Seguridad jobs in Cerdanyola Del VallèsCreate job alertsFull-time

130 years of trust, time to shape what's next. Allianz Group is one of the world's leading insurers and asset managers - built on over a century of stability, expertise, and financial strength. Allianz Services is where that legacy meets the future. 8,200+ people. Eight countries. Three continents. We deliver specialized services to clients within Allianz Group, powered by AI, advanced analytics, and a mindset that refuses to stand still. From core insurance operations to engineering and consulting services, we reimagine how insurance works. What truly sets us apart are our people and the trusted partnerships we build, anchored in our values of expertise, integrity, and empowerment. We don't support the business. We shape it. Role Overview We are looking for an experienced IS Solution Architect – AI Security to drive the design, governance, and evolution of security architectures for AI/ML systems and Generative AI deployments. The role combines deep technical expertise in AI-specific threats and platform security with strong governance capabilities — ensuring robust security controls across model lifecycles, data pipelines, LLM deployments, and AI services while enabling compliant, trustworthy AI adoption across the enterprise. What You Do Design and maintain enterprise AI security architectures: securing model training, data pipelines, inference endpoints, and MLOps workflows — aligned with Zero Trust principles and addressing AI-specific threats including prompt injection, model inversion, data poisoning, adversarial examples, and supply chain attacks. Provide architectural guidance on securing AI/ML platforms and cloud AI services (AWS Sage Maker, Azure ML, Google Vertex AI, Databricks, Hugging Face) and LLM/Gen AI deployments including RAG pipeline security, LLM API access controls, prompt injection defenses, output filtering, context isolation, and AI gateway architectures. Draft, review, and maintain AI/ML security policies, model risk standards, and technical baselines aligned with EU AI Act, ISO 42001, and NIST AI RMF; support formal governance processes for model deployment approvals, AI risk assessments, and risk acceptance sign-off workflows. Define and track KPIs/KRIs for AI security posture (model risk coverage, AI policy compliance rates, vulnerability exposure in AI pipelines) and present governance reporting to security committees and senior leadership. Contribute to or lead AI security design authority and architecture review board (ARB) processes for AI/ML workloads and Gen AI deployments; act as security advisorto AI/data engineering teams and present architecture decisions and risk assessments to senior management. What You Bring Higher education degree in Information Security, Computer Science, Engineering, or related technical field. 5+ years of experience in AI Security Architecture or Security Engineering in enterprise environments. Hands-on experience securing AI/ML systems: model security, data pipeline protection, adversarial threat mitigation, and MLOps security integration. Strong understanding of AI-specific threats and attack vectors: prompt injection, model inversion, data poisoning, membership inference, adversarial examples, and supply chain attacks on AI models. Experience with AI/ML platforms and cloud AI services security (AWS Sage Maker, Azure ML, Google Vertex AI, Databricks, Hugging Face) — IAM controls, model isolation, secure inference endpoints. Knowledge of LLM and Gen AI security: RAG pipeline security, LLM API access controls, prompt injection defenses, output filtering, context isolation, and AI gateway architectures. Familiarity with AI governance and compliance frameworks: EU AI Act risk classification, NIST AI RMF, ISO 42001, and their implications for enterprise AI security controls. Solid security foundations: API security, service mesh, IAM (least privilege for AI services), data security (encryption, tokenization, data residency), and vulnerability management. Excellent English skills (written and spoken). We highly welcome candidates with a genuine interest and affinity for Information Technology (IT) and Generative Artificial Intelligence (Gen AI), as these attributes are considered valuable assets to our team. What We Offer We offer a hybrid work model which recognizes the value of striking a balance between in-person collaboration and remote working incl. up to 25 days per year working from abroad. We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location). From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered. Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach. About Allianz Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges is what makes us a unique employer. We are united by a shared commitment: to put our customers first and at the center of everything we do. Their needs inspire our thinking and guide our actions. Together, we can build an environment where everyone feels empowered and confident to explore, grow and shape a better future – for our customers and for the world around us. At Allianz, we stand for unity: we believe that a united world is a more prosperous world, and we are dedicated to consistently advocating for equal opportunities for all. The foundation for this is our inclusive workplace, where people and performance both matter, and where integrity, fairness, inclusion and trust are at the heart of our culture. We therefore welcome applications regardless of ethnicity or cultural Internal background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations. Join us. Let's care for tomorrow. #J-18808-Ljbffr

Summary Location: Barcelona, Spain; Tel Aviv, Israel About The Role The Enterprise Security Architecture team is looking for an Enterprise Security Architect – Data Security, who will work across information security & risk management, with all information technology functions to ensure Novartis ‘Digital Workspace’ is designed and implemented as per defined policies, standards and industry good practices. They will be responsible for designing, implementing, and maintaining security controls for End User Computing (EUC), Microsoft 365, Voice and Video Collaboration platforms. This role requires close collaboration with Enterprise Architects and Functional Security Architects to ensure a holistic approach to security across the organization. The successful candidate will be a strong communicator with deep technical skills and, more importantly, a pragmatist who can think outside the box. The individual must be highly collaborative as they will need to influence functional leadership, project and application managers, architects, engineers and developers. Key Responsibilities Develop and enforce security policies and procedures related Data Security across Novartis businesses to meet business and regulatory requirements Design security measures and overall Data Security architecture for the IT landscape in line with the ISC policy framework Technical lead for PQC readiness program Support and continually review technology standards and controls related to Data Security and recommend information technology strategies, policies, and procedures Identify design problems within the Data Security domain Support projects to evolve Data Security solutions from evaluation to implementation and assist the delivery of the operational model Support the auditing of security policies and procedures Management communication with key stakeholders and provide reports to management Provide ongoing support to maintain the Data Security domain’s effectiveness and efficiency by defining, delivering, and supporting strategic plans for implementing information technologies Develop and maintain relationships with key stakeholders and vendors Support the direction of technological research by learning the organizational goals, strategies and business drivers Develop and maintain architecture diagrams and documentation related to Data Security processes and procedures Break down the strategic objectives to requirements on the solution portfolio and target architecture Key contributor on products, services and/or infrastructure strategies that require complex or advanced conceptualization Research and evaluate new Data Security technologies and make strategic security technology choices, directly supervising the quality of designs and implementation inside and between components Work with improvements, by participation in the development, of the architectural principles, processes, and standards Essential Requirements University working and thinking level, degree in business/technical area or comparable education/experience 15+ years of working experience in Security domain; minimum 5 years in architecture capacity 5+ years of experience of working in or providing IT services to a large enterprise like Novartis Exceptional understanding security domains like Digital Workspace, Data Protection, AI Security as well as good knowledge of Network Security, Identity and Access Management, SIEM, Vulnerability Management Strong understanding of core cryptography concepts (encryption, key exchange, hashing, digital signatures) Solid PKI expertise, including certificate lifecycle management, trust models, and enterprise PKI architectures Clear understanding of Post‑Quantum Cryptography (PQC) concepts, quantum risks to current algorithms, and crypto‑agility principles Ability to assess quantum‑vulnerable cryptographic usage and data protection controls Experience designing data encryption architectures for data at rest and in transit Knowledge of key management and HSM/KMS solutions Familiarity with cryptographic standards and regulatory requirements (e.G., NIST) Exceptional understanding and knowledge of general IT infrastructure technology, systems and management processes, and experience of sourcing complex IT services, working closely with vendors and making full use of their capabilities Good knowledge of IT Project Management: Proven experience to initiate and manage projects that will affect other divisions, departments and functions, as well as the corporate environment Experience with compliance requirements (e.G. SOX, GxQ / CSV, E‑compliance, Records Management, Privacy), and knowledge of (information) risk management related standards or frameworks such as COSO, ISO 2700x, CobiT, ISO 24762, BS 25999, NIST, ISF Standard of Good Practice and ITIL Strong leadership experience, with excellent written and verbal communication and presentation skills at all levels of the organisation and experience in reporting to and communicating with senior level management (with and without IT background, with and without in-depth risk management background) on information risk topics; interpersonal andcollaborative skills, as well as good mediation and facilitation skills Desirable Good understanding and experience with Enterprise Architecture Frameworks like TOGAF will be an added advantage Commitment To Diversity & Inclusion We are committed to building an outstanding, inclusive work environment and diverse teams representative of the patients and communities we serve. Accessibility And Accommodation Novartis is committed to working with and providing reasonable accommodation to all individuals. If, because of a medical condition or disability, you need a reasonable accommodation for any part of the recruitment process, or in order to receive more detailed information about the essential functions of a position, please send an e‑mail to and let us know the nature of your request and your contact information. Please include the job requisition number in your message. Benefits and Rewards All the ways we’ll help you thrive personally and professionally. #J-18808-Ljbffr

At Q-tech, we are currently looking for a Cloud Security Specialists to join an international environment, playing a key role in strengthening and improving security across complex multi-cloud infrastructures. Location: Barcelona, Spain Responsibilities Analyze and gain a deep understanding of security findings generated by Cloud Security Posture Management (CSPM) solutions across multi-cloud environments, primarily within cloud platforms such as GCP and other cloud infrastructures. Ensure the quality and accuracy of security findings by reviewing vulnerability backlogs and identifying false positives. Design and implement structured prioritization frameworks to manage vulnerabilities efficiently and consistently. Assess security issues within their full technical context to determine their real-world impact and apply a risk-based approach to remediation. Track remediation initiatives, collaborating closely with stakeholders and technical teams to ensure security gaps are resolved in a timely manner. Act as a trusted technical advisor, providing hands-on guidance and support throughout the remediation process. Promote a collaborative security culture by working closely with engineering and operations teams. Requirements Professional experience in Cloud Security , ideally working with CSPM tools and cloud-native architectures at scale. Strong analytical and strategic thinking skills, with the ability to design risk assessment and prioritization processes from the ground up. Deep technical understanding of cloud infrastructure, application code, and vulnerability management practices. Ability to distinguish genuine security risks from false positives by evaluating issues within their broader technical context. Excellent communication and stakeholder management skills, with the ability to collaborate effectively across technical teams. Proactive, organized, and results-driven mindset. Strong ownership and follow-up capabilities to ensure successful vulnerability remediation. Business-fluent English is required for an international environment. Spanish or German is considered a plus. WHAT THEY OFFER If you are looking for an international, technical environment with real impact in defending a global organization, this role is for you. Flexible compensation: €2,700 annually to allocate between meal vouchers (up to €200/month) and transport (€25/month). Health insurance valued at €546.96 annually (€45.58/month). Remote work allowance: €268.92 annually (approx. €22.41/month), added to payroll. Wellbeing: reimbursement for sports activities (gym, swimming pool, etc.) up to €300 annually, added to payroll upon invoice submission. #J-18808-Ljbffr

105188 | IT & Tech Engineering | Professional | Non-Executive | Allianz Services | Full-Time | Permanent 130 years of trust, time to shape what's next. Allianz Group is one of the world's leading insurers and asset managers - built on over a century of stability, expertise, and financial strength. Allianz Services is where that legacy meets the future. 8,200+ people. Eight countries. Three continents. We deliver specialized services to clients within Allianz Group, powered by AI, advanced analytics, and a mindset that refuses to stand still. From core insurance operations to engineering and consulting services, we reimagine how insurance works. What truly sets us apart are our people and the trusted partnerships we build, anchored in our values of expertise, integrity, and empowerment. We don't support the business. We shape it. Role Overview Developan Information Security Risk Management culture within Allianz. This is achieved by maintaining a robust Information Security Risk management framework, providing business visibility into these risks and related threats, and ensuring that comprehensive plans are in place to address them. Enhance Information Security Capabilities within Allianz and with key external partners and institutions. This includes supporting and development of strong Information Security practices and collaborations. Supportkey global Information Security initiatives and solutions. These initiatives aim to strengthen Allianz’ cyber resilience, ensure regulatory compliance, and minimize risks of data leakage and cyber attacks. What You Do Drive the continuous and proactive monitoring and reporting of Key Risk Indicators (KRIs) and control deficiencies related to Information Security (IS) and Cyber Risk. Provide global expert support to Operating Entities (OE) in executing various risk management activities, identifying control deficiencies and defining actionable mitigations to improve the control environment. Collaborate closely with OEs and Group Functions to ensure effective management of Third-Party Cyber Risk and qualitative and quantitative cyber risk assessment activities in alignment with Group Policies. Facilitate OE user-group discussions, promoting the exchange of best practices, providing updates, and driving the continuous improvement of Information Security Risk Management practices. What You Bring Practical experience and certification (e.G. CISM, ISO27001, CRISC) in implementing Information Security governance and management systems. Proven track record in working within large and diverse international organizations. Fluent in English; proficiency in a secondmajor language (e.G. German, Italian, Spanish) is a plus. Proven track record in functional steering and monitoring within large multinational environments, with experience leading without authority. Experience in Information Security Risk Management, Operational Risk Management, Enterprise Risk Management and the use of Governance, Risk and Compliance (GRC) tools Background in project management, particularly with a focus on Information Security, is a plus. Strong analytical skills complemented by excellent soft skills as well as the ability to communicate complex topics clearly and concisely to key (senior) stakeholder We highly welcome candidates with a genuine interest and affinity for Information Technology (IT) and Generative Artificial Intelligence (Gen AI), as these attributes are considered valuable assets to our team. What We Offer We offer a hybrid work model which recognizes the value of striking a balance between in-person collaboration and remote working incl. up to 25 days per year working from abroad We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location) From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach. About Allianz Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges is what makes us a unique employer. We are united by a shared commitment: to put our customers first and at the center of everything we do. Their needs inspire our thinking and guide our actions. Together, we can build an environment where everyone feels empowered and confident to explore, grow and shape a better future – for our customers and for the world around us. At Allianz, we stand for unity: we believe that a united world is a more prosperous world, and we are dedicated to consistently advocating for equal opportunities for all. The foundation for this is our inclusive workplace, where people and performance both matter, and where integrity, fairness, inclusion and trust are at the heart of our culture. We therefore welcome applications regardless of ethnicity or cultural Internal background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations. Join us. Let's care for tomorrow. #J-18808-Ljbffr

CrowdStrike is seeking a Cloud Sales Engineer to support our Southern Europe teams. You will act as a trusted advisor, aligning CrowdStrike technologies with AWS, GCP, Azure and Kubernetes ecosystems, and collaborating with partners and customers to advance cloud security initiatives. The role requires 5+ years in cloud or security sales engineering, strong communication skills in Spanish and English, and a tech-first mindset. Travel as needed, with a hybrid working model in Europe. #J-18808-Ljbffr

Allianz Services, part of Allianz Group, seeks an experienced IS Solution Architect – Cloud Security to design and govern enterprise cloud security across major hyperscalers. You will drive Zero Trust adoption, DevSecOps integration, and regulatory compliance in complex multi-cloud environments. Leading governance, policy drafting, and security KPIs, you will partner with engineering and risk teams to ensure robust security controls and architectural excellence across the cloud landscape. #J-18808-Ljbffr

Bending Spoons is seeking a talented security-focused professional to strengthen our systems and protect company data. You will identify vulnerabilities, automate security controls, and collaborate with privacy experts to ensure regulatory compliance. The role involves working across teams to maintain high security standards and proactive threat detection. We offer flexible start dates, potential part-time options, and a compensation package tied to market ranges across Europe. #J-18808-Ljbffr

Cyber Security Pentest Service Manager (Pharmaceutical Sector) Omega CRM Consulting is looking for a Cyber Security Pentest Service Manager to collaborate with one of the top global pharmaceutical companies. This pivotal role is responsible for overseeing the entire lifecycle of penetration testing activities within our organization, ensuring smooth operations and effective collaboration among stakeholders. Responsibilities Coordinate and manage multiple pentesting projects and schedules. Explain security issues and risks to non‑technical stakeholders. Oversee penetration testing activities, ensuring adherence to testing processes and addressing challenges. Facilitate stakeholder meetings and align diverse interests. Prioritize tasks and resources based on business needs and project urgency. Address challenges and adapt to evolving requirements. Support informed decision‑making by applying basic cybersecurity and penetration testing knowledge. Qualifications Experience working with external vendors or service providers. Bachelor’s degree in Computer Science, Cybersecurity, or related field. 5+ years in information security roles, including penetration testing or vulnerability management. 2–3 years in project or service management, preferably managing multiple pentesting engagements. Familiarity with penetration testing methodologies (OSSTMM, PTES) and tools (Nmap, Burp Suite, Metasploit). Understanding of network protocols, operating systems (Linux, Windows), and web application security. Nice to have Experience working with external vendors or service providers. Bachelor’s degree in Computer Science, Cybersecurity, or related field. 5+ years in information security roles, including penetration testing or vulnerability management. 2–3 years in project or service management, preferably managing multiple pentesting engagements. Familiarity with penetration testing methodologies (OSSTMM, PTES) and tools (Nmap, Burp Suite, Metasploit). Understanding of network protocols, operating systems (Linux, Windows), and web application security. What we offer Permanent contract. Flexible schedule with balanced professional and personal life. Trainings & certifications from main partners. Hybrid schedule: 1 day in the office, 4 days remote. Flexible retribution (public transport ticket, ticket restaurant, etc.). Health insurance. Commitment to a better society. About us Omega CRM, a Merkle Company, is a global digital company specialising in accelerating the Business Experience (BX) of our clients through customer‑centric solutions, technology, and data – all enhanced by AI. We operate across key industries including Retail, Healthcare, Pharma, Real Estate, Education, and Non‑Profit, delivering omnichannel experiences in Customer Service, eCommerce, Marketing, and Analytics. We are guided by values: #Talent, #Flexibility, #Commitment, and #Innovation. Additional information Seniority level: Mid‑Senior level Employment type: Full‑time Job function: Information Technology Industries: IT Services and IT Consulting #J-18808-Ljbffr

Job Purpose: We are seeking a highly skilled and experienced Cybersecurity Architect to join our global team. The ideal candidate will be responsible for designing, implementing, and managing comprehensive security solutions across our global infrastructure. This role requires a wide range of security generalist skills, including proven expertise in cloud and AI security, to protect our organization from evolving cyber threats. The responsibilities further include reviewing our current security measures and processes in all geographies TD SYNNEX operates in, driving enhancements, identifying and addressing areas of weakness, and responding promptly to possible security breaches. Primary duties include ensuring security- and privacy-by-design, zero trust architecture, information protection, application security, identity and access management, risk assessment, controls assurance, threat analytics, incident response and security awareness. Responsibilities: Advises IT and Security leaders in evolving TD SYNNEX’s security strategies, technologies and processes. Design and implement robust security architectures for cloud, AI, and traditional IT environments. Ensure that security measures are integrated into all aspects of the organization's technology infrastructure. Work closely with cross-functional teams, including IT, application development, and business units, to ensure the security of cloud environments, AI applications, and infrastructure. Perform risk assessments of internal services, cloud and 3rd parties, drive remediation and improvements. Develops the ISMS, security policies, standards and procedures, performs M&A due diligence. Prepares and delivers security trainings to IT and Business colleagues. Knowledge, Skills and Experience: > 10 to 15 Years of relevant work experience selection of security and technology certifications and/or equivalent proven work experience. Formal knowledge of Architecture concepts such as TOGAF, Zachman or FEAF. Proficiency in cloud security (AWS, Azure, GCP), AI security, network security, and endpoint protection. Strong knowledge of security frameworks such as NIST CSF, ISO 27001, and SOC 2. Experience with security information and event management (SIEM), intrusion detection, and user behavior analytics (UBA). Expertise in scripting languages such as Python or PowerShell for automation. Experience with secure software development lifecycle (SDLC) and DevSecOps practices and OWASP. Knowledge of identity and access management (IAM), Cryptography and data loss prevention (DLP). Exposure to offensive security practices. Hands-on IT Infrastructure and Network skills. At TD SYNNEX, our values guide everything we do: Together, We Own It, We Dare to Go, We Grow and Win, and above all, We Do the Right Thing. These principles shape how we work with each other, our partners, and our communities as we drive innovation and create lasting impact. What’s In It For You? Elective Benefits: Our programs are tailored to your country to best accommodate your lifestyle. Grow Your Career: Accelerate your path to success (and keep up with the future) with formal programs on leadership and professional development, and many more on-demand courses. Elevate Your Personal Well-Being: Boost your financial, physical, and mental well-being through seminars, events, and our global Life Empowerment Assistance Program. Diversity, Equity & Inclusion: It’s not just a phrase to us; valuing every voice is how we succeed. Join us in celebrating our global diversity through inclusive education, meaningful peer-to-peer conversations, and equitable growth and development opportunities. Make the Most of our Global Organization: Network with other new co-workers within your first 30 days through our onboarding program. Connect with Your Community: Participate in internal, peer-led inclusive communities and activities, including business resource groups, local volunteering events, and more environmental and social initiatives. Diversity, Equity & Inclusion: It’s not just a phrase to us; valuing every voice is how we succeed. Join us in celebrating our global diversity through inclusive education, meaningful peer-to-peer conversations, and equitable growth and development opportunities. At TD SYNNEX (NYSE: SNX), we’re proud to be recognized as a great place to work and a leader in the promotion and practice of diversity, equity and inclusion. With diverse backgrounds, expertise and experiences, our co-workers make us who we are. When we seek to understand one another and recognize the power of the individual, we demonstrate respect and dignity; we learn, evolve and unlock potential to achieve outstanding results for our customers and win together. This broad perspective is integral to our commitment to diversity, equity and inclusion. To learn more, visit or follow us on Twitter, LinkedIn, and Facebook #J-18808-Ljbffr

TECDATA ENGINEERING busca un Senior JBoss / Java Security Remediation Engineer para un proyecto en el sector bancario. Identificar, analizar, remediar y validar vulnerabilidades en aplicaciones Java desplegadas sobre JBoss y entornos AWS, trabajando con herramientas SAST/DAST y GitHub Advanced Security. Se valorará experiencia en Checkmarx, CodeQL y Dependabot, coordinación con DevOps y equipos de Ciberseguridad, y capacidad para validar técnicamente las correcciones dentro de acuerdos SLA de #J-18808-Ljbffr

Kiwi.Com ищет инженера по кибербезопасности для разработки агентных систем, внедрения базовых мер безопасности на платформах Windows/macOS/iOS/Android и сопровождения политик. Вы будете работать над автоматизацией инцидентов, участием в планировании спринтов и взаимодействием с отделами HR, Legal и Finance. Требуется опыт инцидент-реакции, знание CIS/NIST и отличные навыки английского. Рассматривается релокация; оклад конкурентоспособный и включает бонусы. #J-18808-Ljbffr

Scopely is looking for a Senior Security Compliance Engineer to join our Information Security team in Barcelona on a hybrid basis working 2 days a week from the hub. We will consider all candidates willing to relocate to the Barcelona area for this opportunity. At Scopely, we care deeply about what we do and want to inspire play, every day - whether in our work environments alongside our talented colleagues, or through our deep connections with our communities of players. We are a global team of game lovers who are developing, publishing and innovating the mobile games industry, connecting millions of people around the world daily. The IT/Ops team keeps everything behind the scenes running smoothly and we make sure all teams are equipped and connected - whether across the office or halfway around the world. AV struggles? Don’t worry, we’ve got this. What You Will Do In this role, you will help design, build, and scale privacy-aware and compliance systems across a global technology organization. You will combine technical execution with a strong understanding of privacy and regulatory requirements to build practical, reliable solutions that support both the business and our players. You will work closely with cross-functional partners across Security, Legal, Engineering, Product, and Player Experience to embed privacy by design into systems, services, and workflows. This is an exciting opportunity for someone who enjoys solving complex problems, building automation, and turning privacy requirements into scalable engineering solutions. Embed privacy by design into product, platform, and operational workflows Design, build, and improve privacy engineering capabilities that support data subject rights requests, data lifecycle management, and regulatory compliance Translate legal and regulatory requirements into technical requirements, engineering patterns, and actionable implementation guidance Build and maintain tools, services, and automations in Python to support privacy and compliance operations Support workflow orchestration and automation using Temporal or similar platforms Work in AWS and similar environments to operate secure, scalable, and reliable privacy-related systems and integrations Write and deploy SQL to archive or purge data, and to locate, review, and document data for privacy requirements Partner with engineers and architects to implement data solutions that enable the business while protecting sensitive data Conduct privacy assessments, identify risks, and help drive mitigation efforts through tools, training, and guidance Review new systems, features, and data flows for privacy impact, and partner with teams to design technical controls that reduce privacy risk Partner with product and engineering teams to design privacy-preserving solutions, including controls for data minimization, retention, deletion, and access Manage projects and enhancements from requirements gathering through delivery and stakeholder communication Improve documentation, reporting, evidence collection, and operational processes that support broader compliance efforts Identify opportunities to reduce manual work, improve data quality, and strengthen consistency through automation What We’re Looking For 5+ years of experience in information security, privacy, compliance, or a related technical role Hands‑on experience building or maintaining solutions in Python Strong background in software engineering, backend systems, security, data engineering, or data architecture Experience with AWS and cloud-based architectures Experience with Temporal or similar workflow orchestration tools Working knowledge of APIs, JSON, SQL, and related technical tooling Strong understanding of privacy engineering principles, privacy by design, and technical implementation of data subject rights and data lifecycle controls Working knowledge of privacy regulations such as GDPR Familiarity with security and compliance frameworks such as ISO 27001, NIST, or COBIT. Experience working cross‑functionally with Legal, Security, Product, and Engineering teams Strong communication skills, including the ability to explain technical concepts to non‑technical audiences Strong organisational skills and the ability to manage multiple priorities in a fast‑paced, global environment Excellent analytical, problem‑solving, and collaboration skills Experience leveraging or building AI‑enabled tools to enhance GRC processes, including developing AI assistants or automation workflows to improve regulatory monitoring, documentation, and control oversight Ability to navigate ambiguity, balance risk, and quickly learn new technologies Experience working with data systems and large datasets, including understanding data flows, retention, deletion, and access patterns Bonus Points Experience with DSR, DSAR, or privacy operations platforms Graduate‑level study in privacy engineering Experience in gaming, entertainment, or another consumer technology environment Experience working with internationally distributed teams Certifications such as CIPT, CIPP, CIPM, CISSP, CISA, CRISC, or FAIR About Scopely Scopely is a leading video game and global interactive entertainment company, home to many of the world’s most beloved and enduring experiences, including two of the most successful mobile games of all-time “MONOPOLY GO!” and “Pokémon GO,” along with “Stumble Guys,” “Star Trek™ Fleet Command,” “MARVEL Strike Force,” “WWE Champions,” the Scrabble® franchise, “Yahtzee® With Buddies,” and many others. Across mobile, web, PC, and console, Scopely creates, develops, publishes, and live‑operates one of the most diversified and award‑winning portfolios in the games industry — bringing hundreds of millions of players together through a shared love of play. Founded in 2011, Scopely is powered by its exceptional team — including thousands of world‑class gamemakers around the globe, a distinctive tenet‑driven culture, and its proprietary technology platform, Playgami. Together, these strengths have fueled Scopely’s position as the #1 mobile games company in the U.S. and #2 globally, generating more than $10 billion in lifetime revenue. Whether building global sensations like “MONOPOLY GO!” from the ground up, or expanding through strategic acquisitions, including the FoxNext, GSN, and Scopely Explore games businesses — Scopely consistently delivers experiences players love today and return to for years to come. Recognized multiple times as one of the "100 Most Influential Companies in the World" by TIME magazine and one of Fast Company's "World's Most Innovative Companies" and “Best Workplaces for Innovators,” Scopely believes that video games can be a force for good — creating meaningful connections, vibrant communities, and making life better through play. Scopely has global operations and partners across four continents in more than a dozen countries worldwide. For more information, visit: Notice to Candidates: Scopely will never request payment or financial information during the application or hiring process. Should you have any questions or encounter any fraudulent requests/emails/websites, please immediately contact Our job applicant privacy policies are available here: California Privacy Notice and EEA/UK Privacy Notice. Employment at Scopely is based solely on a person's merit and qualifications. Scopely does not discriminate against any employee or applicant because of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), or any other basis protected by law. We also consider qualified applicants with arrest or conviction records, consistent with applicable federal, state and local law. #J-18808-Ljbffr

Amaris Consulting, где входит в состав Mantu, ищет инженера по кибербезопасности с фокусом на SIEM. Ваша задача — развивать новые кейсы, интеграции и скрипты для SIEM/XDR, поддерживать и улучшать существующую инфраструктуру. Работа в международной команде, гибкие условия, обучение и сертификации. Требуется 3–5 лет опыта в кибербезопасности, знание Microsoft Sentinel/Azure, навыки Python/PowerShell/Bash и отличное владение английским языком. #J-18808-Ljbffr

ADP is hiring a Lead Cloud Security Analyst in our Barcelona, Spain office - hybrid role. As a Lead Cloud Security Analyst, you will join a highly skilled team providing world-class infrastructure and network security assessments and security consultation for ADP's Global Security Organization (GSO). This team is responsible for the execution of ADP's global Compliance and Vulnerability Management Program (CVM) program for infrastructure and network across Cloud and on-premises locations. Services provided to the organization include Vulnerability management program management including Zero-day vulnerability response & Secure OS Build Compliance for cloud/container infrastructure as well as on-premises servers/endpoints. You will focus on supporting CVM Cloud initiatives by leveraging a variety of security tools. Working closely with product and technology teams, with your knowledge of industry standards, you will be ensuring our infrastructure meets and maintains the requirements of our CVM security program. To succeed in this position, you'll need knowledge and experience in securing cloud environments (GCP is a MUST) and in developing or being a part of a vulnerability management program working with a variety of product/DevOps teams. Experience with the use of security tools for scanning and detection coupled with the ability to analyze the results across a large data set using database and scripting tools. Balance that with ability to stay ahead of threats and security trends while refining processes in a rapidly changing environment to drive and evolve the program. WHAT YOU'LL DO: Here's what you can expect on a typical day in the life of a Lead Cloud Security Analyst at ADP. Develop: Using existing tools, leverage available data to prioritize what should be addressed to reduce risk in the environment. Measure: Develop metrics to track and show the performance of the program. Communicate: From working with technical teams to understand/solve security issues to summarizing status for senior management. Challenges: Across hundreds of products and a large global infrastructure, no day is the same and we must be prepared to respond to challenges presented. Risk Management: Understand and evaluate/respond to risks/vulnerabilities and how to mitigate them. Experience You’ll Need: Deep understanding of information security specifically in the realm of vulnerability management (VM) Deep understanding of Cloud Security (GCP – Must, Other Cloud environments – Preferred) Experience managing/building VM programs - defining and building metrics, automation of response and remediation (guidance) Strong analytical/problem solving skills and cross functional knowledge across multiple development and security disciplines. Understanding of security and compliance tools such as Qualys, Crowdstrike etc. Experience working with CSPM tools such as Wiz, Prisma, Dome9/Cloudguard, etc is a MUST. Ability to communicate security-related concepts to a broad range of technical and non-technical staff. Experience in scripting languages (Python – Preferred) and SQL Queries (Strong emphasis on Data Analytics) To Succeed in This Role: You’ll have a bachelor's degree OR equivalent. 5-7 years of relevant experience. Any of the following are a plus but not necessary: CISSP, CISM, etc. YOU'LL LOVE WORKING HERE BECAUSE YOU CAN: Team collaboration. Courage comes from how associates are willing to have difficult conversations, speak up, be an owner, and challenge one another's ideas to net out the best solution. Deliver at epic scale. We deliver real user outcomes using strong judgment and good instincts. We're obsessed with the art of achieving simplicity with a focus on client happiness and productivity. Be surrounded by curious learners. We align ourselves with other smart people in an environment where we grow and elevate one another to the next level. We encourage our associates to listen, stay agile, and learn from mistakes. Act like an owner & doer. Mission-driven and committed to navigating change, you will be encouraged to take on any challenge and solve complex problems. No tasks are beneath or too great for us. We are hands-on and willing to master our craft. Give back to others. Always do the right thing for our clients and our community and humbly give back to the community where we live and work. Support our associates in times of need through ADP's Philanthropic Foundation. Join a company committed to equality and equity. Our goal is to impact lasting change through our actions. Find out why people come to ADP and why they stay: A little about ADP: We are a comprehensive global provider of cloud-based human capital management (HCM) solutions that unite HR, payroll, talent, time, tax and benefits administration and a leader in business outsourcing services, analytics, and compliance expertise. We believe our people make all the difference in cultivating a down-to-earth culture that embraces our core values, welcomes ideas, encourages innovation, and values belonging. We've received recognition for our work by many esteemed organizations, learn more at ADP Awards and Recognition (. Diversity, Equity, Inclusion & Equal Employment Opportunity at ADP: ADP is committed to an inclusive, diverse and equitable workplace, and is further committed to providing equal employment opportunities regardless of any protected characteristic including: race, color, genetic information, creed, national origin, religion, sex, affectional or sexual orientation, gender identity or expression, lawful alien status, ancestry, age, marital status, protected veteran status or disability. Hiring decisions are based upon ADP’s operating needs, and applicant merit including, but not limited to, qualifications, experience, ability, availability, cooperation, and job performance. Ethics at ADP: ADP has a long, proud history of conducting business with the highest ethical standards and full compliance with all applicable laws. We also expect our people to uphold our values with the highest level of integrity and behave in a manner that fosters an honest and respectful workplace. Click to learn more about ADP’s culture and our full set of values. #J-18808-Ljbffr

Diseña e implementa la próxima generación de arquitecturas de redes y seguridad. Las organizaciones ya no buscan únicamente proteger su infraestructura. Buscan arquitecturas que les permitan crecer con seguridad, adaptarse a nuevos modelos de trabajo y afrontar un entorno tecnológico cada vez más complejo. En Dotgainen Consulting queremos incorporar a profesionales que disfruten resolviendo ese tipo de desafíos. Personas que quieran participar en proyectos donde las decisiones técnicas tienen un impacto real en el negocio de nuestros clientes y donde cada solución representa una oportunidad para innovar. Somos especialistas en infraestructura, networking, cloud y ciberseguridad , trabajando junto a fabricantes líderes como Cisco y Microsoft . Nuestro compromiso con la excelencia técnica nos ha llevado a ser reconocidos como Cybersecurity Partner of the Year en 2024 y Partner of the Year en 2025 , y seguimos creciendo con el objetivo de consolidarnos como uno de los partners tecnológicos de referencia del mercado. ¿Por qué esta oportunidad es diferente? Porque serás quien ayude a nuestros clientes a tomar decisiones estratégicas sobre su infraestructura de seguridad, participando desde la definición de la arquitectura hasta su despliegue y evolución. Aquí encontrarás un entorno donde podrás: Diseñar e implementar soluciones de redes y seguridad. Liderar proyectos SASE/SSE. Trabajar directamente con clientes y fabricantes tecnológicos de primer nivel. Influir en decisiones técnicas con un alto grado de autonomía. Participar en una empresa en crecimiento donde tu experiencia realmente marcará la diferencia. ¿Qué buscamos? Buscamos un/a Técnico/a Senior de Redes y Seguridad con una fuerte orientación al cliente y pasión por diseñar soluciones tecnológicas de alto impacto. Una persona capaz de conectar negocio y tecnología , liderar conversaciones técnicas con clientes y transformar necesidades complejas en arquitecturas robustas, seguras y escalables. Buscamos un profesional técnico capaz de generar confianza, aportar visión y convertirse en un referente dentro del equipo. Responsabilidades clave Diseñar e implementar soluciones de infraestructura, redes y ciberseguridad adaptadas a cliente final, con impacto directo en todas sus fases: definición, diseño, desarrollo, implantación y go-to-market. Definir arquitecturas end-to-end combinando tecnologías Microsoft, Cisco y otros fabricantes. Monitorización y optimización de la red: identificación, resolución y gestión de incidencias. Control de seguridad, rendimiento y ajuste fino de los sistemas de comunicaciones. Mantenimiento y creación de procedimientos y documentación técnica relacionada con el entorno de comunicaciones. Trabajar de forma directa con fabricantes y partners (Cisco, Microsoft, etc.). Requisitos: Lo que esperamos de ti Al menos 3 años de experiencia en diseño e implantación de redes y seguridad. Experiencia en gestión de proyectos para cliente final. Nivel alto de comunicación, planificación y orientación a resultados. Visión estratégica y de negocio. Nivel alto de inglés. Valoraremos especialmente Certificaciones Cisco (CCNP/CCIE), VMware (VCP), Veeam (VMCE), CISSP/CISM, PMP/PRINCE2 e ITIL. Manejo de Microsoft Project, Jira/Zoho, IT Glue o IT Portal. Experiencia en entornos corporativos complejos o áreas de seguridad estratégica. ¿Qué te ofrecemos? Salario altamente competitivo, acorde a tu experiencia. Modelo de trabajo híbrido. Participación directa en proyectos estratégicos de redes y ciberseguridad. Alto grado de autonomía técnica y capacidad de decisión. Desarrollo profesional dentro de una empresa en pleno crecimiento. Entorno colaborativo, cercano y orientado a la excelencia técnica. La oportunidad de trabajar junto a fabricantes líderes como Cisco y Microsoft en proyectos de alto nivel. ¿Te gustaría formar parte? Si disfrutas diseñando e implementando soluciones complejas, colaborando con clientes y participando en proyectos donde tu criterio técnico realmente importa, queremos conocerte. En Dotgainen Consulting creemos que las mejores soluciones nacen de las mejores personas. Si buscas un nuevo reto profesional donde seguir creciendo y dejar huella, estaremos encantados de hablar contigo. #J-18808-Ljbffr

Adevinta Information Services is building a modern, AI-first cybersecurity organization. We seek a proactive GRC Manager to own governance, risk and compliance and enable the business to move securely and efficiently. You will lead the ISMS, oversee ISO 27001 and other certifications, coordinate audits, and drive risk management across our marketplaces. This role demands collaboration with Legal, Privacy, Procurement, Engineering and Product teams. #J-18808-Ljbffr

Job Description Summary Salary Range: €92,600.00 - €172,000.00 Job Description Summary We build and buy software that touches clinical trials, patient safety, manufacturing, quality systems and commercial operations. It now ships weekly rather than yearly, is increasingly AI-assisted, and increasingly contains AI. Our control framework was built for a slower world. This role makes secure, compliant, audit-ready software delivery the fastest path for engineers — not a gate they route around. You will own the enterprise SDLC governance model and build much of it yourself: policy as code, automated evidence capture, pipeline controls and reference architectures. This is a hands‑on, individual‑contributor leadership role. You will set enterprise direction, influence hundreds of engineers and lead through a federated community — but you will not have a large direct team, and you will spend meaningful time in repositories, pipelines and control code. Candidates seeking pure oversight or people management should not apply. Job Description #LI-Hybrid Location: Barcelona, Spain Key Responsibilities Own the enterprise policy, standards and controls for software engineering, including source control, branching, peer review, testing, release management, environment segregation, change control, configuration and release documentation. Rationalise overlapping GxP, SOX, privacy, security and IT-quality requirements into one coherent, risk‑based framework, ensuring low‑risk internal tools are not governed like regulated clinical systems. Retire SDLC controls that do not reduce risk and ensure tooling is implemented to securely speed up software development at Novartis at the highest scale, leveraging and creating AI tooling for the enterprise. Implement policy as code and controls as code, including branch protections, mandatory review, signed commits, segregation of duties, deployment approvals and immutable audit trails. Build automated, continuous evidence pipelines and define control telemetry including coverage, exceptions, drift, mean time to remediate and control effectiveness, with a focus on agility, automation and speed. Own secure‑by‑default guardrails in golden pipelines and paved‑road platforms, aligning with recognized frameworks including NIST SSDF, ISO/IEC 27001 and IEC 62304 where applicable. Define controls for AI‑assisted engineering, including acceptable use of coding assistants, agentic tooling, IP and licence exposure, provenance, attribution and human accountability for review and approval. Define controls for AI‑containing products, including model lifecycle, dataset and model documentation, evaluation, drift monitoring, explainability, human oversight and readiness for evolving regulatory requirements. Use AI to reduce compliance burden through automated risk assessment drafting, control mapping, test generation, deviation triage and documentation synthesis, while serving as technical authority for inspections, audits, certifications and SDLC remediation. Lead a federated community of engineering, quality, security and compliance practitioners, publish practical guidance, advise senior leaders on risk and trade‑offs, and partner with software developers across the enterprise to enable efficient delivery of compliant and secure products. Essential Requirement You are a practitioner. You have substantial hands‑on software engineering experience: you have written production code, owned CI/CD pipelines, and can read and modify pipeline configuration, IaC and policy code today, unaided. Expect a technical assessment. 10+ years in software engineering, platform engineering, DevSecOps or engineering quality, including senior technical ownership of delivery pipelines at scale. Experience designing and operating automated controls in regulated environments — with evidence of replacing manual compliance work with software. Working fluency in regulated‑software requirements relevant to pharma/life sciences: GxP, GAMP 5 (2nd Ed.), CSA, 21 CFR Part 11, EU Annex 11 and data integrity/ALCOA+. Security engineering depth: application security, software supply chain security, secrets and identity management, vulnerability management. Credible technical judgement on AI in the SDLC — both the tooling and its governance implications. Ability to influence without authority across engineering, quality and business lines, and hold positions with senior stakeholders and auditors. Excellent written English. Desirable Requirement Experience in pharma, biotech, medical devices or another regulated industry (finance, aviation, nuclear), with real inspection or audit exposure.Experience with SOX ITGC in engineering contexts, IEC 62304 / SaMD, and privacy‑by‑design under GDPR. Hands‑on with modern stacks: Git‑based platforms and policy/protection features, container orchestration, cloud, IaC, policy engines (e.G. OPA/Rego or equivalent), test automation frameworks, SBOM and signing tooling. Benefits & Rewards At Novartis, we’re committed to reimagining medicine together - and rewarding the people who make it happen. Expected Annual Base Salary Range for role: 92,600.00 - 172,000.00 EUR The base salary offered is determined based on gender‑neutral objectives, such as relevant skills, competencies and experience in accordance with the Novartis pay setting policy and upon joining Novartis will be reviewed periodically. In addition to your base salary, you may be eligible for a performance‑based bonus depending on certain performance parameters. The rewards of being part of our team go far beyond base pay and incentives. We also offer a variety of competitive benefits in kind to help you thrive personally and professionally, such as insurance plans, retirement plans, wellbeing resources and global recognition programs. In addition, we provide flexible and hybrid working options, where possible, and minimum 14 weeks paid parental leave. Pay equity is a fundamental principle of our employment policy and reflects our commitment to create a diverse, equitable and inclusive environment that treats all employees with dignity and respect, as outlined in our Code of Ethics. Read our brochure to learn more about our global total rewards offering: Note: Benefits and compensation may vary by country and are subject to local legal requirements, including provisions of collective bargaining agreements where applicable. A full overview of your compensation package, including any relevant collective bargaining agreement details applicable to your role based on your employment location and Novartis employer entity, will be communicated separately to you during the application process. Commitment to Diversity and Inclusion / EEO Novartis is committed to building an outstanding, inclusive work environment and diverse teams’ representative of the patients and communities we serve. You’ll receive: You can find everything you need to know about our benefits and rewards in the Novartis Life Handbook. Commitment to Diversity and Inclusion: Novartis is committed to building an outstanding, inclusive work environment and diverse teams' representative of the patients and communities we serve. Skills Desired Business Acumen Influencing Skills Information Security Risk Management IT Governance Stakeholder Management Strategic Leadership Talent Development Improving the lives of people living with disease takes more than innovative science. It takes a focus on the needs of people and a community committed to meeting them. It takes a team of people like you. Working together. Learning together. Thriving together. Discover how you can join us in changing people’s lives. #J-18808-Ljbffr

Infrastructure Security Engineer Factorial is looking for a skilled and experienced Infrastructure Security Engineer to join our team and reinforce the end-to-end security management of our systems and cloud environments. In this role, you will be the guardian of our core foundations, taking full ownership of infrastructure security from risk assessment and vulnerability management to proactive defense and incident response. As a key member of the Security Team, you will ensure that our global infrastructure remains resilient, compliant, and secure. You’ll work closely with SRE and IT teams to maintain a strong security posture, implementing hardening strategies and managing the entire lifecycle of infrastructure risks. The Mission End-to-End Infrastructure Management: Drive the security strategy for our cloud environments, ensuring security is baked into the architecture from day one. Detection & Response: Continuously monitor security alerts and incidents. Conduct thorough incident response and detailed investigations to identify root causes within the infrastructure stack. Vulnerability & Risk Management: Lead the identification, assessment, and remediation of infrastructure vulnerabilities. Maintain the infrastructure risk register and prioritize mitigation efforts based on business impact. Hardening & Resilience: Implement and maintain rigorous hardening strategies across our infrastructure to increase resilience against sophisticated cyberattacks. AI, Tooling & Automation: Develop and manage infrastructure security tooling (CNAPP, CSPM, Vulnerability Scanners) to ensure accurate threat detection and automated compliance. Secure Delivery Pipelines: Secure the infrastructure and runners within our CI/CD pipelines, ensuring the environment where code is built and deployed is protected. Collaboration: Partner with Infra, IT, DX and SRE teams to integrate infrastructure security best practices and automate security controls. Strategy & Documentation: Develop, maintain, and regularly update incident response plans and infrastructure security policies. Your Profile 5+ years of experience in Infrastructure Security or Security Engineering, specifically within Cloud environments, Infrastructure as Code, and Containerization (Kubernetes). Tooling Proficiency: Experience using and managing EDR, CNAPP, DLP, SIEM, and vulnerability management solutions. Threat Knowledge: Strong understanding of Cyberattacks and Threat Actor Tactics, Techniques, and Procedures (TTPs) related to infrastructure and cloud escape. Vulnerability Management Expert: Deep experience managing enterprise-grade vulnerability scanning and risk prioritization workflows. Infrastructure Specialist: Strong understanding of network security, OS hardening (Linux/Unix), and identity management (IAM). Automation Mindset: Proficiency in scripting and automation using Python, Bash, and AI, to streamline SOC operations. Education: Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent experience. Bonus Points: Industry certifications. How We Work At Factorial, we believe the best products are built when people come together—in person—to collaborate, challenge ideas, and move fast. That’s why our Engineering Team follows an office-first, flexible approach. We work on-site several days a week (80%), using that time to connect, align, and innovate as a team. However, we also support remote work when it makes sense (20%) for deep focus or personal needs. Perks of being part of our team High growth, multicultural and friendly environment Continuous training and learning based on your needs Alan private health insurance Healthy life with Wellhub (Gyms, pools, outdoor classes) Save expenses with Cobee Language classes with Preply Get the most out of your salary with Payflow And when at the office... Breakfast in the office and organic fruit Nora and Apeteat discounts Pet Friendly About Factorial Factorial is an innovative Business Management Software solution designed to streamline company processes for small and medium-sized enterprises. Founded in 2016, our mission is to help companies automate workflows, centralize people data, and make better business decisions. With customers across over 60 countries, we've built a diverse team that's driving change in the tech space. Our Values We own it: We take responsibility for every project. We learn and teach: We share knowledge every day. We partner: Every decision is a team decision. We grow fast: We act fast and learn from our mistakes. Join Factorial, where people grow Diversity Diversity is part of our culture. We have more than 43 nationalities and provide an inclusive environment for all. We do not discriminate; we encourage everyone to join us! #J-18808-Ljbffr

Allianz Services is proud to serve and be part of Allianz Group, one of the world's leading insurers and asset managers. Our global footprint, with more than 8000 employees located across ten countries and four continents, enables us to unlock value for our partners across the insurance value chain and deliver superior client experience within Allianz Group. At Allianz Services, we have a strong specialization in core insurance operations, shared services, business analytics, engineering, and management consulting. Our people and our trusted relationships with partners are what matter most. These are rooted in our values of compassion, integrity, and expertise and we strive to continuously evolve, improve, and deliver excellence while contributing successfully to the transformation of Allianz. Caring actively for the environment, for people, and for our customers is what makes us a great place to work and together we are shaping a better and more caring tomorrow. Allianz Services is a company which belongs to the legal entity, Allianz Technology SE. Role Overview Allianz Services is seeking for experienced and forward-thinking Information Security Solution Architects and Engineers to lead the design, development, and implementation of secure technology solutions across our enterprise. This role sits at the intersection of technology and cybersecurity, responsible for ensuring that our systems and solutions are designed and built with security at their core, by design and by default. As a key member of the Information Security team, you will drive strategic and tactical security architecture initiatives, support solution design and implementation for projects across business and IT domains (Network, Cloud, Artificial Intelligence, Workplace, Identity and Access Management), and act as a trusted advisor to stakeholders to ensure that security is embedded throughout the entire solution lifecycle. What You Do Define and maintain enterprise-wide security architecture principles, reference models, and blueprints, ensuring alignment with business and IT strategy. Provide architectural guidance to project and product teams, embedding secure-by-design principles across cloud, on-premise, and hybrid environments. Conduct architecture risk assessments and threat modeling activities to identify security weaknesses and propose mitigation strategies early in the solution lifecycle. Assess and recommend security technologies, tools, and platforms that strengthen the organization's cyber defense posture and align with future-state architecture. Act as a bridge between security, IT architecture, development, and business units to ensure security requirements are consistently embedded into design and delivery processes. Ensure adherence to internal security policies, architecture standards, and external regulatory requirements (e.G., DORA, NIS2, ISO 27001, NIST) throughout solution architecture. Contribute to long-term security architecture roadmaps, enabling secure adoption of new technologies such as Zero Trust, post-quantum cryptography, and AI-driven systems. Create and maintain high-quality documentation of security architecture decisions, patterns, and designs. Communicate complex technical concepts clearly to both technical and non-technical stakeholders. What You Bring Higher education degree in Computer Science, Information Security, or a related technical field. Extensive experience in designing and implementing secure architectures for enterprise IT and cloud environments, with a focus on integrating security across the full solution lifecycle. Strong ability to apply threat modeling, risk assessments, and secure design principles to ensure that solutions are resilient, compliant, and aligned with organizational risk appetite. Proven track record in translating business objectives into secure technical architectures, enabling innovation while maintaining robust cyber resilience. Experience working with enterprise architects, development teams, business stakeholders, and operational security units to embed security into IT and business projects from inception to deployment. Relevant certifications such as CISSP, CRISC, CCSP, TOGAF, or SABSA are highly desirable. Excellent communication skills in English, with the ability to present complex security topics to both technical and non-technical audiences and drive secure-by-design mindset across teams. Strong analytical and conceptual thinking with the ability to assess technical risk, evaluate trade-offs, and recommend secure, practical solutions in complex environments. We highly welcome candidates with a genuine interest and affinity for Information Technology (IT) and Generative Artificial Intelligence (GenAI), as these attributes are considered valuable assets to our team. What We Offer We offer a hybrid work model which recognizes the value of striking a balance between in-person collaboration and remote working incl. up to 25 days per year working from abroad. We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location). From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered. Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach. Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us. We at Allianz believe in a diverse and inclusive workforce and are proud to be an equal opportunity employer. We encourage you to bring your whole self to work, no matter where you are from, what you look like, who you love or what you believe in. We therefore welcome applications regardless of ethnicity or cultural background, age, gender, nationality, religion, disability or sexual orientation. Join us. Let's care for tomorrow. #J-18808-Ljbffr

Описание: Factorial provides Business Management Software that helps small and medium-sized enterprises streamline company processes, automate workflows, centralize people data, and make better business decisions. Its customers are located across more than 60 countries. Задачи: Drive the security strategy for cloud environments and ensure security is built into the architecture from day one Lead the identification, assessment, and remediation of infrastructure vulnerabilities Maintain the infrastructure risk register and prioritize mitigation efforts based on business impact Implement and maintain hardening strategies across the infrastructure Monitor security alerts and incidents Conduct incident response and investigations to identify root causes within the infrastructure stack Develop and manage infrastructure security tooling, including CNAPP, CSPM, and vulnerability scanners Secure infrastructure and runners within CI/CD pipelines Partner with IT, DX, and SRE teams to integrate infrastructure security best practices and automate security controls Develop, maintain, and regularly update incident response plans and infrastructure security policies Требования: 5+ Years of experience in Infrastructure Security or Security Engineering Experience with cloud environments, including AWS or Azure Experience with Infrastructure as Code using Terraform Experience with containerization using Kubernetes Deep experience managing enterprise-grade vulnerability scanning and risk prioritization workflows Strong understanding of network security, OS hardening on Linux/Unix, and identity management with IAM Strong understanding of cyberattacks and threat actor Tactics, Techniques, and Procedures related to infrastructure and cloud escape Experience using and managing EDR, CNAPP, SIEM, and vulnerability management solutions such as Tenable, Qualys, or Wiz Proficiency in scripting and automation using Python, Bash, or similar languages Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent experience Nice to have: Industry certifications Условия: Office-first, flexible approach with on-site work several days a week and remote work supported when appropriate 80% On-site and 20% remote work Continuous training and learning based on individual needs Alan private health insurance Wellhub membership Cobee expense savings Language classes with Preply Payflow salary access Office breakfast and organic fruit Nora and Apeteat discounts Pet-friendly office #J-18808-Ljbffr

We are looking for a Senior AI Security Engineer to help secure the adoption of Artificial Intelligence across enterprise environments, contributing to the design, implementation, and governance of security controls for AI-powered solutions. In this hands-on role, you will work closely with cybersecurity, architecture, engineering, and AI platform teams to translate AI security strategy into practical controls, reusable patterns, and implementation guidance for Machine Learning, Generative AI, RAG, and Agentic AI solutions deployed at enterprise scale. Tasks & Responsibilities Translate AI security risks and strategic objectives into practical security controls, reusable architecture patterns, technical standards, and implementation guidelines. Conduct AI security assessments, architecture reviews, threat modeling exercises, and security testing activities for AI-enabled solutions. Review and support Machine Learning, Generative AI, Retrieval-Augmented Generation (RAG), and Agentic AI architectures from a security perspective. Collaborate with development and platform teams to integrate security controls into AI applications, cloud platforms, development pipelines, and AI engineering processes. Define security requirements for AI applications, models, data, agents, identities, integrations, monitoring, and incident response capabilities. Support the implementation of secure development practices across AI initiatives. Work closely with cybersecurity, enterprise architecture, AI platform, privacy, legal, quality, and business teams to establish sustainable AI security practices. Contribute to the evolution of enterprise AI security standards, frameworks, and best practices. Promote security-by-design principles throughout the AI solution lifecycle. Skills Must Have Degree or equivalent practical experience in Cybersecurity, Computer Science, Artificial Intelligence, Software Engineering, or a related technical field. Proven experience in Security Architecture, Application Security, Cloud Security, Platform Security, Product Security, or Security Engineering. Practical exposure to securing AI, Machine Learning, or Generative AI solutions. Solid understanding of Machine Learning, Generative AI, Retrieval-Augmented Generation (RAG), and Agentic AI architectures, including associated security risks and data flows. Hands-on experience with threat modeling and security assessments. Knowledge of secure software development practices and security testing methodologies. Experience with Identity & Access Management (IAM), secrets management, cloud security controls, and development pipeline security. Ability to translate complex security concepts into practical guidance for technical and non-technical stakeholders. Strong collaboration and communication skills. Fluent professional English. Nice to have Experience with AI security testing, red teaming, adversarial AI testing, or AI risk assessments. Exposure to AI engineering practices and MLOps environments. Experience working in regulated industries such as Pharma, Healthcare, Finance, or Life Sciences. Relevant cybersecurity certifications (CISSP, CCSP, CSSLP, AWS Security Specialty, Azure Security Engineer, or similar). Knowledge of privacy, compliance, and responsible AI frameworks. German and/or Spanish language skills. Experience securing cloud-native environments and enterprise AI platforms. What Success Looks Like AI solutions are delivered with security embedded from design through operation. Security requirements are translated into practical and scalable implementation patterns. AI risks are proactively identified, assessed, and mitigated. Development teams are empowered to build secure AI solutions through clear standards and guidance. Consistent AI security practices are established across enterprise platforms and business domains. Schedule 08h-17h from Monday to Friday (flexible) Prefereably assistance 1 day/office; if it is not possible, full remote. Conditions Salary package based on your profile. Ticket restaurant included in-office hours. Flexible compensation plan (free of income tax) where we provide you with medical insurance, public transport ticket and childcare check. Discounts in gym network WellHub. Training catalogue. Our goal is that you are well in every way! #J-18808-Ljbffr

Join our Movement and Champion Restaurant Culture!At TheFork we believe that the best things in life happen around the table. As the leading restaurant booking platform in Europe, we connect the broadest community of loyal diners with the world’s favorite restaurants. Powered by innovation and a deep passion for the restaurant industry, we create unique dining experiences across 11 countries. If you’re passionate about food, technology, and making a real impact, your seat at the table is ready. Discover life at TheForkWe’re part of the Tripadvisor Group and proud to be building a diverse, people-first culture where “respect”, “ownership”, “growth” and “better together” values thrive.Are you passionate about securing the application development pipelines and ensuring the security of web applications? Are you looking to thrive in a fast-paced environment? If so, TheFork is looking to hire an Application Security Engineer for our ever-growing security team. In this role, you will evaluate the security posture of TheFork’s applications and systems.Main activitiesScanning TheFork web applications looking for vulnerabilities and ensuring they get fixedWorking knowledge of any object-oriented programming language (eg. Node / Typescript)Strong IaaS security skills, with a focus on cloud technologies like AWS.Researching new security threats, vulnerabilities, and exploit techniquesResponding to new security threats and helping implement new requirementsProvides technical guidance and oversight when working with developersWork in a team environment while maintaining the confidentiality of investigation informationStrong knowledge of working with OWASP concepts for various solutionsWho you areBachelor's Degree, preferably in a technical field i.E. Information Systems or Computer Science.Security certifications are desired but not required (CISSP, GIAC, CEH, Security+, CSSLP).At least 4+ years of demonstrated manual security testingYou must have a solid understanding of security protocols, cryptography, authentication, authorization, and general application security requirementsExperience implementing and operating security technologies and processes in a hybrid cloud environment, such as AWS.Strong understanding of IT operations and service support processesWhat we offer youAn awesome team (not everybody like our jokes, but we try our best)A Permanent contract (that can be useful in life)Lunch vouchers available for each working day (because yes, we like to try our best restaurants )International teams - More than 30 nationalities and 16 offices worldwideHighly inclusive working environmentLifestyle benefits that can be used to reimburse physical, leisure activities, family support, travel etcContinuous learning and development programsFree access to the Calm appLife Insurance and Disability at no cost to the employeeWe believe that we are better together, and we welcome you for who you are. We endeavor to ensure that everyone - regardless of ability, age, socio-economic & cultural background, ethnicity, faith, gender, gender expression, gender identity, ideology, national origin, race, sexual orientation, marital status, or any characteristic protected under applicable law -has the opportunity to reach their full potential. At TheFork, we want you to bring us your unique perspectives and experiences, so we can collectively continue disrupting the restaurant industry and go from good to great.#J-18808-Ljbffr

A global healthcare company in Barcelona seeks an experienced Enterprise Security Architect specializing in Data Security. This role requires over 15 years of security experience, including 5 years in architecture. The architect will develop and enforce security policies and procedures, lead projects, and ensure compliance with industry standards. Candidates should have strong cryptographic knowledge and IT project management experience. The position offers opportunities for personal and professional growth within a diverse and inclusive environment.#J-18808-Ljbffr

Titan OS Partnership is seeking an IT Leader to shape and govern the company’s IT strategy for 200+ staff across two regions. You will own roadmap, budget, and security, while leading a small IT team and coordinating with CTO and executives. You will manage SSO/IdP, EDR, RMM, MDM and network infrastructure, ensuring ISO 27001 alignment and reliable IT services for employees and external collaborators. #J-18808-Ljbffr

About The Job Passionate about cybersecurity and eager to protect global digital assets? We are looking for a Cyber Security Analyst to join our Allianz Vulnerability Management (AVM) team, where you will help identify, assess, and mitigate vulnerabilities across Allianz’s digital landscape. Working in an international environment, you will collaborate with internal teams and external partners to strengthen our security posture and drive continuous improvement across key security services. What You Do Perform web application security testing using DAST tools to identify vulnerabilities in applications and APIs Analyze, validate, and prioritize vulnerabilities based on risk and business impact Support and coordinate Allianz’s Bug Bounty Program, including validation of submissions Monitor Allianz’s external attack surface to detect shadow IT and potential risks Collaborate with internal teams to ensure timely remediation of vulnerabilities Advise stakeholders on remediation strategies and security best practices Contribute to the continuous improvement of security processes, tools, and standards What You Bring 3+ years of experience in cybersecurity (application security or vulnerability management preferred) Hands‑on experience with DAST tools (e.G., Burp Suite, OWASP ZAP, AppScan) Strong understanding of web security (OWASP Top 10, API security) Familiarity with vulnerability management tools (e.G., Qualys, Nessus) Fluent English and ability to work in international environments What We Offer A hybrid work model which recognizes the value of striking a balance between in‑person collaboration and remote working, including up to 25 days per year working from abroad. A company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location). Career development and digital learning programs, international career mobility, lifelong learning for employees worldwide, and an environment where innovation, delivery and empowerment are fostered. Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) to support balance of family and career and help people return from career breaks. About Allianz Technology With its headquarters in Munich, Germany, Allianz Technology is Allianz’s global IT service provider and delivers IT solutions that drive the group’s digitalization. With more than 11,000 employees in over 20 countries, Allianz Technology runs, optimizes, transforms and innovates the infrastructure, applications and services together with Allianz companies to co‑create the best customer experience. We service the entire spectrum of digitalization – from one of the world’s largest IT infrastructure projects that spans data centres, networks and security, to application platforms ranging from workplace services to digital interaction. In short, we deliver comprehensive end‑to‑end IT solutions for Allianz in the digital age. We are the backbone of Allianz. Find us at: Commitment to Integrity, Fairness & Inclusion Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us. We believe in a strong inclusive culture that encourages people to speak their minds, get involved and question the status quo. We are proud to be an equal opportunity employer and encourage you to bring your whole self to work, no matter where you are from, what you look like, who you love, or what you believe in. We therefore welcome applications regardless of race, ethnicity or cultural background, age, gender, nationality, religion, social class, disability, sexual orientation, or any other characteristics protected under applicable local laws and regulations. #J-18808-Ljbffr

NTT DATA Europe & Latam en Barcelona busca arquitectos senior de AWS para convertir la nube en una decisión de negocio. Diseñarás arquitecturas cloud objetivo, definirás patrones y roadmaps de transformación, y acompañarás migraciones entre rehosting, replatforming y refactoring. Trabajarás con equipos de ingeniería y seguridad para garantizar escalabilidad, rendimiento y coste controlado, promoviendo prácticas de gobernanza, landing zones y cumplimiento. #J-18808-Ljbffr

Take your career to the next level with Amaris Consulting as a Network Security Engineer (NOC) . Become part of an international team, thrive in a global group with €800M turnover and 1,000+ clients worldwide , and an agile environment by planning the kickoff and follow up on projects. Join Amaris Consulting, where you can develop your potential and make a difference within the company. At least 3/4 years of experience in IT within a large enterprise environment 3–4 years of hands-on experience in troubleshooting, packet capture, and configuration of network and security devices Solid experience with: WAN, LAN, WLAN VPN and Remote Access solutions Firewalls (configuration and troubleshooting), Palo Alto preferred. Strong troubleshooting skills for complex network and security incidents (L2 support) Experience working with network monitoring and management tools Good understanding of network security concepts (DMZs, VLANs, partner connections, etc.) Familiarity with corporate security standards , Computer Systems Validation & Compliance rules , and internal IT processes Ability to lead cross-functional technical task forces and coordinate with multiple stakeholders Strong communication skills, a proactive mindset, and a problem-solving attitude Professional proficiency in English (spoken and written); any additional languageis a plus Provide second-level technical support for Network and Security Services, including: WAN, LAN, WLAN, VLAN DMZs and partner connections Firewalls, Internet Proxies, Remote Access and VPN Perform advanced troubleshooting and packet capture analysis to resolve complex incidents Prepare and document incident reports , ensuring proper escalation and follow-up until resolution Lead infrastructure cross-functional task forces for troubleshooting, root cause analysis, and service improvement initiatives Conduct proactive monitoring of network and security infrastructure, using available tools to: Identify trends and recurring issues Detect and resolve events before they impact users Contribute to problem analysis and continuous improvement of network and security services Ensure that operational tickets and projects comply with: Corporate security standards Computer Systems Validation & Compliance rules Internal working instructions and standard processes Collaborate closely with other IT teams and stakeholders to ensure service reliability and performance Join our dynamic team of talented individuals and experience a world of growth and opportunities. Here's what we offer: Grow rapidly with a tailored career path and salary evaluation. 70% of our senior leaders started at entry level. Enhance your skills through our Tech Academy catalog, Udemy E-learning Platform, language sessions, webinars, and workshops. Take charge of your development with an annual personal training budget and company-paid certifications . Enjoy flexible policies , remote work options (depending on project), and fantastic social benefits such as: Transit and restaurant tickets Private health insurance Benefit from our WeCare program , supporting employees in critical situations. Unleash your full potential, both professionally and personally . Amaris Consulting is proud to be an equal-opportunity workplace. We are committed to promoting diversity within the workforce and creating an inclusive working environment. For this purpose, we welcome applications from all qualified candidates regardless of gender, sexual orientation, race, ethnicity, beliefs, age, marital status, disability, or other characteristics. #J-18808-Ljbffr

About Us / Who You Will Join 130 years of trust, time to shape what's next. Allianz Group is one of the world's leading insurers and asset managers - built on over a century of stability, expertise, and financial strength. Allianz Services is where that legacy meets the future. 8,200+ people. Eight countries. Three continents. We deliver specialized services to clients within Allianz Group, powered by AI, advanced analytics, and a mindset that refuses to stand still. From core insurance operations to engineering and consulting services, we reimagine how insurance works. What truly sets us apart are our people and the trusted partnerships we build, anchored in our values of expertise, integrity, and empowerment. We don't support the business. We shape it. Role Overview Allianz Group is developing the Allianz Security Operations Center (ASOC ) as an integrated capability bringing together threat intelligence, travel security, physical security, executive protection, incident response, and crisis management, with the objective of progressively building scalable 24/7 operational capacity for both man-made and natural risks. In a fast-changing and increasingly volatile environment, Allianz considers this capability a strategic imperative requiring concrete action, sustained commitment, and strong operational leadership. The ASOC will strengthen Allianz Group’s ability to anticipate, monitor, respond to, and recover from disruptions by integrating intelligence and operational capabilities and progressively expanding toward continuous, follow-the-sun coverage. It will protect Allianz personnel, physical assets, business operations, and critical functions through consistent monitoring, analysis, escalation, coordination, and reporting. The ASOC is positioned within Allianz Services and functionally reports into Corporate Security’s Group Protection and Resilience Team. Reporting to the ASOC Lead, the ASOC Operational Lead will help build and mature the operational response lifecycle, from intake and triage to escalation, coordination, response support, reporting, and after-action improvement. Working closely with the Intelligence Lead, this role turns relevant intelligence and situational awareness into disciplined operational action. The successful candidate will be an experienced operations leader, comfortable working under pressure, and bringing together people, processes, and tools into a reliable ASOC operational capability. Key Responsibilities / You Will Get To Oversee and coordinate threat and incident management measures, using intelligence assessments and operational priorities to guide action with Operating Entities and Group Functions. Develop, manage, and mentor a team of operational officers across multiple hubs, setting clear performance expectations, fostering complementary capabilities, and ensuring consistency and quality across deliverables. Develop and improve ASOC threat and incident management processes, including procedures, playbooks, escalation thresholds, standards, performance indicators and quality checks. Manage day-to-day ASOC operations, including shift scheduling, incident intake, triage, escalation protocols, stakeholder coordination, and operational reporting. Lead the response to threats and incidents, and coordinate crisis response with the crisis management team. Work closely with internal stakeholders, including Group Protection & Resilience, Cyber SOC, Communications, real estate, business lines, and local teams. Develop a strong understanding of Allianz’s operational exposure and use security assurance findings to support informed and proportionate response decisions. Ensure key security systems and operational tools are available, reliable, and fit for purpose, including mass notification systems, emergency response plans, travel security, incident management tools, and related platforms. Provide clear operational updates, briefings, situation reports, after-action summaries, and decision-support input to senior leadership during routine operations, major events, and high-pressure incidents. Build and maintain trusted relationships with global stakeholders, Operating Entities, Group Functions, vendors, technology partners, emergency response partners, and relevant external stakeholders. Run drills, table-top exercises, readiness checks, and preparedness reviews for high-impact events, travel disruptions, major incidents, and crisis scenarios. Track, analyze, and report operational KPIs, including incident response times, escalation performance, exercise outcomes, and other relevant performance indicators. Identify practical improvements to ASOC processes, tools, and ways of working to improve efficiency, service quality, resilience, and security outcomes. Drive transformation toward greater automation and the effective use of AI-enabled workflows to enhance ASOC efficiency, scalability, and effectiveness. Safeguard sensitive information and ensure adherence to confidentiality, data protection, operational security, information-sharing, and governance protocols. Key requirements / What we hope you bring Master’s degree in security management, emergency management, or a related field, and/or equivalent experience gained in corporate security, government or comparable operational security environments. 8+ years of experience in physical security operations, incident and crisis management, with proven leadership of regional or global operational teams; previous experience in the financial sector is a plus. Proven leadership experience managing security operations centers, control rooms, or equivalent 24/7 operational environments in the public and/or private sector. Strong project management skills, with the ability to set priorities, manage competing operational demands, and deliver under pressure. Strong knowledge of incident management, travel security, emergency response, executive protection, event security, and crisis management frameworks. Good knowledge of security technologies and platforms, including mass notification systems, access control, incident management tools, and travel security platforms. Solid understanding of hybrid threat environments, including physical, cyber, and reputational dimensions relevant to multinational organizations. Excellent ability to brief senior leaders clearly, support decision-making under pressure, and build strong relationships across global teams. Experience developing, leading, and managing multicultural and multinational teams spread across different countries and time zones. Excellent written and verbal communication skills in English, with fluency in at least one additional language; German fluency isa plus. Ability to identify practical ways to improve processes, increase efficiency, and strengthen the operational team’s contribution to Allianz’s security posture. Other Requirements Ability to act as the operational counterpart to the Intelligence Lead, ensuring that intake, triage, escalation, coordination, and response activities are informed by relevant intelligence and situational awareness. Strong judgement, discretion, and composure when managing sensitive incidents, ambiguous information, fast-moving developments, incomplete reporting, or high-pressure stakeholder expectations. Ability to question assumptions, spot process or capability gaps, and guide teams toward practical, evidence-based decisions. Strong stakeholder management and influencing skills, with the ability to build trust across senior stakeholders, regional teams, crisis management structures, technology teams, vendors, and external partners. Practical experience using automation, AI-enabled tools, and data-driven workflows in a SOC or similar environment. Continuous improvement mindset, with the curiosity and discipline to enhance team effectiveness, processes and tools. Ability to work independently while staying closely aligned with the ASOC Lead, ASOC Intelligence team, Protection & Resilience, business stakeholders, and external counterparts. Willingness and ability to support an on-call operational model, including availability outside standard office hours when required. What We Offer We offer a hybrid work model which recognizes the value of striking a balance between in-person collaboration and remote working incl. up to 25 days per year working from abroad We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location) From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach We highly welcome candidates with a genuine interest and affinity for Information Technology (IT) and Generative Artificial Intelligence (GenAI), as these attributes are considered valuable assets to our team.* | Operations | Professional | Allianz Services | Full-Time | Permanent Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges is what makes us a unique employer. We are united by a shared commitment: to put our customers first and at the center of everything we do. Their needs inspire our thinking and guide our actions. Together, we can build an environment where everyone feels empowered and confident to explore, grow and shape a better future – for our customers and for the world around us. At Allianz, we stand for unity: we believe that a united world is a more prosperous world, and we are dedicated to consistently advocating for equal opportunities for all. The foundation for this is our inclusive workplace, where people and performance both matter, and where integrity, fairness, inclusion and trust are at the heart of our culture. We therefore welcome applications regardless of ethnicity or cultural Internal background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations. Join us. Let's care for tomorrow #J-18808-Ljbffr

About HappyRobotHappyRobot is the infrastructure for enterprises to build and orchestrate AI workforces. Our AI workers don't just communicate through voice and email - they make decisions, take action, and run operations autonomously across entire enterprise systems. Born in Y Combinator (S23) and backed by a16z, Base10, Prysm Capital and Eurazeo with over $150M raised, we power critical operations for global enterprises worldwide.Our platform is battle-tested in the most demanding environments, where AI has real consequences. We started in logistics, built our own voice stack, models, and orchestration layer from the ground up, and are now bringing that infrastructure to every enterprise that runs the real economy. Learn more about our vision in our manifesto.Role OverviewWe are looking for a Cloud Security Engineer to join our team. You will be the single accountable owner for cloud security posture across AWS, Azure, and GCP — bringing the technical depth and operational discipline to keep our infrastructure hardened, our findings remediated on SLA, and our security baseline consistent across every environment we run.This is not a governance or advisory role. Your deepest strength is the ability to own outcomes end-to-end: triaging Wiz findings by real-world exploitability, shipping policy-as-code gates that catch misconfigurations before they hit production, and getting remediation done by engineering teams you don't manage. That said, you operate with a platform mindset — building guardrails that scale rather than manually reviewing every change.What You'll DoCloud Posture Management Own the CNAPP end-to-end. Triage Wiz findings by exploitability and business impact, drive remediation across engineering teams to SLA and keep the backlog from accumulating. Be the person who actually gets findings closed, not just reported.IaC Security Design and ship policy-as-code gates in the Terraform pipeline that block misconfigurations at PR and plan time, before they reach production. Use OPA/Rego, Checkov, tfsec, or equivalent — and calibrate gates to stop bad patterns without creating friction that causes teams to route around them.Multi-Cloud Baseline Define, document, and enforce a consistent security baseline across AWS, Azure, and GCP — covering IAM, networking, KMS/encryption, and logging. Own the documentation that supports enterprise customer security reviews and audit evidence requests.Kubernetes & Container Security Harden clusters, images, and admission paths across EKS, AKS, and GKE. Set and enforce RBAC policies, admission controls, and image scanning standards.Remediation Leadership Drive fixes through engineering teams you don't have direct authority over. Track SLAs, communicate risk clearly to technical and non-technical stakeholders, and elevate when needed — without creating noise.Shift-Left Guardrails Grow the share of cloud infrastructure managed via Terraform with active security checks, quarter over quarter. Trend new critical misconfigurations reaching production to zero.Must Have4–6 years in cloud security or platform/infrastructure security.Expert depth in at least one major cloud provider (AWS, Azure, or GCP): IAM, networking, KMS/encryption, and logging.Hands-on experience with a CNAPP/CSPM — Wiz strongly preferred — including triage, prioritization, and driving remediation with engineering teams.Terraform in production plus policy-as-code experience (OPA/Rego, Checkov, tfsec, or similar) integrated in CI/CD.Kubernetes security fundamentals: RBAC, admission control, and image scanning.Scripting proficiency in Python or Go.English B2+ (professional working proficiency).Nice to HaveWorking experience across 2+ cloud providers — we deploy on AWS, Azure, and GCP.Cross-cloud and Kubernetes certifications: CCSK, CKA, CKS, AWS Security Specialty, or equivalent.EKS/AKS/GKE hardening and container runtime security experience.TypeScript or Go beyond scripting.SIEM/detection exposure — we run RunReveal.SOC 2 / ISO 27001 cloud control evidence experience.Why join us?Join a world-class team of engineers and builders.Backed by top investors including a16z, Y Combinator, Base10, Prysm Capital and Eurazeo.Have ownership and autonomy of projects and are encouraged to ship.Comprehensive Benefits including healthcare, dental, vision coverage.Competitive salary + equity in a high-growth startup.Our Operating PrinciplesExtreme OwnershipWe take full responsibility for our work and outcomes. No excuses, no blame-shifting. If something needs fixing, we own it.CraftsmanshipWe sweat the details because details compound. We never settle for "just fine" — whether it's a scoping document, a prototype demo, or a customer conversation.We are "Majos"Be a good human. Friendly, genuine, kind. We're building something ambitious and it's better when we enjoy it together.Urgency with FocusMove fast, but in the right direction. Prioritize ruthlessly. Act decisively. Aim for the highest leverage action.Talent Density and MeritocracyEvery hire raises the bar. Ability over seniority. Ownership goes to those who earn it.First-Principles ThinkingStrip problems to their fundamentals, ignore industry dogma, and rebuild from scratch when needed. It's how we build what others think is impossible.The personal data provided in your application and during the selection process will be processed by Happyrobot, Inc., acting as Data Controller.By sending us your CV, you consent to the processing of your personal data for the purpose of evaluating and selecting you as a candidate for the position. Your personal data will be treated confidentially and will only be used for the recruitment process of the selected job offer.In relation to the period of conservation of your personal data, these will be eliminated after three months of inactivity in compliance with the GDPR and legislation on the protection of personal data.If you wish to exercise your rights of access, rectification, deletion, portability or opposition in relation to your personal data, you can do so through security@happyrobot.ai subject to the GDPR.For more information, visit https://www.Happyrobot.Ai/privacy-policyBy submitting your request, you confirm that you have read and understood this clause and that you agree to the processing of your personal data as described.#J-18808-Ljbffr

ADP is seeking a Lead Cloud Security Analyst in Barcelona, adopting a hybrid work model. You will lead vulnerability management for cloud and on‑prem infrastructure, focusing on CVM program execution, security tooling, and cross‑team collaboration with DevOps and product teams to maintain robust cloud security across our global environment. The role requires strong experience with VM programs, GCP, and data analytics, plus scripting (Python) and SQL for insights. #J-18808-Ljbffr

About Legacy Legacy is an easy-to-use, non-custodial Web3 wallet designed to protect digital assets through beneficiary protection and seamless DeFi access. Users can swap across chains, earn yield in one click, and safeguard wealth for the next generation. About the Software Division We are building a portfolio of software products inside the Decentralized Masters ecosystem, including: Legacy Wallet - a non-custodial Web3 wallet with beneficiary protection and seamless DeFi access Trading Bot - automated crypto execution tools for serious investors Future fintech and investor infrastructure tools We are now building the retention and lifecycle engine that will power long‑term recurring revenue across all products. About The Role You will be the single person responsible for the security of a platform that tracks hundreds of millions in digital assets. That is the job. Everything else is secondary. We need someone who breaks things for a living. Someone who looks at a login page and sees six attack vectors. Someone who reads a pull request and catches the injection vulnerability that two senior developers missed. Someone who lies awake thinking about the phishing campaign that hasn’t been invented yet. If that sounds exhausting, this is not your role. If that sounds like Tuesday, keep reading. Your primary responsibilities are security and quality assurance. You own penetration testing, vulnerability assessments, threat modeling, automated test frameworks, and CI quality gates across every product we ship. You also own infrastructure: AWS, CI/CD pipelines, monitoring, and incident response. And because we are a small, senior team, you will write production code when security and QA responsibilities are covered. You are not a consultant or a checkbox auditor. You are an engineer who ships, and whose code happens to make everything else harder to break. The ideal candidate has spent time at major product‑driven fintech and crypto companies where a single security failure can destroy user trust overnight. Security (Primary) Own the security posture across all products: Legacy, Trading Bot, and future platforms. If something gets breached, it is your problem. If nothing gets breached, it is because of your work Conduct regular penetration testing, vulnerability assessments, and threat modeling aligned with OWASP standards and methodologies Ensure full coverage of the OWASP Top 10 in application security testing, code reviews, and deployment checks Perform security‑focused code reviews across frontend, backend, and infrastructure code, catching what standard code reviews miss Implement and manage secrets management (Vault, AWS Secrets Manager, or KMS), access controls, and least‑privilege policies Build and maintain incident response playbooks. When something breaks, you lead the response, run the post‑mortem, and ship the fix Stay ahead of Web3 and crypto‑specific attack vectors: phishing campaigns, wallet exploits, API key compromises, supply chain attacks, and social engineering Manage and coordinate external security audits and penetration tests from third‑party firms Quality Assurance & Testing (Primary) Design and implement test strategies across all products: unit tests, integration tests, end‑to‑end tests, API tests, and regression suites Build and maintain automated testing frameworks and CI quality gates that prevent broken code from reaching production Define and track quality metrics: test coverage, flakiness rate, regression detection latency, and bug escape rate Write and execute security test cases: authentication flows, authorization controls, input validation, API abuse scenarios, and edge cases around financial data Perform both white‑box and black‑box testing, leveraging full codebase access to catch issues that surface‑level QA would miss Test across the full stack: frontend UI, backend APIs, database queries, third‑party integrations, and on‑chain interactions Infrastructure & DevOps (Foundation) Maintain and improve cloud infrastructure on AWS using Infrastructure as Code (Terraform or CloudFormation) Own CI/CD pipelines (GitHub Actions preferred): automated testing, security scanning, linting, and deployment Harden infrastructure: network security, IAM policies, container security, and environment isolation Build logging, monitoring, and alerting across all services (CloudWatch, Prometheus, Grafana, or equivalent) Ensure audit trails for user actions, system changes, and access events Manage production reliability, incident response, and cost optimization Fullstack Development (When the fortress is secure) Contribute production code across frontend and backend, bringing a security‑first mindset to every feature you build Build features, fix bugs, and ship improvements alongside the engineering team Every line you write should make the product better and harder to break: input validation, error handling, authentication, and data protection by default Participate in architecture discussions and code reviews, advocating for testability, reliability, and security in every decision Requirements Required 5+ years in software engineering roles with meaningful, hands‑on security and QA experience. We will verify this. If your security experience is theoretical, this is not the right fit Fullstack development experience: you can build and ship features across frontend (React or equivalent) and backend (Node.Js, Python, Go, or equivalent) Hands‑on penetration testing and vulnerability assessment experience across web applications, APIs, and cloud infrastructure Strong working knowledge of OWASP standards, including the OWASP Top 10, OWASP Testing Guide, and OWASP secure coding practices Experience building automated test frameworks and integrating testing into CI/CD pipelines AWS expertise (EC2, ECS/EKS, Lambda, VPC, IAM, S3, RDS, CloudFront, WAF) Infrastructure as Code experience (Terraform, CloudFormation, or Pulumi) Container technologies: Docker and Kubernetes in production environments Scripting and automation proficiency in Bash and Python Experience with secrets management tools (HashiCorp Vault, AWS Secrets Manager, or similar) Familiarity with security and testing tools (Burp Suite, OWASP ZAP, Selenium, Cypress, Jest, Postman, or equivalent) Strong communication skills: you can explain security risks and quality tradeoffs clearly to non‑technical stakeholders Nice‑to‑Have Security certifications: OSCP, CISSP, CompTIA Security+, AWS Security Specialty, or equivalent Experience at a crypto, DeFi, Web3, or fintech product company (Coinbase, Phantom, Stripe, Casa, MetaMask, Zerion, Ramp, or similar) Familiarity with Web3‑specific security concerns: wallet security, key management, on‑chain monitoring, phishing mitigation SDET background or experience in a hybrid development‑and‑testing role Experience testing financial systems: payment flows, ledger integrity, double‑spend prevention, or transaction monitoring Experience implementing zero‑trust architectures Bug bounty participation, CVE publications, or contributions to open‑source security tooling Benefits What We Offer Competitive salary + performance‑based incentives tied to retention & LTV improvement Direct exposure to founders Team Offsites Remote work High ownership, high‑impact role #J-18808-Ljbffr

We help creators get more out of every conversation with Instagram‑focused automations and support for other channels like Instagram, Facebook Messenger, WhatsApp, and TikTok. The result? Better engagement, more sales, and real, sustainable growth. With a diverse team of 400+ people spread across three continents, we’re building the leading Chat Marketing platform that is used — and loved — by more than 1.5 million customers worldwide. Cyber Security Lead We’re looking for a Cyber Security Lead – a technical security leader who can both run a team and stay hands‑on. This role owns the full technical security operations function at Manychat: Application Security, Infrastructure Security, and Endpoint Security. You’ll manage a team of security engineers, define the operational roadmap across these three domains. Reporting to the Head of Security, you’ll be a key player in keeping our infrastructure and product protected and resilient. Lead and grow a team of AppSec, Infra Sec, and Endpoint Security engineers (currently 3 engineers). Own the end‑to‑end security operations function: detection, monitoring, incident response, and remediation across cloud, application, and endpoint layers. Define and execute operational roadmaps for Application Security, Infrastructure Security, and Endpoint/Office Security. Drive adoption and administration of security tooling: EDR, SIEM, DAST/SAST, WAF, VPN, DNS security, and Okta. Oversee cloud security posture across AWS environments. Run and coordinate security incident investigations: root cause analysis, containment, remediation, and post‑mortems. Partner with Infrastructure, IT Operations, and Engineering teams to implement and improve security controls. Maintain security documentation: runbooks, configurations, playbooks, and operational procedures. Support compliance requirements (SOC 2, ISO 27001) from the technical security side. Represent cyber operations in cross‑functional initiatives and contribute to strategic planning with the Head of Security. You'll need 7+ years in technical security roles across AppSec, Infra Sec, or Endpoint Security. 3+ years in a lead or management role with direct reports. Experience with developer security tooling: SAST, SCA, secrets scanning, and DAST integration into CI/CD pipelines. Hands‑on experience operating and administering security tooling: EDR, SIEM, DAST/SAST, WAF, VPN, and DNS security platforms. Strong AWS cloud security knowledge: IAM/SSO, Security Hub, GuardDuty, CloudTrail, and AWS Config. Solid understanding of application security fundamentals: OWASP Top 10, SDLC security integration, and threat modelling. Experience with endpoint security: macOS and Windows hardening, MDM (Jamf or Microsoft Intune). Ability to lead security incident response: coordinating teams, driving root cause analysis, and communicating findings clearly. Strong communication skills — able to translate security risk into business terms for non‑technical stakeholders. Fluent English communication skills, both written and verbal. It would be great if you have Experience operating within SOC 2 and/or ISO 27001 compliance frameworks in a SaaS environment. Experience managing identity and access using Okta or a comparable IAM platform. Background in detection engineering and SIEM log analysis. We care deeply about your growth, well‑being, and comfort Hybrid onboarding to start work remotely and relocation support for you and your family. Comprehensive health insurance for both you and your family. Professional development budget for conference tickets, online courses, and other relevant resources to help you grow. Flexible benefits package to tailor perks that matter most for you. Hybrid work and generous leave options to prioritize your work‑life balance. In‑office perks, including free meals and snacks. Company‑funded sport activities, annual offsites and team‑building events. Manychat is an Equal Opportunity Employer. We're committed to building a diverse and inclusive team. We do not discriminate against qualified employees or applicants because of race, color, religion, gender identity, sex, sexual preference, sexual identity, pregnancy, national origin, ancestry, citizenship, age, marital status, physical disability, mental disability, medical condition, military status, or any other characteristic protected by local law or ordinance. This commitment is also reflected through our candidate experience. If you have individual needs that may require an accommodation during the interview process, please indicate this in your application. We will do our best to provide assistance throughout your interview process to ensure you're set up for success. #J-18808-Ljbffr

About Keyrock Since our beginnings in 2017, we've grown to be a leading change-maker in the digital asset space, renowned for our partnerships and innovation. Today, we rock with over 200 team members around the world. Our diverse team hails from 42 nationalities, with backgrounds ranging from DeFi natives to PhDs. Predominantly remote, we have hubs in London, Brussels, Singapore and Paris, and host regular online and offline hangouts to keep the crew tight. We are trading on more than 80 exchanges, and working with a wide array of asset issuers. As a well-established market maker, our distinctive expertise led us to expand rapidly. Today, our services span market making, options trading, high-frequency trading, OTC, and DeFi trading desks as well as digital asset management. Keyrock is looking to expand and establish itself as a full-service financial institution through both organic innovation and inorganic growth. But we’re more than a service provider. We’re an initiator. We're pioneers in adopting the Rust Development language for our algorithmic trading systems, and champions of its use in the industry. We support the growth of Web3 startups through our Accelerator Program. We upgrade ecosystems by injecting liquidity into promising DeFi, RWA, and NFT protocols. And we push the industry's progress with our research and governance initiatives. At Keyrock, we're not just envisioning the future of digital assets. We're actively building it. Role Summary As a Senior Security Program Manager, you will drive execution of Keyrock’s highest-priority security initiatives across a fast-moving, always-on trading environment. You’ll build structure, visibility, and predictable delivery across security programs—partnering with Engineering, Infrastructure/Cloud, Trading/Quant Engineering, IT, Risk/Compliance, and leadership to reduce risk while enabling business velocity. This role is ideal for someone who can translate security strategy into delivery: clear roadmaps, measurable outcomes, and strong cross-functional coordination. What You’ll Do Program leadership & delivery Own a portfolio of security programs (planning, resourcing, milestones, dependencies, risk/issue management, and outcomes). Create and maintain multi-quarter roadmaps aligned to Keyrock’s business and operating model across venues and services (CEX/DEX and liquidity services). Establish governance and operating cadence: steering meetings, status reporting, program reviews, and executive updates. Support the CISO in delivering firmwide initiatives. Security governance, risk, & control initiatives Partnerwith Security and Engineering teams to drive key initiatives such as: access governance, secrets management, vulnerability remediation, security logging/monitoring improvements, endpoint/security baseline, and secure SDLC enablement. Help mature control coverage and evidence for internal/external assuranceneeds (as applicable in a financial-services context). Partnerwith the Directorof GRC to supportGRC and audit initiatives. Incident readiness & operational resilience Partnerwith Security Operations to improve incident preparedness through playbooks, tabletop exercises, lessons learned, and operational runbooks—ensuring security response stays effective in a high-availability trading environment. Cross-functional influence Actas the “glue” across technicalandbusiness stakeholders—clarifying ownership, unblocking delivery, and keeping programsmoving withcrispcommunication. Buildlightweight, scalable processes that improvesecurity consistency without slowing teams. What Success Looks Like (first 6–12 Months) Aclearlyprioritizedsecurityprogram roadmapwithmeasurableKPIsandpredictable execution. Improvedsecurityreadynessfor key business areas, aligned with Keyrock’s activities (market making, OTC, options, treasury). Higher stakeholder confidence via clear reporting, risk transparency, and consistent program delivery. Minimum Qualifications 7+ years in security program management / technical program management / security operations program delivery. Demonstrated experience running cross-functional programs across engineering and operations (scope, schedule, risks, dependencies). Strong technical fluency in cloud/infra, identity/access, vulnerability management, security monitoring, and incident processes. Excellent written/verbal communication with the ability to translate complex risk into clear priorities. Preferred Qualifications Experience in fintech, trading, payments, or digital assets, especially environments requiring high uptime and rapid execution. Familiarity with security frameworks (NIST CSF, ISO 27001) and audit/assurance concepts. Experience supporting security programs that intersect with financial integrity domains (e.G., AML/CFT awareness is a plus given Keyrock’s financial-services context). Relevant certifications (e.G., CISM, CISSP, CISA, CRISC, PMP) or equivalent demonstrated expertise. #J-18808-Ljbffr

Role Overview We are looking for the very Top Talent… and we would be delighted if you were to join our team! More in details, UST is a multinational company based in North America, certified as a Top Employer and Great Place to Work company with over 35,000 employees all over the world and presence in more than 35 countries. We are leaders on digital technology services, and we provide large-scale technologic solutions to big companies. What we look for? We are looking for an experienced OT Security Engineer with a strong background in OT infrastructure and cybersecurity to support Threat and Vulnerability Management (TVM) across Operational Technology environments. The ideal candidate is hands‑on, technically strong in IC‑SCADA security, and comfortable working across IT and OT teams to reduce cyber risk in industrial environments. Main Tasks And Accountabilities Support Threat and Vulnerability Management (TVM) activities in OT environments, including vulnerability scanning, assessment, prioritization, and remediation tracking. Work closely with infrastructure and engineering teams to ensure secure configuration, patching, and hardening of OT assets. Analyze and respond to security incidents impacting OT systems. Implement, maintain, and monitor security controls for IC‑SCADA systems, PLCs, and other industrial devices. Develop and maintain OT asset inventories and associated risk profiles. Ensure alignment between IT and OT security strategies by collaborating with cross‑functional teams. Assist in the deployment, configuration, and tuning of security tools, such as Microsoft Defender for IoT, Nessus, and Qualys. Document and report on vulnerabilities, remediation progress, and overall risk posture to key stakeholders. Stay current with emerging OT threats, vulnerabilities, and mitigation techniques to continuously improve security posture. What do we expect from you? Minimum 4+ years of experience in OT security, OT infrastructure, or related cybersecurity roles. Strong understanding of IC‑SCADA architectures and network segmentation in industrial environments. Hands‑on experience with TVM tools, frameworks, and processes. Familiarity with Microsoft Defender, SIEM platforms, and endpoint protection solutions in OT contexts. Good knowledge of industrial protocols such as Modbus, DNP3, OPC, and similar. Experience configuring and working with firewalls, IDS/IPS, and network monitoring tools. Ability to analyze CVEs, assess their impact on OT systems, and coordinate remediation with engineering teams. Strong communication, documentation, and stakeholder management skills. Work Location Hybrid position in Madrid or Barcelona (3 days at client´s office) Work Schedule Business hours (40 hours weekly with 1 hour for lunch). What can we offer? 23 days of Annual Leave plus the 24th and 31st of December as discretionary days! Numerous benefits (Health Care Plan, teleworking compensation, Life and Accident Insurances). `Retribución Flexible` Program: (Meals, Kinder Garden, Transport, online English lessons, Health Care Plan…) Free access to several training platforms. Professional stability and career plans. UST also compensates referrals from which you could benefit when you refer professionals. Option to pick between 12 or 14 payments along the year. Real Work Life Balance measures (flexibility, WFH or remote work policy, compacted hours during summertime…). UST Club Platform discounts and gym Access discounts. If you would like to know more, don’t hesitate to apply and we’ll get in touch to fill you in detail. We are waiting for you! Equal Opportunity Statement In UST we are committed to equal opportunities in our selection processes and do not discriminate based on race, gender, disability, age, religion, sexual orientation or nationality. We have a special commitment to Disability & Inclusion, so we are interested in hiring people with disability certificate. Skills vulnerability management security operations center threat intelligence incident response #J-18808-Ljbffr

AgileEngine is an Inc. 5000 company that creates award-winning software for Fortune 500 brands and trailblazing startups across 17+ industries. We rank among the leaders in areas like application development and AI/ML, and our people-first culture has earned us multiple Best Place to Work awards. WHY JOIN US If you're looking for a place to grow, make an impact, and work with people who care, we'd love to meet you! ABOUT THE ROLE We are looking for a Python Application Security Engineer to automate security controls and integrate application security into software development and cloud workflows. MUST HAVES 3+ years of experience combining software engineering experience, security implementation and/or architecture experience. Strong coding and architectural proficiency in Python (for security automation and scripting). Hands-on experience or familiarity with Wiz, Prisma Cloud, or similar tools for cloud security posture management and threat detection. Implementation experience with deploy-time checks against Infrastructure as Code (IaC) / Terraform. Implementation experience with runtime checks through Cloud Security Posture Management (CSPM). Fully autonomous execution capability, requiring no daily supervision to map out and build automated security runbooks. Upper-intermediate English level. NICE TO HAVES Deep, hands-on expertise deploying and tuning modern application security testing tools (SAST, DAST, SCA) and integrating them into complex CI/CD orchestration ecosystems. Experience integrating LLMs, AI agents, or automated coding assistants to streamline vulnerability triaging or secure code generation. Advanced application threat modeling experience. Ability to confidently read, review, and secure enterprise source Java code. WHAT YOU WILL DO Pipeline Integration: Write and maintain the scripts necessary to integrate security gates (SAST, DAST, SCA) seamlessly into the CI/CD pipeline. Security Data Triage: Continuously tune and configure existing security scanning tools to eliminate false positives and deliver high-confidence alerts. Baseline Automation: Assist in coding and deploying automated hardened baselines and secure coding patterns. Code-Level Remediation: Work directly with product development teams to provide actionable, code-level remediation guidance in Java and Python. PERKS AND BENEFITS Professional growth : Mentorship, TechTalks, and personalized growth roadmaps. Competitive compensation : USD-based pay with education, fitness, and team activity budgets. Exciting projects : Modern solutions with Fortune 500 and top product companies. Flextime : Flexible schedule with remote and office options. Meet Our Recruitment Process Application → Coding Challenge → Video Interview → Technical Interview or Hiring Manager Interview Each step helps us understand your skills and overall fit. If it’s a match, you’ll receive an offer. #J-18808-Ljbffr

Select how often (in days) to receive an alert: Syntax is a leading Managed Cloud Provider for Mission Critical Enterprise Applications and has been providing comprehensive technology solutions to businesses of all sizes since 1972. Syntax has undisputed strength to implement and manage ERP deployments (Oracle, SAP) in a secure and resilient private, public or hybrid cloud. With strong technical and functional consulting services, and world-class monitoring and automation, Syntax serves some of North America's largest corporations across a diverse range of industries. Syntax has offices worldwide, and partners with Oracle, SAP, AWS, Microsoft, IBM and other global technology leaders. The Syntax Security Organisation protects Syntax and its employees, secures the services Syntax sells to its customers, and delivers managed security services to customers globally. Identity at Syntax spans workforce identity in Entra ID, privileged access in CyberArk, identity governance on a ServiceNow-native platform, and SAP and Oracle application identity. The role secures Syntax's own identity estate first. The identity standard then extends to the customer environments Syntax manages. Identity Lead (m/f/d) is a global, hands-on role that owns identity security for Syntax: the identity standard, the design of non-human identity, the posture and the evidence. The role has no team of its own on day 1 but will act in a matrix management capacity and interact with various global teams and stakeholders. A key aspect of this role is handling non-human and agent identity, meaning service accounts, workloads, and AI agents. The Lead designs the registry and the issuance path. The Lead also owns the evaluation of identity governance to tooling, its recommendation, and its implementation. The Lead owns the identity security standard but does not operate the platforms. The IT and platform teams run the directories day to day and must meet the Lead's standard. Security Engineering owns and runs the CyberArk services. Global Security Operations is the Lead's partner for detecting and responding to identity threats. RESPONSIBILITIES Identity Oversight, Standards and Posture Own and maintain the identity standard under the Global Security Framework, including the agent identity pattern, and the metrics that show posture improving. Set the Entra ID requirements within the standard: Conditional Access, authentication strength, privileged role management and identity protection signals. Review configuration against them. Set the CyberArk requirements within the standard, across SaaS and on-premises: onboarding, rotation and session control. Review Security Engineering's delivery against them. Set the SAP and Oracle application identity requirements within the standard: joiner, mover and leaver, emergency access, and segregation of duties evidence. Own the evaluation of identity governance tooling the whole business needs, covering a multi-domain estate and machine identity. Own the recommendations and implementation that follow. Produce, from the governance platform, the identity evidence ISO 27001 and SOC 2 require: access certifications and reviews. Make the evidence-based case for any further identity capability. Non-Human and Agent Identity Design and build the registry of service accounts, workload identities, and AI agents across Syntax tenants. Give each a named owner and a lifecycle and set the standard for it. Design and deliver, with the platform teams, the issuance path for machine credentials: short-lived credentials, workload identity federation, and the retirement of static and hardcoded secrets. Define agent-to-agent authentication, delegation and the audit chain, so that every agent's action is attributable to an identity and an authorising human. Define the agent identity pattern within the standard: how agents are created under Conditional Access and least-privilege policy, and how they are recorded. Take recurring agent identity findings from the customer environments Syntax manages into the standard. Detection and Response Work with Global Security Operations to build out a comprehensive catalogue of detection content, such as token theft, privilege escalation, dormant account use and anomalous agent behaviour. Write and maintain the containment playbooks for compromised accounts and credentials, and support Global Security Operations in identity incidents. REQUIRED SKILLS AND EXPERIENCE 8+ years in identity and access management or security engineering, including hands-on ownership of a production identity platform. Hands-on experience with machine and workload identity: discovery, ownership and lifecycle of service accounts, secrets management, workload identity federation, certificate lifecycle, short-lived credentials. Hands-on experience with Entra ID: Conditional Access, Privileged Identity Management, identity protection, app registrations and workload identities. Hands-on experience with identity governance and administration, including a tooling evaluation or selection taken through to a recommendation and implementation. Hands-on experience with at least two of the following: Privileged access management: CyberArk or equivalent Application identity for SAP or Oracle: user administration, authorisations, segregation of duties Identity detection and response: Entra sign-in and audit telemetry, SIEM correlation Design experience with OAuth 2.0 and OpenID Connect, including delegated and token-exchange flows. Working knowledge of SAML. Scripting for automation and evidence: PowerShell or Python, including the Microsoft Graph API. Has set an identity standard for teams they did not manage and shown that those teams delivered it. Fluency in speaking, presenting and writing in English. PREFERRED QUALIFICATIONS Experience securing AI agents or automation identities: agent registries, delegation, auditability. Experience producing identity evidence for ISO 27001 or SOC 2 audits. Experience in a managed service provider or multi-tenant environment. Microsoft SC-300, CyberArk Defender or an equivalent certification. KEY TECHNOLOGIES Microsoft: Entra ID and Conditional Access, Entra Agent ID, Privileged Identity Management, Microsoft Graph, workload identity federation Identity governance: Clear Skye Privileged access: CyberArk ERP and secrets: SAP and Oracle authorisations, secrets management Additional mandatory requirements: Nationality or Work Authorization: Spanish or Portuguese nationality, or alternatively a permanent work permit/VISA for Spain or Portugal. Why Syntax? Global tourist: With us, you can also work from abroad from time to time Flexible working time models, home office Attractive benefits, e.G. health offers A modern environment in which the\ "you" is part of it Open feedback culture, flat hierarchies and a motivated team Individual career planning with continuous training and coaching on the job Flexible hours, Monday to Thursday 8h, and Fridays.... 6h. In addition, the whole month of August and the first half of September we have an intensive timetable.28 days holiday (23 days holiday + 4 days at Christmas from 15 December to 15 January + 1 day for your birthday)! Windows laptop for work (Dell or Lenovo)! Apple or Android smartphone...You choose! Two lovely offices with a nice garden to relax and have a coffee Free coffee and soft drinks Medical insurance with Sanitas Training: Free AWS and SAP certifications, internal workshops and free access to Linkedin E-learning Free online English, German, Spanish or French classes through a platform Copyright 2023 Syntax, All Rights Reserved #J-18808-Ljbffr

Preply in Barcelona (hybrid) is seeking a Senior II Security Engineer for the Platform team to own cloud and platform security across AWS, Kubernetes, and GCP, focusing on detection, incident response, and secure development practices. You will work with SRE, Data, Engineering, and GRC, drive end-to-end security initiatives, evolve monitoring, and build practical guardrails and automation while participating in on-call rotations. #J-18808-Ljbffr

JLL is seeking a Senior Application Security Architect to bridge security engineering and enterprise architecture. You will own security architectures for application ecosystems, drive SDLC security, and serve as a technical authority on secure patterns, threat modeling, and DevSecOps practices. In this senior role, you will mentor engineers and collaborate across engineering, architecture, and business teams to reduce risk. #J-18808-Ljbffr

Q-tech ищет специалиста по облачной безопасности в международной среде. Вы будете анализировать данные CSPM в мультиоблачной среде, преимущественно в GCP, обеспечивая качество находок и поддержку ремедиации. Требуется опыт в области облачной безопасности и владение английским языком; знание испанскогоили немецкого приветствуется. Оплата и бонусы обещают гибкость и конкурентоспособность. #J-18808-Ljbffr

High-impact regional leadership role Broad scope and transformation exposure The client is a large international technology and engineering consultancy, operating across multiple countries and supporting complex projects for major global organisations. It offers a highly international, multi-entity environment, with technology and cybersecurity playing a key role in its operations. Lead cybersecurity governance, risk management and security strategy across the region and its subsidiaries. Build strong relationships with regional management, country managers and business leaders , ensuring cybersecurity risks and priorities are understood at executive level. Provide pragmatic, risk-based recommendations , balancing business objectives, operational constraints and security requirements. Lead and coordinate security initiatives across multiple countries and subsidiaries , working through influence and matrix management. Coordinate the regional response to major cybersecurity incidents and crisis situations . Manage ISO 27001 and other Information Security certification processes , as well as security audits and remediation plans. Ensure compliance with internal security policies and external legal, contractual and regulatory requirements . Support the development and implementation of security policies, procedures, awareness programmes and risk management processes . Oversee Information Security throughout the IT service lifecycle, including Security Operations, Security Architecture and Security Assurance . Harmonise security practices across the different entities , including in the context of M&A. Develop and lead a high-performing Information Security team and promote continuous improvement and professional development. A senior, high-impact cybersecurity leadership role with regional responsibility across multiple countries and subsidiaries. The opportunity to work closely with C-level and Group security leadership, influencing strategic cybersecurity and risk decisions. A broad international scope, covering governance, risk, compliance, incident response, security operations and M&A integration. Barcelona-based position with up to 10% international travel. #J-18808-Ljbffr

Senior Security Engineer – Vulnerability Management | Barcelona Since 2011, SQUAD Group has been a key player in the cybersecurity landscape. We partner with leading organizations to protect their information systems through a comprehensive 360° offering of consulting, integration, expertise, and managed services Our mission: Securing Together! We believe in a collaborative approach to cybersecurity, where experts and clients work hand-in-hand to anticipate threats and protect critical infrastructure. As part of our growing team, we're seekin g a Senior Security Engineer specialising in Vulnerability Management. Based in Barcelona, this role will put you at the heart of a high-impact security engineering function, building and operating the systems that keep complex, large-scale environments continuously protected. Your Role You are a hands-on security engineer and technical leader. A Senior Engineer focused on vulnerability management architecture, automation, and remediation pipelines. Working across scanning platforms, CI/CD integrations, cloud environments, and detection tooling, you'll design, build, and operate the systems that surface risk and drive it to resolution at scale. Your Responsibilites Design and operate end-to-end vulnerability management systems: asset inventories, ingestion pipelines, triage workflows, and remediation tracking. Build complex automation and integrations across the vulnerability ecosystem, APIs, service-

Information Security Advisor – BarcelonaSince 2011, SQUAD Group has been a key player in the cybersecurity landscape. We partner with leading organizations to protect their information systems through a comprehensive 360° offering of consulting, integration, expertise, and managed services.Our mission: Securing Together!We believe in a collaborative approach to cybersecurity, where experts and clients work hand‑in‑hand to anticipate threats and protect critical infrastructure.As part of our growing Security Advisory practice, we are looking for an Information Security Advisor to join our team in Barcelona.Your ResponsibilitiesAs an Information Security Advisor, you’ll be a trusted partner to both central security teams and local business stakeholders. Your goal: ensure that security practices, tools, and policies are effectively understood, applied, and continuously improved.Lead and contribute to threat modelling activities, identifying potential attack paths and helping design secure architectures.Support and advise engineering and product teams on cloud security best practices, with a strong focus on AWS environments.Participate in security assessments and policy reviews, helping translate technical findings into actionable recommendations.Collaborate on tool evaluation and integration (e.G. vulnerability management, monitoring, or compliance tools).Provide guidance during incidents and contribute to post‑incident analysis and prevention measures.Act as a security ambassador, fostering awareness, knowledge sharing, and a proactive security culture across teams.Who You AreYou have between 4 and 7 years of experience in cybersecurity, ideally in advisory, governance, or technical security roles.You have hands‑on experience with Threat Modelling (e.G. STRIDE, DREAD, MITRE ATT&CK).You understand AWS Cloud Security fundamentals (IAM, Security Hub, GuardDuty, SCPs, network segmentation...).You are familiar with information security frameworks (ISO 27001, NIST, OWASP, GDPR).You have basic knowledge of secure coding and web application security principles.You’re proactive, analytical, and enjoy collaborating with multidisciplinary teams.You are fluent in English (spoken and written); Spanish orFrench is a plus.Why Join SQUAD?Personalized Growth: A dedicated training and certification plan aligned with your career objectives through our SquadeXpérience.Expertise Development: Participate in internal events like our MixYourTalent webinars and monthly CTF sessions.Visibility: Attend major industry conferences and contribute to our #TheExpert technical blog.Culture: Enjoy a dynamic, close‑knit environment with after‑work events and team gatherings that foster collaboration and fun.Seniority levelMid‑Senior levelEmployment typeFull‑timeJob functionConsultingIndustriesIT Services and IT Consulting#J-18808-Ljbffr

Описание: AG Solution builds intelligent solutions for the process industry, combining automation, process control, data management, and MES/MOM systems to help manufacturers achieve operational excellence. The company is part of the Quariq Group and operates as an Industry 4.0 partner serving manufacturers worldwide. Задачи: Secure complex and legacy OT infrastructures in industrial environments Analyze and map OT networks Implement segmentation and IP renumbering for OT networks Conduct risk assessments and develop mitigation strategies Configure firewalls and maintain secure architecture principles Implement OT firewalling, automated network monitoring, or network restructuring Monitor OT environments continuously using SNMP, NetFlow, or similar protocols Work cross-functionally with IT and OT teams to align security with production needs Configure Fortinet firewalls Manage Active Directory Represent the company in client meetings and on-site engagements Identify risks, propose solutions, and maintain stakeholder alignment during commissioning, testing, and audits Adapt communication to different client organizations during international travel Travel to customer sites during key project phases, including commissioning, testing, and audits Требования: Strong analytical mindset with practical, hands-on experience securing industrial environments In-depth knowledge of OT security and networking, including SCADA, PLCs, and DCS Experience analyzing and mapping complex or legacy OT networks Hands-on experience with OT network segmentation and IP renumbering Experience conducting risk assessments and developing mitigation strategies Practical understanding of firewalls, network segmentation, and secure architecture principles Understanding of the Purdue model Experience implementing at least one of the following: OT firewalling, automated network monitoring, or network restructuring Experience with continuous monitoring using SNMP, NetFlow, or similar protocols Strong verbal and written communication skills Ability to explain complex OT security concepts clearly to technical and non-technical stakeholders Ability to work cross-functionally with IT and OT teams Flexibility for short-term international travel Excellent communication skills in Spanish and English Nice to have: Experience with Nozomi Networks solutions such as Guardian, Cisco certificate, Palo Alto firewall configuration, French Условия: Travel to customer sites during key project phases is required Preferred location is Barcelona or the surrounding area The company provides continuous learning, mentorship, and access to AG Academy #J-18808-Ljbffr

Descripción ¡Únete a HOPLA! y transforma el futuro con nosotros En HOPLA! no solo ayudamos a las empresas a modernizar sus aplicaciones e infraestructuras con tecnología Open Source, microservicios y soluciones en la nube… ¡también queremos que tú formes parte de este reto! Si te apasiona la tecnología, la innovación y la libertad para crear soluciones, aquí encontrarás un equipo de expertos que apuesta por las mejores prácticas de la industria. Trabajamos con compañías de primer nivel y una red de partners tecnológicos top para impulsar proyectos que realmente marcan la diferencia. Aquí no solo vienes a trabajar: vienes a crecer, aprender y aportar valor en un entorno dinámico y lleno de oportunidades. ¿Te unes al viaje? El Puesto Estamos buscando un/a Ingeniero/a de Kubernetes para incorporarse a nuestro equipo. Esta persona será clave en la operación, evolución y estandarización de entornos Kubernetes, asegurando su alineación con las mejores prácticas arquitectónicas. ¿CÓMO NOS AYUDARÁS A CUMPLIR NUESTRA MISIÓN? Administración y soporte de clusters Kubernetes y OpenShift en entornos productivos. Colaboración con arquitectura en el diseño e implementación de soluciones cloud-native. Definición y adopción de estándares, buenas prácticas y patrones de uso de la plataforma. Automatización de tareas operativas y despliegues. Requisitos Experiencia en entornos productivos con Kubernetes y OpenShift. Conocimientos sólidos de Linux. Experiencia con Ansible. Experiencia en cloud: Azure y AWS. Se valorará Experiencia adicional en entornos cloud. Conocimiento de GitOps. Experiencia en monitoring y observabilidad. #J-18808-Ljbffr

Vigilante de Seguridad expedida por el Ministerio del Interior. Cuáles serán tus funciones y responsabilidades? Protección de bienes y personas, vigilancia y control de instalaciones. Evitar actos delictivos o infracciones en relación con el objeto de su protección.

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn't changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We're proud to work for a mission-driven company leveraging AI to transform the way we work. CrowdStrikers drive their careers through flexibility and autonomy while also being expected to contribute to a culture of responsible AI adoption, experimentation, and innovation. We use an AI-first mindset as a force multiplier to proactively and continuously accelerate execution, build expertise, uncover insights, and solve complex problems. We're always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you. About the Role CrowdStrike is seeking a Cloud Sales Engineer with significant Cloud architecture best practices and cyber security domain expertise, that will be aligned to cover our team across Southern Europe. As a Cloud Sales Engineer, you will establish yourself as a trusted advisor to the local CrowdStrike Sales teams, Customers, and Partners within your territory. This position will be a technologist who will apply their specialist knowledge to integrate CrowdStrike technologies and products with various cloud technologies such as Amazon Web Services (AWS), Google Cloud Platform (GCP), Microsoft Azure, and enterprise Kubernetes distributions such as Cloud provider services and Red Hat OpenShift. This position will collaborate with a diverse group of teams internal to CrowdStrike, across our strategic cloud partners, and in various open source communities and standard bodies relating to secure cloud computing. Your contributions will span from helping establish and define the technical nature of CrowdStrike's cloud partner initiatives and programs, creating technical reference architectures, building training for CrowdStrike technical staff, and cloud sales enablement. What You'll Do Ensure effective technical field sales coverage of the account base. Engage with core account sales teams to drive strategic account plans and objectives. Collaborate cross-functionally to establish key stakeholders and business-line owners. Act as an interface between field/customer requirements and CrowdStrike Product and Engineering teams. Provide feedback to engineering teams to drive customer adoption of our products. Drive customer and partner meetings through sales calls, relationship building, solution selling and problem resolution. Help build field enablement documentation and training that is sector specific. Be a cloud subject matter expert and present at industry conferences and CrowdStrike marketing events. Provide guidance on complex technical issues utilizing in-depth knowledge of the company, products, industry and solutions. Deliver development and improvement of methods, techniques and evaluation processes for CrowdStrike solutions. What You'll Need 5+ years or equivalent experience in consulting or sales engineering roles – particularly in the areas of Cloud and Cyber Security. Technical sales experience in the Cloud Security Posture Management solutions. Technical sales experience in the Cloud Workload Protection security solutions. Technical sales experience in the Kubernetes container solutions Cloud Service Provide Certification. Ability to understand complex cloud architectures and eco-systems. Technical understanding of incident response, computer forensics, network administration and management and endpoint security technologies in relation to cloud strategy. Motivated with excellent organizational skills. Strong communicator - written, verbal and presentation. Strong problem-solving skills with ability to implement systematic approaches to scale within a fast-paced environment. Bachelor Degree in Computer Science or equivalent work experience. Proven experience utilizing AI technologies to enhance decision‑making, streamline workflows and processes, improve efficiency and drive business outcomes. Fluent in Spanish and English Travel as needed. Benefits of Working at CrowdStrike Market leader in compensation and equity awards Comprehensive physical and mental wellness programs Competitive vacation and holidays for recharge Paid parental and adoption leaves Professional development opportunities for all employees regardless of level or role Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections Vibrant office culture with world class amenities Great Place to Work Certified™ across the globe CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program. CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisions--including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, return from lay-off, terminations and social/recreational programs--on valid job requirements. If you need assistance accessing or reviewing the information on this website or need help submitting an application for employment or requesting an accommodation, please contact us at for further assistance. CrowdStrike was founded in 2011 to fix a fundamental problem: The sophisticated attacks that were forcing the world’s leading businesses into the headlines could not be solved with existing malware-based defenses. Founder George Kurtz realized that a brand new approach was needed — one that combines the most advanced endpoint protection with expert intelligence to pinpoint the adversaries perpetrating the attacks, not just the malware. There's much more to the story of how Falcon has redefined endpoint protection but there's only one thing to remember about CrowdStrike: We stop breaches. #J-18808-Ljbffr

Merck Healthcare is seeking a Senior AWS Cloud Architect to design scalable, secure cloud architectures for healthcare manufacturing and supply chain, turning business needs into reliable data, analytics, automation and AI solutions. You will translate complex requirements into pragmatic designs, oversee platform architecture across a global matrix, and mentor teams while promoting responsible AI and observability practices. #J-18808-Ljbffr

Buscamos personas curiosas y comprometidas. Personas que buscan crecer, pero, sobre todo, mejorar el entorno del Grupo CaixaBank. ¿Eres una de ellas? Entonces, ¡esta oferta es para ti! ¿Dónde te incorporarás? Dentro del dominio CYBER, te incorporarás al equipo de Platform Protect, responsable de evolucionar los modelos de acceso seguro que protegen usuarios, aplicaciones y datos corporativos. Participarás en iniciativas estratégicas de transformación hacia modelos Zero Trust, diseñando arquitecturas modernas de acceso seguro y contribuyendo a la protección de un entorno tecnológico altamente distribuido. Cómo será tu día a día… Definir y evolucionar modelos de acceso Zero Trust (ZTNA). Diseñar arquitecturas de acceso seguro basadas en tecnologías SSE y Prisma. Definir políticas de acceso basadas en identidad, contexto y nivel de riesgo. Integrar capacidades de seguridad con plataformas IAM, cloud y aplicaciones corporativas. Participar en la implantación de soluciones de navegación segura. Analizar nuevas capacidades y tendencias relacionadas con Zero Trust. Construir roadmaps de evolución tecnológica en materia de acceso seguro. Colaborar con equipos de red, cloud y seguridad para garantizar una protección homogénea. Requisitos y competencias clave: Formación en Ingeniería Informática, Telecomunicaciones o disciplinas afines. Experiencia en arquitecturas Zero Trust y ZTNA. Conocimiento de plataformas Prisma Access, SSE o tecnologías similares. Experiencia en IAM, federación de identidades y control de acceso. Conocimientos de redes, cloud y seguridad perimetral moderna. Capacidad para diseñar arquitecturas seguras escalables. Orientación a la innovación y la mejora continua. Te lo mereces Forma parte del Team y disfruta de todas estas ventajas: A tu manera Encuentra el equilibrio que necesitas entre trabajo y vida personal con nuestro moldeo de trabajo híbrido. Hasta un 60% de trabajo en remoto dependiendo del proyecto. Descansa Podrás irte de vacaciones 27 días al año con la flexibilidad para escoger la mejor época del año para ti. Be Tech, be healthy Se acabaron las excusas. Aprovéchate de nuestro programa de Wellbeing. Podrás disfrutar de descuentos en gimnasios, servicio de fisio en la oficina, torneos deportivos, fruta … Crece Nuestro ADN (No Limits, Tech4u y One Committed Team ) está pensado para que puedas desarrollar todo tu potencial técnico a través de nuestras formaciones e iniciativas. Mantente siempre a la última y aprende de un equipo que te guiará en todas tus misiones. Trabajar aquí compensa_ Saca más partido a tu nómina con el Programa de Retribución Flexible y aprovéchate de las ventajas financieras de pertenecer a un grupo bancario. #J-18808-Ljbffr