 weeks of the job posting closure: Phone screening with Talent Advisor > Assessment tests > Interviews > Offer. Each step is eliminatory and may vary by role type. At JTI, we strive to create a diverse and inclusive work environment. As an equal-opportunity employer, we welcome applicants from all backgrounds. If you need any specific support, alternative formats, or have other access requirements, please let us know.

This job is with Allianz Commercial, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. About the Job You know adversaries by how they operate - and you know how to turn that knowledge into action. As a Threat Intelligence Engineer - Intrusion Analysis & Detection, you will help transform threat actor behavior into concrete defensive value: stronger detections, smarter hunting hypotheses, and intelligence that helps defenders move faster and more effectively. Within the Allianz Cyber Defense Center (ACDC), you will join a team that is evolving towards an AI-augmented, intelligence-driven operating model. This is a high-impact opportunity to shape and mature intrusion analysis capabilities, automate repetitive intelligence workflows, and directly influence how a global organization defends itself against real-world threats. If you enjoy combining technical depth, analytical thinking, and practical execution, this role will give you the platform to make a visible difference at scale. What you do • Analyze real-world attacks, post-incident findings, and emerging adversary tradecraft to identify relevant threat activity and convert retrospective analysis into forward-looking intelligence., • Translate threat intelligence into actionable detection content by producing detection rules and analytical guidance for deployment by detection engineering teams across platform-native environments., • Track threat actors and map tactics, techniques, and procedures to MITRE ATT&CK, identifying coverage gaps and generating meaningful hunting leads based on relevance to the Allianz environment., • Build and maintain automation for repetitive intelligence workflows using SOAR platforms, Power Automate, N8N, Python, scripting, and API integrations to improve speed, quality, and consistency., • Apply AI in daily analytical workflows to categorize incoming intelligence, enrich indicators, correlate reporting with tracked topics, and accelerate decision-making., • Communicate findings clearly through dashboards, written intelligence notes, and operational briefings so that detection engineers, incident responders, IT administrators, and leadership can act confidently., • Support the full IOC lifecycle and contribute during active security incidents by providing timely analytical input, validation, and triage support as part of on-call rotations. What you bring • Hands-on experience in intrusion analysis, including the investigation of real-world attack patterns, adversary behavior, and post-incident evidence., • Proven ability to turn intelligence into action through detection engineering, including authoring, tuning, or validating detection rules in production environments., • Strong knowledge of MITRE ATT&CK, especially at procedure level, and a solid understanding of the telemetry required to detect adversary activity effectively., • Practical coding and automation skills, ideally in Python, scripting, and API-driven workflows, with a builder mindset focused on improving efficiency through automation., • Good understanding of the Threat Intelligence Lifecycle and structured analytical techniques, including models such as the Diamond Model and Kill Chain., • Experience working with or exposure to tools such as Google SecOps, CrowdStrike Falcon / Intelligence, Google Threat Intelligence / VirusTotal, Recorded Future, MISP, or similar platforms., • A proactive, outcome-driven mindset with the ability to stay composed under pressure, communicate clearly during incidents, and collaborate effectively across technical teams. What we offer • We offer a hybrid work model which recognizes the value of striking a balance between in-person collaboration and remote working incl. up to 25 days per year working from abroad., • We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location)., • From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered., • Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach. About Allianz Technology With its headquarters in Munich, Germany, Allianz Technology is Allianz's global IT service provider and delivers IT solutions that drive the group's digitalization. With more than 11,000 employees in over 20 countries around the world, Allianz Technology is tasked to run, optimize, transform, and innovate the infrastructure, applications, and services together with Allianz companies to co-create the best customer experience. We service the entire spectrum of digitalization - from one of the industry's largest IT infrastructure projects that spans data centres, networks, and security, to application platforms ranging from workplace services to digital interaction. In short: We deliver comprehensive end-to-end IT solutions for Allianz in the digital age. We are the backbone of Allianz. Find us at: www.linkedin.com/company/allianz-technology. Commitment to Integrity, Fairness & Inclusion Allianz Technology is proud to be an equal opportunity employer dedicated to fostering an inclusive work environment for everyone. We embrace individuals of all gender identities and expressions, sexual orientations, ethnicities, ages, nationalities, religions, disabilities, and philosophies of life. Ultimately, our greatest strength as a company lies in the unique skills, experiences, and backgrounds our employees contribute. We therefore welcome applications regardless of race, ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations. To Recruitment Agencies: Allianz Technology has an in-house recruitment team that sources great candidates directly. Therefore, Allianz Technology does not accept unsolicited resumes from agencies or search firm recruiters. When we do work with recruitment agencies, that engagement is formalized by a contract. Fees will only be paid when there is a contract in place. Without a contract in place, we will not accept invoices on unsolicited resumes, even if the candidate was ultimately employed by Allianz. 100801 | Ingeniería informática y tecnológica | Profesional / Senior | Non-Executive | Allianz Technology | Jornada completa | Indefinido

This job is with Allianz Commercial, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. About the Job You know adversaries by how they operate - and you know how to turn that knowledge into action. As a Threat Intelligence Engineer - Intrusion Analysis & Detection, you will help transform threat actor behavior into concrete defensive value: stronger detections, smarter hunting hypotheses, and intelligence that helps defenders move faster and more effectively. Within the Allianz Cyber Defense Center (ACDC), you will join a team that is evolving towards an AI-augmented, intelligence-driven operating model. This is a high-impact opportunity to shape and mature intrusion analysis capabilities, automate repetitive intelligence workflows, and directly influence how a global organization defends itself against real-world threats. If you enjoy combining technical depth, analytical thinking, and practical execution, this role will give you the platform to make a visible difference at scale. What you do • Analyze real-world attacks, post-incident findings, and emerging adversary tradecraft to identify relevant threat activity and convert retrospective analysis into forward-looking intelligence., • Translate threat intelligence into actionable detection content by producing detection rules and analytical guidance for deployment by detection engineering teams across platform-native environments., • Track threat actors and map tactics, techniques, and procedures to MITRE ATT&CK, identifying coverage gaps and generating meaningful hunting leads based on relevance to the Allianz environment., • Build and maintain automation for repetitive intelligence workflows using SOAR platforms, Power Automate, N8N, Python, scripting, and API integrations to improve speed, quality, and consistency., • Apply AI in daily analytical workflows to categorize incoming intelligence, enrich indicators, correlate reporting with tracked topics, and accelerate decision-making., • Communicate findings clearly through dashboards, written intelligence notes, and operational briefings so that detection engineers, incident responders, IT administrators, and leadership can act confidently., • Support the full IOC lifecycle and contribute during active security incidents by providing timely analytical input, validation, and triage support as part of on-call rotations. What you bring • Hands-on experience in intrusion analysis, including the investigation of real-world attack patterns, adversary behavior, and post-incident evidence., • Proven ability to turn intelligence into action through detection engineering, including authoring, tuning, or validating detection rules in production environments., • Strong knowledge of MITRE ATT&CK, especially at procedure level, and a solid understanding of the telemetry required to detect adversary activity effectively., • Practical coding and automation skills, ideally in Python, scripting, and API-driven workflows, with a builder mindset focused on improving efficiency through automation., • Good understanding of the Threat Intelligence Lifecycle and structured analytical techniques, including models such as the Diamond Model and Kill Chain., • Experience working with or exposure to tools such as Google SecOps, CrowdStrike Falcon / Intelligence, Google Threat Intelligence / VirusTotal, Recorded Future, MISP, or similar platforms., • A proactive, outcome-driven mindset with the ability to stay composed under pressure, communicate clearly during incidents, and collaborate effectively across technical teams. What we offer • We offer a hybrid work model which recognizes the value of striking a balance between in-person collaboration and remote working incl. up to 25 days per year working from abroad., • We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location)., • From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered., • Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach. About Allianz Technology With its headquarters in Munich, Germany, Allianz Technology is Allianz's global IT service provider and delivers IT solutions that drive the group's digitalization. With more than 11,000 employees in over 20 countries around the world, Allianz Technology is tasked to run, optimize, transform, and innovate the infrastructure, applications, and services together with Allianz companies to co-create the best customer experience. We service the entire spectrum of digitalization - from one of the industry's largest IT infrastructure projects that spans data centres, networks, and security, to application platforms ranging from workplace services to digital interaction. In short: We deliver comprehensive end-to-end IT solutions for Allianz in the digital age. We are the backbone of Allianz. Find us at: www.linkedin.com/company/allianz-technology. Commitment to Integrity, Fairness & Inclusion Allianz Technology is proud to be an equal opportunity employer dedicated to fostering an inclusive work environment for everyone. We embrace individuals of all gender identities and expressions, sexual orientations, ethnicities, ages, nationalities, religions, disabilities, and philosophies of life. Ultimately, our greatest strength as a company lies in the unique skills, experiences, and backgrounds our employees contribute. We therefore welcome applications regardless of race, ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations. To Recruitment Agencies: Allianz Technology has an in-house recruitment team that sources great candidates directly. Therefore, Allianz Technology does not accept unsolicited resumes from agencies or search firm recruiters. When we do work with recruitment agencies, that engagement is formalized by a contract. Fees will only be paid when there is a contract in place. Without a contract in place, we will not accept invoices on unsolicited resumes, even if the candidate was ultimately employed by Allianz. 100801 | Ingeniería informática y tecnológica | Profesional / Senior | Non-Executive | Allianz Technology | Jornada completa | Indefinido

This job is with Allianz Commercial, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. About the Job At the Allianz Cyber Defense Center (ACDC), we are transforming cyber defense into an intelligence-driven, proactive capability. As our Senior Cyber Detection Expert, you will be the highest technical authority for threat detection, shaping how Allianz detects and responds to cyber threats across a global environment. This is a strategic and hands-on role where you will define the target detection landscape, influence detection engineering standards, and transform threat intelligence and hunting insights into scalable detection coverage. Working at the intersection of Threat Intelligence, Threat Hunting, Security Operations, and Engineering, you will directly impact the security posture of one of the world's largest financial services organizations. What You Do • Define and maintain the strategic detection landscape, ensuring coverage remains aligned with evolving threats, adversary behaviors, and business risks., • Act as the senior technical authority for detection engineering, setting standards, methodologies, and best practices across the Detection Cluster., • Lead the design and optimization of advanced SIEM detection use cases, balancing effectiveness, performance, and operational sustainability., • Own detection coverage assessments and gap analyses, leveraging frameworks such as MITRE ATT&CK and threat intelligence insights., • Maintain oversight of the security telemetry landscape, identifying critical data gaps and driving the onboarding of new data sources., • Translate threat intelligence, threat hunting findings, and adversary simulation results into high-quality production detections., • Design and implement multi-domain detection strategies spanning endpoint, identity, cloud, network, and application security environments. What You Bring • Extensive experience in Detection Engineering, Cyber Defense, Security Monitoring, or Threat Detection within complex enterprise environments., • Deep expertise in SIEM technologies, including log management, event correlation, detection logic development, and security data analysis., • Strong understanding of adversary tactics, techniques, and procedures (TTPs), with hands-on knowledge of frameworks such as MITRE ATT&CK., • Proven experience developing, tuning, and maintaining detection content while minimizing false positives and alert fatigue., • Experience translating threat intelligence and threat hunting outcomes into actionable and scalable detection capabilities., • Strong analytical, problem-solving, and communication skills, with the ability to influence both technical teams and senior stakeholders., • Familiarity with modern detection engineering practices such as Detection-as-Code, behavioral analytics, automation, and AI-assisted security operations. Nice to have • Experience with Google SecOps., • Background in Threat Hunting, Threat Intelligence, Purple Teaming, or Adversary Simulation., • Relevant certifications such as CISSP, GCIH, GCDA, GCFA, or equivalent., • Experience working in large international or regulated environments. What we offer • We offer a hybrid work model which recognizes the value of striking a balance between in-person collaboration and remote working incl. up to 25 days per year working from abroad., • We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location)., • From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered., • Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach. About Allianz Technology With its headquarters in Munich, Germany, Allianz Technology is Allianz's global IT service provider and delivers IT solutions that drive the group's digitalization. With more than 11,000 employees in over 20 countries around the world, Allianz Technology is tasked to run, optimize, transform and innovate the infrastructure, applications and services together with Allianz companies to co-create the best customer experience. We service the entire spectrum of digitalization - from one of the industry's largest IT infrastructure projects that spans data centres, networks and security, to application platforms ranging from workplace services to digital interaction. In short: We deliver comprehensive end-to-end IT solutions for Allianz in the digital age. We are the backbone of Allianz. Find us at: www.linkedin.com/company/allianz-technology. Commitment to Integrity, Fairness & Inclusion Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us. We at Allianz believe in a strong inclusive culture that encourages people to speak their minds, get involved and question the status quo. We are proud to be an equal opportunity employer and encourage you to bring your whole self to work, no matter where you are from, what you look like, who you love, or what you believe in. We therefore welcome applications regardless of race, ethnicity or cultural background, age, gender, nationality, religion, social class, disability, sexual orientation, or any other characteristics protected under applicable local laws and regulations. To Recruitment Agencies Allianz Technology has an in-house recruitment team that sources great candidates directly. Therefore, Allianz Technology does not accept unsolicited resumes from agencies or search firm recruiters. When we do work with recruitment agencies, that engagement is formalized by a contract. Fees will only be paid when there is a contract in place. Without a contract in place, we will not accept invoices on unsolicited resumes, even if the candidate was ultimately employed by Allianz. 102796 | Ingeniería informática y tecnológica | Profesional / Senior | Non-Executive | Allianz Technology | Jornada completa | Indefinido

We are a cutting-edge e-commerce company developing products for our technological platform. Our creative, smart, dedicated teams pool their knowledge and experience to deliver the best solutions to meet project needs while maintaining sustainable, long-lasting results. How? By making sure that our teams thrive and develop professionally. Strong advocates of hiring top talent and letting them do what they do best, we strive to create a workplace that allows for an open, collaborative, and respectful culture We are a cutting-edge e-commerce company developing products for our technological platform. Our creative, smart, dedicated teams pool their knowledge and experience to deliver the best solutions to meet project needs while maintaining sustainable, long-lasting results. How? By making sure that our teams thrive and develop professionally. Strong advocates of hiring top talent and letting them do what they do best, we strive to create a workplace that allows for an open, collaborative, and respectful culture You will be responsible for collecting, normalizing, analyzing, and exploiting security logs from multiple sources across the organization, ensuring they are ingested into SIEM platforms and used to detect threats, anomalies, and security incidents. You will play a key role in threat detection, incident investigation, and forensic analysis by transforming raw logs into actionable insights through dashboards, alerts, and advanced log analysis. • Design, implement, and maintain log collection pipelines from multiple sources, including security, infrastructure, cloud, and application systems., • Ensure logs are ingested, parsed, normalized, and retained correctly across SIEM platforms such as FortiAnalyzer, Splunk, CrowdStrike, and others., • Maintain data quality and consistency across all log sources., • Design, build, and maintain dashboards and visualizations to provide visibility into security posture, threats, and operational metrics., • Create, tune, and maintain correlation rules and alerts based on:, • Attack patterns, • Indicators of compromise (IOCs), • Behavioral anomalies, • Custom detection use cases defined by the Information Security Team, • Continuously analyze logs to identify suspicious, anomalous, or out-of-the-ordinary behavior., • Proactively hunt for threats by performing advanced log searches and pattern analysis., • Support incident response and forensic investigations by:, • Searching historical logs, • Reconstructing attack timelines, • Identifying entry points, lateral movement, and attacker activity, • Collaborate with SOC Analysts, Dev Security, IAM, Threat Hunting, and other security roles during incident investigation and response., • Validate alerts and detections to reduce false positives and improve detection quality., • Ensure all detections, investigations, and findings are properly documented and tracked via tickets (Jira)., • Document new procedures or update existing ones for log management, detection, and investigation., • Ensure documentation is accurate, comprehensive, and delivered on time., • Create reports based on SIEM data for operational, technical, and management audiences., • Engage in ongoing training and professional development to stay current with emerging threats, attack techniques, and detection strategies., • Share knowledge and expertise with the team to foster a culture of security awareness and continuous improvement., • Adhere to the organization's different policies., • Keep your work organized and traceable through tickets (Jira)., • Studies in computer science, telecommunications, cybersecurity, or other related academic fields., • At least 3 years of work experience in SIEM operations, log analysis, or security monitoring roles., • Hands-on experience collecting and managing logs from multiple sources (endpoints, network devices, servers, cloud services, applications, authentication systems, etc.)., • At least 2 years of experience with Splunk is required (by operating and configuring rules and settings)., • At least 2 years of experience working with CrowdStrike is required., • Experience working with other SIEM and log platforms such as FortiAnalyzer, New Relic, ManageEngine AD Audit, Axonius, or similar., • Experience creating dashboards, visualizations, and reports based on log data., • Experience in defining and tuning alerts and correlation rules., • Knowledge of scripting or query languages used in SIEM platforms (e.g., SPL, KQL, SQL-like queries)., • YARA rules., • Regular expressions (regex)., • Familiarity with security tools generating logs, such as firewalls, EDR, IAM, cloud platforms, and application security tools., • Strong analytical mindset with the ability to identify patterns and anomalies in large datasets., • Experience supporting incident response and forensic investigations through log analysis., • Ability to work independently and as part of the Information Security Team under minimal supervision., • Eager to learn and continuously improve detection capabilities., • Strong documentation and reporting skills., • Solid foundations in networking, operating systems, authentication flows, and cybersecurity., • Ability to understand how logs reflect system and user behavior across different platforms., • Any cybersecurity certification., • Experience with log normalization standards and detection methodologies., • Familiarity with MITRE ATT&CK and threat detection frameworks., • Experience with threat hunting activities., • Familiarity with forensic analysis concepts and incident response workflow We are an international team of tech professionals that build some of the best digital entertainment and e-commerce products in the business. As a full-stack design and development company we deliver high quality application and web experiences for our network of players around the world. #J-18808-Ljbffr

Se busca un responsable para liderar el área de defensa cibernética, encargado de definir y ejecutar la estrategia y hoja de ruta de operaciones de seguridad. Las funciones incluyen dirigir equipos técnicos especializados en detección, protección y respuesta a incidentes, así como gestionar y optimizar plataformas de defensa como SIEM, SOAR y EDR/XDR. También se coordinará la protección de infraestructuras cloud, redes y endpoints, colaborando con áreas de arquitectura, IT y seguridad. La gestión de incidentes críticos es clave, incluyendo el diseño de planes de respuesta, la coordinación de equipos durante crisis y el análisis de causas raíz para implementar mejoras. El perfil requiere más de diez años de experiencia en ciberseguridad, con liderazgo demostrable en equipos de defensa cibernética y dirección de centros SOC. Se necesita experiencia directa en respuesta a incidentes y crisis, conocimiento sólido de marcos como MITRE ATT&CK y NIST, y capacidad para explicar temas técnicos complejos a la dirección. Se valoran certificaciones como CISSP, GIAC o CRISC, y experiencia en el sector de telecomunicaciones. El contrato es indefinido y a jornada completa.

As a Senior Pentester, you will design realistic attack scenarios using MITRE ATT&CK TTPs and lead offensive assessments across web, mobile, network, cloud, and AI-enabled environments.You’ll participate in Red Team and Purple Team exercises to improve threat detection and response in collaboratio

Are you passionate about defending organizations against evolving cyber threats and leading high-performing security teams? At Vodafone Spain, we're looking for a Cyber Security Operations Manager to shape and lead our cyber defence strategy, ensuring the protection, detection, response, and recovery capabilities that safeguard our business, customers, and critical services. This is a unique opportunity to drive the evolution of Vodafone's Cyber Defence function, combining strategic leadership, operational excellence, and incident response expertise in one of the world's leading technology and telecommunications companies. What you'll do Define and execute Vodafone's Cyber Defence strategy, roadmap, and operating model. Lead and develop teams responsible for Cyber Protection, Detection, and Response capabilities. Oversee the performance and continuous improvement of security technologies including SIEM, SOAR, EDR/XDR, NDR, Threat Intelligence, Security Analytics, and Email Security. Drive automation, orchestration, and innovation initiatives to enhance security effectiveness and operational efficiency. Collaborate with Security Architecture and Engineering teams to strengthen security controls across cloud, network, endpoint, and on-premises environments. Own vendor management, technology lifecycle planning, investments, and capability development. Monitor security effectiveness through KPIs, maturity assessments, and coverage metrics. Lead the Cyber Defence Incident Response function. Act as Incident Commander during major cyber incidents and crisis situations. Coordinate response activities across Cyber Security, Technology, Legal, Privacy, Risk, Compliance, and Business stakeholders. Drive continuous improvement through lessons learned, threat analysis, and emerging security trends. What we're looking for 10+ years of experience in Cyber Security, with significant experience in Security Operations and Incident Response. Strong knowledge of Cyber Defence technologies and frameworks such as MITRE ATT&CK, NIST, SIEM, SOAR, EDR/XDR, and Threat Intelligence. Proven leadership experience managing teams, vendors, and complex security environments. Strong stakeholder management skills, with the ability to engage both technical and executive audiences. Strong analytical thinking, decision-making, and crisis management capabilities. Relevant certifications such as CISSP, CISM, GIAC, CRISC, or equivalent are highly valued. Experience within the telecommunications sector is a plus. Fluent English, both written and spoken. What's in it for you? Hybrid working model: 60% remote and 40% office-based, with flexible hours. Work from anywhere in Spain for up to 20 additional days per year. 25 vacation days, plus December 24th and 31st off, with the option to purchase up to 10 extra vacation days. Private health insurance, life insurance, and comprehensive wellbeing programme focused on physical and mental health. Pension plan options to help you plan for the future. 3 paid volunteering days every year. Continuous learning and career development Digital tools designed to make your day-to-day work easier and more efficient. Join us and help shape the future of cyber resilience at Vodafone Spain. Learn more about life at Vodafone and explore our opportunities here: Careers at Vodafone Spain #CyberSecurity #CyberDefence #IncidentResponse #SOC #SecurityOperations #Leadership #J-18808-Ljbffr

Vodafone busca incorporar un/a Cyber Defence Manager para liderar una de las áreas más críticos de su estrategia de ciberseguridad. Funciones: Definir y ejecutar la estrategia y roadmap de Cyber Defence y Security Operations. Liderar equipos técnicos especializados en detección, protección y respuesta ante incidentes. Dirigir y evolucionar las capacidades del Cyber Defence Center / SOC. Gestionar y optimizar las principales plataformas y tecnologías de defensa. Supervisar las capacidades de SIEM, SOAR, EDR/XDR y otras tecnologías de detección y respuesta. Coordinar la protección de cloud, redes, infraestructuras, endpoints y servicios críticos junto con otros equipos técnicos. Definir KPIs, métricas y niveles de madurez operativa de las capacidades de Cyber Defence. Gestionar proveedores, servicios especializados y partners tecnológicos. Trabajar estrechamente con Arquitectura, Infraestructura, Cloud, IT y las diferentes áreas de Seguridad. Gestión de incidentes críticos y crisis Diseñar, mantener y evolucionar planes de respuesta, playbooks y protocolos de crisis. Liderar la respuesta ante ciberataques e incidentes críticos. Coordinar múltiples equipos técnicos durante situaciones de crisis. Tomar decisiones rápidas en entornos operativos de alta presión y elevada incertidumbre. Coordinar la contención, erradicación y recuperación de los servicios afectados. Analizar causas raíz y convertir las lecciones aprendidas en mejoras concretas. Gestionar la comunicación y coordinación con dirección, negocio, proveedores especializados y organismos externos cuando sea necesario. ¿Qué perfil buscamos? Más de 10 años de experiencia en Ciberseguridad. Experiencia demostrable liderando equipos operativos de Cyber Defence / Security Operations. Experiencia gestionando o dirigiendo SOC / Cyber Defence Centers. Experiencia directa en detección, investigación y respuesta ante incidentes. Experiencia liderando la respuesta ante incidentes críticos y crisis cibernéticas. Conocimiento sólido de MITRE ATT&CK, NIST, SIEM, SOAR, EDR/XDR. Experiencia trabajando con diferentes equipos técnicos y coordinando respuestas multidisciplinares. Capacidad para comprender en profundidad las tecnologías y plataformas de defensa, más allá de una perspectiva exclusivamente de gobierno. Capacidad para explicar situaciones técnicas complejas de forma clara a Comité de Dirección y perfiles de negocio. Inglés alto. Se valorarán especialmente certificaciones como CISSP, GIAC o CRISC, así como experiencia en el sector Telco. #J-18808-Ljbffr

This job is with Allianz Commercial, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. About the Job You know adversaries by how they operate - and you know how to turn that knowledge into action. As a Threat Intelligence Engineer - Intrusion Analysis & Detection, you will help transform threat actor behavior into concrete defensive value: stronger detections, smarter hunting hypotheses, and intelligence that helps defenders move faster and more effectively. Within the Allianz Cyber Defense Center (ACDC), you will join a team that is evolving towards an AI-augmented, intelligence-driven operating model. This is a high-impact opportunity to shape and mature intrusion analysis capabilities, automate repetitive intelligence workflows, and directly influence how a global organization defends itself against real-world threats. If you enjoy combining technical depth, analytical thinking, and practical execution, this role will give you the platform to make a visible difference at scale. What you do • Analyze real-world attacks, post-incident findings, and emerging adversary tradecraft to identify relevant threat activity and convert retrospective analysis into forward-looking intelligence., • Translate threat intelligence into actionable detection content by producing detection rules and analytical guidance for deployment by detection engineering teams across platform-native environments., • Track threat actors and map tactics, techniques, and procedures to MITRE ATT&CK, identifying coverage gaps and generating meaningful hunting leads based on relevance to the Allianz environment., • Build and maintain automation for repetitive intelligence workflows using SOAR platforms, Power Automate, N8N, Python, scripting, and API integrations to improve speed, quality, and consistency., • Apply AI in daily analytical workflows to categorize incoming intelligence, enrich indicators, correlate reporting with tracked topics, and accelerate decision-making., • Communicate findings clearly through dashboards, written intelligence notes, and operational briefings so that detection engineers, incident responders, IT administrators, and leadership can act confidently., • Support the full IOC lifecycle and contribute during active security incidents by providing timely analytical input, validation, and triage support as part of on-call rotations. What you bring • Hands-on experience in intrusion analysis, including the investigation of real-world attack patterns, adversary behavior, and post-incident evidence., • Proven ability to turn intelligence into action through detection engineering, including authoring, tuning, or validating detection rules in production environments., • Strong knowledge of MITRE ATT&CK, especially at procedure level, and a solid understanding of the telemetry required to detect adversary activity effectively., • Practical coding and automation skills, ideally in Python, scripting, and API-driven workflows, with a builder mindset focused on improving efficiency through automation., • Good understanding of the Threat Intelligence Lifecycle and structured analytical techniques, including models such as the Diamond Model and Kill Chain., • Experience working with or exposure to tools such as Google SecOps, CrowdStrike Falcon / Intelligence, Google Threat Intelligence / VirusTotal, Recorded Future, MISP, or similar platforms., • A proactive, outcome-driven mindset with the ability to stay composed under pressure, communicate clearly during incidents, and collaborate effectively across technical teams. What we offer • We offer a hybrid work model which recognizes the value of striking a balance between in-person collaboration and remote working incl. up to 25 days per year working from abroad., • We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location)., • From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered., • Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach. About Allianz Technology With its headquarters in Munich, Germany, Allianz Technology is Allianz's global IT service provider and delivers IT solutions that drive the group's digitalization. With more than 11,000 employees in over 20 countries around the world, Allianz Technology is tasked to run, optimize, transform, and innovate the infrastructure, applications, and services together with Allianz companies to co-create the best customer experience. We service the entire spectrum of digitalization - from one of the industry's largest IT infrastructure projects that spans data centres, networks, and security, to application platforms ranging from workplace services to digital interaction. In short: We deliver comprehensive end-to-end IT solutions for Allianz in the digital age. We are the backbone of Allianz. Find us at: www.linkedin.com/company/allianz-technology. Commitment to Integrity, Fairness & Inclusion Allianz Technology is proud to be an equal opportunity employer dedicated to fostering an inclusive work environment for everyone. We embrace individuals of all gender identities and expressions, sexual orientations, ethnicities, ages, nationalities, religions, disabilities, and philosophies of life. Ultimately, our greatest strength as a company lies in the unique skills, experiences, and backgrounds our employees contribute. We therefore welcome applications regardless of race, ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations. To Recruitment Agencies: Allianz Technology has an in-house recruitment team that sources great candidates directly. Therefore, Allianz Technology does not accept unsolicited resumes from agencies or search firm recruiters. When we do work with recruitment agencies, that engagement is formalized by a contract. Fees will only be paid when there is a contract in place. Without a contract in place, we will not accept invoices on unsolicited resumes, even if the candidate was ultimately employed by Allianz. 100801 | Ingeniería informática y tecnológica | Profesional / Senior | Non-Executive | Allianz Technology | Jornada completa | Indefinido

This job is with Allianz Commercial, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. About the Job At the Allianz Cyber Defense Center (ACDC), we are transforming cyber defense into an intelligence-driven, proactive capability. As our Senior Cyber Detection Expert, you will be the highest technical authority for threat detection, shaping how Allianz detects and responds to cyber threats across a global environment. This is a strategic and hands-on role where you will define the target detection landscape, influence detection engineering standards, and transform threat intelligence and hunting insights into scalable detection coverage. Working at the intersection of Threat Intelligence, Threat Hunting, Security Operations, and Engineering, you will directly impact the security posture of one of the world's largest financial services organizations. What You Do • Define and maintain the strategic detection landscape, ensuring coverage remains aligned with evolving threats, adversary behaviors, and business risks., • Act as the senior technical authority for detection engineering, setting standards, methodologies, and best practices across the Detection Cluster., • Lead the design and optimization of advanced SIEM detection use cases, balancing effectiveness, performance, and operational sustainability., • Own detection coverage assessments and gap analyses, leveraging frameworks such as MITRE ATT&CK and threat intelligence insights., • Maintain oversight of the security telemetry landscape, identifying critical data gaps and driving the onboarding of new data sources., • Translate threat intelligence, threat hunting findings, and adversary simulation results into high-quality production detections., • Design and implement multi-domain detection strategies spanning endpoint, identity, cloud, network, and application security environments. What You Bring • Extensive experience in Detection Engineering, Cyber Defense, Security Monitoring, or Threat Detection within complex enterprise environments., • Deep expertise in SIEM technologies, including log management, event correlation, detection logic development, and security data analysis., • Strong understanding of adversary tactics, techniques, and procedures (TTPs), with hands-on knowledge of frameworks such as MITRE ATT&CK., • Proven experience developing, tuning, and maintaining detection content while minimizing false positives and alert fatigue., • Experience translating threat intelligence and threat hunting outcomes into actionable and scalable detection capabilities., • Strong analytical, problem-solving, and communication skills, with the ability to influence both technical teams and senior stakeholders., • Familiarity with modern detection engineering practices such as Detection-as-Code, behavioral analytics, automation, and AI-assisted security operations. Nice to have • Experience with Google SecOps., • Background in Threat Hunting, Threat Intelligence, Purple Teaming, or Adversary Simulation., • Relevant certifications such as CISSP, GCIH, GCDA, GCFA, or equivalent., • Experience working in large international or regulated environments. What we offer • We offer a hybrid work model which recognizes the value of striking a balance between in-person collaboration and remote working incl. up to 25 days per year working from abroad., • We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location)., • From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered., • Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach. About Allianz Technology With its headquarters in Munich, Germany, Allianz Technology is Allianz's global IT service provider and delivers IT solutions that drive the group's digitalization. With more than 11,000 employees in over 20 countries around the world, Allianz Technology is tasked to run, optimize, transform and innovate the infrastructure, applications and services together with Allianz companies to co-create the best customer experience. We service the entire spectrum of digitalization - from one of the industry's largest IT infrastructure projects that spans data centres, networks and security, to application platforms ranging from workplace services to digital interaction. In short: We deliver comprehensive end-to-end IT solutions for Allianz in the digital age. We are the backbone of Allianz. Find us at: www.linkedin.com/company/allianz-technology. Commitment to Integrity, Fairness & Inclusion Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us. We at Allianz believe in a strong inclusive culture that encourages people to speak their minds, get involved and question the status quo. We are proud to be an equal opportunity employer and encourage you to bring your whole self to work, no matter where you are from, what you look like, who you love, or what you believe in. We therefore welcome applications regardless of race, ethnicity or cultural background, age, gender, nationality, religion, social class, disability, sexual orientation, or any other characteristics protected under applicable local laws and regulations. To Recruitment Agencies Allianz Technology has an in-house recruitment team that sources great candidates directly. Therefore, Allianz Technology does not accept unsolicited resumes from agencies or search firm recruiters. When we do work with recruitment agencies, that engagement is formalized by a contract. Fees will only be paid when there is a contract in place. Without a contract in place, we will not accept invoices on unsolicited resumes, even if the candidate was ultimately employed by Allianz. 102796 | Ingeniería informática y tecnológica | Profesional / Senior | Non-Executive | Allianz Technology | Jornada completa | Indefinido

This job is with Allianz Commercial, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. About the Job At the Allianz Cyber Defense Center (ACDC), we are transforming cyber defense into an intelligence-driven, proactive capability. As our Senior Cyber Detection Expert, you will be the highest technical authority for threat detection, shaping how Allianz detects and responds to cyber threats across a global environment. This is a strategic and hands-on role where you will define the target detection landscape, influence detection engineering standards, and transform threat intelligence and hunting insights into scalable detection coverage. Working at the intersection of Threat Intelligence, Threat Hunting, Security Operations, and Engineering, you will directly impact the security posture of one of the world's largest financial services organizations. What You Do • Define and maintain the strategic detection landscape, ensuring coverage remains aligned with evolving threats, adversary behaviors, and business risks., • Act as the senior technical authority for detection engineering, setting standards, methodologies, and best practices across the Detection Cluster., • Lead the design and optimization of advanced SIEM detection use cases, balancing effectiveness, performance, and operational sustainability., • Own detection coverage assessments and gap analyses, leveraging frameworks such as MITRE ATT&CK and threat intelligence insights., • Maintain oversight of the security telemetry landscape, identifying critical data gaps and driving the onboarding of new data sources., • Translate threat intelligence, threat hunting findings, and adversary simulation results into high-quality production detections., • Design and implement multi-domain detection strategies spanning endpoint, identity, cloud, network, and application security environments. What You Bring • Extensive experience in Detection Engineering, Cyber Defense, Security Monitoring, or Threat Detection within complex enterprise environments., • Deep expertise in SIEM technologies, including log management, event correlation, detection logic development, and security data analysis., • Strong understanding of adversary tactics, techniques, and procedures (TTPs), with hands-on knowledge of frameworks such as MITRE ATT&CK., • Proven experience developing, tuning, and maintaining detection content while minimizing false positives and alert fatigue., • Experience translating threat intelligence and threat hunting outcomes into actionable and scalable detection capabilities., • Strong analytical, problem-solving, and communication skills, with the ability to influence both technical teams and senior stakeholders., • Familiarity with modern detection engineering practices such as Detection-as-Code, behavioral analytics, automation, and AI-assisted security operations. Nice to have • Experience with Google SecOps., • Background in Threat Hunting, Threat Intelligence, Purple Teaming, or Adversary Simulation., • Relevant certifications such as CISSP, GCIH, GCDA, GCFA, or equivalent., • Experience working in large international or regulated environments. What we offer • We offer a hybrid work model which recognizes the value of striking a balance between in-person collaboration and remote working incl. up to 25 days per year working from abroad., • We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location)., • From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered., • Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach. About Allianz Technology With its headquarters in Munich, Germany, Allianz Technology is Allianz's global IT service provider and delivers IT solutions that drive the group's digitalization. With more than 11,000 employees in over 20 countries around the world, Allianz Technology is tasked to run, optimize, transform and innovate the infrastructure, applications and services together with Allianz companies to co-create the best customer experience. We service the entire spectrum of digitalization - from one of the industry's largest IT infrastructure projects that spans data centres, networks and security, to application platforms ranging from workplace services to digital interaction. In short: We deliver comprehensive end-to-end IT solutions for Allianz in the digital age. We are the backbone of Allianz. Find us at: www.linkedin.com/company/allianz-technology. Commitment to Integrity, Fairness & Inclusion Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us. We at Allianz believe in a strong inclusive culture that encourages people to speak their minds, get involved and question the status quo. We are proud to be an equal opportunity employer and encourage you to bring your whole self to work, no matter where you are from, what you look like, who you love, or what you believe in. We therefore welcome applications regardless of race, ethnicity or cultural background, age, gender, nationality, religion, social class, disability, sexual orientation, or any other characteristics protected under applicable local laws and regulations. To Recruitment Agencies Allianz Technology has an in-house recruitment team that sources great candidates directly. Therefore, Allianz Technology does not accept unsolicited resumes from agencies or search firm recruiters. When we do work with recruitment agencies, that engagement is formalized by a contract. Fees will only be paid when there is a contract in place. Without a contract in place, we will not accept invoices on unsolicited resumes, even if the candidate was ultimately employed by Allianz. 102796 | Ingeniería informática y tecnológica | Profesional / Senior | Non-Executive | Allianz Technology | Jornada completa | Indefinido

About The Job You know adversaries by how they operate — and you know how to turn that knowledge into action. As a Threat Intelligence Engineer — Intrusion Analysis & Detection , you will help transform threat actor behavior into concrete defensive value: stronger detections, smarter hunting hypotheses, and intelligence that helps defenders move faster and more effectively. Within the Allianz Cyber Defense Center (ACDC), you will join a team that is evolving toward an AI‑augmented, intelligence‑driven operating model. This is a high‑impact opportunity to shape and mature intrusion analysis capabilities, automate repetitive intelligence workflows, and directly influence how a global organization defends itself against real‑world threats. What You Do Analyze real‑world attacks, post‑incident findings, and emerging adversary tradecraft to identify relevant threat activity and convert retrospective analysis into forward‑looking intelligence. Translate threat intelligence into actionable detection content by producing detection rules and analytical guidance for deployment by detection engineering teams across platform‑native environments. Track threat actors and map tactics, techniques, and procedures to MITRE ATT&CK, identifying coverage gaps and generating meaningful hunting leads based on relevance to the Allianz environment. Build and maintain automation for repetitive intelligence workflows using SOAR platforms, Power Automate, N8N, Python, scripting, and API integrations to improve speed, quality, and consistency. Apply AI in daily analytical workflows to categorize incoming intelligence, enrich indicators, correlate reporting with tracked topics, and accelerate decision‑making. Communicate findings clearly through dashboards, written intelligence notes, and operational briefings so that detection engineers, incident responders, IT administrators, and leadership can act confidently. Support the full IOC lifecycle and contribute during active security incidents by providing timely analytical input, validation, and triage support as part of on‑call rotations. What You Bring Hands‑on experience in intrusion analysis, including the investigation of real‑world attack patterns, adversary behavior, and post‑incident evidence. Proven ability to turn intelligence into action through detection engineering, including authoring, tuning, or validating detection rules in production environments. Strong knowledge of MITRE ATT&CK, especially at procedure level, and a solid understanding of the telemetry required to detect adversary activity effectively. Practical coding and automation skills, ideally in Python, scripting, and API‑driven workflows, with a builder mindset focused on improving efficiency through automation. Good understanding of the Threat Intelligence Lifecycle and structured analytical techniques, including models such as the Diamond Model and Kill Chain. Experience working with or exposure to tools such as Google SecOps, CrowdStrike Falcon / Intelligence, Google Threat Intelligence / VirusTotal, Recorded Future, MISP, or similar platforms. A proactive, outcome‑driven mindset with the ability to stay composed under pressure, communicate clearly during incidents, and collaborate effectively across technical teams. What We Offer Hybrid work model with up to 25 days per year working from abroad. Performance‑based compensation and benefits, including a company bonus scheme, pension, employee shares program, and employee discounts (details vary by location). Lifelong learning and international career mobility through career development and digital learning programs. Flexible working, healthcare, parental leave benefits, and support to balance family and career while returning from career breaks. Commitment to Integrity, Fairness & Inclusion Allianz Technology is proud to be an equal opportunity employer dedicated to fostering an inclusive work environment for everyone. We embrace individuals of all gender identities and expressions, sexual orientations, ethnicities, ages, nationalities, religions, disabilities, and philosophies of life. We welcome applications regardless of race, ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations. #J-18808-Ljbffr

Reescribe tu carrera en Recursos Humanos con Adecco ¿Tienes experiencia de cara al público y te manejas bien con herramientas digitales? ¿Te gustaría dar un giro a tu carrera y formarte en el sector de los Recursos Humanos? Tú pones la actitud, nosotros te damos la formación y el acompañam

¿Te apetece unirte a nuestro equipo de Ciberseguridad? ¡En Atalanta te estamos buscando! Somos una compañía especializada en ciberseguridad y estrategia digital donde la calidad es el núcleo por el que se rigen nuestros productos y servicios. Todos los proyectos están enfocados en esa dirección y nuestra mayor preocupación es que las personas que forman parte del equipo se sientan especialmente valoradas y puedan seguir creciendo y desarrollándose profesionalmente, DE VERDAD. Nuestros valores son la confianza, la innovación, la integridad, el compromiso y la responsabilidad. Creemos que juntos podemos ayudar a transformar las empresas para que sean digitalmente más seguras y competitivas y nos encantaría que, si estás leyendo esto, te apasionara el reto de formar parte de nuestra visión transformadora. Nos gustaría incorporar a una persona más al equipo de Ciberseguridad de Atalanta, concretamente como nivel 2 de nuestro SOC, para reforzar la detección y respuesta de seguridad de nuestros clientes. ¿Qué harás en tu día a día? - Gestionar y asegurar sistemas Linux y Windows críticos. - Aplicar bastionado / hardening siguiendo estándares (CIS, DISA STIG, mejores prácticas). - Detectar, analizar y gestionar vulnerabilidades en servidores, endpoints y servicios. - Participar en respuesta a incidentes y análisis de logs. - Documentar procedimientos y colaborar con equipos de seguridad. ¿Qué conocimiento necesitarás? - Experiencia 2+ años en seguridad de sistemas y/o equipos CSIRT/SOC. - Conocimiento en hardening y gestión de vulnerabilidades en Linux y Windows. - Conocimiento de Microsoft EntraID y 365. - Familiaridad con redes, protocolos y seguridad de sistemas. - Actitud proactiva y trabajo en equipo. Valorable - Certificaciones: Linux+, RHCSA/RHCE, Windows Security. - Experiencia en automatización de hardening (Ansible, Puppet, PowerShell). - Conocimiento en cloud security (AWS, Azure, M365). - Conocimiento en Fortinet. ¿Qué esperamos de ti? – Que tengas experiencia previa REAL en un SOC o en Blue Team/DFIR. – Que domines SIEM, EDR, análisis de alertas y respuesta a incidentes. – Que te guste investigar, entender y resolver incidentes complejos. – Que seas responsable, autónomo y capaz de comunicarte claramente con el cliente. – Que te apasione el mundo de la detección, la ingeniería SOC y la ciberseguridad defensiva. – Que seas una persona organizada, con capacidad para priorizar y con mentalidad colaborativa. Valoraremos especialmente experiencia con: – Wazuh, OpenSearch, Graylog, CrowdStrike, Cortex, TheHive – Automatización (Python, PowerShell, Bash, n8n…) – MITRE ATT&CK – Certificaciones como SC-200, GCIA, GCIH, GCFE, CEH Practical, etc. ¿Qué te ofrecemos? Contrato indefinido ⏱ Horario de 8:00 a 17:30h (con pausa para comer). Jornada intensiva todos los viernes y durante el verano. Modelo híbrido, prácticamente 100% remoto. Ubicación: Madrid. Salario acorde a tu experiencia y revisiones salariales anuales. Seguro médico privado con Sanitas (beneficio directo). Retribución flexible (comida, transporte y guardería). Formación técnica adaptada al puesto y al desarrollo profesional. Y, lo más importante, incorporarte a un gran equipo colaborativo y participativo en el que hay super buen ambiente de trabajo ¿Te unes a la aventura?