Trabajos att en Vilapicina I La Torre LlobetaCrear alertas

Buscamos un/a Experto/a en Amenazas para incorporarse a nuestro equipo de ciberseguridad. La persona seleccionada será responsable de recopilar, analizar y correlacionar información de ciberamenazas provenientes de múltiples fuentes internas y externas, con el objetivo de evaluar el nivel de exposición, apoyar la toma de decisiones y proponer medidas de mitigación dentro del marco operativo de la organización. Este rol será clave para identificar tendencias, anomalías y eventos relevantes, así como para dar soporte en comités de crisis y contribuir a la mejora continua del estado de protección. Requisitos Formación y experiencia • Ingeniería informática, telecomunicaciones o similar en el ámbito IT., • Certificaciones ciberseguridad., • Experiencia previa en análisis de ciberamenazas, inteligencia de amenazas (Threat Intelligence) o áreas similares., • Conocimientos sólidos en ciberseguridad, operaciones de seguridad y gestión de incidentes. Conocimientos técnicos • Manejo de herramientas de Threat Intelligence y plataformas de compartición de información., • Conocimientos de correlación de eventos, vulnerabilidades y exposición de activos., • Capacidad para interpretar logs y fuentes de datos de seguridad., • Familiaridad con marcos de amenazas (MITRE ATT&CK, Kill Chain, etc.). Habilidades • Capacidad analítica y pensamiento crítico., • Excelentes habilidades de redacción técnica., • Capacidad para priorizar en función del contexto operativo., • Trabajo colaborativo con equipos de seguridad, operaciones y crisis.

At Q-Tech, we are currently looking for a Senior Incident Response & Digital Forensics specialist to join the Technology Hub of one of our key retail clients, with offices located in Barcelona. This is an opportunity to join an international, highly technical environment with global impact. MISSION Lead advanced incident response activities within a mature SOC. This is a hands-on technical role focused on real investigations, continuous improvement, and end-to-end incident management. RESPONSIBILITIES • Coordinate and communicate security incidents across teams and countries., • Manage the full Incident Response lifecycle (detection, analysis, containment, and remediation)., • Reconstruct cyberattacks and perform malware analysis., • Develop and enhance detection mechanisms., • Conduct IT forensic investigations (timeline reconstruction and artifact analysis)., • Prepare technical and executive-level incident reports., • Advise internal projects on security-related matters., • Monitor the global threat landscape and provide actionable recommendations. REQUIREMENTS • 5+ years of experience in Incident Response handling medium to critical incidents., • Hands-on experience in triage, containment, and end-to-end remediation., • Experience collaborating with IT, Engineering, Legal, Cloud Operations, and Escalation Management teams., • Degree in IT or equivalent education., • High level of English (minimum B2)., • Advanced experience with SIEM (preferably Splunk), SOAR platforms, and EDR solutions., • Strong understanding of offensive techniques and defensive technologies. FRAMEWORKS & STANDARDS ISO 27001 · NIST Cybersecurity Framework · BSI Grundschutz · ITIL · OWASP · MITRE ATT&CK TECHNOLOGY STACK • SOAR / Ticketing: Fortinet FortiSOAR, • Malware Sandbox: VMRay Sandbox, Any.Run, VirusTotal, • M365 Security: Microsoft Defender (Endpoint, Identity, Cloud Apps, Office), • Threat Intelligence: MISP, Recorded Future, DFIR Report, • Digital Forensics: Timesketch, Magnet AXIOM, • SIEM: Splunk (preferred) + enterprise EDR NICE TO HAVE • Advanced digital forensics (Windows, macOS, Linux, cloud)., • Incident Response experience in cloud environments (native logging, identity investigations)., • Application security and SaaS threat knowledge. WHAT THEY OFFER If you are looking for an international, technical environment with real impact in defending a global organization, this role is for you. • Flexible compensation: €2,700 annually to allocate between meal vouchers (up to €200/month) and transport (€25/month)., • Health insurance valued at €546.96 annually (€45.58/month)., • Remote work allowance: €268.92 annually (approx. €22.41/month), added to payroll., • Wellbeing: reimbursement for sports activities (gym, swimming pool, etc.) up to €300 annually, added to payroll upon invoice submission., • Working Hours: Afternoon shift (13:45 – 22:00h), from Monday to Friday (no rotation).

Company A leading international retailer with more than 575.000 employees worldwide in 33 different countries and over 13.700 stores, has stablished an IT HUB in Barcelona as part of his IT division, responsible for the selection and provision of IT infrastructure, IT platforms and business applications. With our agile mentality we are looking for people that is willing to make an impact on projects and solutions used worldwide by millions of customers. Agrupa Global Talent collaborates with our client to attract the best talent for its ITHUB located in Barcelona. We are looking for open-minded colleagues with passion for technology. We offer you diverse and exciting career opportunities in a dynamic work environment that stands for development and progress. Elevate your career with us, where development and progress are at the heart of everything we do. If you feel ready and think this opportunity is for you, we would be happy to meet you. Your Tasks • Coordinate and communicate IT security incidents across teams and countries, managing the incident response process., • Detect and analyze potential security incidents, ensuring effective containment., • Reconstruct cyber-attacks and malware, analyze sensitive data, and derive remediation actions., • Develop mechanisms to detect anomalies and attacks, initiating preventive measures to alert in time., • Monitor the general threat landscape on the Internet and provide actionable recommendations., • Advise internal projects on security-related issues., • Conduct IT forensic investigations., • Create meaningful reports on IT security incidents. Job requirements • Our client’s Cyber Defense Center is fully built and up and running. We are now looking to strengthen the team with an Incident Response expert to cover the weekday afternoon shift. This is a hands-on, experienced technical role focused on advanced incident, and continuous improvement rather than tier-one alert triage., • You will join a large Cyber Security organization with excellent opportunities for growth, development, and promotion based on performance and training. Continuous learning is essential in this field, and the company supports this with a wide range of education and training options to enhance both soft and hard skills., • 5+ years of professional experience in Incident Response, leading medium to critical security incident response., • Hands-on experience in incident response, including triage, containment, remediation, and end-to-end security investigations., • Experience partnering with Escalation Management, Product Development/Engineering, IT, Legal, Cloud Ops, and wider cybersecurity teams to lead remediation., • University degree in Information Technology or comparable education., • Strong English skills, fluent business English (speaking and writing) at advanced level (B2+)., • Further education in IT forensics and security incident management., • Expert knowledge in SIEM systems (preferably Splunk), SOAR tools, and EDR solutions., • Strong technical expertise in deployed technologies and cyber attack techniques., • Knowledge of national and international IT standards and frameworks (ISO 27001, NIST Cyber Security Framework, BSI Grundschutz, ITIL, OWASP, MITRE ATT&CK)., • High communicative and analytical skills, ability to work independently, and strong team spirit., • Confidence and persuasiveness., • Commitment to continuous education and professional development., • Would be a plus: Strong digital forensics skills, including analysis, timeline reconstruction, and interpreting artefacts across Windows, macOS, Linux, and cloud environments., • Would be a plus: Experience in cloud incident response including familiarity with cloud-native logging, identity systems, and investigation techniques., • Would be a plus: Knowledge of application security, including investigating application-layer attacks, abuse cases, and SaaS-specific threats. Shift options • Morning shift (5:45 – 14:00h), from Monday to Friday (no rotation)., • Afternoon shift (13:45 – 22:00h), from Monday to Friday (no rotation). What We Offer • These are hybrid mode permanent positions. 2 days/week at the office., • You will be part of an international team composed by people from different countries and backgrounds, where you’ll be able to share your experience and knowledge to carry-out teamwork and meet the objectives., • On top of this, you’ll have a personal follow-up with your management team to help you understanding all business-related questions and guide you in your professional career., • We offer a competitive compensation and benefits package: lunch vouchers, health and dental insurance, transport, wellbeing, etc. Contact If you are interested, please apply directly or send your CV to xavier.salra@agrupaglobal.com

NTT DATA es una consultora multinacional que ofrece soluciones tecnológicas, de negocio, estrategia, desarrollo y mantenimiento de aplicaciones, siendo referente en consultoría. Digital Technology es la unidad enfocada a acompañar a las grandes organizaciones iberoamericanas en su transformación digital, generando dividendos digitales a través de la tecnología y el diseño, con enfoque práctico y orientado al negocio. Para lograrlo, buscamos personas que compartan nuestra curiosidad permanente, pasión por la tecnología, excelencia constante y visión estratégica. 🔍 Buscamos incorporar un perfil: Red Team Lead, con al menos 5 años de experiencia en la ejecución de proyectos hacking y Red Team para sumarse a nuestro equipo de Ciberseguridad! ¿Qué harás? Te incorporarás a la línea de Privacy & Security by Design del equipo de Ciberseguridad en NTT DATA desde donde, a través de tu conocimiento experto en Red Team, podrás contribuir al crecimiento y liderazgo de nuestro equipo AOST (Advance Offensive Security Team) y mejora de los servicios de seguridad ofensiva que ofrecemos (ejercicios de red / purple team, pentesting externo/interno avanzado sobre infraestructuras, sistemas o aplicaciones, ejercicios de simulación de adversarios,…). Participarás en la ejecución de proyectos de ámbito nacional e internacional de alta complejidad y/o en aquellos en los que sea necesario un conocimiento diferenciador para el arranque del proyecto, siendo el referente técnico tanto a nivel interno como externo. Formarás parte de un gran equipo en el que se fomenta el crecimiento y desarrollo profesional. Requisitos: • Titulación Universitaria en Informática o Telecomunicaciones. (Deseable Máster en Ciberseguridad)., • Experiencia de, al menos, 5 años en ejecución de proyectos de hacking y Red Team., • Conocimiento sólido y aplicación en proyectos de las siguientes metodologías / estándares de seguridad: MITRE ATT&CK, Cyber Kill Chain, PTES, OWASP, …., • Persona proactiva, con gran curiosidad por la seguridad ofensiva, la tecnología y con capacidad de transmitir conocimiento a perfiles con menos experiencia., • Se valora tener experiencia en desarrollo de malware como arsenal para ejercicios de Red Team y conocimiento de C&C como, por ejemplo, Cobalt Strike., • Se valora estar en posesión de algunas de las siguientes certificaciones de seguridad: OSCP, OSCE, OSED, eCPPTX, CRTO, CRTE, CRTP, CRTL, CARTP, GPEN, GXPN, CREST Certified Simulated Attack Specialist (CCSAS), …, • Se valora un buen nivel de inglés (B2 o superior). Lo que te ofrecemos: 🧠 Formar parte de un equipo de élite, especializado en la unión entre estrategia y tecnología. 💼 Contrato indefinido con revisiones de categoría y salario anuales. 🎓 Certificaciones bonificadas (Adaptada a cada división). 📝 Acceso a nuestra plataforma formativa NTT DATA University (formaciones técnicas, metodológicas, idiomas y soft skills). 👩🏽 💻 Trabajo híbrido y horario flexible para que conciliemos mejor. 📅 Jornada intensiva (8:00 a 15:00) los viernes y durante el verano. 🏥 Beneficios corporativos: complementos salariales adicionales, retribución flexible, seguro médico, etc. 🔝 Global Top Employer 2025 — por 10º año consecutivo en España. 🌊 Programas solidarios y actividades sociales a través de nuestro portal de voluntarios de The Blue Wave impulsando un impacto positivo. 🌏 Innovación diversa y cultura inclusiva en NTT DATA creemos que cada persona es única. Apostamos por una cultura inclusiva que valora la diversidad y fomenta un entorno donde todos podamos explorar y potenciar nuestra singularidad. 🚀 Únete al equipo de Digital Technology en NTT DATA.

This position is part of the Product Security Department and is responsible for assessing and improving the security posture of the organization's products, applications, cloud environments, and enterprise infrastructure through offensive security activities. The primary responsibility of this position is to identify, validate, and communicate security vulnerabilities before they can be exploited by attackers. The role involves performing penetration tests, security assessments, and adversary simulations across traditional IT environments, cloud platforms, modern applications, and Artificial Intelligence (AI) systems. The engineer will collaborate with development, infrastructure, cloud, and engineering teams to improve the organization's overall security posture by providing actionable remediation guidance and security best practices. • Plan and execute penetration tests of healthcare products, applications, medical devices, and supporting infrastructure in accordance with defined testing methodologies and project timelines., • Perform security assessments of web applications, APIs, desktop applications, embedded systems, cloud environments, and AI-enabled products to identify exploitable vulnerabilities and security weaknesses., • Evaluate the security of cloud-native architectures, identity services, and containerized environments supporting healthcare solutions., • Assess Artificial Intelligence features and applications for security risks, including prompt injection, unauthorized access, sensitive data exposure, and misuse of AI models., • Contribute to the continuous improvement of penetration testing methodologies, tooling, automation, and testing procedures to address emerging technologies and evolving threats., • Stay current with the latest offensive security techniques, healthcare cybersecurity threats, cloud technologies, and AI security research to ensure testing methodologies remain effective and aligned with industry best practices., • Collaborate with product development and engineering teams to communicate security findings, provide technical guidance, and support secure product development throughout the product lifecycle., • Validate the effectiveness of implemented security fixes through remediation verification and follow-up security testing., • Produce high-quality technical reports that clearly describe findings, risk levels, exploitation evidence, and practical remediation recommendations for engineering teams. Networking/Key relationships A cybersecurity engineer interacts with different stakeholders including: • Software Development teams to coordinate security assessments, communicate technical findings, and support the remediation and validation of identified vulnerabilities., • Quality Assurance (QA) teams to integrate penetration testing activities into product release cycles and verify security fixes prior to deployment., • Cloud Engineering and DevOps teams to assess cloud infrastructure, containerized environments, CI/CD pipelines, and cloud-native services, providing recommendations to improve security posture., • Product Owners (PO) and Product Security Officers (PSO) to define assessment scope, prioritize security risks based on business impact, and support secure product releases., • Product Security Architects (PSA) to align penetration testing activities with organizational security strategies, threat models, and vulnerability management processes. Minimum Knowledge & Experience required for the position: The qualifications required for this position are: • Bachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience. Minimum professional experience: • 4+ years in Offensive Security, Penetration Testing or Red Teaming. Experience in several of the following areas: • API and Web Application pentesting., • Cloud security (AWS, GCP and Azure)., • Docker and Kubernetes security, • AI security assessments., • Active Directory, • Reverse Engineering and Binary Exploitation capabilities. The following work experience and qualifications are a plus: • Certifications such as: eJPT, OSCP, CPTS, CRTO, CRTE, or equivalent., • Knowledge of security frameworks such as OWASP and MITRE ATT&CK. Additional valuable experience • Experience in Red Teaming Operations, • Experience in CTFs in platforms such as Hack The Box, • Knowledge of relevant standards such as ISO 27001., • Knowledge of medical device regulations (FDA, GDPR)., • Solid knowledge on SW testing process and secure methodology (SSDLC). Skills & Capabilities: The skills and capabilities required by the position are: • Strong analytical and problem-solving skills to identify, validate, and assess security vulnerabilities and recommend effective remediation strategies., • Effective communication skills to convey complex cybersecurity concepts to both technical and non-technical stakeholders., • Willingness to stay updated on the latest cybersecurity trends, threats and technologies through continuous learning and professional development., • Ability to collaborate with cross-functional teams, share information, and work together to enhance overall cybersecurity posture., • Strong interpersonal skills with the ability to build trust, foster teamwork, and contribute positively to a collaborative working environment. Travel requirements: Less than 10% of the time

At One eSecurity, we are a market-leading specialist in Threat Detection and Digital Forensics & Incident Response (DFIR). Our commitment to excellence, innovation, and passion drives everything we do We’re looking for a top-tier, fully remote cybersecurity professional with 5+ years of experience in DFIR. If you have a sharp eye for advanced threats and hands-on expertise in incident response, join us and make an impact! Keys responsibilities: • Lead complex cyber incident investigations across enterprise, cloud, and hybrid environments., • Coordinate and provide technical leadership during high-severity incidents, including ransomware, intrusions, insider threats, and APT activity., • Perform advanced digital forensics, threat hunting, malware triage, and root cause analysis across endpoints, networks, cloud, and identity platforms., • Develop detection strategies and improve detection coverage aligned with adversary TTPs and MITRE ATT&CK., • Translate threat intelligence into actionable detections, hunting hypotheses, and incident response playbooks., • Mentor analysts and support incident response operations across Tier 1–3 teams., • Lead post-incident reviews and contribute to continuous improvement of IR processes, tooling, and operational standards., • Produce high-quality technical and executive-level reports and recommendations., • Drive automation and operational efficiency through scripting and security engineering improvements. Requiered experience & qualifications: • 7+ years of experience in DFIR, Incident Response, Threat Hunting, SOC, or related cybersecurity functions., • Strong experience leading complex cyber incident investigations in enterprise environments., • Deep understanding of attacker TTPs, intrusion methodologies, and modern threat actor tradecraft., • Hands-on investigation experience across:, • Windows, Linux, and macOS, • Active Directory / Entra ID, • AWS, Azure, or GCP, • Microsoft 365 / Google Workspace, • Enterprise EDR/XDR platforms, • Strong analytical, communication, and problem-solving skills., • Ability to operate effectively under pressure and communicate with both technical and executive stakeholders., • Experience mentoring analysts and leading technical response activities. Technical skills: • DFIR & Endpoint Forensics (Velociraptor, GRR, KAPE, Volatility, FTK, EnCase, X-Ways, Volatility, Axiom), • Deep knowledge of raw forensic artifacts and operating system internals (Windows, Linux, macOS), with the ability to manually parse and validate artifacts independently of commercial DFIR tooling (MFT, Registry, EVTX, Prefetch, Amcache, Shimcache, SRUM, USN Journal, browser artifacts, memory structures, file system metadata, and timeline reconstruction), • Detection Engineering & Threat Hunting, • SIEM/XDR and EDR platforms, • Network traffic analysis and network forensics, • Malware triage and reverse engineering, • Scripting and automation (Python, PowerShell, Bash), • Cyber Threat Intelligence and ATT&CK-based detection methodologies Nice to have • Experience in regulated or critical infrastructure environments., • Experience supporting global incident response operations., • Offensive security or adversary emulation experience. Certifications GCFA, GCIH, or equivalent certifications are highly valued. Languages • English and Spanish(required) What We Offer What makes us different from other companies? • Exciting professional DFIR projects for the largest corporations across the globe., • Flexible schedules and tele-working. -A top team of highly recognized professionals in the field. • An attractive salary.

At One eSecurity, we are a market-leading specialist in Threat Detection and Digital Forensics & Incident Response (DFIR). Our commitment to excellence, innovation, and passion drives everything we do We’re looking for a top-tier, fully remote cybersecurity professional with 5+ years of experience in DFIR. If you have a sharp eye for advanced threats and hands-on expertise in incident response, join us and make an impact! Keys responsibilities: • Lead complex cyber incident investigations across enterprise, cloud, and hybrid environments., • Coordinate and provide technical leadership during high-severity incidents, including ransomware, intrusions, insider threats, and APT activity., • Perform advanced digital forensics, threat hunting, malware triage, and root cause analysis across endpoints, networks, cloud, and identity platforms., • Develop detection strategies and improve detection coverage aligned with adversary TTPs and MITRE ATT&CK., • Translate threat intelligence into actionable detections, hunting hypotheses, and incident response playbooks., • Mentor analysts and support incident response operations across Tier 1–3 teams., • Lead post-incident reviews and contribute to continuous improvement of IR processes, tooling, and operational standards., • Produce high-quality technical and executive-level reports and recommendations., • Drive automation and operational efficiency through scripting and security engineering improvements. Requiered experience & qualifications: • 7+ years of experience in DFIR, Incident Response, Threat Hunting, SOC, or related cybersecurity functions., • Strong experience leading complex cyber incident investigations in enterprise environments., • Deep understanding of attacker TTPs, intrusion methodologies, and modern threat actor tradecraft., • Hands-on investigation experience across:, • Windows, Linux, and macOS, • Active Directory / Entra ID, • AWS, Azure, or GCP, • Microsoft 365 / Google Workspace, • Enterprise EDR/XDR platforms, • Strong analytical, communication, and problem-solving skills., • Ability to operate effectively under pressure and communicate with both technical and executive stakeholders., • Experience mentoring analysts and leading technical response activities. Technical skills: • DFIR & Endpoint Forensics (Velociraptor, GRR, KAPE, Volatility, FTK, EnCase, X-Ways, Volatility, Axiom), • Deep knowledge of raw forensic artifacts and operating system internals (Windows, Linux, macOS), with the ability to manually parse and validate artifacts independently of commercial DFIR tooling (MFT, Registry, EVTX, Prefetch, Amcache, Shimcache, SRUM, USN Journal, browser artifacts, memory structures, file system metadata, and timeline reconstruction), • Detection Engineering & Threat Hunting, • SIEM/XDR and EDR platforms, • Network traffic analysis and network forensics, • Malware triage and reverse engineering, • Scripting and automation (Python, PowerShell, Bash), • Cyber Threat Intelligence and ATT&CK-based detection methodologies Nice to have • Experience in regulated or critical infrastructure environments., • Experience supporting global incident response operations., • Offensive security or adversary emulation experience. Certifications GCFA, GCIH, or equivalent certifications are highly valued. Languages • English and Spanish(required) What We Offer What makes us different from other companies? • Exciting professional DFIR projects for the largest corporations across the globe., • Flexible schedules and tele-working. -A top team of highly recognized professionals in the field. • An attractive salary.

Build a career powered by innovations that matter! At Novanta, our innovations power technology products that are transforming healthcare and advanced manufacturing—improving productivity, enhancing people’s lives and redefining what’s possible. We create for our global customers engineered components and sub-systems that deliver extreme precision and performance for a range of mission-critical applications—from minimally invasive surgery to robotics to 3D metal printing.Novanta is one global team with over 26 offices located in The Americas, Europe and Asia-Pacific. Looking for a great place to work? You have found it with a culture that embraces teamwork, collaboration and empowerment. Come explore Novanta.Business Unit OverviewThis position is part of Novanta's Corporate and Shared Services global teams. Novanta's Corporate and Shared Services teams play an important role in executing the company's strategic mission and operations. Included in Corporate and Shared Services are the business functions including Finance, Accounting, Human Resources, Information Technology, Legal, Compliance, Corporate Development and Corporate Marketing. The Corporate and Shared Services teams work closely with all Novanta business units to support operating initiatives contributing to the organization's financial success.Job SummaryAs a Security Automation & AI Engineer, you will be responsible for designing, building, and maintaining automated workflows and AI-driven solutions that enhance the efficiency and effectiveness of Novanta's global security operations. Working closely with the Security Operations team, you will develop SOAR playbooks, detection-as-code pipelines, and intelligent automation that accelerate threat detection, incident response, and vulnerability management across the enterprise.You will also serve as a key liaison between Security and R&D Engineering, gaining deep understanding of CI/CD pipelines and software development workflows to embed security automation into the development lifecycle. Your goal is to reduce manual operational burden, improve detection coverage, and enable the security team to scale its capabilities in line with Novanta's growth, while maintaining the confidentiality, integrity, and availability of our data and ensuring compliance with industry standards and regulations.Primary ResponsibilitiesDesign, develop, and maintain security automation workflows and SOAR playbooks to streamline alert triage, enrichment, containment, and remediation processes.Build and maintain detection-as-code pipelines, enabling programmatic creation, testing, version control, and deployment of detection rules across SIEM and EDR platforms.Develop AI-assisted investigation tools and scripts that auto-correlate signals across security platforms (SIEM, EDR, DLP, IAM) to accelerate incident response.Automate vulnerability management workflows, including scan orchestration, prioritisation scoring, remediation tracking, and reporting to support the vulnerability management function.Serve as the security team's subject matter expert on R&D CI/CD pipelines (GitHub, Azure DevOps, build/release workflows), understanding how software is developed, tested, and deployed across Novanta's business units.Identify and implement opportunities to embed automated security checks and controls into CI/CD pipelines, shifting security left in the development lifecycle.Build and maintain API-level integrations between security tools and platforms, ensuring data flows efficiently without manual intervention.Collaborate cross-functionally with IT, R&D Engineering, Cloud, and DevOps teams to align security automation initiatives with broader technology strategies.Provide security automation expertise and communicate complex technical solutions to management and the leadership team.Contribute to the creation and continuous improvement of security automation documentation, runbooks, and operational procedures.Evaluate emerging AI and automation technologies for applicability to security operations, and lead proof-of-concept initiatives.Support the broader security operations team during incident response and threat hunting activities as needed.Required Education, Experience & KnowledgeEducation – Bachelor's degree in Computer Science, Cybersecurity, Software Engineering, or a related field (or equivalent practical experience).Experience – 3–5 years of experience in security operations, security engineering, or DevSecOps, with a demonstrated focus on automation and tooling development.Programming – Strong proficiency in Python; experience with PowerShell, Bash, or other scripting languages. Ability to write production-quality, maintainable code.CI/CD & DevOps – Hands-on experience with CI/CD platforms (e.g., GitHub Actions, Azure DevOps Pipelines, Jenkins) and version control systems (Git). Understanding of software development lifecycle and DevOps practices.Security Tooling – Experience with SIEM platforms, EDR solutions, and/or SOAR platforms. Familiarity with DLP and IAM tools is a plus.Cloud & Infrastructure – Working knowledge of cloud platforms (AWS, Azure, or GCP) and infrastructure-as-code concepts.APIs & Integration – Strong experience building and consuming RESTful APIs for tool integration and data orchestration.AI/ML Awareness – Familiarity with AI/ML concepts and their practical application in cybersecurity (e.g., anomaly detection, automated classification, LLM-based workflows). Experience with AI frameworks or platforms is a plus.Frameworks – Understanding of security frameworks such as NIST, MITRE ATT&CK, and CIS. Knowledge of GDPR and its impact on security across a global company.Certifications (preferred) – Relevant certifications such as GIAC (GCSA, GMON), PCSAE (Palo Alto Certified Security Automation Engineer), AWS Security Specialty, or equivalent.SkillsDealing with Ambiguity – Can effectively cope with change; can shift gears comfortably; can decide and act without having the total picture; comfortable handling risk and uncertainty in fast-paced security environments.Analytical & Problem-Solving Mindset – Approaches problems systematically; breaks down complex workflows into automatable components; uses data to drive decisions and measure the effectiveness of automation.Champions Customer Value Creation – Delivers innovative automation solutions that improve security outcomes for internal stakeholders. Seeks feedback from SOC analysts, threat hunters, and engineers to optimise workflows.Functional/Technical Skills – Has the functional and technical knowledge and skills to design, build, and maintain production-grade security automation at a high level of accomplishment.Collaboration & Communication – Works effectively across global, cross-functional teams. Can translate complex automation concepts into clear language for technical and non-technical audiences alike.Written Communications – Can write clearly and succinctly in a variety of communication settings and styles; produces high-quality technical documentation and runbooks.Continuous Learning – Demonstrates curiosity and a commitment to staying current with emerging security automation, AI, and DevSecOps trends and technologies.Novanta is proud to be an equal employment opportunity and affirmative action workplace. We consider all qualified applicants without regard to race, color, religion, sex (including pregnancy), sexual orientation, gender identity or expression, national origin, military and veteran status, disability, genetics, or any other category protected by federal law or Novanta policy.Please call +1 781-266-5700 if you need a disability accommodation for any part of the employment process.SummaryLocation: Barcelona, SpainType: Full time

Team Name:MarketingJob Title:Senior Data Scientist, Mobile User Acquisition - Blizzard (Barcelona, ESP)Requisition ID:R026169Job Description:It takes a Blizzard to make a Blizzard game, and that dedication doesn’t end once the game launches. We support our worlds for years, ensuring every player—on every platform—has an epic experience. Global Insights partners closely with our game teams, marketing, user acquisition, finance, and internal service groups to deliver the analytics, models, and strategic insights that help bring those experiences to life.Within Global Insights, the Marketing Analytics team applies advanced analytics and data science to help our marketing and growth teams make smarter, data-driven decisions that deepen engagement and drive long-term business impact.We are seeking a Senior Data Scientist with deep experience in mobile marketing analytics to join our team. In this role, you will build predictive revenue and LTV models, develop probabilistic attribution, marketing mix models, and create systems that allow us to understand—and optimize—the true impact of our mobile marketing investments. The ideal candidate has a passion for using data to shape mobile player acquisition and retention strategies, thrives in highly collaborative environments, and can translate complex analytical concepts into clear, actionable insights for partners across Blizzard.ResponsibilitiesBuild and maintain automated and dynamic predictive LTV models for mobile apps across multiple geographies, channels, campaigns, and platforms.Develop automated revenue and user growth forecasting systems that integrate with UA and finance workflows.Own the statistical framework for cohort modeling, retention projections, ROAS forecasting, and lifetime value prediction.Lead measurement strategy in a privacy-centric ecosystem, including:SKAdNetwork (SKAN) configuration and model-based postback interpretationProbabilistic attribution and MMMIncrementality testing and causal inferenceFunnel and cohort analysis across a complex landscape of iOS/Android/PC and ConsoleBuild data pipelines and automated reporting that harmonize deterministic and probabilistic signals.Collaborate with marketing, finance, and business teams to translate insights into actionable strategies by providing:Paid media performance insightsBudget planning and scenario modeling, both one off and automatedCreative testing analyticsChannel-level optimization recommendationsBuild and maintain data pipelines and dashboards to monitor marketing KPIs and model outputs.Present findings and recommendations to stakeholders in a clear and compelling way.Stay informed on emerging trends and best practices in marketing analytics and data science.Requirements8+ years of experience in data science, analytics, or a related field, with deep expertise in mobile marketing, predictive revenue modeling, or mobile UA analytics.Advanced degree (Master’s or PhD) in Statistics, Applied Mathematics, Economics, Computer Science, or another quantitative discipline.Expert knowledge of:Cohort-based modeling and LTV predictionMarketing measurement frameworks (SKAN, ATT, MMM, incrementality)Paid media platforms: Meta, Google, TikTok, DSPs, SANsProbabilistic and deterministic attribution approaches, last-click attribution and alternativesExperience deploying models and working with engineering teams to automate workflows.Strong programming experience in Python (or R) and proficiency in SQL.Hands-on experience with ML frameworks (TensorFlow, PyTorch, scikit-learn) and advanced statistical modeling techniques.Hands-on experience with modern data and analytics tools, including BigQuery/Snowflake, Airflow/dbt, Tableau/Looker, and Python-based ML frameworks (scikit-learn, TensorFlow, PyTorch).Expertise in data visualization and storytelling using Tableau, Power BI, Looker, or similar tools.Demonstrated ability to solve complex problems independently and lead cross-functional initiatives.Preferred QualificationsHands-on experience with:o MMPs (AppsFlyer, Adjust, Singular)o SKAN 4 or 5 readiness and schema designo Mobile data pipelines (event ingestion, postback processing)· Knowledge of cloud platforms (AWS, GCP, Azure) and modern data engineering tools.Strong business acumen and the ability to influence senior leaders through compelling, data-driven insights.A passion for Blizzard games and for helping shape unforgettable mobile experiences through data craftsmanship. Your PlatformBest known for iconic video game universes including Warcraft, Overwatch, Diablo, and StarCraft, Blizzard Entertainment, Inc. (www.blizzard.com), a division of Activision Blizzard, which was acquired by Microsoft (NASDAQ: MSFT), is a premier developer and publisher of entertainment experiences. Blizzard Entertainment has created some of the industry’s most critically acclaimed and genre-defining games over the last 30 years, with a track record that includes multiple Game of the Year awards. Blizzard Entertainment engages tens of millions of players around the world with titles available on PC via Battle.net, Xbox, PlayStation, Nintendo Switch, iOS, and Android.Our WorldActivision Blizzard, Inc., is one of the world's largest and most successful interactive entertainment companies and is at the intersection of media, technology and entertainment. We are home to some of the most beloved entertainment franchises including Call of Duty, World of Warcraft, Overwatch, Diablo, Candy Crush and Bubble Witch. Our combined entertainment network delights hundreds of millions of monthly active users in 196 countries, making us the largest gaming network on the planet!Our ability to build immersive and innovative worlds is only enhanced by diverse teams working in an inclusive environment. We aspire to have a culture where everyone can thrive in order to connect and engage the world through epic entertainment. We provide a suite of benefits that promote physical, emotional and financial well-being for ‘Every World’ - we’ve got our employees covered!The videogame industry and therefore our business is fast-paced and will continue to evolve. As such, the duties and responsibilities of this role may be changed as directed by the Company at any time to promote and support our business and relationships with industry partners.We love hearing from anyone who is enthusiastic about changing the games industry. Not sure you meet all qualifications? Let us decide! Research shows that women and members of other under-represented groups tend to not apply to jobs when they think they may not meet every qualification, when, in fact, they often do! We are committed to creating a diverse and inclusive environment and strongly encourage you to apply.We are committed to working with and providing reasonable assistance to individuals with physical and mental disabilities. If you are a disabled individual requiring an accommodation to apply for an open position, please email your request to candidate-accommodations@activisionblizzard.com. General employment questions cannot be accepted or processed here. Thank you for your interest. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, gender identity, age, marital status, veteran status, or disability status, among other characteristics. Job SummaryJob number: R026169Profession: Analytics / Research

About the opportunityAre you passionate about cybersecurity and eager to make a real impact in a dynamic environment? Look no further! We are on the lookout for a Senior Cloud Security Engineer who is ready to take the lead in proactively identifying and mitigating security threats and safeguarding our sensitive data. Join forces with our Platform and Data teams and be at the forefront of safeguarding our customer and our organisation.At N26, our Infrastructure Security team is on a mission to detect and remediate IT and cloud infrastructure security threats. We're dedicated to providing efficient and effective services that empower our N26 tech teams to thrive.Once here you willDrive the Cloud Infrastructure Security function roadmap in alignment with the Product Manager, Tech Lead, and Engineering Manager.Own, define and drive initiatives, solutions, processes and frameworks to proactively identify and mitigate security threats within our AWS infrastructure which leads to an overall improvement of our security maturity.Design, deploy and maintain state-of-the-art cloud-native security solutions, incorporating end-to-end data protection, advanced threat detection, automated controls, alerting and remediation mechanisms to ensure continuous compliance and protection across our cloud infrastructure. Perform regular and proactive research to detect new attack vectors.Perform Threat Modeling Sessions, assess and classify identify security threats and define threats mitigation solutions in alignment with the stakeholdersMonitor for vulnerabilities, perform ongoing risk assessment and collaborate with cross-functional teams to mitigate the risk.Define the pentesting scope and scenarios.Develop and maintain documentation providing clear guidelines to strengthen security posture and ensure consistent, secure cloud operations across the organisation.Provide a first class service to our main stakeholders in our support portalBe part of our security incident response on-call rotation (voluntary) and lead security incidents What you will bring alongCloud Security: Competent understanding and experience of securing at minimum AWS cloud infrastructure environments, CI/CD pipelines, containerized environment and Linux systems.Risk Assessment: Experience with assessing security findings and mitigation strategies Security Savvy: Competent knowledge of common security frameworks and tactics, including STRIDE, MITRE ATT&CK, and OWASP.Data Security: Understanding of cloud data security challenges and best practices across cloud cloud environments.Tool Mastery: Experience in deploying and customising security tools to address threats and reduce risk (CSPM/CNAPP, vulnerability scanners, IDS/IPS, endpoint security, KSPM, container runtime security, etc.)Automation Pro: Proficiency in using CI/CD pipelines (e.g., Terraform) for implementing automated security testing and change management.Cloud Deployment: Hands-on Experience with modern cloud technology components and deployment patterns: virtual machines, containers, Kubernetes, serverless, infrastructure as code, etc.Scripting Skills: Proficiency in Python, Bash, or GO for scripting and automation.Ethical Hacker: Experience with ethical hacking and penetration test methodologies.Teamwork & CollaborationAgile Mindset: Familiarity with agile methodologies and project management.Collaborative Spirit: Demonstrated ability to collaborate across teams and segments to achieve complex objectives.Hands-On: A hands-on attitude with a knack for driving solutions to completion.Communicator: Excellent oral and written communication skills.Growth-Driven: A growth mindset focused on learning and pushing the team forward.Community Contributor: Contributions to the security community, such as open-source tools, research papers, conference talks, etc.Educational Background: A Master's degree in cybersecurity or a related field or a Bachelor's degree in computer science or a related field with an advanced security certification.If you're ready to embark on a thrilling journey in the world of IT security and make a meaningful impact, we want to hear from you! Join our team at N26 and help us protect what matters most.What’s in it for you:Accelerate your career growth by joining one of Europe’s most talked about disruptors ð.Employee benefits that range from a competitive personal development budget, work from home budget, discounts to fitness & wellness memberships, language apps and public transportation. As an N26 employee you will have access to a Premium subscription on your personal N26 bank account. As well as subscriptions for friends and family members. Additional day of annual leave for each year of service. A high degree of autonomy and access to cutting edge technologies - all while working with a friendly team of peers of diverse nationalities, life experiences and family statuses. A relocation package with visa support for those who need it.Who we areN26 has reimagined banking for today’s digital world. Technology and design empower everything we do and it’s how we are building the global banking platform the world loves to use.We've eliminated physical branches, paperwork, and hidden fees for an elegant digital experience and supreme savings. Giving people the power to live and bank their way is what gets us out of bed in the morning and inspires the work that we do. We are headquartered in Berlin with offices in multiple cities across Europe, including Vienna and Barcelona, and a 1,500-strong team of more than 80 nationalities.Sounds good? Apply now for this position.Equal Opportunities:We recognize that our strength lies in our people and the varied perspectives they bring to our workforce. We strive to build talented and diverse teams to drive our business success and empower our people to reach their full potential.We genuinely welcome and encourage applications from people of all backgrounds, cultures, genders, sexual orientations, abilities, neurodiversities, and ages. We're committed to creating an inclusive workspace where everyone feels valued and respected, free from harassment and discrimination. If there's anything you need to make the application process work for you, please let us know by reaching out to candidate.exp@n26.com. Visit our website to learn more about Diversity, Equity, & Inclusion at N26.

At Q-Tech, we are currently looking for a Senior Incident Response & Digital Forensics specialist to join the Technology Hub of one of our key retail clients, with offices located in Barcelona. This is an opportunity to join an international, highly technical environment with global impact. MISSION Lead advanced incident response activities within a mature SOC. This is a hands-on technical role focused on real investigations, continuous improvement, and end-to-end incident management. RESPONSIBILITIES • Coordinate and communicate security incidents across teams and countries., • Manage the full Incident Response lifecycle (detection, analysis, containment, and remediation)., • Reconstruct cyberattacks and perform malware analysis., • Develop and enhance detection mechanisms., • Conduct IT forensic investigations (timeline reconstruction and artifact analysis)., • Prepare technical and executive-level incident reports., • Advise internal projects on security-related matters., • Monitor the global threat landscape and provide actionable recommendations. REQUIREMENTS • 5+ years of experience in Incident Response handling medium to critical incidents., • Hands-on experience in triage, containment, and end-to-end remediation., • Experience collaborating with IT, Engineering, Legal, Cloud Operations, and Escalation Management teams., • Degree in IT or equivalent education., • High level of English (minimum B2)., • Advanced experience with SIEM (preferably Splunk), SOAR platforms, and EDR solutions., • Strong understanding of offensive techniques and defensive technologies. FRAMEWORKS & STANDARDS ISO 27001 · NIST Cybersecurity Framework · BSI Grundschutz · ITIL · OWASP · MITRE ATT&CK TECHNOLOGY STACK • SOAR / Ticketing: Fortinet FortiSOAR, • Malware Sandbox: VMRay Sandbox, Any.Run, VirusTotal, • M365 Security: Microsoft Defender (Endpoint, Identity, Cloud Apps, Office), • Threat Intelligence: MISP, Recorded Future, DFIR Report, • Digital Forensics: Timesketch, Magnet AXIOM, • SIEM: Splunk (preferred) + enterprise EDR NICE TO HAVE • Advanced digital forensics (Windows, macOS, Linux, cloud)., • Incident Response experience in cloud environments (native logging, identity investigations)., • Application security and SaaS threat knowledge. WHAT THEY OFFER If you are looking for an international, technical environment with real impact in defending a global organization, this role is for you. • Flexible compensation: €2,700 annually to allocate between meal vouchers (up to €200/month) and transport (€25/month)., • Health insurance valued at €546.96 annually (€45.58/month)., • Remote work allowance: €268.92 annually (approx. €22.41/month), added to payroll., • Wellbeing: reimbursement for sports activities (gym, swimming pool, etc.) up to €300 annually, added to payroll upon invoice submission., • Working Hours: Afternoon shift (13:45 – 22:00h), from Monday to Friday (no rotation).

Company A leading international retailer with more than 575.000 employees worldwide in 33 different countries and over 13.700 stores, has stablished an IT HUB in Barcelona as part of his IT division, responsible for the selection and provision of IT infrastructure, IT platforms and business applications. With our agile mentality we are looking for people that is willing to make an impact on projects and solutions used worldwide by millions of customers. Agrupa Global Talent collaborates with our client to attract the best talent for its ITHUB located in Barcelona. We are looking for open-minded colleagues with passion for technology. We offer you diverse and exciting career opportunities in a dynamic work environment that stands for development and progress. Elevate your career with us, where development and progress are at the heart of everything we do. If you feel ready and think this opportunity is for you, we would be happy to meet you. Your Tasks • Coordinate and communicate IT security incidents across teams and countries, managing the incident response process., • Detect and analyze potential security incidents, ensuring effective containment., • Reconstruct cyber-attacks and malware, analyze sensitive data, and derive remediation actions., • Develop mechanisms to detect anomalies and attacks, initiating preventive measures to alert in time., • Monitor the general threat landscape on the Internet and provide actionable recommendations., • Advise internal projects on security-related issues., • Conduct IT forensic investigations., • Create meaningful reports on IT security incidents. Job requirements • Our client’s Cyber Defense Center is fully built and up and running. We are now looking to strengthen the team with an Incident Response expert to cover the weekday afternoon shift. This is a hands-on, experienced technical role focused on advanced incident, and continuous improvement rather than tier-one alert triage., • You will join a large Cyber Security organization with excellent opportunities for growth, development, and promotion based on performance and training. Continuous learning is essential in this field, and the company supports this with a wide range of education and training options to enhance both soft and hard skills., • 5+ years of professional experience in Incident Response, leading medium to critical security incident response., • Hands-on experience in incident response, including triage, containment, remediation, and end-to-end security investigations., • Experience partnering with Escalation Management, Product Development/Engineering, IT, Legal, Cloud Ops, and wider cybersecurity teams to lead remediation., • University degree in Information Technology or comparable education., • Strong English skills, fluent business English (speaking and writing) at advanced level (B2+)., • Further education in IT forensics and security incident management., • Expert knowledge in SIEM systems (preferably Splunk), SOAR tools, and EDR solutions., • Strong technical expertise in deployed technologies and cyber attack techniques., • Knowledge of national and international IT standards and frameworks (ISO 27001, NIST Cyber Security Framework, BSI Grundschutz, ITIL, OWASP, MITRE ATT&CK)., • High communicative and analytical skills, ability to work independently, and strong team spirit., • Confidence and persuasiveness., • Commitment to continuous education and professional development., • Would be a plus: Strong digital forensics skills, including analysis, timeline reconstruction, and interpreting artefacts across Windows, macOS, Linux, and cloud environments., • Would be a plus: Experience in cloud incident response including familiarity with cloud-native logging, identity systems, and investigation techniques., • Would be a plus: Knowledge of application security, including investigating application-layer attacks, abuse cases, and SaaS-specific threats. Shift options • Morning shift (5:45 – 14:00h), from Monday to Friday (no rotation)., • Afternoon shift (13:45 – 22:00h), from Monday to Friday (no rotation). What We Offer • These are hybrid mode permanent positions. 2 days/week at the office., • You will be part of an international team composed by people from different countries and backgrounds, where you’ll be able to share your experience and knowledge to carry-out teamwork and meet the objectives., • On top of this, you’ll have a personal follow-up with your management team to help you understanding all business-related questions and guide you in your professional career., • We offer a competitive compensation and benefits package: lunch vouchers, health and dental insurance, transport, wellbeing, etc. Contact If you are interested, please apply directly or send your CV to

NTT DATA es una consultora multinacional que ofrece soluciones tecnológicas, de negocio, estrategia, desarrollo y mantenimiento de aplicaciones, siendo referente en consultoría. Digital Technology es la unidad enfocada a acompañar a las grandes organizaciones iberoamericanas en su transformación digital, generando dividendos digitales a través de la tecnología y el diseño, con enfoque práctico y orientado al negocio. Para lograrlo, buscamos personas que compartan nuestra curiosidad permanente, pasión por la tecnología, excelencia constante y visión estratégica. 🔍 Buscamos incorporar un perfil: Red Team Lead, con al menos 5 años de experiencia en la ejecución de proyectos hacking y Red Team para sumarse a nuestro equipo de Ciberseguridad! ¿Qué harás? Te incorporarás a la línea de Privacy & Security by Design del equipo de Ciberseguridad en NTT DATA desde donde, a través de tu conocimiento experto en Red Team, podrás contribuir al crecimiento y liderazgo de nuestro equipo AOST (Advance Offensive Security Team) y mejora de los servicios de seguridad ofensiva que ofrecemos (ejercicios de red / purple team, pentesting externo/interno avanzado sobre infraestructuras, sistemas o aplicaciones, ejercicios de simulación de adversarios,…). Participarás en la ejecución de proyectos de ámbito nacional e internacional de alta complejidad y/o en aquellos en los que sea necesario un conocimiento diferenciador para el arranque del proyecto, siendo el referente técnico tanto a nivel interno como externo. Formarás parte de un gran equipo en el que se fomenta el crecimiento y desarrollo profesional. Requisitos: • Titulación Universitaria en Informática o Telecomunicaciones. (Deseable Máster en Ciberseguridad)., • Experiencia de, al menos, 5 años en ejecución de proyectos de hacking y Red Team., • Conocimiento sólido y aplicación en proyectos de las siguientes metodologías / estándares de seguridad: MITRE ATT&CK, Cyber Kill Chain, PTES, OWASP, …., • Persona proactiva, con gran curiosidad por la seguridad ofensiva, la tecnología y con capacidad de transmitir conocimiento a perfiles con menos experiencia., • Se valora tener experiencia en desarrollo de malware como arsenal para ejercicios de Red Team y conocimiento de C&C como, por ejemplo, Cobalt Strike., • Se valora estar en posesión de algunas de las siguientes certificaciones de seguridad: OSCP, OSCE, OSED, eCPPTX, CRTO, CRTE, CRTP, CRTL, CARTP, GPEN, GXPN, CREST Certified Simulated Attack Specialist (CCSAS), …, • Se valora un buen nivel de inglés (B2 o superior). Lo que te ofrecemos: 🧠 Formar parte de un equipo de élite, especializado en la unión entre estrategia y tecnología. 💼 Contrato indefinido con revisiones de categoría y salario anuales. 🎓 Certificaciones bonificadas (Adaptada a cada división). 📝 Acceso a nuestra plataforma formativa NTT DATA University (formaciones técnicas, metodológicas, idiomas y soft skills). 👩🏽 💻 Trabajo híbrido y horario flexible para que conciliemos mejor. 📅 Jornada intensiva (8:00 a 15:00) los viernes y durante el verano. 🏥 Beneficios corporativos: complementos salariales adicionales, retribución flexible, seguro médico, etc. 🔝 Global Top Employer 2025 — por 10º año consecutivo en España. 🌊 Programas solidarios y actividades sociales a través de nuestro portal de voluntarios de The Blue Wave impulsando un impacto positivo. 🌏 Innovación diversa y cultura inclusiva en NTT DATA creemos que cada persona es única. Apostamos por una cultura inclusiva que valora la diversidad y fomenta un entorno donde todos podamos explorar y potenciar nuestra singularidad. 🚀 Únete al equipo de Digital Technology en NTT DATA.

Information Security Advisor – Barcelona Since 2011, SQUAD Group has been a key player in the cybersecurity landscape. We partner with leading organizations to protect their information systems through a comprehensive 360° offering of consulting, integration, expertise, and managed services. Our mission: Securing Together! We believe in a collaborative approach to cybersecurity, where experts and clients work hand‑in‑hand to anticipate threats and protect critical infrastructure. As part of our growing Security Advisory practice, we are looking for an Information Security Advisor to join our team in Barcelona. As an Information Security Advisor, you’ll be a trusted partner to both central security teams and local business stakeholders. Your goal: ensure that security practices, tools, and policies are effectively understood, applied, and continuously improved. • Lead and contribute to threat modelling activities, identifying potential attack paths and helping design secure architectures., • Support and advise engineering and product teams on cloud security best practices, with a strong focus on AWS environments., • Participate in security assessments and policy reviews, helping translate technical findings into actionable recommendations., • Collaborate on tool evaluation and integration (e.g. vulnerability management, monitoring, or compliance tools)., • Provide guidance during incidents and contribute to post‑incident analysis and prevention measures., • Act as a security ambassador, fostering awareness, knowledge sharing, and a proactive security culture across teams., • You have between 4 and 7 years of experience in cybersecurity, ideally in advisory, governance, or technical security roles., • You have hands‑on experience with Threat Modelling (e.g. STRIDE, DREAD, MITRE ATT&CK)., • You understand AWS Cloud Security fundamentals (IAM, Security Hub, GuardDuty, SCPs, network segmentation...)., • You are familiar with information security frameworks (ISO 27001, NIST, OWASP, GDPR)., • You have basic knowledge of secure coding and web application security principles., • You’re proactive, analytical, and enjoy collaborating with multidisciplinary teams., • You are fluent in English (spoken and written); Spanish or French is a plus., • Personalized Growth: A dedicated training and certification plan aligned with your career objectives through our SquadeXpérience., • Expertise Development: Participate in internal events like our MixYourTalent webinars and monthly CTF sessions., • Visibility: Attend major industry conferences and contribute to our #TheExpert technical blog., • Culture: Enjoy a dynamic, close‑knit environment with after‑work events and team gatherings that foster collaboration and fun. Mid‑Senior level Full‑time Consulting IT Services and IT Consulting #J-18808-Ljbffr

The Growth team is focused on maximising the potential of all titles Outfit7 ships. It brings together user acquisition, creative strategy, ASO, data, and product collaboration under one roof, with full-funnel accountability for the games in its portfolio. We operate across all lifecycle stages, from R&D and prototype validation through to global scale, across a range of mobile game formats. You think in funnels, not campaigns. Growth rate is your north star, and you know that installs are just one input into the metric that actually matters. From paid UA to product-led loops, you’re comfortable pulling any lever in the stack, and you know which one to pull when. You bring structure to ambiguity, data to gut feeling, and a clear point of view to every cross-functional room you’re in. As a Senior Growth Marketing Manager, you will scale a game or a portfolio of new titles, acting as a strategic counterpart to the product owner. You will leverage paid performance marketing and non-paid growth levers to drive audience growth and push performance further. • Help with the full-funnel growth strategy for assigned titles, setting quarterly plans aligned with the game roadmap and LiveOps calendar, with growth rate (DAU/MAU/revenue) as your north star., • Collaborate with cross-functional teams, including game leads, product managers, and creative teams, to define growth objectives, KPI targets, and delivery timelines., • Implement the end-to-end strategy across all acquisition channels: paid UA across key networks, organic search and browse, brand partnerships, influencer marketing, and LiveOps promotion., • Drive creative testing: briefing hypotheses, iterating on results, identifying fatigue patterns early, and building scalable creative production pipelines with the creative team., • Manage the ASO strategy for assigned titles beyond metadata updates, including store A/B testing, CPP management, platform relationships, and featuring opportunities., • Design attribution strategy in a privacy-first environment, including MMP configuration, SKAdNetwork setup, and iOS ATT constraints., • Build and interpret cohort analyses and LTV models to diagnose growth bottlenecks and guide prioritisation across acquisition and retention levers., • Partner with the production product owner to align UA spend and creative angles with the LiveOps calendar, and collaborate on retention-driving product events and re-engagement campaigns., • Support the R&D pipeline through prototype testing, contributing targeting strategy, channel-fit assessment, and early retention signal analysis., • Build team playbooks, identify new channels to test at scale, and mentor junior team members on how UA decisions connect to full-funnel outcomes., • A full-funnel mindset: you understand that acquisition metrics are inputs to growth rate, not the goal itself, and you make decisions accordingly., • Strong analytical ability with the confidence to build your own models, and turn complex data into clear recommendations., • Deep comfort with mobile measurement in a privacy-constrained environment, including predictive LTV, incrementality thinking, and the limits of last-click attribution., • A structured approach to experimentation: clear hypotheses, honest read-outs, and a bias toward learning over confirmation., • The ability to influence product, data, and creative teams without formal authority, operating as a genuine partner rather than a requester., • Strong communication skills, written and spoken, with the ability to translate performance data into strategic narratives for senior stakeholders., • 5+ years of hands-on experience in growth marketing or user acquisition for mobile games or apps, ideally IAP or subscription-based titles., • Proven track record managing titles across multiple lifecycle stages, from prototype and soft launch through to global scale., • Demonstrated success in optimising campaigns toward ROAS and LTV targets across multiple major networks simultaneously., • Experience working with MMPs and navigating iOS ATT, SKAdNetwork, and privacy-first measurement constraints., • Hands-on experience with ASO, store A/B testing, and organic growth levers beyond keyword optimisation is a strong advantage., • Experience mentoring or leading other UA or growth team members is a plus., • Employment relationship with a legal entity within Outfit7 group for an indefinite period of time, with a six-month probationary period., • Diverse work with exciting daily challenges, working as part of a team in a fun, relaxed environment., • Participation in attractive projects., • Development opportunities through training, seminars, and conferences, • Choice of sport, fitness, educational, and entertainment activities outside of work., • Healthy meals in the office, • Flexible working hours, • 24 days of paid vacation, • Participation in a discretionary bonus plan., • Christmas bonus (subject to internal policies)., • We are open to exploring remote work possibilities, subject to the specifics of the candidate's location and preferences. Strokovnjak digitalne rasti in marketinga IV. Zahtevajo se izkušnje na področju celostnega marketinga, analitike in rasti. . Ponujamo pogodbo o zaposlitvi za nedoločen čas s šestmesečnim poskusnim obdјjem v podjetju Ekipa2 d.o.o. s sedežem v Ljubljani.Rok za prijavo: 30.05.2026 #J-18808-Ljbffr

Growth Marketing Specialist – CRM & Funnel Optimization (Hybrid)As you contemplate your future, you might be asking yourself, " What's the next step?’’ Start your journey with us!We're seeking an experienced Growth Marketing Specialist to join our Marketing Liligo team in Barcelona (Hybrid) to turn anonymous web traffic into high-value, identifiable user cohorts. In this role, you will not just be writing newsletters; you will own the critical intersection of Conversion Rate Optimization (CRO), mobile push architecture, and first-party data capture. Your primary goal is to maximize the conversion rate of anonymous visitors into direct, reachable relationships (via email and device tokens), building a robust data asset that fuels our retention engines and feeds back into our performance advertising models. If you're ready to soar, we're ready to take you there.Why eDreams ODIGEOWe’re the world's leading travel subscription platform. We pioneered Prime, the first and largest travel subscription programme, which has topped over 7.8 million Prime members since launching in 2017. Millions of customers every year across 44 markets – 5 brands: eDreams, GO Voyages, Opodo, Travellink, and the metasearch engine LiligoMore than 100 million searches per day on our websites - more than 6 billion AI daily predictions Over 1,700 employees – More than 60 different nationalities from all continents – 99% permanent contractsIn this role, you will be working for Liligo, our travel search engine which instantly compares available flights, trains, bus, car rentals and hotel offers; all on the same website to help users find the best deals and simplify travel planning. Based in Paris, simple, objective and transparent, it serves over a million unique monthly visitors across seven languages. Unlike traditional e-commerce platforms, Liligo operates on an unauthenticated, zero-login web ecosystem. Our relationship with our users relies entirely on capturing real-time travel intent through high-value hooks like Price Alerts, Newsletters, and our Mobile App.What you will do: The Role's Key Responsibilities and TasksAs an eDOer, you will have clear objectives, great challenges and a clear overview of how your work contributes to the global company project and its customers. As a Growth Marketing Specialist in the Marketing Liligo team you will be in charge of:1. First-Party Data Capture & Web CRO (Core Priority)Lead Generation Strategy: Own the strategic roadmap and A/B testing framework for our primary web capture points: the Price Alert widget and newsletter pop-ups.Funnel Optimization: Maximize the transition from anonymous user to subscriber across desktop and mobile web without negatively impacting our core click-out revenue.Value Exchange Innovation: Research and deploy new user experiences (e.g., Google One-Tap, alternative sign-ins, or cookie-less session saving) to frictionlessly capture intent.Privacy & Consent Rate Optimization: Take ownership of the cookie consent and privacy compliance frameworks (GDPR) to maximize opt-in rates and maintain high-quality tracking health (such as Google Consent Mode).2. Mobile App CRM & Push ArchitectureApp Activation Cycles: Partner with Product to design and optimize the onboarding sequence for new mobile app downloaders, guiding them to set their first in-app Price Alert within 48 hours.Behavioral Push Notifications: Architect, implement, and maintain real-time, event-triggered push notification loops based on in-app search abandonment and live price drops.Web-to-App Cross-Flows: Develop cross-channel funnels that use web real estate to drive high-intent users to download the app, securing permanent device tokens for cost-free retention.3. Intent-Driven Lifecycle CampaignsTriggered Email Workflows: Move beyond generic weekly newsletters to build automated, contextual email lifecycles based on real-time search signals (e.g., Search Abandonment triggers).Proxy Cross-Selling: Develop "post-click-out" email tracks based on travel routes. (e.g., If a user clicks out to buy a flight to London, trigger an automated car rental or train alternative sequence 3 days later).4. Audience Syncing & Value-Based Performance MarketingData Layer Segmentation: Dynamically segment the subscriber base by value and intent parameters (e.g., frequent long-haul flyers vs. domestic train commuters).Ad Platform Integration: Actively pipe these consented, first-party customer cohorts into Google Ads and Microsoft Ads via automated API integrations (Customer Match) to feed downstream Smart Bidding algorithms.Performance KPIsTraffic-to-Subscriber Conversion Rate (Web visitors to Price Alert/Newsletter sign-ups)Mobile App Push Opt-in & Retention RatesFirst-Party Data Match Rate in performance advertising networksOpen, Click-Through, and Monetization Rates of CRM lifecyclesWhat you need to succeed: Good to have Bring your unique perspective, speak up, and offer disruptive solutions. You'll have the opportunity to learn and grow while making a real impact on our team. Here's what you need to succeed: Academic Background: Bachelor’s or Master’s degree in Marketing, Business, Statistics, Economics, or a related quantitative field.Experience: 3–5 years of dedicated experience in CRM, Lifecycle Marketing, or Growth Marketing, preferably within the travel, metasearch, or high-volume marketplace industries.Mobile App Expertise: Deep hands-on experience with a major Mobile Marketing Platform (MMP) / CRM automation tool (e.g., Braze, Leanplum, Airship, MoEngage, or Customer.io). Traditional email-only experience will not suffice.Web Analytics & CRO: Advanced proficiency in web analytics tools (Google Analytics 4, Mixpanel, or Amplitude) and conversion optimization tools (Optimizely, VWO, or similar).MarTech Savvy: Strong understanding of technical marketing infrastructures, including Google Tag Manager (GTM), data layers, APIs, and webhooks.Privacy Knowledge: Strong baseline understanding of GDPR compliance, cookie policies, and modern tracking limitations (ATT, third-party cookie deprecation).Multilingual/International Context: Proficiency in English is mandatory. Fluency in French is highly valued given Liligo’s core market. Knowledge of other European languages (Spanish, Italian, German) is a major asset.Metasearch Knowledge: Understanding of the travel metasearch ecosystem.Analytical Thinker: You look at a marketing funnel through numbers, data distribution, and statistical significance, not just creative aesthetics.UX Empathy: Ability to balance aggressive lead generation strategies with a clean, un-intrusive user experience.Agile Collaborator: Comfortable working cross-functionally at the intersection of Product, Engineering, and Paid Media teams.Preferred QualificationsExperience with Applied AI Tools: Demonstrated comfort using practical AI tools such as Gemini, or other AI-powered assistants.Experimentation Mindset: Curiosity and eagerness to explore, experiment with, and integrate emerging AI-driven solutions into workflows.AI-Enhanced Problem Solving: Ability to effectively leverage AI tools to streamline processes, and enhance productivity.Adaptability and Learning Agility: Enthusiastic about continuously learning and quickly adapting to new AI features and capabilities.What’s in it for you?The best talent deserves the best benefitsAt eDO, we want you to be a part of our success story and great culture.Here's what we offer:A rewarding Compensation package! Prime Plus membership, competitive salary and benefits package, including flexible benefits, performance-based bonuses, birthday day off, discounts and partnerships, relocation support and premium equipment with role-based selection options and device ownership through our equipment lifecycle program when it reaches its refresh cycle. Continuous learning to fuel your growth and explore new horizons! Learn and grow with free Coursera access, soft skills workshops, tech training, leadership development, and more. Plus, enjoy a great onboarding program.Grow opportunities to empower your career and unleash your potential! Personalised career paths and the eVOLVE Program will help you discover, grow, and thrive. Internal mobility opportunities let you pursue horizontal career changes and promotions.Your Well-being is our priority. Embrace Freedom and Flexibility! At eDO, we value flexibility, employee care, and transparency. We offer a hybrid home-office model focused on outcomes. You'll be able to find the right work-personal life balance that suits you best.Work hard, party hard! We believe in having fun and connecting with colleagues! Join eDO for after-work events, padel tournaments, parties, and more. Create communities based on your passions, like sports and music. Come to work as you are, with no dress code, and enjoy free fruit, coffee, and tea at our offices.Enjoy a dynamic and healthy environment! Be innovative, take risks, and share your ideas. Our diverse and open-minded teams support high performance, learning, and growth. You'll work in an Agile mindset environment with recognition at our core.Wanna take a peek into what it's like to work at eDO? Follow us on LinkedIn and discover more about life at eDO!If you are ready for a career opportunity with unmatched benefits, continuous learning, and a supportive work-life balance, look no further! Take your career to new destinations by applying now and help our diverse, inclusive, and passionate team shape the future of travel. Apply now!We are an equal-opportunity employer and value diversity at our company. We do not discriminate based on race, religion, colour, national origin, gender, sexual orientation, age, marital status or disability status. Our people are the key to our success. Each one of them is unique in their own way and the respect for their uniqueness is and will always be a passion and motivation. Don’t meet every requirement? If you’re excited about this role but do not feel your experience aligns perfectly with all the requirements we strongly encourage you to apply nevertheless.#LI-AZ1#LI-Hybrid

Ready to embark on the quest of joining Hack The Box? At the end of this thrilling journey, you'll become a proud member of Hack The Box, with the ultimate mission to help cybersecurity professionals and organizations enhance their cyber-attack readiness. Get ready for an exciting adventure into the world of cybersecurity! As a Senior Product Manager within the Enterprise Product team, your mission is to define and deliver products that help enterprise customers adopt, manage, and scale Hack The Box across their organisations. You will work cross-functionally with Engineering, Design, Customer Success, Sales, and Product Marketing to solve complex customer problems, drive product strategy, and deliver measurable business impact. Success in this role means balancing customer needs, technical feasibility, and commercial priorities to build enterprise-grade experiences that accelerate growth and strengthen customer retention. • Europe (EoR - Employee of Record through Deel) OR Athens, Greece (we'll support your relocation), • If in Athens, Greece: Hybrid (2 days in office), • Full time, • We offer a 10% relocation bonus on the annual salary to support your move, • In addition, you would benefit from a 50% tax reduction on your income as part of the relocation, • We’ll support you with accommodation during the first few weeks, • Meet the humans behind the screens, • Pavlos' journey into product management, • Product Ownership: Lead the discovery and delivery of data-centric features, ensuring high adoption of reporting tools, • Outcome-Oriented Roadmap: Define and implement a roadmap backed by KPIs, focusing on data accuracy and user engagement with insights, • Data Collaboration: Work daily with Analytics and Data Engineering teams; you should be comfortable reading raw data and translating it into a product vision, • Cross-functional Follow-through: Partner with Engineering and Design for implementation, then align with Product Marketing, Sales, and Customer Success to ensure users understand the value of our insights, • Customer Research: Conduct deep-dive sessions with B2B customers to quantify their data needs and translate them into feature requirements, • Autonomy: Take full ownership of the product area, setting independent goals and priorities that align with the broader company vision, • Experience: 3-5 years of Product Management experience with a B2B SaaS Product, dealing with enterprise customers, Product Marketing, etc, • Technical Data Skills: Hands-on experience with analytics tools like Tableau, Metabase, Mixpanel, or Amplitude, • Agile Mastery: Strong knowledge of agile/scrum methodologies and experience working closely with engineering teams, • Communication: Superior ability to articulate data plans to non-technical stakeholders and translate complex "data-speak" into meaningful features, • The ability to demonstrate knowledge of converting data to insights (be prepared to share a specific story on this), • AI Proficiency: Experience using AI for prompting, prototyping, and research; understanding of fine-tuning and human-evaluation on top of AI models, • Adaptability: Agility in your way of working, with the ability to pivot based on data-driven insights, • Experience in data-heavy industries (LMS, Reporting, or Logging), • Technical background: Ability to follow architectural discussions regarding data pipelines, • Cybersecurity knowledge: Specifically understanding nuances like Framework coverage (e.g., MITRE ATT&CK), • You’ll have the exhilarating opportunity to contribute to a product that is highly appreciated by users and the cybersecurity community at large, • You’ll experience a highly supportive and caring environment, fostering growth, flexibility, and autonomy, • You’ll embark on an exciting journey of continuous learning and problem‑solving, leveling up as our organization grows, • Most importantly, you’ll have a blast at HTB because fun is an essential ingredient in our recipe for success! Just wait until you see our global meet‑ups!, • Private health care, • Paid parental leave (4 weeks), • 25 annual leave days, • Free lunch & snacks at the office, • 120€ Ticket Restaurant by Edenred, • Dedicated budget for training and professional development, participation in conferences, • Full access to the Hack The Box lab offerings; so you can learn how to hack, • State-of-the-art equipment (mac, iPhone, and mobile plan), • Flexible WFH (Hybrid Model) - Fully Remote is also an option if you're not an Attica resident, • Annual childcare allowance to support daycare expenses for parents, • Access to on‑site gym and a variety of group activities, including Cross Training, Pilates, Boxing, and Climbing, • Level 1 — Apply: Submit your application. Tell us why this role excites you and what you'd bring, • Level 2 — Talent Screen: A conversation with our Talent Acquisition team to explore your background and ambitions, • Level 3 — Chat with Mike: A relaxed conversation with your future manager. Think of it as a mutual vibe check, • Level 4 — Practical Task and Panel Presentation: A real‑world scenario that lets you show how you’d approach product management with your unique perspective. You’ll present your work to a panel of the team — no trick questions, no gotchas, just a chance to show us how you think and tell a story, • Level 5 — Congratulations! Not many reach this level. Level's objective: have a constructive, final conversation with senior leadership (CPO) to explore the role and your future at HTB., • Level 6 — You’ve officially received an offer from HTB! To complete the last level and the Quest, all you need to do is accept the offer, • Quest complete. Congratulations, you’re officially one of us. Your next quest: complete the onboarding Hack Your Career, Today. Join us in this epic adventure of cybersecurity at Hack The Box! At Hack The Box, we are on a quest to find the most exceptional and enthusiastic talent to join our team. Whether or not you consider yourself a gamer, we value what makes you unique and want to know more about you. This job post provides just a glimpse of the incredible gamified experience our business and consumer customers enjoy through our platforms. So, if you're ready to embark on a journey of disruption, growth, and adventure, we can't wait to meet you! Hack The Box is the leading cyber readiness platform for the agentic era, battle‑testing and upskilling both humans and AI agents to enhance organizational cyber resilience. Trusted by the Fortune 500, government agencies, and MSSPs, the platform delivers threat‑informed learning paths consisting of real‑world scenarios in gamified labs and live‑fire simulations that build and validate offensive and defensive cyber capabilities. With a loyal community of more than 4 million members and 800+ enterprise customers, Hack The Box empowers teams and intelligent systems alike to strengthen cyber defenses and reduce breach risk effectively. Rapidly growing its international footprint and reach, Hack The Box is headquartered in the UK, with additional offices in the US, Australia, and Greece. • We’re incredibly proud to share that our headquarters in the UK, along with our entities in Greece and the US, have been certified as a Great Place to Work for 4 consecutive years (2023 - 2026)., • In addition, our Greek entity has been recognized among the Best Workplaces in Greece (4th, 2nd, 3rd, 1st) and Europe (7th, 10th, 73rd) during this period — a testament to our strong culture and commitment to creating an exceptional employee experience! Take a sneak peek at how it is to be part of HTB. Get more insights about our HTB culture and employee experience by visiting the "about us" section of our site, our career site, and Glassdoor. At Hack The Box, we are committed to fostering a diverse, inclusive, and equitable workplace. We believe that diversity enriches our performance, services, and the communities we serve. As such, we ensure that all job applications are considered solely based on merit, skills, and qualifications. We do not discriminate on grounds of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. We are dedicated to providing a fair and respectful work environment that reflects our values. #J-18808-Ljbffr

You know adversaries by how they operate — and you know how to turn that knowledge into action. As a Threat Intelligence Engineer — Intrusion Analysis & Detection, you will help transform threat actor behavior into concrete defensive value: stronger detections, smarter hunting hypotheses, and intelligence that helps defenders move faster and more effectively. Within the Allianz Cyber Defense Center (ACDC), you will join a team that is evolving toward an AI‑augmented, intelligence‑driven operating model. This is a high‑impact opportunity to shape and mature intrusion analysis capabilities, automate repetitive intelligence workflows, and directly influence how a global organization defends itself against real‑world threats. • Analyze real‑world attacks, post‑incident findings, and emerging adversary tradecraft to identify relevant threat activity and convert retrospective analysis into forward‑looking intelligence., • Translate threat intelligence into actionable detection content by producing detection rules and analytical guidance for deployment by detection engineering teams across platform‑native environments., • Track threat actors and map tactics, techniques, and procedures to MITRE ATT&CK, identifying coverage gaps and generating meaningful hunting leads based on relevance to the Allianz environment., • Build and maintain automation for repetitive intelligence workflows using SOAR platforms, Power Automate, N8N, Python, scripting, and API integrations to improve speed, quality, and consistency., • Apply AI in daily analytical workflows to categorize incoming intelligence, enrich indicators, correlate reporting with tracked topics, and accelerate decision‑making., • Communicate findings clearly through dashboards, written intelligence notes, and operational briefings so that detection engineers, incident responders, IT administrators, and leadership can act confidently., • Support the full IOC lifecycle and contribute during active security incidents by providing timely analytical input, validation, and triage support as part of on‑call rotations., • Hands‑on experience in intrusion analysis, including the investigation of real‑world attack patterns, adversary behavior, and post‑incident evidence., • Proven ability to turn intelligence into action through detection engineering, including authoring, tuning, or validating detection rules in production environments., • Strong knowledge of MITRE ATT&CK, especially at procedure level, and a solid understanding of the telemetry required to detect adversary activity effectively., • Practical coding and automation skills, ideally in Python, scripting, and API‑driven workflows, with a builder mindset focused on improving efficiency through automation., • Good understanding of the Threat Intelligence Lifecycle and structured analytical techniques, including models such as the Diamond Model and Kill Chain., • Experience working with or exposure to tools such as Google SecOps, CrowdStrike Falcon / Intelligence, Google Threat Intelligence / VirusTotal, Recorded Future, MISP, or similar platforms., • A proactive, outcome‑driven mindset with the ability to stay composed under pressure, communicate clearly during incidents, and collaborate effectively across technical teams., • Hybrid work model with up to 25 days per year working from abroad., • Performance‑based compensation and benefits, including a company bonus scheme, pension, employee shares program, and employee discounts (details vary by location)., • Lifelong learning and international career mobility through career development and digital learning programs., • Flexible working, healthcare, parental leave benefits, and support to balance family and career while returning from career breaks. Allianz Technology is proud to be an equal opportunity employer dedicated to fostering an inclusive work environment for everyone. We embrace individuals of all gender identities and expressions, sexual orientations, ethnicities, ages, nationalities, religions, disabilities, and philosophies of life. We welcome applications regardless of race, ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations. #J-18808-Ljbffr

QUÉ ES TELEFONICA TECH? Telefónica Tech es la compañía líder en trasformación digital del Grupo Telefónica. Contamos con una amplia oferta de servicios y soluciones tecnológicas integradas de Ciberseguridad, Cloud, IoT, Big Data, Inteligencia Artificial y Blockchain, con la que acompañamos a nuestros clientes en su transformación digital.Somos un grupo de más de 6200 personas valientes que trabajamos a diario desde distintos puntos del mundo para alcanzar la excelencia, a través de un liderazgo basado en la transparencia y en el espírItu de equipo. Si te identificas con nuestros pilares, ¡estamos deseando conocerte! QUÉ HACEMOS EN EL EQUIPO? En la unidad de Ciberseguridad y Respuesta a Incidentes de Telefónica, gestionamos, analizamos y mitigamos incidentes de seguridad en tiempo real. Nos especializamos en proteger los activos críticos de nuestros clientes frente a amenazas digitales, asegurando la continuidad del negocio y minimizando riesgos. Trabajamos estrechamente con equipos multidisciplinarios para garantizar una respuesta efectiva y adaptada a las necesidades de cada organización. CÓMO SERÁ TU DÍA A DÍA? Tu misión será garantizar la correcta identificación, análisis y respuesta ante incidentes de seguridad informática, aplicando las mejores prácticas en ciberseguridad y trabajando en coordinación con los equipos N1 y N3. Tu día a día:Tu día a día incluirá:Monitorizar y gestionar alertas provenientes de herramientas de seguridad (SIEM, EDR, IDS/IPS, etc.).Analizar y priorizar incidentes detectados, identificando su impacto y origen.Ejecutar planes de contención, erradicación y recuperación de incidentes.Colaborar con equipos internos y externos en la investigación de incidentes complejos.Generar informes detallados sobre eventos, incidentes y tendencias de seguridad.Proponer mejoras a las políticas y procedimientos de ciberseguridad.Escalar incidentes a los niveles superiores (N3) cuando sea necesario.Contribuir a la actualización y mantenimiento de indicadores de compromiso (IoCs).Participar en simulaciones de respuesta a incidentes y ejercicios de ciberseguridad.Y PARA ELLO, CREEMOS QUE SERÍA IDEAL QUE CONTARAS CON… Experiencia Más de 2 años en roles relacionados con análisis de ciberseguridad, gestión de incidentes y operaciones de SOC/CERT.Experiencia previa en entornos de alta criticidad.Conocimientos avanzados en análisis forense digital, ciberinteligencia y conocimientos medios en técnicas de hacking ético y análisis de malware.Familiaridad con marcos y estándares de seguridad como NIST, ISO 27001, y MITRE ATT&CK.Experiencia en la operación de herramientas de SIEM (Splunk, QRadar, etc.) y soluciones EDR/XDR.Formación Necesario:Titulación en Ingeniería técnica Informática o superior, Telecomunicaciones o equivalente.Deseables:Certificaciones relevantes como GCFA, GCFE, CEH, CompTIA Security+, o similar.Conocimientos técnicos Configuración y análisis de herramientas de seguridad (SIEM, IDS/IPS, EDR, firewalls, WAF).Adquisición y análisis de artefactos mediante el uso de herramientas forenses (KAPE, Velociraptor, Eric Zimmerman, Sysinternals, Nirsoft, xways, Wireshark, tcpdump, etc).Identificación de Indicadores de Compromiso (IoCs) y análisis de TTPs de atacantes.Scripting para automatización de tareas (Python, PowerShell, Bash).Conceptos en gestión de vulnerabilidades y análisis de riesgos.Para desempeñar el rol, las skills que encajarían con el equipo y el proyecto serían: Resolución de problemas: capacidad para analizar situaciones complejas y tomar decisiones rápidas.Trabajo en equipo: habilidades para colaborar con múltiples equipos bajo presión.Comunicación efectiva: transmitir hallazgos técnicos a audiencias no especializadas.Proactividad: actitud orientada a la mejora continua de procesos y herramientas.Pensamiento crítico: anticipar posibles impactos y mitigarlos antes de que ocurran.IDIOMASObligatorio: Idioma Catalán, hablado y escrito.Valorable: inglés nivel avanzado (B2/C1), tanto escrito como hablado, para interactuar con proveedores. QUÉ OFRECEMOS?• Medidas de conciliación y flexibilidad horaria.• Formación continua y certificaciones.• Modelo híbrido de teletrabajo.• Atractivo paquete de beneficios sociales.• Excelente ambiente de trabajo dinámico y multidisciplinar.• Programas de voluntariado.#SomosDiversos #FomentamosigualdadEstamos convencidos/as de que los equipos diversos e inclusivos son más innovadores, transformadores y consiguen mejores resultados. Por ello promovemos y garantizamos la inclusión de todas las personas sin importar género, edad, orientación e identidad sexual, cultura, discapacidad o cualquier otra condición¡Queremos conocerte! ð

Level Up Your Career with Zynga! At Zynga, we bring people together through the power of play. As a global leader in interactive entertainment and a proud label of Take-Two Interactive, our games have been downloaded over 6 billion times-connecting players in 175+ countries through fun, strategy, and a little friendly competition. Level Up Your Career with Zynga! At Zynga, we bring people together through the power of play. As a global leader in interactive entertainment and a proud label of Take-Two Interactive, our games have been downloaded over 6 billion times-connecting players in 175+ countries through fun, strategy, and a little friendly competition. From thrilling casino spins to epic strategy battles, mind-bending puzzles, and social word challenges, our diverse game portfolio has something for everyone. Fan-favorites and latest hits include FarmVille™, Words With Friends™, Zynga Poker™, Game of Thrones Slots Casino™, Wizard of Oz Slots™, Hit it Rich! Slots™, Wonka Slots™, Top Eleven™, Toon Blast™, Empires & Puzzles™, Merge Dragons!™, CSR Racing™, Harry Potter: Puzzles & Spells™, Match Factory™, and Color Block Jam™-plus many more! Founded in 2007 and headquartered in California, our teams span North America, Europe, and Asia, working together to craft unforgettable gaming experiences. Whether you're spinning, strategizing, matching, or competing, Zynga is where fun meets innovation-and where you can take your career to the next level. Join us and be part of the play! We are looking to welcome a brilliant Senior Marketing Data Analyst into our Analytics team. Applying quantitative analysis, data science, statistics, and programming, you’ll tackle complex data challenges, framing and decomposing high-difficulty analytics projects to drive value across our global marketing initiatives. • Project Ownership & Decomposition: Participate in the planning, requirements gathering, and delivery of large, multi-phased growth and marketing analysis projects with minimal guidance. Break down complex, ambiguous business problems into structured, actionable analysis plans., • Strategic UA Partnership: Partner closely with Marketing and User Acquisition (UA) squads to monitor campaign performance, decompose complex trend changes, and provide high-impact insights that optimize multi-million dollar budget allocations., • Performance Measurement & Frameworks: Own the analysis of user acquisition funnels, ROAS, LTV, and payback periods. Collaborate with central data teams to refine marketing measurement frameworks (e.g., attribution models, incrementality testing)., • Data Presentation & Storytelling: Visualize and communicate complex analytical findings to senior stakeholders and cross-functional peers, translating raw marketing data into clear, compelling, and actionable recommendations., • Team Efficiency & Tech Evangelism: Lead initiatives to improve team productivity and marketing analytics best practices. Assist in preparing internal learning programs to level up commercial domain knowledge and help the team adopt new tools, methodologies, and platforms., • Data Quality Assurance: Maintain a high bar for marketing data integrity, working alongside data engineering to ensure tracking, attribution metrics, and performance reporting are precise and reliable., • Proven Track Record: Demonstrable experience in a Marketing Analyst, Performance Marketing Analytics, or Growth Analytics rolen driving measurable business growth, ideally within mobile gaming, free-to-play (F2P), or mobile B2C industries., • Data Storytelling & Impactful Communication: Proven ability to translate complex, high-difficulty performance metrics and granular data trends into clear, compelling narratives. You can comfortably present data insights to a broad audience, including non-technical stakeholders and senior leadership, driving consensus and strategic action., • Advanced Marketing Metrics & Ecosystem: Deep understanding of the mobile performance marketing ecosystem, player behavior tracking, and core growth metrics (LTV, ROAS, CPI, Churn, IPM)., • Autonomy & Framing: Proven ability to navigate ambiguity, frame growth questions independently, and structurally decompose complex marketing and budget problems., • Advanced SQL Proficiency: Highly proficient in SQL with prior experience managing and querying large, complex databases to extract actionable marketing insights independently., • Statistical Rigor & Experimentation: Strong analytical foundations in applied statistics, with hands-on experience designing and analyzing randomized marketing experiments (A/B testing, creative testing, geo-incrementality testing)., • Data Visualization: Experience using business intelligence and data visualization tools (Looker, Tableau, etc.) to build robust tracking frameworks and performance dashboards., • Educational Background: A degree in a quantitative or business-analytical field (e.g., Economics, Business Administration, Statistics, Mathematics, or similar)., • Industry Passion: Passion for games, or high interest in the mobile gaming industry., • Technical Scripting: Proficiency in Python or R for statistical analysis, data manipulation, or predictive modeling (e.g., forecasting long-term LTV)., • Privacy-First Landscape: Familiarity with modern mobile privacy changes (SKAdNetwork/ATT, Privacy Sandbox) and their specific impact on UA attribution., • Advanced Measurement: Experience evaluating or working with Marketing Mix Modeling (MMM) or media mix frameworks., • Hybrid working from home/office system. So, what does this mean? All we ask is that you live within commuting distance of our office in Barcelona so you are able to come into the office for important meetings/events., • Relocation support to help you move to Barcelona (if you’re not already here)., • An impressive 25 days annual leave, not including public holidays., • 5 additional days annual leave on Christmas., • A very generous ticket-restaurant to restore some life-points., • Private medical insurance for you and your family, to keep your health bar full., • Choose from the latest IOS or Android device upon joining (phone or tablet)., • Free language lessons (English & Spanish )., • Spotify Premium to add that special soundtrack that every adventure deserves., • Legendary social events & parties to let off some steam., • Players develop...Oops, sorry! People development is key for us: an amazing budget just for you to spend skilling up your abilities & knowledge to achieve real growth opportunities! Coming to work in the office? Don’t worry - we have you covered. Check out some of our onsite benefits: • Want to stay in shape? We have state of the art gym facilities so you can level up your build stats., • A massive gaming room equipped with all consoles and games you could ask for., • Book an appointment with our onsite physiotherapist for your aches and pains., • Drop by our onsite hairdressers for a trim (and forget your wallet; it's a Guild perk). We are proud to be an equal opportunity employer, which means we are committed to creating and celebrating diverse thoughts, cultures, and backgrounds throughout our organization. Employment with us is based on substantive ability, objective qualifications, and work ethic - not an individual’s race, creed, color, religion, sex or gender, gender identity or expression, sexual orientation, national origin or ancestry, alienage or citizenship status, physical or mental disability, pregnancy, age, genetic information, veteran status, marital status, status as a victim of domestic violence or sex offenses, reproductive health decision, or any other characteristics protected by applicable law. As an equal opportunity employer, we are committed to providing the necessary support and accommodation to qualified individuals with disabilities, health conditions, or impairments (subject to any local qualifying requirements) to ensure their full participation in the job application or interview process. Please contact us at accommodationrequest@zynga.com to request any accommodations or for support related to your application for an open position. #J-18808-Ljbffr

Allianz Technology in Barcelona is looking for a Threat Intelligence Engineer specializing in Intrusion Analysis & Detection.The role involves analyzing attacks and creating actionable detection content while working in a hybrid model.We're seeking individuals with a solid understanding of MITRE ATT

At One eSecurity, we are a market-leading specialist in Threat Detection and Digital Forensics & Incident Response (DFIR). Our commitment to excellence, innovation, and passion drives everything we do We’re looking for a top-tier, fully remote cybersecurity professional with 5+ years of experience in DFIR. If you have a sharp eye for advanced threats and hands-on expertise in incident response, join us and make an impact! Keys responsibilities: • Lead complex cyber incident investigations across enterprise, cloud, and hybrid environments., • Coordinate and provide technical leadership during high-severity incidents, including ransomware, intrusions, insider threats, and APT activity., • Perform advanced digital forensics, threat hunting, malware triage, and root cause analysis across endpoints, networks, cloud, and identity platforms., • Develop detection strategies and improve detection coverage aligned with adversary TTPs and MITRE ATT&CK., • Translate threat intelligence into actionable detections, hunting hypotheses, and incident response playbooks., • Mentor analysts and support incident response operations across Tier 1–3 teams., • Lead post-incident reviews and contribute to continuous improvement of IR processes, tooling, and operational standards., • Produce high-quality technical and executive-level reports and recommendations., • Drive automation and operational efficiency through scripting and security engineering improvements. Requiered experience & qualifications: • 7+ years of experience in DFIR, Incident Response, Threat Hunting, SOC, or related cybersecurity functions., • Strong experience leading complex cyber incident investigations in enterprise environments., • Deep understanding of attacker TTPs, intrusion methodologies, and modern threat actor tradecraft., • Hands-on investigation experience across:, • Windows, Linux, and macOS, • Active Directory / Entra ID, • AWS, Azure, or GCP, • Microsoft 365 / Google Workspace, • Enterprise EDR/XDR platforms, • Strong analytical, communication, and problem-solving skills., • Ability to operate effectively under pressure and communicate with both technical and executive stakeholders., • Experience mentoring analysts and leading technical response activities. Technical skills: • DFIR & Endpoint Forensics (Velociraptor, GRR, KAPE, Volatility, FTK, EnCase, X-Ways, Volatility, Axiom), • Deep knowledge of raw forensic artifacts and operating system internals (Windows, Linux, macOS), with the ability to manually parse and validate artifacts independently of commercial DFIR tooling (MFT, Registry, EVTX, Prefetch, Amcache, Shimcache, SRUM, USN Journal, browser artifacts, memory structures, file system metadata, and timeline reconstruction), • Detection Engineering & Threat Hunting, • SIEM/XDR and EDR platforms, • Network traffic analysis and network forensics, • Malware triage and reverse engineering, • Scripting and automation (Python, PowerShell, Bash), • Cyber Threat Intelligence and ATT&CK-based detection methodologies Nice to have • Experience in regulated or critical infrastructure environments., • Experience supporting global incident response operations., • Offensive security or adversary emulation experience. Certifications GCFA, GCIH, or equivalent certifications are highly valued. Languages • English and Spanish(required) What We Offer What makes us different from other companies? • Exciting professional DFIR projects for the largest corporations across the globe., • Flexible schedules and tele-working. -A top team of highly recognized professionals in the field. • An attractive salary.

At the Allianz Cyber Defense Center (ACDC), we are transforming cyber defense into an intelligence-driven, proactive capability. As our Senior Cyber Detection Expert, you will be the highest technical authority for threat detection, shaping how Allianz detects and responds to cyber threats across a global environment. • Define and maintain the strategic detection landscape, ensuring coverage remains aligned with evolving threats, adversary behaviors, and business risks., • Act as the senior technical authority for detection engineering, setting standards, methodologies, and best practices across the Detection Cluster., • Lead the design and optimization of advanced SIEM detection use cases, balancing effectiveness, performance, and operational sustainability., • Own detection coverage assessments and gap analyses, leveraging frameworks such as MITRE ATT&CK and threat intelligence insights., • Maintain oversight of the security telemetry landscape, identifying critical data gaps and driving the onboarding of new data sources., • Translate threat intelligence, threat hunting findings, and adversary simulation results into high-quality production detections., • Design and implement multi-domain detection strategies spanning endpoint, identity, cloud, network, and application security environments., • Extensive experience in Detection Engineering, Cyber Defense, Security Monitoring, or Threat Detection within complex enterprise environments., • Deep expertise in SIEM technologies, including log management, event correlation, detection logic development, and security data analysis., • Strong understanding of adversary tactics, techniques, and procedures (TTPs), with hands‑on knowledge of frameworks such as MITRE ATT&CK., • Proven experience developing, tuning, and maintaining detection content while minimizing false positives and alert fatigue., • Experience translating threat intelligence and threat hunting outcomes into actionable and scalable detection capabilities., • Strong analytical, problem‑solving, and communication skills, with the ability to influence both technical teams and senior stakeholders., • Familiarity with modern detection engineering practices such as Detection-as-Code, behavioral analytics, automation, and AI‑assisted security operations., • Experience with Google SecOps., • Background in Threat Hunting, Threat Intelligence, Purple Teaming, or Adversary Simulation., • Relevant certifications such as CISSP, GCIH, GCDA, GCFA, or equivalent., • Experience working in large international or regulated environments., • We offer a hybrid work model which recognizes the value of striking a balance between in‑person collaboration and remote working incl. up to 25 days per year working from abroad., • We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location)., • From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered., • Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach. With its headquarters in Munich, Germany, Allianz Technology is Allianz's global IT service provider and delivers IT solutions that drive the group's digitalization. With more than 11,000 employees in over 20 countries around the world, Allianz Technology is tasked to run, optimize, transform and innovate the infrastructure, applications and services together with Allianz companies to co-create the best customer experience. We service the entire spectrum of digitalization – from one of the industry's largest IT infrastructure projects that spans data centres, networks and security, to application platforms ranging from workplace services to digital interaction. In short: We deliver comprehensive end-to-end IT solutions for Allianz in the digital age. We are the backbone of Allianz. Find us at: Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us. We at Allianz believe in a strong inclusive culture that encourages people to speak their minds, get involved and question the status quo. We are proud to be an equal opportunity employer and encourage you to bring your whole self to work, no matter where you are from, what you look like, who you love, or what you believe in. We therefore welcome applications regardless of race, ethnicity or cultural background, age, gender, nationality, religion, social class, disability, sexual orientation, or any other characteristics protected under applicable local laws and regulations. Allianz Technology has an in-house recruitment team that sources great candidates directly. Therefore, Allianz Technology does not accept unsolicited resumes from agencies or search firm recruiters. When we do work with recruitment agencies, that engagement is formalized by a contract. Fees will only be paid when there is a contract in place. Without a contract in place, we will not accept invoices on unsolicited resumes, even if the candidate was ultimately employed by Allianz. | Ingeniería informática y tecnológica | Profesional / Senior | Non-Executive | Allianz Technology | Jornada completa | Indefinido #J-18808-Ljbffr

Company A leading international retailer with more than 575.000 employees worldwide in 33 different countries and over 13.700 stores, has stablished an IT HUB in Barcelona as part of his IT division, responsible for the selection and provision of IT infrastructure, IT platforms and business applications. With our agile mentality we are looking for people that is willing to make an impact on projects and solutions used worldwide by millions of customers. Agrupa Global Talent collaborates with our client to attract the best talent for its ITHUB located in Barcelona. We are looking for open-minded colleagues with passion for technology. We offer you diverse and exciting career opportunities in a dynamic work environment that stands for development and progress. Elevate your career with us, where development and progress are at the heart of everything we do. If you feel ready and think this opportunity is for you, we would be happy to meet you. Your Tasks • Coordinate and communicate IT security incidents across teams and countries, managing the incident response process., • Detect and analyze potential security incidents, ensuring effective containment., • Reconstruct cyber-attacks and malware, analyze sensitive data, and derive remediation actions., • Develop mechanisms to detect anomalies and attacks, initiating preventive measures to alert in time., • Monitor the general threat landscape on the Internet and provide actionable recommendations., • Advise internal projects on security-related issues., • Conduct IT forensic investigations., • Create meaningful reports on IT security incidents. Job requirements • Our client’s Cyber Defense Center is fully built and up and running. We are now looking to strengthen the team with an Incident Response expert to cover the weekday afternoon shift. This is a hands-on, experienced technical role focused on advanced incident, and continuous improvement rather than tier-one alert triage., • You will join a large Cyber Security organization with excellent opportunities for growth, development, and promotion based on performance and training. Continuous learning is essential in this field, and the company supports this with a wide range of education and training options to enhance both soft and hard skills., • 5+ years of professional experience in Incident Response, leading medium to critical security incident response., • Hands-on experience in incident response, including triage, containment, remediation, and end-to-end security investigations., • Experience partnering with Escalation Management, Product Development/Engineering, IT, Legal, Cloud Ops, and wider cybersecurity teams to lead remediation., • University degree in Information Technology or comparable education., • Strong English skills, fluent business English (speaking and writing) at advanced level (B2+)., • Further education in IT forensics and security incident management., • Expert knowledge in SIEM systems (preferably Splunk), SOAR tools, and EDR solutions., • Strong technical expertise in deployed technologies and cyber attack techniques., • Knowledge of national and international IT standards and frameworks (ISO 27001, NIST Cyber Security Framework, BSI Grundschutz, ITIL, OWASP, MITRE ATT&CK)., • High communicative and analytical skills, ability to work independently, and strong team spirit., • Confidence and persuasiveness., • Commitment to continuous education and professional development., • Would be a plus: Strong digital forensics skills, including analysis, timeline reconstruction, and interpreting artefacts across Windows, macOS, Linux, and cloud environments., • Would be a plus: Experience in cloud incident response including familiarity with cloud-native logging, identity systems, and investigation techniques., • Would be a plus: Knowledge of application security, including investigating application-layer attacks, abuse cases, and SaaS-specific threats. Shift options • Morning shift (5:45 – 14:00h), from Monday to Friday (no rotation)., • Afternoon shift (13:45 – 22:00h), from Monday to Friday (no rotation). What We Offer • These are hybrid mode permanent positions. 2 days/week at the office., • You will be part of an international team composed by people from different countries and backgrounds, where you’ll be able to share your experience and knowledge to carry-out teamwork and meet the objectives., • On top of this, you’ll have a personal follow-up with your management team to help you understanding all business-related questions and guide you in your professional career., • We offer a competitive compensation and benefits package: lunch vouchers, health and dental insurance, transport, wellbeing, etc. Contact If you are interested, please apply directly or send your CV to

A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You’ll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you’ll have the tools to drive meaningful change and accelerate client impact. A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You’ll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you’ll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You’ll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences. The Red Team Operator will be part of the X-Force Red Offensive Security team. You will plan and execute remote operations dynamically emulating advanced threat actors to improve the detection and response capabilities of clients through long-term engagements. It is critical that the consultant be able to rapidly learn new technologies and processes with minimal assistance. There is a potential for up to 25% travel, including international travel. This position is open to all European countries. • Manage full adversary simulation engagements from conception to report delivery, • Communicate effectively with team members and clients during the engagement, • Keeping current with the latest offensive security techniques, • Perform adversary simulation of real-world adversary Tactics, Techniques, and Procedures (TTPs) by leveraging frameworks such as MITRE ATT&CK™ and other sources of information, • Develop payloads, scripts and tools that weaponize new concepts for exploitation, evasion, and lateral movement, • Engage in an active evasion of defenders to avoid detection and progress engagements, • Coordinate with other Red Team operators to achieve the specified goals, • Deliver reporting and debriefs to defenders in manner that improves detection and response capabilities, • Perform/present technical security research Bachelor's Degree • 3+ years of red teaming experience in a dedicated red team role, • 5+ years of system administration, network administration, or programming experience, • Ability to develop/modify exploits and payloads to avoid defensive countermeasures, • Understanding of real-world adversary operations methodologies, tactics, techniques, and procedures. In particular, the ability to apply frameworks (eg. MITRE ATT&CK™) in client engagements., • Demonstrated history of published exploitation research, • Strong analytical and problem-solving skills, • Good interpersonal, organizational, communications, and time management skills, • Experience coordinating security testing projects with multiple consultants, • Fluent in English, • History of presenting at security conferences, • Track record in vulnerability research and CVE assignments, • Knowledge of Windows APIs, • Knowledge of EDR detection capabilities such as Carbon Black/Crowdstrike, etc. and associated evasion techniques for behavioral based alerting, • Demonstrated exploit, payload, or attack framework development experience, • Expert level skills in one of the following: Active Directory, Software Development, or Cloud Infrastructure, • Relevant certifications from organizations like Offensive Security (OSCP/OSCE), SANS (GPEN, GXPN, GWAPT), or CREST CSAT/CSAM or demonstrable equivalent skills, • Prior security consulting experience #J-18808-Ljbffr

At Q-Tech, we are currently looking for a Senior Incident Response & Digital Forensics specialist to join the Technology Hub of one of our key retail clients, with offices located in Barcelona. This is an opportunity to join an international, highly technical environment with global impact. MISSION Lead advanced incident response activities within a mature SOC. This is a hands-on technical role focused on real investigations, continuous improvement, and end-to-end incident management. RESPONSIBILITIES • Coordinate and communicate security incidents across teams and countries., • Manage the full Incident Response lifecycle (detection, analysis, containment, and remediation)., • Reconstruct cyberattacks and perform malware analysis., • Develop and enhance detection mechanisms., • Conduct IT forensic investigations (timeline reconstruction and artifact analysis)., • Prepare technical and executive-level incident reports., • Advise internal projects on security-related matters., • Monitor the global threat landscape and provide actionable recommendations. REQUIREMENTS • 5+ years of experience in Incident Response handling medium to critical incidents., • Hands-on experience in triage, containment, and end-to-end remediation., • Experience collaborating with IT, Engineering, Legal, Cloud Operations, and Escalation Management teams., • Degree in IT or equivalent education., • High level of English (minimum B2)., • Advanced experience with SIEM (preferably Splunk), SOAR platforms, and EDR solutions., • Strong understanding of offensive techniques and defensive technologies. FRAMEWORKS & STANDARDS ISO 27001 · NIST Cybersecurity Framework · BSI Grundschutz · ITIL · OWASP · MITRE ATT&CK TECHNOLOGY STACK • SOAR / Ticketing: Fortinet FortiSOAR, • Malware Sandbox: VMRay Sandbox, Any.Run, VirusTotal, • M365 Security: Microsoft Defender (Endpoint, Identity, Cloud Apps, Office), • Threat Intelligence: MISP, Recorded Future, DFIR Report, • Digital Forensics: Timesketch, Magnet AXIOM, • SIEM: Splunk (preferred) + enterprise EDR NICE TO HAVE • Advanced digital forensics (Windows, macOS, Linux, cloud)., • Incident Response experience in cloud environments (native logging, identity investigations)., • Application security and SaaS threat knowledge. WHAT THEY OFFER If you are looking for an international, technical environment with real impact in defending a global organization, this role is for you. • Flexible compensation: €2,700 annually to allocate between meal vouchers (up to €200/month) and transport (€25/month)., • Health insurance valued at €546.96 annually (€45.58/month)., • Remote work allowance: €268.92 annually (approx. €22.41/month), added to payroll., • Wellbeing: reimbursement for sports activities (gym, swimming pool, etc.) up to €300 annually, added to payroll upon invoice submission., • Working Hours: Afternoon shift (13:45 – 22:00h), from Monday to Friday (no rotation).

NTT DATA es una consultora multinacional que ofrece soluciones tecnológicas, de negocio, estrategia, desarrollo y mantenimiento de aplicaciones, siendo referente en consultoría. Digital Technology es la unidad enfocada a acompañar a las grandes organizaciones iberoamericanas en su transformación digital, generando dividendos digitales a través de la tecnología y el diseño, con enfoque práctico y orientado al negocio. Para lograrlo, buscamos personas que compartan nuestra curiosidad permanente, pasión por la tecnología, excelencia constante y visión estratégica. 🔍 Buscamos incorporar un perfil: Red Team Lead, con al menos 5 años de experiencia en la ejecución de proyectos hacking y Red Team para sumarse a nuestro equipo de Ciberseguridad! ¿Qué harás? Te incorporarás a la línea de Privacy & Security by Design del equipo de Ciberseguridad en NTT DATA desde donde, a través de tu conocimiento experto en Red Team, podrás contribuir al crecimiento y liderazgo de nuestro equipo AOST (Advance Offensive Security Team) y mejora de los servicios de seguridad ofensiva que ofrecemos (ejercicios de red / purple team, pentesting externo/interno avanzado sobre infraestructuras, sistemas o aplicaciones, ejercicios de simulación de adversarios,…). Participarás en la ejecución de proyectos de ámbito nacional e internacional de alta complejidad y/o en aquellos en los que sea necesario un conocimiento diferenciador para el arranque del proyecto, siendo el referente técnico tanto a nivel interno como externo. Formarás parte de un gran equipo en el que se fomenta el crecimiento y desarrollo profesional. Requisitos: • Titulación Universitaria en Informática o Telecomunicaciones. (Deseable Máster en Ciberseguridad)., • Experiencia de, al menos, 5 años en ejecución de proyectos de hacking y Red Team., • Conocimiento sólido y aplicación en proyectos de las siguientes metodologías / estándares de seguridad: MITRE ATT&CK, Cyber Kill Chain, PTES, OWASP, …., • Persona proactiva, con gran curiosidad por la seguridad ofensiva, la tecnología y con capacidad de transmitir conocimiento a perfiles con menos experiencia., • Se valora tener experiencia en desarrollo de malware como arsenal para ejercicios de Red Team y conocimiento de C&C como, por ejemplo, Cobalt Strike., • Se valora estar en posesión de algunas de las siguientes certificaciones de seguridad: OSCP, OSCE, OSED, eCPPTX, CRTO, CRTE, CRTP, CRTL, CARTP, GPEN, GXPN, CREST Certified Simulated Attack Specialist (CCSAS), …, • Se valora un buen nivel de inglés (B2 o superior). Lo que te ofrecemos: 🧠 Formar parte de un equipo de élite, especializado en la unión entre estrategia y tecnología. 💼 Contrato indefinido con revisiones de categoría y salario anuales. 🎓 Certificaciones bonificadas (Adaptada a cada división). 📝 Acceso a nuestra plataforma formativa NTT DATA University (formaciones técnicas, metodológicas, idiomas y soft skills). 👩🏽 💻 Trabajo híbrido y horario flexible para que conciliemos mejor. 📅 Jornada intensiva (8:00 a 15:00) los viernes y durante el verano. 🏥 Beneficios corporativos: complementos salariales adicionales, retribución flexible, seguro médico, etc. 🔝 Global Top Employer 2025 — por 10º año consecutivo en España. 🌊 Programas solidarios y actividades sociales a través de nuestro portal de voluntarios de The Blue Wave impulsando un impacto positivo. 🌏 Innovación diversa y cultura inclusiva en NTT DATA creemos que cada persona es única. Apostamos por una cultura inclusiva que valora la diversidad y fomenta un entorno donde todos podamos explorar y potenciar nuestra singularidad. 🚀 Únete al equipo de Digital Technology en NTT DATA.

BARCELONA, ES #job-location.job-location-inline { display: inline; } CaixaBank es un grupo financiero con un modelo de banca universal socialmente responsable con visión a largo plazo, basado en la calidad, la cercanía y la especialización, que ofrece una propuesta de valor de productos y servicios adaptada para cada segmento, asumiendo la innovación como un reto estratégico y un rasgo diferencial de su cultura, y cuyo posicionamiento líder en banca minorista en España y Portugal le permite tener un rol clave en la contribución al crecimiento económico sostenible. ¿Qué proyectos desarrollamos? Objetivo El objetivo de esta convocatoria es cubrir una vacante de gestor/a en el departamento de Ciberseguridad, en la dirección de Detección, Respuesta y Recuperación del Grupo CaixaBank, para poder dar respuesta a ciberincidentes así como mitigar posibles futuros impactos analizando las técnicas y las tácticas de los atacantes. Misión del departamento Somos responsables de prevenir y defender a la Entidad, a nuestros clientes y a nuestros empleados ante cualquier tipo de amenaza perpetrada por medios digitales y tecnológicos. Los ámbitos de actuación principales son la detección, la respuesta ante ciberincidentes y la preparación para la recuperación ante un evento disruptivo grave: Analítica de seguridad Definir y controlar los procesos de analítica de seguridad con fines de prevención, detección y respuesta. Detección Definición de los controles de detección de ataques o anomalías que podrían ser indicios de fases iniciales de ciberataques, alineados con la matriz MITRE Att&ck. CSIRT (Computer Security Incident Response Team) Definición, control y ejecución de playbooks ante ciberamenazas y ciberataques. Tambien se definen los procesos de recuperación ante ciberataques para su ejecución por parte de los equipos IT. Operación en ciberseguridad (Cyber SOC) Entendimiento de un CyberSOC y de la operación de playbooks de análisis y respuesta ante eventos de ciberseguridad asi como la revisión de estos para aplicar mejoras. Cyber Threat Intelligence Proceso de Threat Intelligence como input a los procesos de prevención ante ciberataques, que identifica los actores maliciosos con potencial impacto en la entidad, mide el nivel de impacto en base a las tácticas y técnicas y vulnerabilidades de las cuales que hace uso, mantiene un scoring de riesgo por actor y en general de riesgo como métrica anticipativa de ciber-riesgo. Ubicación del puesto El puesto de trabajo está ubicado en los Servicios Centrales de CaixaBank en Madrid o Barcelona. Perfil del candidato: debe tener, en especial, la capacidad de formar parte de procesos cyber de respuesta a incidentes, es decir, la capacidad de definición de procesos, análisis y respuesta a incidentes. Responsabilidades Definición y control de los procesos de respuesta ante ciber-incidentes Definición de los playbooks técnicos de respuesta a ciber-incidentes, adaptando los existentes y creando nuevos para cubrir las nuevas ciber-amenazas. Definición de las soluciones para cubrir las necesidades de respuesta en los diferentes entornos tecnológicos corporativos Definición y control de los procesos de análisis y respuesta del equipo de operación de ciberseguridad (Cyber SOC) Definición y control de los procesos del centro de respuesta a incidentes de ciberseguridad (CSIRT) Definición y control de los entornos de simulación de ciber-ataques para asegurarse de la completitud y efectividad los controles de prevención y detección implantados. Definición y control de los procesos de recuperación post-incidente en base a los playbooks de respuesta a ciber-incidente definidos. Debe tener conocimiento de la matriz de MITRE de detección y ataque, debe tener conocimientos de técnicas y tácticas de ciber-ataques, así como conocimientos de análisis forense. Requisitos mínimos Titulación técnica o superior en informática o telecomunicaciones. Experiencia en gestión de SOC, CSIRT o DFIR Conocimientos y experiencia en respuesta a incidentes. Experiencia en dirección de proyectos tecnológicos. Capacidad de trabajo en equipos trasversales. Capacidad de comunicación y habilidades relacionales. Capacidad analítica y de síntesis con visión estratégica. Adaptación al cambio. Disponibilidad para viajar. Inglés hablado y escrito. Competencias clave Técnicas y tácticas de ciber-ataques Metodologías de trabajo Agile. Buenas prácticas y regulaciones/estándares de seguridad. Formación y certificaciones relacionadas con ciberseguridad. SIEM (Sentinel, Splunk, QRadar, etc.). EDR/XDR. Cloud (Azure, AWS, GCP). Herramientas forenses. SOAR. Herramientas Threat Intelligence. ¿Qué ofrecemos? Job profile Establecer, aplicar y controlar las políticas de seguridad para predecir, identificar y mitigar los riesgos de seguridad emergentes en la organización, incluyendo la seguridad operacional y fraude, que derivan de la actividad bancaria, así como la ciberseguridad, que deriva de los nuevos riesgos de internet Competencias H INVESTIGACIÓN DE TENDENCIAS E IMPACTOS DE IA AL NEGOCIO H GESTIÓN DE CONFLICTOS, AMENAZAS Y VULNERABILIDADES H PLATAFORMAS DE SEGURIDAD S.1.1 ALIANZAS – COLABORACIÓN Y TRANSVERSALIDAD S.1.4 ALIANZAS – COMUNICACIÓN S.1.3 ALIANZAS – INFLUENCIA S.1.2 ALIANZAS – ORIENTACIÓN A CLIENTE S.2.1 HUMANISMO – COMUNICACIÓN Y EMPATÍA S.2.2 HUMANISMO – LIDERAZGO Y DESARROLLO DE EQUIPOS / AUTOLIDERAZGO H ARQUITECTURA DE SEGURIDAD S.4.1 ANTICIPACIÓN – ANTICIPACIÓN Y GESTIÓN DEL CAMBIO S.3.1 EMPODERAMIENTO – FOCO EN RESULTADOS H DOCUMENTACIÓN TÉCNICA H SEGURIDAD DE APLICACIONES S.5.1 DIVERSIDAD – IMPULSO DE LA DIVERSIDAD H CLOUD AND INFRAESTRUCTURE SECURITY H TECNOLOGÍAS DE SEGURIDAD DE LA INFORMACIÓN H ANALÍTICA AVANZADA Y MODELOS PREDICTIVOS H PROCEDIMIENTOS DE CIBERSEGURIDAD H REDES Y SEGURIDAD H CIBERFRAUDE H IMPLANTACIÓN SOLUCIONES DE MERCADO DE IA H GESTIÓN Y MONITORIZACIÓN DE PLATAFORMAS DE SEGURIDAD H IA LITERACY

Senior SOC Analyst - 100% Remote Since 2011, SQUAD Group has been a key player in the cybersecurity landscape. We partner with leading organizations to protect their information systems through a comprehensive 360° offering of consulting, integration, expertise, and managed services. Our mission: Securing Together! We believe in a collaborative approach to cybersecurity, where experts and clients work hand-in-hand to anticipate threats and protect critical infrastructure. As part of our growing team, we're seeking a Senior SOC Analyst . Based in Spain, this role will put you at the core of a top-tier Incident Response team, defending the digital assets of a company that connects hundreds of millions of people every month. Your Role You are a hands-on defender and investigator. A Senior Analyst focused on threat hunting, detection engineering, and incident response. Working across the SOC’s advanced security stack (SIEM, EDR, DLP, and NIDS you’ll build, tune, and operate detection mechanisms that stop threats before they escalate. Your Responsibilities Responsible for advanced incident investigations, threat hunts, and forensic analysis. Develop and refine custom detection rules, correlation logic, and alert tuning. Integrate and enhance data sources to improve signal fidelity. Design and maintain automated playbooks using SOAR capabilities. Collaborate with the Technical Lead on continuous detection improvement. Mentor L1/L2 analysts, sharing advanced investigative techniques. What You Bring 5–7 years of experience in SOC operations, detection engineering, or incident response. Strong technical knowledge of SIEM, EDR, and SOAR platforms. Scripting or automation experience (Python, PowerShell) for enrichment or response tasks. Understanding of MITRE ATT&CK, threat intelligence, and adversary emulation. Preferred Certifications: BTL2, GIAC GCIA / GCIH, CrowdStrike Certified Falcon Administrator, Elastic Security Analyst Why Join Squad? Personalized Growth: We help you build a training and certification plan aligned with your professional goals through our SquadeXpérience . Expertise Development: Participate in internal events like our MixYourTalent webinars and monthly CTF sessions. Visibility: Attend major industry conferences and contribute to our #TheExpert technical blog. Culture: Enjoy a dynamic and close-knit environment with after-work events and team gatherings that foster great camaraderie.

Quiénes somos? Cajamar Tecnología A.I.E. es una empresa de Grupo Cajamar conformada por más de 300 profesionales y cuya actividad principal se centra en, IA generativa como palanca principal para digitalizar procesos y Analítica del Data, gestión de plataformas tecnológicas y arquitectura empresarial, análisis, desarrollo y mantenimiento de sistemas informáticos, implantación de soluciones digitales y servicios colaborativos y soporte a usuarios y calidad del servicio TI. Qué necesitamos? Titulación: Licenciados y grados en Informática, Telecomunicaciones o similar Conocimientos y/o experiencia: Experiencia liderando equipos de Threat Intelligence, Vigilancia Digital y Ciber Fraude. Conocimiento de infraestructuras cloud y TTPs utilizados por los Threat actors para comprometer este tipo de arquitecturas. Experiencia de, al menos, 10 años en identificación, modelado y gestión de amenazas. Capacidad de análisis e investigación, así como respuesta ante incidentes. Experiencia a nivel de análisis de malware, identificación de TTPs y extracción de IOCs. Experiencia a la hora de realizar informes técnicos y ejecutivos. Experiencia en la definición de modelos de Identificación y Gestión de Amenazas. Análisis forense digital de los clientes que hayan sufrido fraude digital. Experiencia en el diseño e implantación de sistemas de gestión automática y bloqueo de IOCs. Conocimiento de las últimas amenazas del sector bancario a nivel tecnológico y fraude, así como la identificación de grupos y APT que nos afecten. Conocimiento avanzado de MITRE ATT&CK y MITRE D3FEND. Investigación OSINT para la identificación de actores y amenazas. Recolección de información e infiltración para conocer TTPs del adversario. Conocimiento y experiencia en despliegue, dimensionamiento y gestión de arquitecturas TIPs (MISP, Minemeld, Maltiverse, SocRadar…). Experiencia en Hunting sobre plataformas XDR y/o SIEM (Splunk, QRadar, XSIAM, Cortex XDR, ElasticSearch…). Conocimiento y experiencia en dimensionamiento, despliegue y gestión de arquitecturas BAS (Mandiant, Cymulate..) y creación de reglas. Conocimiento en plataformas de Gestión de Vulnerabilidades (Qualys, Nessus…) Conocimiento medio/avanzado en automatización de procesos. Conocimiento medio/avanzado en desarrollo en Python. Experiencia en construccion y ejecucion de reglas Yara. Conocimiento medio de sistemas operativos y plataformas de virtualización, contenedores y/u orquestación (Linux, Windows, Docker, Kubernetes, Openshift...). Nivel medio/avanzado de inglés. Conocimiento en Protocolos y tecnologías de red. Valorable conocimiento en modelos LLM e IA. Valorable experiencia en entornos sujetos a regulaciones del sistema financiero (DORA, SWIFT, PCI...) Competencias: Certificaciones de seguridad (CEH, CTIA, SANS, FOR578...) Imprescindible capacidad de trabajo en equipo. Pensamiento crítico con alta capacidad de observación y análisis. Buenas habilidades de comunicación escrita y verbal. Buena capacidad de planificación y orientación tanto al objetivo como al proceso. Actitud y orientación a la calidad y al detalle. Qué funciones se realizarás? Investigar amenazas, IoC y TTP Analizar indicadores y técnicas de actores maliciosos para apoyar la caza de amenazas, desarrollo de firmas y la plataforma TIP.Mantenimiento del modelo actual de la entidad para la Identificación y Gestión de Amenazas.Mantenimiento del sistema de bloqueo automático de IOCs de la entidad.Gestionar proyectos de integración de plataformas de seguridad sobre Inteligencia de amenazas, Vigilancia Digital y/o Fraude.Apoyar evaluaciones de ciberseguridad Realizar análisis técnicos y emitir recomendaciones para distintos niveles de la organización.Participar en la respuesta a incidentes Integrarse al equipo de respuesta cuando sea necesario, aportando inteligencia operativa durante incidentes activos.Evaluar y mejorar la información técnica Revisar y optimizar datos técnicos para maximizar su utilidad en la defensa cibernética.Colaborar con gestión de vulnerabilidades Mantener informado al equipo sobre amenazas emergentes que puedan afectar la exposición de la organización. Qué te ofrecemos?Oportunidad de integrarte en un equipo de profesionales, comprometidos en un proyecto de presente y futuro cuyo entorno de trabajo colaborativo y dinámico te facilitará diversidad de posibilidades de crecimiento y desarrollo profesional. Formación continua y disponibilidad de itinerario personalizado. Posibilidad de Jornada y Horario flexible, según proyecto. Compensación y beneficios sociales: Retribución flexible (Seguros de Salud, Cheque Guardería, etc.), y condiciones financieras especiales. Programas de acompañamiento y Bienestar atendiendo a tus necesidades personales. Acceso a diversos Programas de Voluntariado donde podrás involucrarte dejando una huella positiva Posibilidad de trabajo híbrido. Contrato indefinido en un proyecto confiable y en continua evolución con una remuneración acorde a tu experiencia y aportación de valor. Entidad:Cajamar TecnologíaIncorporación: Inmediata Centro de trabajo: Almería, Barcelona, Málaga, Valencia o Madrid ¡¡¡Por todo esto y muchas cosas más, te esperamos!!! Solo tienes que clicar en SOLICITAR. Nos gustaría que formases parte de nuestro GRAN EQUIPO Somos diferentes porque hacemos banca de personas. Requisition ID10694- Posted05/15/2026-8841 - SOC-Servicios Centrales-Provincia (5)Almería , Barcelona , Madrid , Málaga , Valencia

Sammanfattning Denna hybridroll som Försäljningsspecialist för svenskspråkiga kandidater erbjuder fast arbetstid, konkurrenskraftig ersättning, internationell arbetsmiljö och möjligheten att arbeta med moderna digitala annonslösningar.Flytande svenska är ett krav, liksom förmåga att skapa