Trabajos Seguridad en PaternaCrear alertas

Overview As a Senior CSOC Consultant, you will strengthen threat detection and security operations for diverse, global environments. You will enhance detection capabilities across SIEM, EDR, cloud, and related platforms, while ensuring quality and ongoing improvement of monitoring services. You’ll collaborate with threat intelligence and incident response teams to translate requirements into effective detections. This role offers exposure to large-scale security operations and a chance to shape detection strategies in a multi-customer setting. Compensaciones / Beneficios • Remote position, • Freelance, full-time contract, • Training and career development, • Multicultural team and international projects, • On-call rotation system, • Competitive exposure to large-scale cybersecurity environments Responsabilidades, • Develop, validate, tune, and maintain security monitoring and detection across SIEM, EDR, cloud, and other platforms, • Operate and continuously improve security monitoring and threat detection services, • Onboard and validate new security data sources and telemetry feeds, • Manage security content, use-case lifecycle, rules reviews, testing, tuning, and QA, • Collaborate with threat intelligence, incident response, and CSOC teams to translate requirements into detections, • Contribute to cybersecurity architecture reviews and provide recommendations, • Prepare CSOC metrics, dashboards, KPIs, and service performance reports, • Review and assess detection effectiveness and monitoring configurations for improvements, • Analyze operational feedback to reduce false positives and improve detection quality, • Contribute to CSOC procedures, knowledge base, and operational guidance, • Prepare technical reports and recommendations for stakeholders Requisitos principales, • +5 years of IT experience with alert triage and security incidents, • Experience administering a SIEM (preferably Splunk or Microsoft Sentinel), • Proficiency with SOC toolbox (SIEMs, EDRs) and technical threat analysis, • Deep knowledge of Microsoft security tools (M365, Defender for Endpoints, Azure, Defender, Sentinel, XDR), • Strong Cloud knowledge (Azure, AWS, GCP), • Experience with SIEM tools (Splunk, QRadar, ArcSight, MS Sentinel, ELK Stack), • Knowledge of at least one EDR (MS Defender for Endpoint, CrowdStrike), • Knowledge of email security, network monitoring, and incident response, • Proficiency with Linux/Mac/Windows, • C1 English proficiency, • Nice to have: SIEM architecture design, AWS monitoring, scripting (Python, Bash, PowerShell, Ruby), • Certifications such as MCSE, CCNA, SC-200, GCIH, CEH, GCFA, • Soft skills: excellent communication, customer-facing, documentation, creativity, willingness to learn, conflict management, • excellent communication, • customer-facing, • documentation, • SIEM (Splunk, Microsoft Sentinel, QRadar, ArcSight, ELK Stack), • EDR (Microsoft Defender for Endpoint, CrowdStrike), • Microsoft security tools (M365, Defender, Cloud App Security, Azure)

Overview As a Senior CSOC Consultant, you will strengthen threat detection and security operations for diverse, global environments. You will enhance detection capabilities across SIEM, EDR, cloud, and related platforms, while ensuring quality and ongoing improvement of monitoring services. You’ll collaborate with threat intelligence and incident response teams to translate requirements into effective detections. This role offers exposure to large-scale security operations and a chance to shape detection strategies in a multi-customer setting. Compensaciones / Beneficios • Remote position, • Freelance, full-time contract, • Training and career development, • Multicultural team and international projects, • On-call rotation system, • Competitive exposure to large-scale cybersecurity environments Responsabilidades, • Develop, validate, tune, and maintain security monitoring and detection across SIEM, EDR, cloud, and other platforms, • Operate and continuously improve security monitoring and threat detection services, • Onboard and validate new security data sources and telemetry feeds, • Manage security content, use-case lifecycle, rules reviews, testing, tuning, and QA, • Collaborate with threat intelligence, incident response, and CSOC teams to translate requirements into detections, • Contribute to cybersecurity architecture reviews and provide recommendations, • Prepare CSOC metrics, dashboards, KPIs, and service performance reports, • Review and assess detection effectiveness and monitoring configurations for improvements, • Analyze operational feedback to reduce false positives and improve detection quality, • Contribute to CSOC procedures, knowledge base, and operational guidance, • Prepare technical reports and recommendations for stakeholders Requisitos principales, • +5 years of IT experience with alert triage and security incidents, • Experience administering a SIEM (preferably Splunk or Microsoft Sentinel), • Proficiency with SOC toolbox (SIEMs, EDRs) and technical threat analysis, • Deep knowledge of Microsoft security tools (M365, Defender for Endpoints, Azure, Defender, Sentinel, XDR), • Strong Cloud knowledge (Azure, AWS, GCP), • Experience with SIEM tools (Splunk, QRadar, ArcSight, MS Sentinel, ELK Stack), • Knowledge of at least one EDR (MS Defender for Endpoint, CrowdStrike), • Knowledge of email security, network monitoring, and incident response, • Proficiency with Linux/Mac/Windows, • C1 English proficiency, • Nice to have: SIEM architecture design, AWS monitoring, scripting (Python, Bash, PowerShell, Ruby), • Certifications such as MCSE, CCNA, SC-200, GCIH, CEH, GCFA, • Soft skills: excellent communication, customer-facing, documentation, creativity, willingness to learn, conflict management, • excellent communication, • customer-facing, • documentation, • SIEM (Splunk, Microsoft Sentinel, QRadar, ArcSight, ELK Stack), • EDR (Microsoft Defender for Endpoint, CrowdStrike), • Microsoft security tools (M365, Defender, Cloud App Security, Azure)

Information Security Officer Luminary is looking for an Information Security Officer to join the team and own our information security function setting priorities, managing risk, and independently verifying controls with direct access to the Board.About the Role The Information Security Officer

Overview As a Senior CSOC Consultant, you will strengthen threat detection and security operations for diverse, global environments. You will enhance detection capabilities across SIEM, EDR, cloud, and related platforms, while ensuring quality and ongoing improvement of monitoring services. You’ll collaborate with threat intelligence and incident response teams to translate requirements into effective detections. This role offers exposure to large-scale security operations and a chance to shape detection strategies in a multi-customer setting. Compensaciones / Beneficios • Remote position, • Freelance, full-time contract, • Training and career development, • Multicultural team and international projects, • On-call rotation system, • Competitive exposure to large-scale cybersecurity environments Responsabilidades, • Develop, validate, tune, and maintain security monitoring and detection across SIEM, EDR, cloud, and other platforms, • Operate and continuously improve security monitoring and threat detection services, • Onboard and validate new security data sources and telemetry feeds, • Manage security content, use-case lifecycle, rules reviews, testing, tuning, and QA, • Collaborate with threat intelligence, incident response, and CSOC teams to translate requirements into detections, • Contribute to cybersecurity architecture reviews and provide recommendations, • Prepare CSOC metrics, dashboards, KPIs, and service performance reports, • Review and assess detection effectiveness and monitoring configurations for improvements, • Analyze operational feedback to reduce false positives and improve detection quality, • Contribute to CSOC procedures, knowledge base, and operational guidance, • Prepare technical reports and recommendations for stakeholders Requisitos principales, • +5 years of IT experience with alert triage and security incidents, • Experience administering a SIEM (preferably Splunk or Microsoft Sentinel), • Proficiency with SOC toolbox (SIEMs, EDRs) and technical threat analysis, • Deep knowledge of Microsoft security tools (M365, Defender for Endpoints, Azure, Defender, Sentinel, XDR), • Strong Cloud knowledge (Azure, AWS, GCP), • Experience with SIEM tools (Splunk, QRadar, ArcSight, MS Sentinel, ELK Stack), • Knowledge of at least one EDR (MS Defender for Endpoint, CrowdStrike), • Knowledge of email security, network monitoring, and incident response, • Proficiency with Linux/Mac/Windows, • C1 English proficiency, • Nice to have: SIEM architecture design, AWS monitoring, scripting (Python, Bash, PowerShell, Ruby), • Certifications such as MCSE, CCNA, SC-200, GCIH, CEH, GCFA, • Soft skills: excellent communication, customer-facing, documentation, creativity, willingness to learn, conflict management, • excellent communication, • customer-facing, • documentation, • SIEM (Splunk, Microsoft Sentinel, QRadar, ArcSight, ELK Stack), • EDR (Microsoft Defender for Endpoint, CrowdStrike), • Microsoft security tools (M365, Defender, Cloud App Security, Azure)

Overview In this role you will define the vision, strategy, and roadmap for security-focused features. You will work closely with engineering, design, sales, and marketing to deliver robust, secure products that meet customer needs. You will translate security requirements into clear specs, prioritize the backlog, and drive go-to-market and launch activities. You will act as a security subject matter expert, guiding stakeholders across the organization. This is an opportunity to shape secure data platforms in a fast-moving, globally distributed company. Compensaciones / Beneficios • remote-friendly, • healthcare contributions, • equity, • flexible time off, • home office setup stipend, • global gatherings Responsabilidades • Define and evangelize the product vision, strategy, and roadmap for security-focused features and products., • Conduct market research, competitive analysis, and gather customer feedback to inform decisions., • Collaborate with engineering, design, sales, and marketing to deliver secure, high-quality products., • Translate complex security requirements into clear product specifications and user stories., • Prioritize backlog and manage trade-offs to maximize business value and customer satisfaction., • Lead product launch activities, including go-to-market, sales enablement, and documentation., • Monitor product performance and iterate features based on data and user feedback., • Serve as the security subject matter expert within the organization. Requisitos principales • Minimum 8+ years in product management in B2B SaaS with a focus on security products/features., • Experience with database security principles and best practices., • Strong understanding of networking concepts and security implications., • In-depth knowledge of identity and access management (IAM)., • Security certifications (e.g., CISSP, CISM, CompTIA Security+)., • Experience in quality assurance processes and methodologies., • Background in program management including planning, execution, and risk management., • Prior experience in security engineering., • excellent communication, • interpersonal skills, • presentation skills, • security product management, • database security, • networking concepts for security

A global technology company is seeking a Security Program Manager to lead and coordinate security initiatives. The ideal candidate will have over 5 years of experience in security program management, strong stakeholder management skills, and fluency in English. This full-time role is based in Valencia, Spain, and includes a relocation package, competitive remuneration, and opportunities for learning and development. #J-18808-Ljbffr

Join to apply for the Security Program Manager role at BrainRocket. BrainRocket is a global company creating end-to-end tech products for clients across Fintech, iGaming, and Marketing. We offer a full-time job in the office with relocation support as needed. Our team includes 1,300 professionals delivering innovative ideas and products. • The Security Program Manager is responsible for driving the planning, coordination, and execution of security initiatives and projects across the organization., • Ensure alignment between security objectives and business goals; manage cross-functional security projects; establish governance to reduce risk and maintain compliance., • Act as the central point of coordination to enable efficient execution and delivery of security projects into production; facilitate communication between stakeholders; ensure security becomes an integral part of business processes., • Program ownership: Lead the planning, execution, and successful delivery of security initiatives and projects, ensuring they reach production and deliver measurable business value., • Alignment with business goals: Translate security objectives into actionable programs aligned with organizational strategy and regulatory requirements., • Cross-functional coordination: Serve as the primary contact between Security, IT, Product, Engineering, Legal, HR, and other units to ensure collaboration., • Governance & reporting: Establish governance models, track milestones, define KPIs/metrics, and report status and risks to senior management., • Risk management: Identify, assess, and prioritize security risks; drive mitigation plans and escalate critical issues as needed., • Policy & compliance enablement: Ensure projects support compliance with standards (ISO 27001, SOC 2, GDPR) and internal policies., • Change management: Develop rollout strategies for new security controls with adoption across the organization., • Stakeholder communication: Maintain clear, timely communication with all stakeholders, including C-level executives., • Issue resolution: Anticipate roadblocks, manage dependencies, and resolve conflicts to keep projects on track., • Continuous improvement: Identify inefficiencies and propose improvements, frameworks, or automation to enhance scalability., • Awareness & training support: Coordinate security awareness initiatives and embed program outcomes into practices., • Budget & resource planning: Work with leadership to estimate costs, allocate resources, and improve delivery efficiency., • Vendor & third-party coordination: Manage external security partners, consultants, or vendors for outsourced projects., • Documentation: Maintain up-to-date documentation of project scope, timelines, ownership, and deliverables for auditability., • Must-Have:, • 5+ years of experience in security program / project management or related fields., • Strong understanding of information security principles, frameworks (e.g., ISO 27001, NIST, SOC 2) and risk management., • Proven track record of delivering cross-functional security initiatives from planning to production., • Excellent stakeholder management, communication, and presentation skills, including C-level reporting., • Ability to build governance processes, track KPIs, and ensure accountability across teams., • Strong organizational and prioritization skills in a fast-paced environment., • Fluency in English (written and spoken)., • Nice-to-Have:, • Technical background in IT, cloud, or application security., • Experience with GRC tools., • Familiarity with DevSecOps practices and CI/CD integration., • Certifications such as CISSP, CISM, PMP, or similar., • Experience in regulated industries (finance, gaming, healthcare, etc.)., • Previous experience in international or distributed teams., • Relocation package (tickets, hotel stay for up to 2 weeks, and visa relocation support)., • Learning and development opportunities; language support with partial compensation for Spanish classes., • Time for rest with 23 working days of annual vacation and additional paid sick days., • Competitive remuneration with annual review., • Plus, opportunities to work in a fast-paced, impactful environment., • Seniority level: Mid-Senior level, • Employment type: Full-time, • Job function: Other, • Industries: Software Development and Gambling Facilities and Casinos Bold moves start here. Make yours. Apply today! #J-18808-Ljbffr

Expleo busca un/a Security Operations Analyst (Cyber Defense Operations) para un proyecto internacional junto al UNICC. Te incorporarás a un SOC global 24x7, monitorizando, investigando y respondiendo a incidentes de seguridad en entornos empresariales. Modalidad híbrida (teletrabajo y presencia). Se valorará experiencia en Siem/EDR, cloud y mejoras de detección, con un inglés fluido. #J-18808-Ljbffr

Otto Group one.O is the central, powerful partner for strategy consulting and technology. With around 1,000 colleagues worldwide in areas such as consulting, software development, SAP and data intelligence & AI, we provide strategic advice and design, develop and operate digital end-to-end solutions along the entire value chain. We shape the digital transformation in an innovative and integrated way and accompany customers inside and outside the Otto Group through the AI era. And beyond. What will you do? • Build SAP security from scratch for a new SAP RISE landscape., • Define security governance, standards, and processes., • Own SAP security architecture and secure-by-design principles., • Implement IAM (roles, SoD, PAM/EAM, MFA, SSO)., • Manage vulnerability processes and remediation., • Define hardening standards and baselines., • Coordinate shared-responsibility security with SAP RISE., • Integrate monitoring, SIEM, and audit logging. What's your story? • Deep SAP authorization and security expertise., • Strong knowledge of SAP RISE security model., • Experience with IAM, GRC, Cloud Identity Services., • Familiarity with vulnerability management and SAP Security Notes., • Understanding of compliance frameworks (ISO 27001, NIST2)., • Strong communication skills. Nice to have: • Experience with QRadar or SIEM integration., • Experience with virus scan policies and secure interfaces., • Pen-testing or security assessment coordination., • Alba García Gómez, • Otto Group Solution Provider Spain S.L., • Calle Pascual y Genís 1, 2ª planta derecha | 46002 Valencia, • alba.garciagomez(at)og1o.es #J-18808-Ljbffr

AgileEngine is seeking a Middle Application Security Engineer to execute hands-on DevSecOps work across CI/CD security, vulnerability tooling, and automated baseline deployment in a large-scale financial services program. You will write Python scripts to integrate SAST, DAST, and SCA gates into pipelines and guide remediation for Java and Python teams. The role requires 3–5 years of combined software engineering and AppSec experience, with strong Python skills and familiarity with modern CI/CD #J-18808-Ljbffr

Aquí encontrarás más que un trabajo: una oportunidad para crecer, aprender y dejar huella. Únete a nuestros 7.000 profesionales en España y 15 oficinas y a una red global de 400.000 personas que trabajan cada día para transformar negocios y sociedades. ShapeTheFutureWithConfidence | #EYCareers | #BuildingABetterWorkingWorld En EY, somos una firma global líder en auditoría, consultoría, estrategia y transacciones y servicios legales y fiscales. Nos impulsa la innovación, la tecnología y el propósito de generar un impacto positivo duradero. • Gestión de proyectos de seguridad a nivel técnico y funcional., • Definición e implantación de Estrategias de Ciberseguridad y Planes Directores de Seguridad., • Consultoría y asesoramiento en materia de cumplimiento normativo (GDPR, ENS, LPIC, NIS…)., • Asesoramiento en la obtención de certificaciones de seguridad (ISO 27001, ISO 22301, ENS…)., • Análisis de riesgos de seguridad (técnicos, organizativos, etc)., • Revisión y actualización de políticas y normativas de seguridad., • Auditorías de seguridad (cumplimiento normativo, gestión de usuarios, configuraciones, etc)., • Definición e implantación de procesos relacionados con la ciberseguridad (gestión de usuarios, gestión de cambios, procesos de bastionado, etc)., • Definición e implantación de Planes de Continuidad de Negocio (PCN) y Planes de Recuperación ante Desastres (PRD)., • Definición y ejecución de simulacros (gestión de crisis, recuperación de sistemas…) y pruebas (phishing, ransomware…) de seguridad, • Formación y concienciación en ciberseguridad, • Grado/Licenciatura en ingeniería de telecomunicaciones, software o grado en derecho con especialización en seguridad de la información., • Valorables certificaciones de ciberseguridad (CISA, CISM, CISSP, CEH, etc)., • Inglés: Avanzado., • Experiencia de, al menos, 1 año desarrollando las funciones descritas en proyectos y entornos a nivel internacional., • Analítico., • Proactivo., • Orientado a resultados., • Ganas de aprender y capacidad para responsabilizarse por su formación continua., • Wellbeing HUB: incluye políticas y acciones para la salud física (Wellhub) y mental., • Seguro de Vida y Accidentes., • Oficina Bankinter con condiciones especiales., • Plan de Compensación Flexible EY Flex (transporte, formación, tarjeta restaurante, guardería…)., • Trabajo híbrido y flexibilidad según proyecto., • Formación continua a través de EY University, con un itinerario formativo individualizado., • Plan de carrera para potenciar el crecimiento anual dentro de la firma., • Acompañamiento personalizado: contarás con el apoyo de un Buddy y un Counselor durante toda tu trayectoria., • Trabajo en un entorno dinámico y colaborativo., • Oportunidad de colaborar con equipos globales y multidisciplinares., • Ampliación de tu red profesional en un contexto diverso y enriquecedor., • Acciones de impacto social desde la Fundación EY. #J-18808-Ljbffr

T-Systems Iberia busca un Ingeniero de IA/ML senior para diseñar, desarrollar e industrializar soluciones de IA y modelos en entornos empresariales en Valencia. Se trabajará en pipelines MLOps, APIs y microservicios, promoviendo buenas prácticas, pruebas y observabilidad. Se valorará liderazgo técnico, mentoría a perfiles junior y colaboración en equipos multidisciplinares, en un entorno híbrido con foco en crecimiento profesional y impacto social. #J-18808-Ljbffr

Full Time | Valencia, Spain or Remote on EMEA (CET +/-2 hours) Location: Valencia, Spain or Remote on EMEA (CET +/-2 hours) Teleworking option: Yes SCOPE OF WORK: • Contribute to the development, implementation, validation, tuning, and maintenance of security monitoring, analytics, and detection capabilities across SIEM, EDR, cloud, and other cybersecurity platforms., • Support the operation, maintenance, optimization, and continuous improvement of security monitoring and threat detection services., • Participate in the onboarding, integration, testing, and validation of security data sources, telemetry feeds, and monitoring capabilities., • Contribute to security content management activities, including use case lifecycle management, rule reviews, testing, tuning, and content quality assurance., • Collaborate with cyber threat intelligence, incident response, and cybersecurity operations teams to translate operational and threat intelligence requirements into effective detection and monitoring capabilities., • Under guidance, participate in cybersecurity architecture reviews of new or existing solutions and provide recommendations to enhance security monitoring and detection effectiveness., • Contribute to the preparation and maintenance of cybersecurity operations metrics, dashboards, KPIs, and service performance reports., • Review, validate, and assess the effectiveness of detections, monitoring configurations, operational processes, and service deliverables, identifying opportunities for improvement., • Gather and analyze operational feedback to identify opportunities for tuning, optimization, reduction of false positives, and improvement of overall detection quality., • Contribute to quality assurance activities, including process reviews, control validation, service quality assessments, and implementation of corrective actions., • Support the development, review, and maintenance of CSOC procedures, standards, documentation, knowledge base articles, and operational guidance materials., • Prepare and present technical reports, summaries, findings, and recommendations to internal and external stakeholders., • Provide other ad hoc support as required The resource MUST have the following skills and experience: • A minimum of five (5) years of relevant experience in information technology field, including triage of alerts and supporting security incidents., • Proven experience on administering a SIEM platform, preferably either Splunk or Microsoft Sentinel SIEM., • Proven experience with the usual toolbox available in a SOC (e.g., SIEMs, EDRs) and being able to autonomously perform technical analysis of security threats and collaborate with Incident Response team, • Deep knowledge of Microsoft Security Tools (e.g. M365, Cloud App Security, Azure, Defender for Endpoints, Azure Security, Azure Sentinel and XDR, • Deep Knowledge of Cloud technologies (e.g. Azure, AWS and GCP), • Deep knowledge of SIEM tools like Splunk, QRadar, ArcSight, MS Sentinel, ELK Stack, • Knowledge of at least one EDR solution (MS Defender for Endpoint, CrowdStrike), • Knowledge of email security, network monitoring, and incident response, • Knowledge of Linux/Mac/Windows, • Expert knowledge of English, both written and spoken, is required The resource SHOULD have the following skills and experience: • Experience in building SIEM architectures from initial design to implementation, including designing data ingestion pipelines for diverse log sources across cloud and on-prem environments, • Proven knowledge of monitoring AWS environment (Iaas, Saas, Paas), • Knowledge of at least one general-purpose or shell scripting language (e.g. Ruby, Bash, PowerShell, Python, etc.), • Excellent communication skills, • Customer-facing experience and oral communication skills, • Ability to write documentation & reports, • Creativity/ability to find innovative solutions, • Willingness to learn on the job, • Conflict management & cooperation Desirable certifications: • Technical certifications: MCSE, CCNA, Microsoft Azure (e.g., SC-200), GCIH, CEH, GCFA or any GIAC/similar certification, • Relevant industry certifications Teleworking Option: • Yes, up to 4 days per week for consultants working from Valencia #J-18808-Ljbffr

En este rol trabajarás diseñando e implantando arquitecturas de redes OT seguras en entornos industriales, colaborando con equipos multidisciplinares para cumplir objetivos de ciberseguridad y transformación digital. Formarás parte de un equipo que atiende sectores como fabricación y logística

Overview En este rol trabajarás diseñando e implantando arquitecturas de redes OT seguras en entornos industriales, colaborando con equipos multidisciplinares para cumplir objetivos de ciberseguridad y transformación digital. Formarás parte de un equipo que atiende sectores como fabricación y logística, aplicando modelos de segmentación y normas de seguridad como Purdue e IEC 62443. El puesto ofrece oportunidades de desarrollo y certificaciones en redes industriales. Una forma de contribuir es equilibrar rendimiento técnico con claridad documental y comunicación con clientes. Compensaciones / Beneficios • Jornada intensiva de verano, • Formación profesional continua, • Retribución flexible, • Descuentos en establecimientos y servicios, • Ambiente inclusivo y diverso, • Actividades deportivas y gimnasio Responsabilidades, • Diseñar e implantar arquitecturas de redes OT seguras en entornos industriales, • Diseño de redes segmentadas siguiendo Purdue e IEC 62443, • Selección y configuración de equipos de red industrial, • Elaborar documentación técnica formal (memorias, diagramas, cumplimiento normativo), • Colaborar con ingeniería OT, ingeniería de sistemas y seguridad en proyectos, • Participar en proyectos con otros Circulos / UNEs Requisitos principales, • Experiencia mínima de 2 años en redes industriales/OT, • Conocimiento de segmentación de redes y zonas de seguridad, • Manejo de CLI en al menos un fabricante de redes industriales, • Conocimientos de IEC 62443 (zonas, conductos, niveles), • Capacidad para elaborar documentación técnica clara, • Certificación en redes industriales (fabricante relevante), • Conocimiento de IEC 62443 (nivel Fundamentals), • Inglés técnico B2, • Carnet de conducir, • Organización y metodología impecable, • Trabajo en equipo y compañerismo, • Buena comunicación con cliente, • Segmentación de redes y arquitecturas de zonas de seguridad, • Configuración CLI de fabricantes de redes industriales, • Conocimientos de IEC 62443 (zonas, conductos, niveles)

Overview In this role you will safeguard software used on a global telecommunications project based in Valencia, applying your expertise to secure modern architectures. You will work closely with cross-functional teams to remediate vulnerabilities and influence secure software delivery. You will perform SAST, DAST, code reviews, and penetration testing to identify and mitigate risks. You will leverage Java, C++, or C# skills to strengthen application security across the stack. This is an opportunity to impact a multinational project and contribute to secure, scalable solutions. Compensaciones / Beneficios • Relocation support, • training programs and certifications, • corporate English classes Responsabilidades, • Evaluate business requirements and review software architecture, • Perform source code reviews and static/dynamic security testing, • Review and conduct penetration testing on software, • Collaborate with development teams to remediate security vulnerabilities in code, • Bring expertise in code review and modern application architecture (Java, C++, C#) Requisitos principales, • Bachelor's degree in cybersecurity, IT, mathematics, or related field, • At least 3 years of experience in application security, • Experience in code review and penetration testing, • Strong knowledge of information security principles and data protection, • Ability to work independently and in a team, • Excellent verbal and written communication skills in English, • team collaboration, • strong communication, • independent work, • application security, • SAST, • DAST

Overview In this role you will safeguard software used on a global telecommunications project based in Valencia, applying your expertise to secure modern architectures. You will work closely with cross-functional teams to remediate vulnerabilities and influence secure software delivery. You will perform SAST, DAST, code reviews, and penetration testing to identify and mitigate risks. You will leverage Java, C++, or C# skills to strengthen application security across the stack. This is an opportunity to impact a multinational project and contribute to secure, scalable solutions. Compensaciones / Beneficios • Relocation support, • training programs and certifications, • corporate English classes Responsabilidades, • Evaluate business requirements and review software architecture, • Perform source code reviews and static/dynamic security testing, • Review and conduct penetration testing on software, • Collaborate with development teams to remediate security vulnerabilities in code, • Bring expertise in code review and modern application architecture (Java, C++, C#) Requisitos principales, • Bachelor's degree in cybersecurity, IT, mathematics, or related field, • At least 3 years of experience in application security, • Experience in code review and penetration testing, • Strong knowledge of information security principles and data protection, • Ability to work independently and in a team, • Excellent verbal and written communication skills in English, • team collaboration, • strong communication, • independent work, • application security, • SAST, • DAST

In this role you will safeguard software used on a global telecommunications project based in Valencia, applying your expertise to secure modern architectures.

As a Product Security Incident Response Engineer, you address vulnerabilities in ADI products and drive timely, cost-effective remediation.You collaborate with product teams to triage and fix issues within the PSIRT framework, across multiple product lines.You’ll assess security during development

As a Product Security Incident Response Engineer, you address vulnerabilities in ADI products and drive timely, cost-effective remediation.You collaborate with product teams to triage and fix issues within the PSIRT framework, across multiple product lines.You’ll assess security during development

En este rol trabajarás diseñando e implantando arquitecturas de redes OT seguras en entornos industriales, colaborando con equipos multidisciplinares para cumplir objetivos de ciberseguridad y transformación digital.Formarás parte de un equipo que atiende sectores como fabricación y logística,

As a Product Security Incident Response Engineer, you address vulnerabilities in ADI products and drive timely, cost-effective remediation.You collaborate with product teams to triage and fix issues within the PSIRT framework, across multiple product lines.You’ll assess security during development

United ITS is seeking a skilled SOC professional to contribute to the development, validation, and tuning of security monitoring across SIEM, EDR, and cloud platforms. You will support operations and collaborate with IR teams to enhance detection capabilities. Ideal candidates have 5+ years in IT security, hands-on SIEM experience (Splunk or MS Sentinel), and strong knowledge of Microsoft security tools and cloud technologies. Remote-friendly with Valencia base and 4 days/week telework option. #J-18808-Ljbffr

Fundada en 2008, HipoGes es una de las plataformas líderes en Asset Management para activos distressed, con más de 48.500 millones de euros en activos bajo gestión. Con oficinas en España, Portugal, Grecia e Italia y más de 1.700 empleados, HipoGes como plataforma independiente trabaja con más de 30 clientes diferentes, instituciones financieras e inversores internacionales especializados en el sector de activos distressed. HipoGes proporciona soluciones a lo largo de todo el ciclo de inversión: • Due diligence y valoración, • Cierre de operaciones y reestructuración, • Gestión amistosa de préstamos / gestión legal, real estate management, estrategia de comercialización y venta, reporting ; portfolio managementEn el área de asset management, HipoGes gestiona una amplia gama de activos incluyendo hipotecas residenciales, préstamos a grandes corporaciones y PYMES, activos de real estate y préstamos sin garantía. El Departamento de Portfolio Management es el encargado de la gestión integral de los portfolios en gestión, cualquiera que sea la naturaleza de los mismos (personas físicas, PYMES o grandes corporaciones, así como REOs) y abarcando desde la recuperación de la deuda, mediante estrategias extrajudiciales de resolución (cash y non cash) hasta la venta de los REOs en gestión o adjudicados tras la compra de la cartera. El equipo de Portfolio Management trabaja en estrecha colaboración con otros departamentos clave de la organización para diseñar y ejecutar estrategias óptimas y efectivas de resolución de los portfolios, ajustadas a las características específicas de cada deudor, tipo de préstamo o REO en gestión, así como en la optimización de los procesos. El puesto de Asset Manager es el encargado de diseñar y ejecutar la estrategia de recuperación amistosa a través de la negociación sobre diferentes palancas financieras, en carteras de Persona Física y Persona Jurídica. Las principales funciones son: • Negociación con empresas en situaciones de crisis tanto en concurso como en ejecución hipotecaria., • Elaboración de estrategias y escenarios con el fin de llegar a una solución por la vía extrajudicial., • Interacción directa con el cliente (inversor), asesores externos, deudores, Administraciones, procuradores, administradores concursales, etc., • Preparar y llevar a cabo reuniones y presentaciones frecuentes con la dirección ejecutiva y/o cliente para evaluar resultados., • Al menos dos años de experiencia en la recuperación de deuda por la vía extrajudicial., • Sólidos conocimientos financieros: elaboración de cashflows, análisis de BP, proyecciones…, • Muy buenas habilidades de negociación., • Muy buena capacidad de comunicación., • Nivel Usuario de Excel. #J-18808-Ljbffr

AgileEngine is an Inc. 5000 company that creates award-winning software for Fortune 500 brands and trailblazing startups across 17+ industries. We rank among the leaders in areas like application development and AI/ML, and our people-first culture has earned us multiple Best Place to Work awards. If you're looking for a place to grow, make an impact, and work with people who care, we'd love to meet you! We are looking for a Middle Application Security Engineer to execute hands-on DevSecOps work across CI/CD pipeline security integration, vulnerability management tooling, and automated hardened baseline deployment within a large-scale financial services security program. You will write Python scripts to integrate SAST, DAST, and SCA gates into CI/CD pipelines, tune scanning tools to reduce false positives, and provide code-level remediation guidance to Java and Python development teams. The role requires 3-5 years of combined software engineering and AppSec experience. • Write and maintain the scripts necessary to integrate security gates (SAST, DAST, SCA) seamlessly into the CI/CD pipeline;, • Continuously tune and configure existing security scanning tools to eliminate false positives and deliver high-confidence alerts;, • Assist in coding and deploying automated hardened baselines and secure coding patterns;, • Work directly with product development teams to provide actionable, code-level remediation guidance in Java and Python., • 3-5 years of commercial experience blending software engineering and DevSecOps/AppSec;, • Solid coding proficiency in Python for automation and scripting;, • Working knowledge of modern CI/CD orchestration tools and practical experience interacting with vulnerability scoring frameworks;, • Ability to operate with minimal supervision on day-to-day execution, reliably completing complex scripting and integration tasks;, • Ability to comfortably read and navigate Java source code;, • Hands-on experience with specific CNAPP or ASPM platforms (e.g., Wiz);, • Basic understanding of application threat modeling., • Professional growth: Mentorship, TechTalks, and personalized growth roadmaps., • Competitive compensation: USD-based pay with education, fitness, and team activity budgets., • Exciting projects: Modern solutions with Fortune 500 and top product companies., • Flextime: Flexible schedule with remote and office options. Each step helps us understand your skills and overall fit. If it's a match, you'll receive an offer. #J-18808-Ljbffr

GMV is seeking a Data Architect to lead the design and implementation of scalable data platforms in Valencia. You will drive deployment and integration across IBM Watsonx, Azure, and Google Cloud while ensuring security, scalability, and high performance. We value experience in big data architectures and knowledge of cloud platforms, MLOps, Hadoop, Spark, and Kafka, with the ability to influence stakeholders and craft a strategic data vision. #J-18808-Ljbffr

Hotelbeds Group is seeking a Security Expert (Red Team) to proactively assess and validate security posture across corporate, cloud, applications, and AI-enabled environments. You will conduct penetration tests, adversary emulation, and purple team activities to strengthen cyber resilience. Responsibilities include offensive security assessments of web apps, APIs, cloud platforms, and infrastructure; AI security governance; cloud and container security; and collaboration with Blue Team, DevOps, #J-18808-Ljbffr

Location: Valencia, Spain, Hybrid OR Remote across EMEA Employment: Full-Time Contract Duration: 6 months, with potential extension Language: Fluent English required Industry: Cybersecurity / SIEM / Cloud Security Pragmatike is recruiting on behalf of a major international organization for a Security Operations Analyst specializing in SIEM and Threat Detection. You’ll join a global Cybersecurity Operations team focused on building, operating, and continuously improving the security monitoring capabilities protecting international organizations and their technology environments. Unlike a traditional SOC monitoring role, this position has a strong focus on SIEM administration, detection engineering, security content, data-source onboarding, use‑case lifecycle management, and detection optimization. • Develop, implement, validate, tune, and maintain security monitoring and detection capabilities., • Administer and optimize SIEM platforms across multiple customer environments., • Manage security detection rules and use cases throughout their lifecycle., • Onboard, integrate, test, and validate new security data sources and telemetry feeds., • Review and improve detection logic, security content, and monitoring configurations., • Collaborate with Threat Intelligence and Incident Response teams to translate threats into actionable detection capabilities., • Support cybersecurity architecture reviews and provide recommendations to improve security monitoring., • Build and maintain security metrics, dashboards, KPIs, and service-performance reports., • Evaluate detection effectiveness and identify opportunities to reduce false positives., • Contribute to quality assurance, process reviews, control validation, and corrective actions., • Maintain SOC procedures, standards, documentation, knowledge bases, and operational guidance., • Prepare technical reports, findings, and recommendations for internal and external stakeholders., • 5+ years of relevant IT/cybersecurity experience., • Proven hands-on experience administering a SIEM platform, ideally Splunk or Microsoft Sentinel., • Strong experience with SIEM/EDR environments and technical security analysis., • Deep knowledge of Microsoft Security technologies., • Strong cloud security knowledge across Azure, AWS, and/or GCP., • Experience with platforms such as Splunk, QRadar, ArcSight, Microsoft Sentinel, or ELK., • Experience with at least one EDR platform such as Microsoft Defender for Endpoint or CrowdStrike., • Knowledge of email security, network monitoring, and incident response., • Strong Linux, macOS, and Windows knowledge., • Fluent English with excellent written and verbal communication skills., • Experience designing SIEM architecture from initial design through implementation., • Experience building data-ingestion pipelines for diverse cloud and on-premise log sources., • AWS security monitoring experience., • Scripting experience with Python, PowerShell, Bash, Ruby, or similar., • Security certifications such as SC-200, GCIH, CEH, GCFA, GIAC, CCNA, or MCSE., • Experience working across multiple customer environments., • Work beyond traditional SOC monitoring and contribute to the engineering and optimization of security detection capabilities., • Gain exposure to large-scale SIEM, EDR, cloud, and threat‑detection environments., • Work directly with Threat Intelligence, Incident Response, and Cybersecurity Operations teams., • Help shape detection use cases, monitoring architecture, and operational processes., • Work on cybersecurity services supporting multiple international organizations. Pragmatike is committed to a fair, transparent, and inclusive recruitment process. We do not discriminate based on age, disability, gender, gender identity or expression, marital or civil partner status, pregnancy or maternity, race, religion or belief, sex, or sexual orientation. In accordance with GDPR, your personal data will be processed lawfully, fairly, and securely and used solely for recruitment purposes, including sharing it with our client(s) for employment consideration. #J-18808-Ljbffr

En Expleo buscamos un/a Security Operations Analyst (SIEM Operations & Threat Detection) para incorporarse a un proyecto internacional de alto impacto dentro de UNICCS, organización que proporciona servicios tecnológicos y de ciberseguridad a distintas entidades del sistema de Naciones Unidas. Formarás parte de un equipo global de Cyber Security Operations, contribuyendo a la mejora y evolución de las capacidades de monitorización, detección y respuesta frente a amenazas en entornos empresariales complejos. Trabajarás de forma estrecha con equipos de Threat Intelligence, Incident Response y Security Operations para fortalecer la postura de seguridad y aumentar la visibilidad frente a amenazas avanzadas. • Diseñar, desarrollar y optimizar casos de uso para la detección de amenazas., • Gestionar y evolucionar el ciclo de vida de reglas y contenidos de monitorización de seguridad., • Participar en la administración, optimización y mejora continua de plataformas SIEM., • Integrar nuevas fuentes de datos y telemetría para ampliar las capacidades de detección., • Colaborar con equipos de Threat Intelligence y Respuesta ante Incidentes para reforzar los servicios de ciberseguridad., • Analizar la efectividad de los mecanismos de detección e identificar oportunidades de mejora., • Elaborar métricas, informes y cuadros de mando relacionados con la operación de seguridad., • Mantener actualizada la documentación técnica, procedimientos operativos y bases de conocimiento., • Participar en revisiones de arquitectura y estrategias de monitorización de seguridad., • Más de 5 años de experiencia en Ciberseguridad o Security Operations., • Experiencia sólida trabajando con plataformas SIEM como Microsoft Sentinel o Splunk., • Conocimientos prácticos de monitorización de seguridad, detección de amenazas e investigación de incidentes., • Amplia experiencia con soluciones de seguridad Microsoft., • Experiencia en entornos cloud como Azure, AWS o GCP., • Conocimientos y experiencia con tecnologías EDR., • Comprensión sólida de redes, seguridad perimetral y respuesta ante incidentes., • Nivel alto de inglés, tanto escrito como hablado., • Experiencia en arquitectura, implantación o evolución de plataformas SIEM., • Conocimientos en diseño de pipelines de ingesta y monitorización de logs., • Experiencia con scripting utilizando PowerShell, Python o Bash., • Experiencia específica en monitorización de seguridad en AWS., • Certificaciones como SC-200, CEH, GCIH, GIAC o equivalentes., • Trabajo híbrido., • Crecimiento Versátil: Aprende nuevos idiomas y certificaciones técnicas con nuestra Expleo Academy., • Tiempo para Ti: Disfruta de 24 días de vacaciones al año, más los días 24 y 31 de diciembre., • Ambiente Inmejorable: Un lugar donde el apoyo entre compañeros es la norma y la competitividad no tiene cabida., • Conexión y Bienestar: En Expleo nunca faltan las risas, y la diversión está asegurada. Participa en nuestro club de pádel y running, eventos de verano, Halloween… ¡y mucho más!, • Beneficios Flexibles: Seguro médico, cheques restaurante y guardería… ¡tú eliges cómo usarlos! Somos una empresa que ofrece igualdad de oportunidades y aceptamos solicitudes de todas las personas debidamente cualificadas, independientemente de su raza, género, discapacidad, religión/creencia, orientación sexual o edad. #J-18808-Ljbffr

Location: Valencia, Spain, Hybrid OR Remote across EMEA Employment: Full-Time Contract Duration: 6 months, with potential extension Language: Fluent English required Industry: Cybersecurity / Cloud / Enterprise Security Pragmatike is recruiting on behalf of a major international organization for a Security Operations Analyst to join a global Cybersecurity Operations team. You’ll be part of a 24/7 Security Operations Centre (SOC) responsible for monitoring, detecting, investigating, and responding to cyber threats across enterprise, cloud, network, and endpoint environments. This is a hands‑on security role focused on alert triage, threat investigation, log analysis, incident response, and security monitoring, working alongside cybersecurity specialists distributed across multiple regions. • Monitor, triage, and investigate security alerts across SIEM, EDR, Microsoft security tools, and cloud platforms., • Analyze host and network logs from Windows, Linux, databases, applications, web servers, firewalls, and NIDS/HIDS., • Investigate suspicious activity, identify root causes, and determine appropriate remediation or escalation., • Support incident response, remediation, and recovery activities., • Work closely with Incident Response and other cybersecurity teams to manage security threats., • Analyze network and security events using TCP/IP, syslog, firewall, and network monitoring data., • Identify opportunities to improve detection quality and reduce false positives through tuning and optimization., • Gather technical information from clients to improve security monitoring and detection., • Prepare and present security reports, summaries, and technical findings., • Contribute to SOC procedures, documentation, knowledge bases, and quality‑control processes., • Review operational feedback and implement corrective actions to continuously improve service quality., • 5+ years of relevant experience in IT/cybersecurity, including security alert triage and incident support., • Hands‑on experience working in a SOC environment., • Strong experience with SIEM and EDR platforms., • Advanced log analysis skills across Windows/Linux, databases, applications, and infrastructure., • Strong knowledge of Microsoft Security technologies, including Microsoft Sentinel and Defender., • Experience with cloud security across Azure, AWS, and/or GCP., • Experience with SIEM platforms such as Splunk, QRadar, ArcSight, Microsoft Sentinel, or ELK., • Experience with at least one EDR solution such as Microsoft Defender for Endpoint or CrowdStrike., • Knowledge of email security, network monitoring, and incident response., • Strong knowledge of Linux, macOS, and Windows., • Fluent English with excellent written and verbal communication skills., • Experience working on an Incident Response team with Tier-1/Tier-2 incident triage., • AWS security monitoring experience across IaaS, PaaS, or SaaS environments., • Scripting experience with Python, PowerShell, Bash, Ruby, or similar., • Certifications such as Microsoft SC-200, GCIH, CEH, GCFA, GIAC, CCNA, or MCSE., • Customer‑facing cybersecurity experience., • Work inside a global 24/7 cybersecurity operation protecting international organizations., • Gain exposure to large‑scale cloud, SIEM, EDR, network, and endpoint security environments., • Collaborate with cybersecurity specialists across multiple regions and disciplines., • Work directly on real‑world threat detection and incident response., • Build experience across a broad enterprise security technology stack. Pragmatike is committed to a fair, transparent, and inclusive recruitment process. We do not discriminate based on age, disability, gender, gender identity or expression, marital or civil partner status, pregnancy or maternity, race, religion or belief, sex, or sexual orientation. In accordance with GDPR, your personal data will be processed lawfully, fairly, and securely and used solely for recruitment purposes, including sharing it with our client(s) for employment consideration. #J-18808-Ljbffr

Expleo Group busca un/a Security Operations Analyst (SIEM Operations & Threat Detection) para unirse a un proyecto internacional dentro de UNICCS. Formarás parte de un equipo global que mejora la monitorización y respuesta ante amenazas en entornos complejos. Se requiere más de 5 años en ciberseguridad, experiencia con Microsoft Sentinel o Splunk y conocimiento de nubes (Azure/AWS/GCP). Participarás en diseño, implementación y optimización de casos de uso y reglas SIEM. #J-18808-Ljbffr

Security Operations Analyst (Cyber Defense Operations) En Expleo buscamos incorporar un/a Security Operations Analyst (Cyber Defense Operations) para participar en un proyecto internacional junto a UNICC (United Nations International Computing Centre).Te unirás a un Cyber Security Operations Center (SOC) global 24x7, donde colaborarás con especialistas de ciberseguridad de todo el mundo para monitorizar, investigar y responder a eventos de seguridad en entornos empresariales. Tendrás un papel clave en la protección de sistemas críticos mediante actividades de análisis de amenazas, investigación de incidentes y mejora continua de las capacidades de defensa. Modalidad híbrida de trabajo, combinando teletrabajo y asistencia presencial según las necesidades del proyecto. • Monitorizar y analizar alertas de seguridad procedentes de plataformas SIEM, EDR y soluciones de seguridad en la nube., • Investigar eventos de seguridad y realizar actividades de análisis y triaje de incidentes., • Analizar registros de sistemas y comunicaciones de red para identificar posibles amenazas e incidentes., • Participar en acciones de contención, remediación y recuperación ante incidentes de seguridad., • Escalar incidencias de acuerdo con los procedimientos establecidos., • Elaborar informes técnicos y documentar los resultados de las investigaciones., • Contribuir a la mejora continua de procedimientos operativos y documentación del SOC., • Optimizar reglas y casos de uso de monitorización para reducir falsos positivos y mejorar la capacidad de detección., • Colaborar estrechamente con los equipos de Security Operations e Incident Response., • Más de 5 años de experiencia en Security Operations o Ciberseguridad., • Experiencia previa trabajando en un entorno SOC., • Conocimiento sólido de herramientas SIEM y EDR., • Experiencia en investigación y gestión de alertas e incidentes de seguridad., • Conocimientos de redes y protocolos TCP/IP., • Experiencia analizando logs de sistemas Windows, Linux, aplicaciones y bases de datos., • Conocimiento profundo de soluciones de seguridad Microsoft., • Experiencia o conocimientos en seguridad cloud (Azure, AWS o GCP)., • Nivel fluido de inglés., • Experiencia en funciones de Incident Response Tier 1 y/o Tier 2., • Experiencia en monitorización y seguridad sobre AWS., • Conocimientos de scripting con Python, PowerShell, Bash o Ruby., • Certificaciones de seguridad como SC-200, CEH, GCIH, GCFA, GIAC o equivalentes., • Trabajo híbrido (según necesidades de cliente/proyecto), • Crecimiento Versátil: Aprende nuevos idiomas y certificaciones técnicas con nuestra Expleo Academy., • Tiempo para Ti: Disfruta de 24 días de vacaciones al año, más los días 24 y 31 de diciembre., • Ambiente Inmejorable: Un lugar donde el apoyo entre compañeros es la norma y la competitividad no tiene cabida., • Conexión y Bienestar: En Expleo nunca faltan las risas, y la diversión está asegurada. Participa en nuestro club de pádel y running, eventos de verano, Halloween… ¡y mucho más!, • Beneficios Flexibles: Seguro médico, cheques restaurante y guardería… ¡tú eliges cómo usarlos!, • CompromisoSomos una empresa que ofrece igualdad de oportunidades y aceptamos solicitudes de todas las personas debidamente cualificadas, independientemente de su raza, género, discapacidad, religión/creencia, orientación sexual o edad. #LI-LD1 #J-18808-Ljbffr

European Dynamics seeks a Senior Databricks Administrator/Architect to join the Development team on a remote basis, collaborating with a major client's IT team. The role focuses on architecting scalable data platforms using Azure Databricks, Delta Lake, and Unity Catalog, with extensive security, governance, and CI/CD responsibilities. Required are 8+ years in enterprise data platforms, 5+ years Azure Databricks, and strong Python/ Spark expertise. Excellent English is essential. #J-18808-Ljbffr

Mimacom in Valencia seeks a Senior Backend Cloud Engineer to build secure, scalable backend services in a cloud-native Azure environment, collaborating with cross-functional teams to deliver digital products used by millions, focusing on identity management and robust software practices. You will shape architecture and tooling, implement serverless Azure Functions, apply SOLID and clean-code principles, and contribute to CI/CD pipelines with Jenkins or Azure DevOps, while ensuring observability, #J-18808-Ljbffr

Founded in 2003, Prosolia Energy is a leading business group in the renewable energy sector, with operations in Spain, Portugal, Italy, France, Germany and Mexico. Prosolia Energy is an Independent Power Producer (IPP) specialised in providing decarbonisation services to our customers. We control the entire value chain of the projects through which we provide energy to our customers, developing, constructing, operating and maintaining a range of renewable generation and storage sources. We are committed to leading the transition of the industrial and productive sector towards a decarbonised, sustainable and competitive model. Our strategic objectives for the coming years include growing our asset base and expansion into new markets and products. Prosolia Energy now has a project portfolio of more than 4 GW. In order to build and develop this portfolio, as well as to achieve its strategic objectives, we are looking for talented, high potential professionals who wish to join our team and contribute to our continued success. We are looking for an OT Cybersecurity Manager to lead and implement cybersecurity strategies across our OT environments, ensuring robust risk management and compliance. • Define and update the corporate OT cybersecurity strategy, aligned with the objectives of the Prosolia group, the risk strategy and the applicable regulations (IEC 62443, ISO 27001, NIS2, GDPR, etc.)., • Develop and maintain the framework of security policies, standards and procedures (remote access, communications, backups, use of accounts, etc.), ensuring their implementation in all countries and assets of the company, according to size and type., • Carry out periodic cybersecurity risk assessments in OT infrastructures and control systems (SCADA, PLC, RTU, plant networks), identifying vulnerabilities and prioritizing mitigation actions., • Develop and follow risk management plans, including technical and organizational measures. Prioritize and track remediation plans from OT risk assessments and audits, including deadlines, owners, and completion indicators., • Design and validate OT network security architecture, including network segmentation, secure remote access systems, traffic monitoring, and IT/OT segregation. Align OT architectures and solutions avoiding silos and promoting shared security capabilities., • Define security requirements for new plant projects, SCADA upgrades or communications, reviewing third-party designs and ensuring that deliverables meet defined cybersecurity standards., • Lead remediation campaigns (patching, hardening, segmentation) in coordination with IT, OT, O&M and vendors, ensuring no operational regression., • Participate directly in configuration reviews (firewalls, VPN, remote access, accounts), OT backup restoration tests, and business continuity exercises., • Establish and coordinate security monitoring capabilities applied to critical OT networks, defining use cases, alarms, and escalation procedures., • Lead cybersecurity incident response, from detection to shutdown (containment, eradication, recovery, and lessons learned), including coordination with IT, Insurance, Legal, and Corporate Communication when necessary. Establish structured post-incident processes (Root Cause Analysis, action plans, tracking to closure) integrated into risk/security committees., • Ensure compliance with the regulations applicable to critical infrastructure security, data protection and industrial cybersecurity in the countries where the company operates, coordinating internal and external audits., • Prepare periodic cybersecurity status reports (KPIs), main incidents, level of maturity and progress of action plans for Management, Risk Committees and others., • Define and review cybersecurity clauses in contracts, RFPs, and SLAs with OT, communications, cloud, and O&M service providers, including hardening, support, patching, and incident management requirements., • Assess and monitor the cybersecurity risk of critical third parties (SCADA integrators, communications providers, SOC services) and coordinate corrective actions when breaches or breaches are identified., • Design and execute cybersecurity training and awareness programs, adapted to OT (plant operators, field technicians, O&M) and IT groups, promoting good practices in the use of credentials, remote access and mobile devices., • Design, implement and supervise the secure architecture of communications between plant assets (SCADA, PLC, inverters, trackers) and control centers, guaranteeing the integrity, confidentiality and availability of operational data at all times., • Establish and maintain secure VPN tunnels (IPSec, OpenVPN) and protected remote connections for technical access, centralized monitoring, and OEM support, applying network segmentation, end-to-end encryption, and multi-factor authentication (MFA)., • Define policies and procedures for validated remote access., • Coordinate with telecommunications and OT teams the implementation of secure gateways, industrial firewalls and intrusion detection systems (IDS/IPS OT‑aware), validating configurations and performing periodic connectivity and resilience tests., • Continuously monitor and audit remote communications traffic by responding to detected incidents and reporting usage and security metrics (access KPIs, response time, detected vulnerabilities)., • Evaluate and negotiate with providers (telecom, SCADA integrators or similar) security requirements in communications, periodically reviewing their compliance and coordinating corrective actions., • Build and maintain a multi‑year OT cybersecurity roadmap (maturity levels, investments, NIS2 priorities), updated annually., • Define and track OT security KPIs (open vulnerabilities, remediation progress, incident response times, patching/backup/DR test coverage)., • Govern remediation action plans through regular steering committees with IT, Asset Management external partners and vendors, ensuring accountability and closure., • University degree in Computer Engineering, Telecommunications, Industrial Engineering or similar., • Qualifications that are assessed: Master’s Degree in Cybersecurity or similar., • Languages mandatory: Spanish and English., • Languages that are assessed: Portuguese, Italian, French and German., • Minimum of 3 5-7 years in OT/ICS/SCADA environments or renewable/industrial infrastructures. (3+ years with demonstrated experience in remediation project management or OT cybersecurity implementation)., • Proven experience defining and implementing security policies, leading security project, managing incidents and piloting multi‑stakeholder action plans., • Project management and action plan governance., • Ability to challenge OT integrators/MSPs on technical/security delivery., • Cross‑functional coordination (IT/OT/Asset Management) and committee animation., • Hands‑on OT security operations (configuration reviews, incident leadership)., • International and rapidly expanding company, • Opportunities for professional growth, • Flexible working hours and hybrid work possibilities #J-18808-Ljbffr

Security Expert (Red Team)Applylocations: Spain - Valenciatime type: Full timeposted on: Posted Todayjob requisition id: R-00023599HBX Group is the world’s leading technology partner, connecting and empowering the world of travel. We’re game-changers, disruptors, the people who bring together local and global brands in accommodation, transport, activities and payments through our network of 300,000 hotels worldwide, 60,000 hard to reach high value clients such as tour operators, travel agents and loyalty schemes across 140 source markets. We are tech-driven, with a customer-first philosophy, and commercial teams whose knowledge and relationships on the ground are second to none. And of course we have an amazing team! Our people, Team HBX Group, are the beating heart of the company who we encourage to ‘move fast, dream big and make the difference’ every day. In fact, we believe that it is tech + data + people that truly sets us apart in the market, alongside our ‘global approach, local touch’ mentality. We’re headquartered in Palma, Mallorca and employ around 3,500 people worldwide.## JOB DESCRIPTION:The Red Team Security Expert is responsible for proactively assessing and validating HBX Group's security posture across corporate, cloud, application, and AI-enabled environments.The role combines penetration testing, adversary emulation, offensive security assessments, Purple Team activities, security research, and AI security testing. The successful candidate will work closely with Blue Team, Security Architecture, DevOps, Engineering, Data, and AI teams to identify weaknesses, validate security controls, and strengthen cyber resilience.Offensive Security Assessments Conduct penetration testing activities across web applications, APIs, cloud platforms, infrastructure services and corporate environments. Identify, validate and assess security vulnerabilities, attack paths and exposure risks affecting business services and technology platforms. Perform security assessments throughout the technology lifecycle to support secure development and deployment practices. Collaborate with engineering and infrastructure teams to ensure vulnerabilities are effectively remediated and validated.AI Security & Emerging Threats Assess risks related to Generative AI, Large Language Models (LLMs), AI agents, and machine learning systems. Identify and mitigate threats such as: Prompt injection attacks Data poisoning Model manipulation AI supply chain attacks Sensitive data leakage through AI platforms Shadow AI usage Partner with AI and Data teams to implement secure-by-design AI solutions. Contribute to AI governance, monitoring, and security controls. Stay up to date on emerging AI security frameworks and industry best practices.Adversary Emulation & Red Team Operations Plan and execute realistic Red Team engagements that emulate real-world threat actors and attack scenarios. Leverage MITRE ATT&CK methodologies to assess detection, prevention and response capabilities. Evaluate security controls across on-premises, cloud and hybrid environments. Support cyber resilience initiatives through controlled attack simulations and adversary emulation exercises.Application Security & Code Review Perform web application, API and source code security assessments. Identify weaknesses associated with authentication, authorisation, session management and secure coding practices. Support agile delivery teams by providing security findings and remediation guidance during development cycles. Help improve the organisation's ability to identify and mitigate vulnerabilities early in the software development lifecycle.Cloud & Platform Security Perform offensive security assessments across AWS, Azure and GCP environments. Assess Kubernetes clusters, Docker environments and cloud-native architectures. Review Infrastructure-as-Code deployments and cloud configurations for security weaknesses. Identify privilege escalation opportunities, misconfigurations and potential attack paths. Support cloud security validation and architecture review activities.Security Research & Automation Research emerging attack techniques, exploitation methods and offensive security tools. Develop and maintain automation, scripts and testing utilities to improve offensive security capabilities. Support continuous improvement of Red Team methodologies and testing approaches. Contribute to knowledge sharing, research initiatives and internal security innovation.Purple Team Collaboration Collaborate with Blue Team teams to validate detections and strengthen defensive capabilities. Support the development and testing of monitoring rules, alerting mechanisms and incident response processes. Simulate realistic attack techniques to improve visibility and detection coverage. Promote continuous improvement through joint Red Team and Blue Team exercises.What You Will Bring Previous experience in a Red Team, Penetration Testing, Offensive Security, Application Security or equivalent security-focused role. Strong understanding of offensive security methodologies, attack techniques and adversary emulation practices. Up-to-date knowledge of cyber security threats, exploitation techniques and offensive tooling. Experience performing vulnerability assessments, penetration testing and security validation activities. Knowledge of application security, secure development practices and source code reviews. Good understanding of DevOps and Agile principles, with the ability to support security activities in fast-moving delivery environments. Knowledge of cloud and container technologies, including Kubernetes, Docker and cloud environments such as AWS, GCP or Azure. Experience using scripting languages and automation tools to improve offensive security capabilities and testing efficiency.Desired skills Ability to translate technical security findings into clear risk-based recommendations. Strong analytical mindset, with the ability to investigate complex attack scenarios and identify realistic exploitation paths. Good collaboration skills, with the ability to work effectively with Security, Engineering, DevOps and infrastructure teams. Proactive approach to learning and staying current with emerging threats, attack techniques and security technologies. Ability to balance security requirements with business priorities in agile and cloud-based environments.You will have the opportunity to work for a company that is going through significant change in becoming the world ́s leading travel services provider. We are looking for people that are ready to ride the wave in this exciting journey.As well as an attractive benefits package you will be able to work: Within an innovative, engaging and multicultural environment. Have the opportunity to build strong and lasting business relationships and friendships from around the world. Have the opportunity in developing your career locally or within one of our beautiful working locations across the globe. #J-18808-Ljbffr

ICEYE Spain is seeking a Security Officer to build and own the classified information security posture, coordinating with national authorities to achieve the required classifications and ensure audit-ready operations. You will define, run, and communicate the security framework, and serve as trusted advisor to the Spain CEO on security matters, enabling ICEYE’s growth while meeting regulatory obligations. You will oversee the security program, work with the Global Security team, and maintain #J-18808-Ljbffr

Expleo busca un/a Security Operations Analyst (SIEM Operations & Threat Detection) para integrarse en un proyecto internacional de alto impacto dentro de UNICCS. Formarás parte de un equipo global de Cyber Security Operations, contribuyendo a la monitorización, detección y respuesta ante amenazas en entornos empresariales complejos. Trabajarás de forma estrecha con Threat Intelligence y Incident Response para reforzar la postura de seguridad, mejorar la detección y aumentar la visibilidad ante #J-18808-Ljbffr

EY es una firma global líder en auditoría, consultoría y transacciones que busca un profesional para liderar proyectos de seguridad a nivel internacional. El rol combina definición de estrategias de ciberseguridad, cumplimiento normativo y asesoramiento en certificaciones. La posición ofrece desarrollo profesional continuo, formación a través de EY University y oportunidades de colaborar con equipos globales en un entorno híbrido. Se valorará proactividad y orientación a resultados. #J-18808-Ljbffr

Our client, an international IT service provider, is seeking a Security Operations Analyst (SIEM & Threat Detection) to join them as a contractor, with the option to work onsite within the charming region of Valencia. Starting at an initial 6 month contract, multiple extensions are expected and there is great, long-term potential. • Develop, implement, tune, validate, and maintain security monitoring and threat detection capabilities across SIEM, EDR, cloud, and cybersecurity platforms., • Support the day-to-day operation, optimisation, and continuous improvement of SOC monitoring and threat detection services., • Onboard, integrate, test, and validate new security data sources, telemetry feeds, and monitoring capabilities., • Manage detection content lifecycle activities, including use case development, rule tuning, testing, reviews, and quality assurance., • Extensive experience in cybersecurity operations, SOC environments, alert triage, and security incident support., • Hands-on administration experience with a SIEM platform, preferably Microsoft Sentinel or Splunk., • Strong knowledge of Microsoft security technologies, including Microsoft 365, Defender, XDR, Azure Security, and Sentinel., • Experience working with cloud platforms such as Azure, AWS, and GCP, including security monitoring and log analysis. #J-18808-Ljbffr

Otto Group one.O Spain is seeking a security-focused SAP expert to build and govern SAP security for a new RISE landscape. You will own security architecture, implement IAM, and drive vulnerability remediation while coordinating with SAP RISE teams. Ideal candidates bring deep SAP authorization, SAP RISE security knowledge, and experience with GRC, cloud identity services, and SIEM integrations. Valencia-based role with strong cross-functional collaboration. #J-18808-Ljbffr

En Zelenza buscamos incorporar un/a Service Manager de Ciberseguridad para gestionar y gobernar servicios de seguridad gestionada para una cartera de clientes corporativos. Buscamos una persona con experiencia en gestión de servicios IT o telecomunicaciones, acostumbrada a trabajar directamente con clientes corporativos y con un conocimiento sólido y funcional de ciberseguridad. ? Importante: no buscamos un perfil de operación SOC. No tendrás que configurar plataformas, analizar alertas ni responder técnicamente a incidentes. Tu misión será entender lo que ocurre, coordinar a los equipos implicados y trasladarlo al cliente de forma clara y orientada a negocio. Serás el punto de referencia del cliente para el servicio de seguridad gestionada. Gestionarás una cartera de hasta 12 clientes, coordinando al equipo SOC, áreas de Seguridad e IT del cliente, fabricantes y otros proveedores, sin tener dependencia jerárquica sobre estos equipos. Tu objetivo será asegurar que el servicio funciona correctamente, que los compromisos se cumplen y que el cliente conoce en todo momento el estado y evolución de su servicio. • Gestión integral de los servicios de seguridad contratados por tu cartera de clientes., • Preparación y conducción de comités operativos y ejecutivos con clientes., • Elaboración de actas, seguimiento de acuerdos y control de planes de acción., • Gestión y coordinación de incidencias críticas, con intervención en un máximo de 30 minutos desde el aviso., • Coordinación de los equipos implicados y comunicación continua del estado de las incidencias al cliente., • Elaboración de informes mensuales de servicio, calidad y nivel de cumplimiento., • Creación y presentación de cuadros de mando ejecutivos., • Seguimiento de SLA, identificación de desviaciones y comunicación proactiva al cliente., • Gestión de peticiones y cambios solicitados por el cliente., • Identificación y seguimiento de riesgos operativos., • Propuesta de mejoras técnicas y operativas para evolucionar el servicio., • Identificación de nuevas necesidades del cliente y traslado de oportunidades al equipo comercial., • Mínimo 2 años de experiencia en gestión de servicios IT o telecomunicaciones con interlocución directa y recurrente con clientes corporativos., • Experiencia gestionando varias cuentas simultáneamente, con seguimiento formal y reporting periódico., • Experiencia en posiciones como:, • Service Manager, • Service Delivery Manager, • Service Manager / Gestor de Servicio, • Gestor de Cuenta Técnica, • Technical Account Manager (TAM), • Responsable de Servicio, • Experiencia conduciendo reuniones con clientes, incluyendo interlocutores de nivel directivo., • Capacidad demostrable para gestionar escalados, conflictos e incidencias graves., • Experiencia elaborando informes de servicio y cuadros de mando., • Excel avanzado y buen manejo de PowerPoint para presentaciones ejecutivas., • Conocimiento sólido y funcional de ciberseguridad, suficiente para entender y explicar los principales conceptos y mantener una conversación técnica con el cliente., • Titulación técnica en Informática, Telecomunicaciones, ASIR, DAM o experiencia equivalente., • Disponibilidad para viajes puntuales a instalaciones de clientes y a Madrid para reuniones presenciales., • Experiencia previa en un SOC, MSSP o proveedor de servicios de seguridad gestionada., • Experiencia en preventa o perfil comercial dentro de servicios IT., • Experiencia gestionando clientes corporativos, especialmente situaciones de escalado o clientes descontentos., • Certificaciones o formación en tecnologías y ciberseguridad, como Fortinet, Google SecOps o CCN-CERT., • ITIL 4 Foundation o experiencia trabajando con procesos ITIL., • Experiencia previa en operadores de telecomunicaciones. Alguien que sea capaz de dar la cara ante el cliente, incluso cuando todavía no existe una respuesta técnica definitiva. Necesitamos una persona: • Autónoma y organizada., • Con capacidad para trabajar bajo presión., • Con excelentes habilidades de comunicación e interlocución., • Capaz de traducir información técnica compleja a lenguaje de negocio., • Metódica con el seguimiento de acuerdos, acciones y plazos., • Con orientación al cliente, pero con capacidad para gestionar expectativas y decir “no” cuando sea necesario., • Con criterio suficiente para coordinar equipos técnicos sin necesidad de tener autoridad jerárquica sobre ellos. Si tienes experiencia gestionando servicios para clientes corporativos y te interesa hacerlo dentro del ámbito de la ciberseguridad, queremos conocerte. #Zelenza #Ciberseguridad #Cybersecurity #ServiceManager #ServiceDeliveryManager #ITServiceManagement #SOC #MSSP #CyberSecurityJobs #ITJobs #Telecomunicaciones #ITIL #Madrid #J-18808-Ljbffr

AgileEngine in Valencia is seeking a Software Engineer to contribute hands-on to a follow-the-sun DevSecOps pod, writing Python scripts to integrate SAST, DAST, and SCA gates into CI/CD pipelines. You will deploy automated hardened baselines and provide code-level remediation guidance to development teams, operating with minimal supervision on complex scripting and integration tasks. The role requires 3–5 years of software engineering experience with strong Python proficiency and CI/CD #J-18808-Ljbffr

Luminary is seeking an Information Security Officer to own the security function, set priorities, manage risk, and verify controls with direct access to the Board. You will shape the security framework and report on security posture at the leadership level. Based in Valencia, you will oversee external security providers, drive audits for GDPR, PCI DSS, ISO 27001, and ensure compliance across the organization while partnering with senior management to align security with business goals. #J-18808-Ljbffr

En Expleo buscamos un/a Security Operations Analyst (SIEM Operations & Threat Detection) para incorporarse a un proyecto internacional de alto impacto dentro de UNICCS, organización que proporciona servicios tecnológicos y de ciberseguridad a distintas entidades del sistema de Naciones Unidas. Formarás parte de un equipo global de Cyber Security Operations, contribuyendo a la mejora y evolución de las capacidades de monitorización, detección y respuesta frente a amenazas en entornos empresariales complejos. Trabajarás de forma estrecha con equipos de Threat Intelligence, Incident Response y Security Operations para fortalecer la postura de seguridad y aumentar la visibilidad frente a amenazas avanzadas. • Diseñar, desarrollar y optimizar casos de uso para la detección de amenazas., • Gestionar y evolucionar el ciclo de vida de reglas y contenidos de monitorización de seguridad., • Participar en la administración, optimización y mejora continua de plataformas SIEM., • Integrar nuevas fuentes de datos y telemetría para ampliar las capacidades de detección., • Colaborar con equipos de Threat Intelligence y Respuesta ante Incidentes para reforzar los servicios de ciberseguridad., • Analizar la efectividad de los mecanismos de detección e identificar oportunidades de mejora., • Elaborar métricas, informes y cuadros de mando relacionados con la operación de seguridad., • Mantener actualizada la documentación técnica, procedimientos operativos y bases de conocimiento., • Participar en revisiones de arquitectura y estrategias de monitorización de seguridad., • Más de 5 años de experiencia en Ciberseguridad o Security Operations., • Experiencia sólida trabajando con plataformas SIEM como Microsoft Sentinel o Splunk., • Conocimientos prácticos de monitorización de seguridad, detección de amenazas e investigación de incidentes., • Amplia experiencia con soluciones de seguridad Microsoft., • Experiencia en entornos cloud como Azure, AWS o GCP., • Conocimientos y experiencia con tecnologías EDR., • Comprensión sólida de redes, seguridad perimetral y respuesta ante incidentes., • Nivel alto de inglés, tanto escrito como hablado., • Experiencia en arquitectura, implantación o evolución de plataformas SIEM., • Conocimientos en diseño de pipelines de ingesta y monitorización de logs., • Experiencia con scripting utilizando PowerShell, Python o Bash., • Experiencia específica en monitorización de seguridad en AWS., • Certificaciones como SC-200, CEH, GCIH, GIAC o equivalentes. Trabajo híbrido. Crecimiento Versátil: Aprende nuevos idiomas y certificaciones técnicas con nuestra Expleo Academy. Tiempo para Ti: Disfruta de 24 días de vacaciones al año, más los días 24 y 31 de diciembre. Ambiente Inmejorable: Un lugar donde el apoyo entre compañeros es la norma y la competitividad no tiene cabida. Conexión y Bienestar: En Expleo nunca faltan las risas, y la diversión está asegurada. Participa en nuestro club de pádel y running, eventos de verano, Halloween… ¡y mucho más! Beneficios Flexibles: Seguro médico, cheques restaurante y guardería… ¡tú eliges cómo usarlos! Somos una empresa que ofrece igualdad de oportunidades y aceptamos solicitudes de todas las personas debidamente cualificadas, independientemente de su raza, género, discapacidad, religión/creencia, orientación sexual o edad. #J-18808-Ljbffr

AgileEngine is an Inc. 5000 company that creates award-winning software for Fortune 500 brands and trailblazing startups across 17+ industries. We rank among the leaders in areas like application development and AI/ML, and our people-first culture has earned us multiple Best Place to Work awards. If you're looking for a place to grow, make an impact, and work with people who care, we'd love to meet you! We are looking for a Middle Application Security Engineer to execute hands-on DevSecOps work across CI/CD pipeline security integration, vulnerability management tooling, and automated hardened baseline deployment within a large-scale financial services security program. You will write Python scripts to integrate SAST, DAST, and SCA gates into CI/CD pipelines, tune scanning tools to reduce false positives, and provide code-level remediation guidance to Java and Python development teams. The role requires 3–5 years of combined software engineering and AppSec experience. • Write and maintain the scripts necessary to integrate security gates (SAST, DAST, SCA) seamlessly into the CI/CD pipeline;, • Continuously tune and configure existing security scanning tools to eliminate false positives and deliver high-confidence alerts;, • Assist in coding and deploying automated hardened baselines and secure coding patterns;, • Work directly with product development teams to provide actionable, code-level remediation guidance in Java and Python., • 3–5 years of commercial experience blending software engineering and DevSecOps/AppSec;, • Solid coding proficiency in Python for automation and scripting;, • Working knowledge of modern CI/CD orchestration tools and practical experience interacting with vulnerability scoring frameworks;, • Ability to operate with minimal supervision on day-to-day execution, reliably completing complex scripting and integration tasks;, • Upper-intermediate English level., • Ability to comfortably read and navigate Java source code;, • Hands-on experience with specific CNAPP or ASPM platforms (e.g., Wiz);, • Basic understanding of application threat modeling., • Professional growth : Mentorship, TechTalks, and personalized growth roadmaps., • Competitive compensation : USD-based pay with education, fitness, and team activity budgets., • Exciting projects : Modern solutions with Fortune 500 and top product companies., • Flextime : Flexible schedule with remote and office options. Application → Coding Challenge → Video Interview → Technical Interview or Hiring Manager Interview Each step helps us understand your skills and overall fit. If it’s a match, you’ll receive an offer. #J-18808-Ljbffr

Una empresa de tecnología en Valencia busca un profesional con más de 5 años de experiencia en la gestión de entornos IT, especialmente en Microsoft 365. Será responsable de la administración avanzada de sistemas, así como la gestión de identidades y permisos. Se valorará la proactividad y capacidad de trabajo autónomo, junto con conocimientos en Linux y habilidades en ciberseguridad. Se requieren buenas dotes de comunicación en inglés para el desempeño del rol. #J-18808-Ljbffr

Overview As a Senior Sales Engineer, you will provide technical leadership for the Securiti AI portfolio within the Veeam sales team. You will partner with an Account Executive and other engineers to guide customers from needs assessment to solution design, delivering hands-on demos and PoCs. You’ll act as the primary technical contact during the sales cycle and translate complex security requirements into practical solutions. This role offers impact by shaping security posture management and data protection for enterprise customers at scale. You will collaborate cross-functionally to ensure seamless transitions from pre-sales to post-sales success. Compensaciones / Beneficios • 25 paid vacation days, • 4 extra global VeeaMe Days, • 24 paid volunteer hours annually, • Private medical, dental, and vision insurance, • Life insurance with enhanced coverage, • Defined contribution pension plan with employer match Responsabilidades • Serve as the primary technical contact for Securiti AI solutions during the sales cycle, • Lead technical discussions and deliver customized security solutions, • Address customer needs in data discovery, posture management, and compliance, • Design and present product demonstrations and proof-of-concepts, • Collaborate with product, engineering, and customer success teams to ensure smooth transitions Requisitos principales • Significant experience in pre-sales or sales engineering, • Strong understanding of data and/or cloud security, • 10+ years technical sales experience in security, • 15+ years in Software/SaaS/Enterprise technical sales, • Hands-on experience with AWS, Azure, or GCP, • Knowledge of data privacy/security standards (GDPR, NIST 800-53, ISO 27001), • Experience with DSPM frameworks, Linux, Kubernetes, or cloud data systems, • Relevant certifications (CISSP, CISM, or cloud-specific), • Effective communicator with both technical and business stakeholders, • Pre-sales / sales engineering, • Data security and cloud security, • DSPM frameworks, • Linux, • Kubernetes