Seguridad jobs in San Sebastián De Los ReyesCreate job alertsFull-time

Overview In this role you will serve as the technical reference for Vulnerability Management within a large-scale financial services environment. You will lead advanced analysis, risk-based prioritization and remediation efforts across infrastructure, apps, cloud and containers. You’ll coordinate with specialized teams to drive automation, governance and service improvement, and oversee critical or exploited vulnerabilities. This position offers the chance to shape vulnerability practices and contribute to secure, AI-assisted operations. Compensaciones / Beneficios • Hybrid working model, • 8 weeks teleworking outside usual area, • Flexible start and finish times, • career plan development, • training and language learning support, • national and international mobility Responsabilidades, • Act as the technical reference for Vulnerability Management operations and resolve escalations, • Perform advanced analysis and risk-based prioritization (CVSS, EPSS, CISA KEV, exposure, criticality, threat intelligence), • Define and monitor remediation activities, mitigations and compensating controls, • Coordinate with Hacking, Cloud, Hardening/Compliance, Threat Intelligence and Automation teams, • Supervising critical or actively exploited vulnerabilities, including verification and closure, • Monitor SLAs, KPIs and reporting; identify automation and service improvement opportunities, • Contribute to the evolution of the service and safe supervised use of AI in Vulnerability Management Requisitos principales, • 5+ years in cybersecurity with substantial Vulnerability Management experience, • Strong knowledge of vulnerability lifecycle and risk-based prioritization (CVSS, EPSS, CISA KEV, Threat Intelligence), • Experience with vulnerability scanning/management tools, preferably Qualys, • Solid knowledge of Windows, Linux, networking, applications, Cloud and container environments, • Experience in exploitation analysis, mitigations and compensating controls, plus SLA/KPI reporting, • Knowledge of scripting, REST APIs, JSON and automation, • Strong technical leadership, autonomy and cross-functional coordination, • leadership, • autonomy, • multidisciplinary coordination, • vulnerability lifecycle and risk-based prioritization, • CVSS, EPSS, CISA KEV, Threat Intelligence, • Qualys (and vulnerability scanning/management tools)

Overview En GFT, como AI Security & Risk Consultant, evaluarás riesgos de seguridad en soluciones de IA y propondrás mitigaciones. Diseñarás defensas ante ataques adversariales y auditarás modelos ML/LLM para sesgos, privacidad y vulnerabilidades. Definirás marcos de gobernanza de IA alineados con buenas prácticas y normativa, y colaborarás con equipos de desarrollo para securizar pipelines MLOps y despliegues de IA. Esta función te sitúa en un entorno internacional, donde impactas la seguridad y la fiabilidad de soluciones IA a escala en sectores regulados. Buscamos a alguien proactivo, orientado a resultados y capaz de impulsar mejoras continuas. Compensaciones / Beneficios • igualdad de oportunidades, • plan de igualdad, • ambiente de trabajo inclusivo, • equilibrio trabajo-vida, • oportunidad de un equipo global, • formación y desarrollo continuo Responsabilidades, • Evaluar riesgos de seguridad en soluciones de IA y proponer mitigaciones, • Diseñar defensas frente a ataques adversariales (prompt injection, data poisoning, model theft), • Auditar modelos ML/LLM para identificar vulnerabilidades, sesgos y riesgos de privacidad, • Definir marcos de gobernanza AI alineados con buenas prácticas y regulación aplicable, • Colaborar con equipos de desarrollo para securizar pipelines MLOps y despliegues de IA Requisitos principales, • Experiencia en ML/LLM security y adversarial ML, • Conocimiento de OWASP Top 10 for LLM y técnicas de AI red teaming, • Experiencia con TensorFlow o PyTorch, • Conocimientos de privacidad diferencial, explainability y fairness, • Nivel alto de inglés en entorno internacional, • Actitud proactiva, • Capacidad para trabajar en equipos multidisciplinares, • Buenas habilidades de comunicación con perfiles técnicos y no técnicos, • ML/LLM security y adversarial ML, • OWASP Top 10 for LLM, • AI red teaming

Overview En GFT, como AI Security & Risk Consultant, evaluarás riesgos de seguridad en soluciones de IA y propondrás mitigaciones. Diseñarás defensas ante ataques adversariales y auditarás modelos ML/LLM para sesgos, privacidad y vulnerabilidades. Definirás marcos de gobernanza de IA alineados con buenas prácticas y normativa, y colaborarás con equipos de desarrollo para securizar pipelines MLOps y despliegues de IA. Esta función te sitúa en un entorno internacional, donde impactas la seguridad y la fiabilidad de soluciones IA a escala en sectores regulados. Buscamos a alguien proactivo, orientado a resultados y capaz de impulsar mejoras continuas. Compensaciones / Beneficios • igualdad de oportunidades, • plan de igualdad, • ambiente de trabajo inclusivo, • equilibrio trabajo-vida, • oportunidad de un equipo global, • formación y desarrollo continuo Responsabilidades, • Evaluar riesgos de seguridad en soluciones de IA y proponer mitigaciones, • Diseñar defensas frente a ataques adversariales (prompt injection, data poisoning, model theft), • Auditar modelos ML/LLM para identificar vulnerabilidades, sesgos y riesgos de privacidad, • Definir marcos de gobernanza AI alineados con buenas prácticas y regulación aplicable, • Colaborar con equipos de desarrollo para securizar pipelines MLOps y despliegues de IA Requisitos principales, • Experiencia en ML/LLM security y adversarial ML, • Conocimiento de OWASP Top 10 for LLM y técnicas de AI red teaming, • Experiencia con TensorFlow o PyTorch, • Conocimientos de privacidad diferencial, explainability y fairness, • Nivel alto de inglés en entorno internacional, • Actitud proactiva, • Capacidad para trabajar en equipos multidisciplinares, • Buenas habilidades de comunicación con perfiles técnicos y no técnicos, • ML/LLM security y adversarial ML, • OWASP Top 10 for LLM, • AI red teaming

Overview In this role you will serve as the technical reference for Vulnerability Management within a large-scale financial services environment. You will lead advanced analysis, risk-based prioritization and remediation efforts across infrastructure, apps, cloud and containers. You’ll coordinate with specialized teams to drive automation, governance and service improvement, and oversee critical or exploited vulnerabilities. This position offers the chance to shape vulnerability practices and contribute to secure, AI-assisted operations. Compensaciones / Beneficios • Hybrid working model, • 8 weeks teleworking outside usual area, • Flexible start and finish times, • career plan development, • training and language learning support, • national and international mobility Responsabilidades, • Act as the technical reference for Vulnerability Management operations and resolve escalations, • Perform advanced analysis and risk-based prioritization (CVSS, EPSS, CISA KEV, exposure, criticality, threat intelligence), • Define and monitor remediation activities, mitigations and compensating controls, • Coordinate with Hacking, Cloud, Hardening/Compliance, Threat Intelligence and Automation teams, • Supervising critical or actively exploited vulnerabilities, including verification and closure, • Monitor SLAs, KPIs and reporting; identify automation and service improvement opportunities, • Contribute to the evolution of the service and safe supervised use of AI in Vulnerability Management Requisitos principales, • 5+ years in cybersecurity with substantial Vulnerability Management experience, • Strong knowledge of vulnerability lifecycle and risk-based prioritization (CVSS, EPSS, CISA KEV, Threat Intelligence), • Experience with vulnerability scanning/management tools, preferably Qualys, • Solid knowledge of Windows, Linux, networking, applications, Cloud and container environments, • Experience in exploitation analysis, mitigations and compensating controls, plus SLA/KPI reporting, • Knowledge of scripting, REST APIs, JSON and automation, • Strong technical leadership, autonomy and cross-functional coordination, • leadership, • autonomy, • multidisciplinary coordination, • vulnerability lifecycle and risk-based prioritization, • CVSS, EPSS, CISA KEV, Threat Intelligence, • Qualys (and vulnerability scanning/management tools)

Buscamos Formadores Especialistas en Calidad y Seguridad Alimentaria.

Te apasiona la seguridad operacional, el análisis de datos y la mejora continua? ¿Cuentas con experiencia en mantenimiento aeronáutico y quieres desarrollar tu carrera en una de las empresas referentes del sector en España?.Globalia Mantenimiento Aeronáutico.Sistema de Gestión de la Seguridad

Estamos ampliando nuestro equipo docente en Institutos Nebrija – Formación Profesional!. Únete a un entorno educativo innovador, conectado con el mundo profesional y orientado al futuro de la FP. OfertaEmpleo #ProfesoradoFP #InstitutosNebrija #Docencia #FormaciónProfesional #Educación #EmpleoD

PRL #SeguridadIndustrial #Prevención #RiesgoEléctrico #TrabajosEnAltura #LOTO #Bomberos #Formador #BureauVeritas. Buscamos Formadores de PRL y Seguridad Industrial en toda España.

Somos La Cocina de los Pastores, una organización social que nace con ganas de estar en todos los barrios de las ciudades para que agricultores, pastores, ganaderos y productores puedan hacer venta directa de sus productos a menos de 15 minutos andando de vuestras casas. Supervisar el cumplimiento

About the Company An innovative international technology company is looking for an Inventory & Warehouse Control Specialist to strengthen its Supply Chain team. About the Role This position is responsible for ensuring the traceability, accuracy, and availability of inventory across multiple third-party logistics providers and supplier warehouses. Youll manage technical consumables and operational assets while working closely with Procurement, Operations, and Warehouse teams to support business continuity. Responsibilities • Manage inventory traceability across 3PLs and supplier warehouses., • Control technical consumables including prepregs, honeycomb, Kapton, adhesives, VDA, and other production materials., • Maintain visibility of company assets such as molds, fixtures, and tooling., • Perform inventory reconciliation and resolve stock discrepancies., • Support operational planning by ensuring material availability., • Monitor inventory KPIs and contribute to process improvements. Qualifications • Experience in inventory management, warehouse operations, logistics, or supply chain., • Experience working with 3PL providers., • Knowledge of ERP or Warehouse Management Systems., • Strong analytical and organizational skills., • Professional proficiency in English. Required Skills • Experience in inventory management, warehouse operations, logistics, or supply chain., • Experience working with 3PL providers., • Knowledge of ERP or Warehouse Management Systems., • Strong analytical and organizational skills., • Professional proficiency in English. Pay range and compensation package Salary: €32,000–€35,000 gross per year Equal Opportunity Statement We are committed to diversity and inclusivity.

Ingeniero/a Gestor/a de Proyectos de Sistemas de Seguridad. Experiencia en gestión de proyectos de sistemas de seguridad. Certificaciones en sistemas de seguridad o networking.

Únete a nuestra red de docentes colaboradores. Docentes o expertos con interés en transferir conocimiento. Ciberseguridad #ISO27001 #ENS #NIS2 #DORA #TISAX #ISO42001 #InteligenciaArtificial #IA #Formador #Docente #TransformacionDigital #BureauVeritas #Cybersecurity #Microsoft365 #Compliance #ISO20

GFT TECHNOLOGIES SE en Madrid busca un AI Security & Risk Consultant con experiencia en seguridad de sistemas de IA, modelos ML/LLM y marcos de gobernanza de IA. Trabajarás en un entorno internacional, colaborando con equipos de desarrollo para securizar pipelines ML/AI. Entre tus responsabilidades estarán evaluar riesgos, diseñar defensas frente a ataques como prompt injection y data poisoning, auditar modelos y asegurar cumplimiento de IA Act UE. #J-18808-Ljbffr

GMV is seeking a cybersecurity professional to join our team and bridge technical service management with hands-on Application Security and DevSecOps work. You will act as the technical reference and customer point of contact while enhancing SSDLC capabilities, SAST/SCA integration, and secure CI/CD practices. You will coordinate security gates, drive automation via APIs, and support vulnerability triage and remediation for complex software projects, including AI governance aspects. #J-18808-Ljbffr

Security Integration Engineer MindMatch Alcobendas, comunidad de madrid, Spain Maximice sus posibilidades de que su candidatura sea seleccionada asegurándose de que su CV y sus habilidades se ajustan al perfil. En este rol jugarás un papel clave fortaleciendo la seguridad empresarial de contraseñas, realizando auditorías de seguridad, asegurando el cumplimiento de estándares de seguridad globales y colaborando con equipos internacionales de infraestructura y ciberseguridad. Esta posición combina experiencia técnica en integración de seguridad con troubleshooting, análisis de causas raíz y coordinación entre múltiples dominios técnologicos. • Realizar y apoyar auditorías de seguridad de contraseñas a nivel empresarial., • Investigar y resolver incidencias detectadas en scans de seguridad de contraseñas, • Analizar causas raíz de incidentes de seguridad y proponer acciones correctivas a largo plazo, • Mantener y mejorar continuamente documentación de troubleshooting y procedimientos operacionales, • Coordinar investigaciones técnicas con equipos de infraestructura (Network, Windows, Linux/Unix, DBA, Active Directory), • Monitorear y reportar métricas de cobertura y cumplimiento de seguridad de contraseñas, • Contribuir a la mejora continua de procesos y controles de seguridad, • Apoyar el despliegue y mantenimiento de soluciones de auditoría empresarial, • Experiencia como Security Engineer, Security Integration Engineer, SOC Analyst o Infrastructure Security Engineer, • Sólida experiencia en entornos de infraestructura empresarial, • Troubleshooting de incidentes relacionados con seguridad en múltiples stacks técnicos, • Experiencia trabajando en grandes organizaciones internacionales, • Conocimientos de principios de ciberseguridad y gestión de riesgos, • Capacidad para coordinar con múltiples equipos técnicos y stakeholders, • Inglés profesional (entorno internacional), • Sistemas Operativos: Windows Server, Linux, Unix, • Infraestructura: Active Directory, Oracle, Microsoft SQL Server, IBM AS/400, • Seguridad: Seguridad de contraseñas, Integración de seguridad, Password Auditing, Análisis de riesgos, Root Cause Analysis, • Herramientas: Enforcer, EPAS, John the Ripper, Hashcat, PowerShell Horario flexible Modelo de trabajo hibrido, favoreciendo el equilibrio entre vida personal y profesional Salario competitivo y plan de retribución flexible Seguro médico privado Presupuesto anual para formación y desarrollo profesional Cursos de idiomas Participación en comunidades técnologicas y eventos del sector Seguimiento continuo y acompañamiento profesional Plan de desarrollo y crecimiento adaptado a tus objetivos En InnoIT creemos que el talento se desarrolla en un entorno donde aprender, innovar y disfrutar del camino van de la mano. Uniéte a nuestro equipo, participe en proyectos innovadores y sigue creciendo junto a profesionales apasionados por la tecnología. InnoIT Consulting Barcelona Meetup: InnoIT Consulting Madrid Meetup: , Equidad e Inclusión En InnoIT promovemos activamente la diversidad, la equidad y la inclusión. Damos la bienvenida a personas con todo tipo de perfiles, experiencias y trayectorias profesionales, y fomentamos especialmente la participación de colectivos tradicionalmente infrarrepresentados en el sector tecnologico. Evaluamos todas las candidaturas de manera objetiva y justa, garantizando la igualdad de oportunidades durante todo el proceso de selección. Asimismo, nos comprometemos a realizar los ajustes razonables necesarios para asegurar una experiencia accesible e inclusiva. No discriminamos por razon de genero, edad, origen, nacionalidad, orientación sexual, identidad o expresion de genero, religions, discapacidad o cualquier otra condicion protegida por la legislación vigente. Trabajamos para construir un entorno laboral diverso, respetuoso e inclusivo, donde todas las personas tengan las mismas oportunidades de crecimiento, desarrollo y reconocimiento profesional. xkdbapo FPGA/Firmware Engineer to join our team in developingadvanced embedded systems for the defense and space industries.The ideal candidate will bring expertise inFPGA design, digital signal processi... Mostrar mas At ING Hubs Spain we are looking for an Enterprise Security Architect - Security Detection and Response.Your role and work environment.We are looking for a talented and enthusiastic Enterprise Secu... Mostrar mas #J-18808-Ljbffr

MindMatch está buscando un Security Integration Engineer en Alcobendas para fortalecer la seguridad de contraseñas y auditorías de seguridad a nivel empresarial. Colaborará con equipos internacionales y coordinará investigaciones técnicas, manteniendo documentación de troubleshooting y procedimientos operacionales. Se requiere experiencia en infraestructuras empresariales y inglés profesional. #J-18808-Ljbffr

Bring innovation to life At the Ivoclar Group, we support dentists, dental technicians and dental hygienists both professionally in fulfilling their passion and purpose: to ensure that people have the best possible oral health care and quality of life, today and in the future. We are inspired by the knowledge that together we are better. Bring innovation to life At the Ivoclar Group, we support dentists, dental technicians and dental hygienists both professionally in fulfilling their passion and purpose: to ensure that people have the best possible oral health care and quality of life, today and in the future. We are inspired by the knowledge that together we are better. Do you want to work together with us to make people smile? Then come and join our team as Security Analyst Global IT. This is a unique opportunity to be part of a global and diverse environment. We strongly encourage applications from people with different backgrounds, perspectives and experiences. • Coordinate incident response activities, perform root cause analyses, and implement sustainable improvements., • Identify security risks and vulnerabilities, define mitigation strategies, and drive their implementation., • Define, implement, and continuously improve global IT security processes, policies, and standards based on frameworks such as ISO 27001 and NIST., • Support international IT projects by embedding security best practices and Security-by-Design principles., • Perform security assessments, monitor compliance with security standards, and contribute to enterprise-wide risk management., • Develop and promote security awareness initiatives to strengthen the organization's security culture., • Evaluate emerging security technologies and collaborate with global stakeholders, external partners, and security communities, • 3-5 years of professional experience in Information Security within an international environment., • Degree in Computer Science, Information Technology, Business Informatics, or a comparable qualification., • Strong knowledge of modern security concepts, technologies, and frameworks such as ISO 27001 and NIST., • Experience in risk management, incident response, and the implementation of effective security controls., • Preferably technical expertise in Microsoft security stack, • Security certifications (e.g. CISSP, CISM, or CEH) are considered an advantage., • Strong analytical mindset with the ability to communicate complex topics in a clear and structured manner., • Excellent communication, stakeholder management, and project coordination skills in a global environment., • Fluent English and willingness to travel internationally up to 10%, • A global, purpose-driven company with 3,700 employees., • A culture of innovation and collaboration., • Learning and development tailored to your growth., • Attractive benefits. #J-18808-Ljbffr

AG Solution Group is seeking an OT Security Specialist to safeguard industrial environments, focusing on SCADA/PLC networks, firewalls, and secure architecture.

MercurySteam busca un/a Senior IT Technician - Especialista en Ciberseguridad en San Sebastián de los Reyes (Madrid, España). Formarás parte de un estudio de desarrollo de videojuegos AAA, con foco en seguridad de red y puestos de trabajo, y colaborarás con un equipo multidisciplinar para mantener infraestructuras seguras y fiables. El puesto ofrece ambiente colaborativo, 23 días de vacaciones y seguro médico privado, con oportunidad de desarrollo profesional y participación en proyectos #J-18808-Ljbffr

Security Expert | DLP MindMatch Alcobendas, comunidad de madrid, Spain En ALTEN tenemos claro que el éxito de nuestros proyectos se debe a las personas que forman nuestro equipo. Por eso, si tienes experiencia como Consultor/a en estrategias de DLP (Data Loss Prevention) y operación de soluciones de seguridad de datos, nos comprometemos a impulsar tu talento, satisfacer tus expectativas laborales y hacerte sentir como en casa. ¿Interesado en saber más sobre este trabajo? Desplácese hacia abajo y descubra qué habilidades, experiencia y cualificaciones académicas se necesitan. ¿Quieres construir hoy el mundo de mañana? ¡Sigue leyendo! • Definir la estrategia y hoja de ruta de DLP., • Contribuir a la creación de la estrategia del producto, alineándola con la evolución de las funcionalidades del proveedor y el panorama de seguridad de datos., • Maximizar el valor para el cliente y el negocio en los logros del equipo., • Evolucionar el producto para cubrir riesgos emergentes en el panorama de seguridad de datos, incluyendo aquellos relacionados con soluciones de IA., • Identificar y adoptar controles de seguridad DLP para mitigar riesgos., • Crear material promocional para fomentar la adopción del producto y explicar nuevas funcionalidades basadas en la hoja de ruta del proveedor., • Revisar el modelo operativo del producto y proponer mejoras., • Optimizar los procesos del producto y su eficiencia., • Definir la línea base del producto., • Colaborar en la revisión del conjunto de reglas existentes y oportunidades de optimización., • Experiencia demostrable en estrategias de DLP y operación de soluciones como Microsoft DLP, SkyHigh DLP (Web DLP) y ProofPoint DLP (Email DLP)., • Capacidad para definir hojas de ruta y alinear estrategias con proveedores y el panorama de seguridad., • Habilidades para crear material promocional y técnico que facilite la adopción del producto., • Conocimiento en revisión de modelos operativos y procesos, con enfoque en mejora continua., • Experiencia en colaboración con equipos técnicos y no técnicos para implementar soluciones de seguridad., • Nivel avanzado de inglés (imprescindible). El español será valorado como un plus., • Incorporación a una empresa multinacional competitiva en continuo crecimiento., • Integración en un equipo de profesionales altamente cualificados, con un buen clima laboral, innovador y dinámico., • Formación especializada y desarrollo profesional continuo. Somos un equipo. Formamos parte de ALTEN, una multinacional europea especializada en proporcionar servicios de consultoría, tecnología de la información y servicios de ingeniería a las principales compañías del mercado español. Si te gustan las cifras, te diremos que en España tenemos una facturación de 337 millones de euros, 10 sedes y un equipo formado por 5.500 personas. Además, en ALTEN nos enorgullecemos de ofrecer igualdad de oportunidades con independencia de género, edad, diversidad de capacidades o país de origen. Nuestro compromiso está con el talento y con las personas que lo tienen. xkdbapo Si crees que eres talento, ¡apúntate! #J-18808-Ljbffr

Overview In this role you help evolve a corporate security service by combining technical leadership with hands-on AppSec work. You will coordinate the security service while implementing and advancing SSDLC and DevSecOps capabilities within a large organization. Expect to drive security gates, automate controls in CI/CD, and guide risk management and reporting. This is a hands-on, cross-functional role with a strong focus on impact, automation, and AI-enabled security. You will collaborate with development teams to shape secure software delivery. Compensaciones / Beneficios • Hybrid working model, • 8 weeks teleworking per year, • Flexible start/end times; intensive Fridays and summer, • Personalized career plan development; training and language learning support, • National and international mobility; relocation package, • Competitive compensation with ongoing reviews; flexible compensation; brand discounts Responsabilidades, • Technically coordinate the security service, manage demand, plan priorities, capacity, SLAs and KPIs, • Integrate, configure and optimize SAST/SCA controls in CI/CD pipelines, • Coordinate application onboarding and define Security Gates, • Contribute to vulnerability triage, remediation and revalidation, • Act as technical point of contact for customers, providing reporting and follow-up, • Drive automation and industrialization through APIs and scripting, • Manage risks, incidents, deviations and escalations, • Advise development teams and coordinate with different technical areas, • Drive evolution of the SSDLC/DevSecOps model, including AI governance and supervised adoption Requisitos principales, • Solid experience in Application Security, SSDLC and DevSecOps with service or team coordination, • Knowledge of SAST/SCA, vulnerability management, and CI/CD security, • Familiarity with OWASP, CWE, CVE, CVSS and Secure Coding, • Experience with Git, pipelines and Security Gates, • Understanding of SLA, KPI, demand, capacity and risk management, • Experience with APIs, scripting and automation, • Customer interaction and technical/executive reporting, • AI governance and risk management, including traceability and human oversight, • Experience with Checkmarx, Fortify, SonarQube and CI/CD platforms (Azure DevOps, Jenkins, GitHub Actions, GitLab CI/CD) is valued, • Knowledge of Cloud, containers, IaC and software supply chain security, • Knowledge of NIST SSDF, OWASP ASVS/SAMM, SBOM, SARIF; security automation; and applying AI to AppSec/DevSecOps, • Relevant training or certifications are valued, • Strong communication and stakeholder management, • Collaborative team player with cross-functional coordination, • Problem-solving and analytical mindset, • SAST/SCA and vulnerability management, • CI/CD security and pipelines, • Security Gates and gate-based on-boarding

Overview In this role you will serve as the technical reference for Vulnerability Management within a large-scale financial services environment. You will lead advanced analysis, risk-based prioritization and remediation efforts across infrastructure, apps, cloud and containers. You’ll coordinate with specialized teams to drive automation, governance and service improvement, and oversee critical or exploited vulnerabilities. This position offers the chance to shape vulnerability practices and contribute to secure, AI-assisted operations. Compensaciones / Beneficios • Hybrid working model, • 8 weeks teleworking outside usual area, • Flexible start and finish times, • career plan development, • training and language learning support, • national and international mobility Responsabilidades, • Act as the technical reference for Vulnerability Management operations and resolve escalations, • Perform advanced analysis and risk-based prioritization (CVSS, EPSS, CISA KEV, exposure, criticality, threat intelligence), • Define and monitor remediation activities, mitigations and compensating controls, • Coordinate with Hacking, Cloud, Hardening/Compliance, Threat Intelligence and Automation teams, • Supervising critical or actively exploited vulnerabilities, including verification and closure, • Monitor SLAs, KPIs and reporting; identify automation and service improvement opportunities, • Contribute to the evolution of the service and safe supervised use of AI in Vulnerability Management Requisitos principales, • 5+ years in cybersecurity with substantial Vulnerability Management experience, • Strong knowledge of vulnerability lifecycle and risk-based prioritization (CVSS, EPSS, CISA KEV, Threat Intelligence), • Experience with vulnerability scanning/management tools, preferably Qualys, • Solid knowledge of Windows, Linux, networking, applications, Cloud and container environments, • Experience in exploitation analysis, mitigations and compensating controls, plus SLA/KPI reporting, • Knowledge of scripting, REST APIs, JSON and automation, • Strong technical leadership, autonomy and cross-functional coordination, • leadership, • autonomy, • multidisciplinary coordination, • vulnerability lifecycle and risk-based prioritization, • CVSS, EPSS, CISA KEV, Threat Intelligence, • Qualys (and vulnerability scanning/management tools)

Overview As Cybersecurity Manager, you will lead security efforts for the Commercial Ground Segment that controls and operates satellites. You will guide security strategy, drive secure product evolution, and ensure “Security by Design” from early design through delivery. You’ll collaborate with cross-functional teams and clients to manage risks, compliance, and accreditation while promoting reusable security patterns. This role offers international exposure, relocation options, and a focus on protecting critical space infrastructure. Compensaciones / Beneficios • Hybrid working model, • 8 weeks per year teleworking outside usual area, • Flexible start/finish times, • career plan development and training, • national and international mobility with relocation package, • competitive compensation with ongoing reviews and benefits comparison at employer Responsabilidades, • Serve as the cybersecurity expert for the business unit and support teams, products, projects, and clients, • Identify security requirements in proposals, bids, and tenders and define strategies, • Drive product evolution toward secure, credible solutions, • Integrate Security by Design criteria across design, architecture, development, validation, and delivery, • Support risk analyses, architecture reviews, vulnerability management, and compliance/accreditation processes, • Coordinate with cybersecurity teams to provide technical and regulatory support, • Promote reuse of security guidelines, patterns, controls, and architectures across products/projects, • Advise clients on risk identification and action planning Requisitos principales, • Experience leading or coordinating cybersecurity initiatives in engineering, product, or technology projects, • Knowledge of Security by Design principles and SDLC integration, • Experience defining security requirements, risk analyses, architecture reviews, and vulnerability management, • Familiarity with compliance, audit, and system accreditation processes, • Ability to collaborate with multidisciplinary teams and serve as technical liaison with clients, • Experience participating in bids or tenders involving cybersecurity components, • collaboration across multidisciplinary teams, • strong communication with internal and external clients, • strategic thinking with practical execution, • Security by Design principles, • risk analysis methodologies, • architecture reviews (security-focused)

Ciberseguridad (Fortinet, Check Point, WatchGuard u similares). Trabajarás integrando y desarrollando una red de partners como mayoristas, integradores y resellers para soluciones de seguridad e infraestructura. Vender soluciones de Seguridad e/o Infraestructura IT de forma consultiva.

Trabajarás integrando y desarrollando una red de partners como mayoristas, integradores y resellers para soluciones de seguridad e infraestructura. Vender soluciones de Seguridad e/o Infraestructura IT de forma consultiva. Experiencia en comercialización de soluciones de Ciberseguridad e Infraestr

Trabajarás integrando y desarrollando una red de partners como mayoristas, integradores y resellers para soluciones de seguridad e infraestructura. Vender soluciones de Seguridad e/o Infraestructura IT de forma consultiva. Experiencia en comercialización de soluciones de Ciberseguridad e Infraestr

Overview In this role you help evolve a corporate security service by combining technical leadership with hands-on AppSec work. You will coordinate the security service while implementing and advancing SSDLC and DevSecOps capabilities within a large organization. Expect to drive security gates, automate controls in CI/CD, and guide risk management and reporting. This is a hands-on, cross-functional role with a strong focus on impact, automation, and AI-enabled security. You will collaborate with development teams to shape secure software delivery. Compensaciones / Beneficios • Hybrid working model, • 8 weeks teleworking per year, • Flexible start/end times; intensive Fridays and summer, • Personalized career plan development; training and language learning support, • National and international mobility; relocation package, • Competitive compensation with ongoing reviews; flexible compensation; brand discounts Responsabilidades, • Technically coordinate the security service, manage demand, plan priorities, capacity, SLAs and KPIs, • Integrate, configure and optimize SAST/SCA controls in CI/CD pipelines, • Coordinate application onboarding and define Security Gates, • Contribute to vulnerability triage, remediation and revalidation, • Act as technical point of contact for customers, providing reporting and follow-up, • Drive automation and industrialization through APIs and scripting, • Manage risks, incidents, deviations and escalations, • Advise development teams and coordinate with different technical areas, • Drive evolution of the SSDLC/DevSecOps model, including AI governance and supervised adoption Requisitos principales, • Solid experience in Application Security, SSDLC and DevSecOps with service or team coordination, • Knowledge of SAST/SCA, vulnerability management, and CI/CD security, • Familiarity with OWASP, CWE, CVE, CVSS and Secure Coding, • Experience with Git, pipelines and Security Gates, • Understanding of SLA, KPI, demand, capacity and risk management, • Experience with APIs, scripting and automation, • Customer interaction and technical/executive reporting, • AI governance and risk management, including traceability and human oversight, • Experience with Checkmarx, Fortify, SonarQube and CI/CD platforms (Azure DevOps, Jenkins, GitHub Actions, GitLab CI/CD) is valued, • Knowledge of Cloud, containers, IaC and software supply chain security, • Knowledge of NIST SSDF, OWASP ASVS/SAMM, SBOM, SARIF; security automation; and applying AI to AppSec/DevSecOps, • Relevant training or certifications are valued, • Strong communication and stakeholder management, • Collaborative team player with cross-functional coordination, • Problem-solving and analytical mindset, • SAST/SCA and vulnerability management, • CI/CD security and pipelines, • Security Gates and gate-based on-boarding

Overview As Cybersecurity Manager, you will lead security efforts for the Commercial Ground Segment that controls and operates satellites. You will guide security strategy, drive secure product evolution, and ensure “Security by Design” from early design through delivery. You’ll collaborate with cross-functional teams and clients to manage risks, compliance, and accreditation while promoting reusable security patterns. This role offers international exposure, relocation options, and a focus on protecting critical space infrastructure. Compensaciones / Beneficios • Hybrid working model, • 8 weeks per year teleworking outside usual area, • Flexible start/finish times, • career plan development and training, • national and international mobility with relocation package, • competitive compensation with ongoing reviews and benefits comparison at employer Responsabilidades, • Serve as the cybersecurity expert for the business unit and support teams, products, projects, and clients, • Identify security requirements in proposals, bids, and tenders and define strategies, • Drive product evolution toward secure, credible solutions, • Integrate Security by Design criteria across design, architecture, development, validation, and delivery, • Support risk analyses, architecture reviews, vulnerability management, and compliance/accreditation processes, • Coordinate with cybersecurity teams to provide technical and regulatory support, • Promote reuse of security guidelines, patterns, controls, and architectures across products/projects, • Advise clients on risk identification and action planning Requisitos principales, • Experience leading or coordinating cybersecurity initiatives in engineering, product, or technology projects, • Knowledge of Security by Design principles and SDLC integration, • Experience defining security requirements, risk analyses, architecture reviews, and vulnerability management, • Familiarity with compliance, audit, and system accreditation processes, • Ability to collaborate with multidisciplinary teams and serve as technical liaison with clients, • Experience participating in bids or tenders involving cybersecurity components, • collaboration across multidisciplinary teams, • strong communication with internal and external clients, • strategic thinking with practical execution, • Security by Design principles, • risk analysis methodologies, • architecture reviews (security-focused)

Overview As Cybersecurity Manager, you will lead security efforts for the Commercial Ground Segment that controls and operates satellites. You will guide security strategy, drive secure product evolution, and ensure “Security by Design” from early design through delivery. You’ll collaborate with cross-functional teams and clients to manage risks, compliance, and accreditation while promoting reusable security patterns. This role offers international exposure, relocation options, and a focus on protecting critical space infrastructure. Compensaciones / Beneficios • Hybrid working model, • 8 weeks per year teleworking outside usual area, • Flexible start/finish times, • career plan development and training, • national and international mobility with relocation package, • competitive compensation with ongoing reviews and benefits comparison at employer Responsabilidades, • Serve as the cybersecurity expert for the business unit and support teams, products, projects, and clients, • Identify security requirements in proposals, bids, and tenders and define strategies, • Drive product evolution toward secure, credible solutions, • Integrate Security by Design criteria across design, architecture, development, validation, and delivery, • Support risk analyses, architecture reviews, vulnerability management, and compliance/accreditation processes, • Coordinate with cybersecurity teams to provide technical and regulatory support, • Promote reuse of security guidelines, patterns, controls, and architectures across products/projects, • Advise clients on risk identification and action planning Requisitos principales, • Experience leading or coordinating cybersecurity initiatives in engineering, product, or technology projects, • Knowledge of Security by Design principles and SDLC integration, • Experience defining security requirements, risk analyses, architecture reviews, and vulnerability management, • Familiarity with compliance, audit, and system accreditation processes, • Ability to collaborate with multidisciplinary teams and serve as technical liaison with clients, • Experience participating in bids or tenders involving cybersecurity components, • collaboration across multidisciplinary teams, • strong communication with internal and external clients, • strategic thinking with practical execution, • Security by Design principles, • risk analysis methodologies, • architecture reviews (security-focused)

Overview En GFT, como AI Security & Risk Consultant, evaluarás riesgos de seguridad en soluciones de IA y propondrás mitigaciones. Diseñarás defensas ante ataques adversariales y auditarás modelos ML/LLM para sesgos, privacidad y vulnerabilidades. Definirás marcos de gobernanza de IA alineados con buenas prácticas y normativa, y colaborarás con equipos de desarrollo para securizar pipelines MLOps y despliegues de IA. Esta función te sitúa en un entorno internacional, donde impactas la seguridad y la fiabilidad de soluciones IA a escala en sectores regulados. Buscamos a alguien proactivo, orientado a resultados y capaz de impulsar mejoras continuas. Compensaciones / Beneficios • igualdad de oportunidades, • plan de igualdad, • ambiente de trabajo inclusivo, • equilibrio trabajo-vida, • oportunidad de un equipo global, • formación y desarrollo continuo Responsabilidades, • Evaluar riesgos de seguridad en soluciones de IA y proponer mitigaciones, • Diseñar defensas frente a ataques adversariales (prompt injection, data poisoning, model theft), • Auditar modelos ML/LLM para identificar vulnerabilidades, sesgos y riesgos de privacidad, • Definir marcos de gobernanza AI alineados con buenas prácticas y regulación aplicable, • Colaborar con equipos de desarrollo para securizar pipelines MLOps y despliegues de IA Requisitos principales, • Experiencia en ML/LLM security y adversarial ML, • Conocimiento de OWASP Top 10 for LLM y técnicas de AI red teaming, • Experiencia con TensorFlow o PyTorch, • Conocimientos de privacidad diferencial, explainability y fairness, • Nivel alto de inglés en entorno internacional, • Actitud proactiva, • Capacidad para trabajar en equipos multidisciplinares, • Buenas habilidades de comunicación con perfiles técnicos y no técnicos, • ML/LLM security y adversarial ML, • OWASP Top 10 for LLM, • AI red teaming

GMV is seeking a cybersecurity leader to own the security of satellite-control systems and guide security strategy across proposals, bids, and delivery, ensuring Security by Design from the earliest design to validation and deployment. You will coordinate with multidisciplinary teams, manage risk analyses, architecture reviews and compliance, and work to deliver secure, credible solutions for clients in a challenging, highly regulated space domain. #J-18808-Ljbffr

Would you like to take on new challenges without giving up the stability offered by a highly experienced technology group? At GMV, we are expanding our teams in the space sector to take on space surveillance projects. We´ll get to the point; we'll tell you what's not on the web. If you want to know more about us go to GMV website. In our team, you will provide support for the deployment, integration, and maintenance of space surveillance systems in mission-critical environments and infrastructures. The role involves supporting the configuration and administration of Windows and Linux servers, virtualization platforms, network services, storage, and PKI components, ensuring the secure and reliable operation of the system. You will also contribute to the deployment of solutions in accredited environments, helping with system hardening, compliance with security requirements, vulnerability mitigation and accreditation activities. Additional responsibilities include supporting backup and recovery processes, troubleshooting infrastructure issues, and contributing to the continuous improvement of secure deployment and operational procedures. • Windows Server and Linux (Ubuntu/RHEL) administration, • Active Directory, DNS, DHCP, IIS, and Group Policy (GPO) administration, • Virtualization technologies (VMware/Proxmox), • Storage management (LVM, RAID, SMB/NFS) in Windows and Linux environments, • Network administration (TCP/IP, VLANs, routing, NAT, and firewalls), • Public Key Infrastructure (PKI), Certificate Authority (CA), and digital certificate management, • Hybrid working model and 4 weeks per year of teleworking outside your usual geographical area., • Flexible start and finish times, and intensive working hours Fridays and in summer., • Personalized career plan development, training and language learning support., • National and international mobility. Do you come from another country? We can offer you a relocation package., • Competitive compensation with ongoing reviews, flexible compensation and discount on brands., • Wellbeing program: Health, dental and accident insurance; free fruit and coffee, physical, mental and financial health training, and much more. In our recruitment processes you will always have telephone and personal contact, face-to-face or online, with our talent acquisition team. In addition, bank transfers and bank cards will never be requested. If you are contacted through any other process, please write to our team at privacy@gmv.com We promote equal opportunities in recruitment, and we are committed to inclusion and diversity. If you have any questions please do not hesitate to contact Sandra Bravo Crespo, in charge of this vacancy. Sandra Bravo Crespo #J-18808-Ljbffr

ALTEN busca un Consultor/a de DLP en Alcobendas para definir la estrategia y la hoja de ruta de DLP, alineándola con las funcionalidades del proveedor y el panorama de seguridad de datos. Trabajarás para maximizar el valor para el cliente y el negocio, evolucionando el producto ante riesgos emergentes y colaborando con equipos técnicos y no técnicos. Inglés avanzado es imprescindible; español valorado. #J-18808-Ljbffr

Somos un grupo multinacional dedicado al entretenimiento y al ocio, líder en el sector del juego privado, con cuatro décadas de experiencia y con presencia en siete países de Europa (España e Italia) y Latinoamérica (Argentina, Colombia, México, Panamá y Uruguay) y una amplia operación onlin

We are seeking a highly skilled.Information Security GRC Specialist.As a ISO, these tasks include:.Lead the development and tracking of Key Performance Indicators (KPIs) for cybersecurity governance.Implement and manage cybersecurity processes such us Vulnerability Management, Incident Management, e

Ivoclar EMEA is seeking a Security Analyst for its Global IT team to coordinate incident response, assess risks, and implement robust security controls across international projects. You will drive security governance and ensure compliance with ISO 27001 and NIST standards while fostering a culture of security awareness. The role requires 3–5 years in information security, a degree in a related field, and willingness to travel up to 10% internationally. Fluency in English is essential. #J-18808-Ljbffr

If you wanted to be Anonymous, but the pandemic made you realize that wearing a mask is not your cup of tea… Your place is with us! We are expanding our Corporate Cybersecurity Compliance team to help manage risks, ensure regulatory compliance, and strengthen our security framework. We’ll get to the point; we’ll tell you what’s not on the web. If you want to know more about us go to GMV website. In collaboration with the team, you will be responsible for maintaining and evolving the corporate Information Security Management System (ISMS). You will also contribute to all the processes required to ensure and enhance information protection, resilience, and compliance with established requirements. • Activities related to regulations, standards, and frameworks applicable in the countries where GMV operates (ISO/IEC 27001, ENS, NIS2, etc.), including both internal and external audits., • Defining and monitoring metrics, indicators (KPIs/KRIs), and management dashboards., • Analyzing, assessing, and managing internal and third‑party risks, while promoting initiatives to prevent and mitigate them., • Developing and reviewing security and compliance policies, methodologies, and documentation. Supporting the preparation of security committees, management reviews, and ISMS governance activities. For this position, we are looking for a Compliance Cybersecurity Engineer with experience in Governance, Risk & Compliance (GRC), Information Security Management Systems (ISMS), audit processes, information security controls and risk treatment plans. You should also have knowledge of: • Security regulations and standards such as ISO/IEC 27001, ENS, NIS2, etc., • Risk assessment and risk management methodologies., • Security requirements for suppliers and third parties. Additionally, the following will be considered a plus: • Certifications such as CISM, CRISC, CISSP, CISA, ISO/IEC 27001 Lead Auditor, or similar., • Knowledge of operational resilience and business continuity frameworks., • Experience working in regulated environments or critical infrastructure sectors. A high level of English proficiency is required. • Hybrid working model and 4 weeks per year of teleworking outside your usual geographical area., • Flexible start and finish times, and intensive working hours Fridays and in summer., • Personalized career plan development, training and language learning support., • National and international mobility. If you come from another country, we can offer you a relocation package., • Competitive compensation with ongoing reviews, flexible compensation and discounts on brands., • Wellbeing program: health, dental and accident insurance, free fruit and coffee, physical, mental and financial health training, and much more. In our recruitment processes you will always have telephone and personal contact, face‑to‑face or online, with our talent acquisition team. In addition, bank transfers and bank cards will never be requested. If you are contacted through any other process, please write to our team at privacy@gmv.com We promote equal opportunities in recruitment, and we are committed to inclusion and diversity. If you have any questions please do not hesitate to contact Pablo Durán Álvarez, in charge of this vacancy. Pablo Durán Álvarez #J-18808-Ljbffr

Jobtailor busca un perfil de Analista de Seguridad para colaborar en un proyecto del sector financiero en un entorno de trabajo híbrido en Tres Cantos. Se valoran habilidades en gestión de riesgos de ciberseguridad y dominio de metodologías ISO 27005, MAGERIT y NIST SP 800-30, así como experiencia en análisis de vulnerabilidades y gestión del log de riesgos. El candidato debe aportar experiencia en soporte a auditorías internas y externas (SCIIF, CGO, LOPD, Gestión de Identidades) y contar con #J-18808-Ljbffr

• Colaborar en un proyecto del sector financiero., • Trabajar en modalidad híbrida en Tres Cantos., • Formar parte de un gran equipo de personas dispuestas a ayudarte., • Experiencia a partir de 3 años como Analista de Seguridad., • Experiencia en gestión de riesgos de ciber., • Dominio de metodologías de análisis de riesgos ciber (ISO 27005, MAGERIT, NIST SP 800-30), análisis de vulnerabilidades, gestión de Log de Riesgos (DS&P)., • Experiencia en gestión del ciclo de vida completo de excepciones a políticas de seguridad., • Experiencia en soporte a auditorías internas y externas (SCIIF, CGO, LOPD, Gestión de Identidades)., • Imprescindible contar con la certificación ISO 27001 Lead Auditor. Demonstrates expertise in Cybersecurity Risk Management, including proficiency in risk analysis methodologies and lifecycle management of security policy exceptions. Strong capability in supporting internal and external audits while ensuring compliance with relevant standards. • Cibersecurity Risk Management, • ISO 27001 Lead Auditor Certification, • Risk Analysis Methodologies (ISO 27005, MAGERIT, NIST SP 800-30), • Vulnerability Analysis, • Audit Support (SCIIF, CGO, LOPD, Gestión de Identidades), • Cibersecurity Risk Management, • Risk Analysis Methodologies, • Vulnerability Analysis, • Log Risk Management, • Security Policy Exception Management, • Collaboration, • Teamwork, • ISO 27001 Lead Auditor, • Financial Sector, • Internal Audits, • External Audits, • Risk Management #J-18808-Ljbffr

A proactive and detail-oriented OT Security Specialist with a strong analytical mindset and practical/hands-on experience in securing industrial environments. This professional excels at understanding and managing complex and legacy OT infrastructures, and is able to advocate efficient and transparent solutions ensuring they become secure. With foundational expertise in OT network technologies and firewall configurations, this specialist can cooperate with other teams- such as operations, IT, and engineering to assess risks, strengthen network segmentation, and maintain a resilient OT security posture. • In-depth knowledge of OT security and networking in industrial environments (e.g., SCADA, PLCs, DCS), • Skilled in analyzing and mapping complex or legacy OT networks, • Hands-on experience with segmentation and IP (re-)numbering of OT networks, • Experienced with risk assessments and developing mitigation strategies, • Practical understanding of firewalls, network segmentation, and secure architecture principles, • Understanding of the Purdue model, • Hands-on experience in implementation of at least one of the following technologies (OT-firewalling, automated network monitoring, network restructuring), • Proficient in continuous monitoring using SNMP, NetFlow, or similar protocols, • Works cross-functionally with IT/OT teams to align security with production needs, • Knowledge of Fortinet firewalls configuration, • Experience with Active Directory (AD) management, • Hands-on experience with Nozomi Networks solutions (e.g., Guardian) for network traffic analysis, anomaly detection, and asset visibility in industrial/OT environments is a plus, • Cisco certificate is a plus, • Palo Alto firewall configuration is a plus, • Strong verbal and written communication skills, able to translate complex OT security concepts into clear, business-relevant language for both technical and non-technical stakeholders., • Proactive in client meetings, takes initiative during commissioning, testing, and audit phases to flag risks early, propose solutions, and keep stakeholders aligned rather than waiting to be asked., • Confident representing the company in front of client teams on-site, building trust and credibility through transparent, solution-oriented dialogue., • Comfortable working cross-culturally and adapting communication style to different client organizations during international travel. Travel required to customer sites during key project phases (e.g., commissioning, testing, audits). Flexibility for short-term international travel is essential. Language: Excellent communication skills in Spanish and English are required; French is a strong asset. Location: Preferred location is Madrid/Alcobendas or the surrounding area. At AG Solution, we build intelligent solutions for the process industry, combining automation, process control, data management, and MES/MOM systems to help manufacturers reach operational excellence. Now part of the Quariq Group, we are one of Europe's leading Industry 4.0 partners, with more than 400 engineers and consultants working across Europe, the UK, and the US. Our success starts with our people. We invest in growth through continuous learning, mentorship, and our AG Academy, ensuring every colleague has the opportunity to develop their skills and career. We believe that innovation happens when people feel trusted, connected, and inspired. With offices in over 15 cities worldwide, we bring together diverse expertise and perspectives - from Antwerp to Barcelona, Rotterdam to Lyon, and New York to Krakow. At AG Solution, you'll work on meaningful projects that drive efficiency, sustainability, and digital transformation for leading manufacturers worldwide. Ready to shape the future of industry? Explore our opportunities and grow with a team that's redefining what's possible. #J-18808-Ljbffr

Overview In this role you help evolve a corporate security service by combining technical leadership with hands-on AppSec work. You will coordinate the security service while implementing and advancing SSDLC and DevSecOps capabilities within a large organization. Expect to drive security gates, automate controls in CI/CD, and guide risk management and reporting. This is a hands-on, cross-functional role with a strong focus on impact, automation, and AI-enabled security. You will collaborate with development teams to shape secure software delivery. Compensaciones / Beneficios • Hybrid working model, • 8 weeks teleworking per year, • Flexible start/end times; intensive Fridays and summer, • Personalized career plan development; training and language learning support, • National and international mobility; relocation package, • Competitive compensation with ongoing reviews; flexible compensation; brand discounts Responsabilidades, • Technically coordinate the security service, manage demand, plan priorities, capacity, SLAs and KPIs, • Integrate, configure and optimize SAST/SCA controls in CI/CD pipelines, • Coordinate application onboarding and define Security Gates, • Contribute to vulnerability triage, remediation and revalidation, • Act as technical point of contact for customers, providing reporting and follow-up, • Drive automation and industrialization through APIs and scripting, • Manage risks, incidents, deviations and escalations, • Advise development teams and coordinate with different technical areas, • Drive evolution of the SSDLC/DevSecOps model, including AI governance and supervised adoption Requisitos principales, • Solid experience in Application Security, SSDLC and DevSecOps with service or team coordination, • Knowledge of SAST/SCA, vulnerability management, and CI/CD security, • Familiarity with OWASP, CWE, CVE, CVSS and Secure Coding, • Experience with Git, pipelines and Security Gates, • Understanding of SLA, KPI, demand, capacity and risk management, • Experience with APIs, scripting and automation, • Customer interaction and technical/executive reporting, • AI governance and risk management, including traceability and human oversight, • Experience with Checkmarx, Fortify, SonarQube and CI/CD platforms (Azure DevOps, Jenkins, GitHub Actions, GitLab CI/CD) is valued, • Knowledge of Cloud, containers, IaC and software supply chain security, • Knowledge of NIST SSDF, OWASP ASVS/SAMM, SBOM, SARIF; security automation; and applying AI to AppSec/DevSecOps, • Relevant training or certifications are valued, • Strong communication and stakeholder management, • Collaborative team player with cross-functional coordination, • Problem-solving and analytical mindset, • SAST/SCA and vulnerability management, • CI/CD security and pipelines, • Security Gates and gate-based on-boarding

GMV in Tres Cantos, Spain is looking for a Business Development Executive to drive business growth in the Security and Defense market. You will implement innovative sales strategies, work closely with clients, and analyze industry trends. This position requires extensive knowledge of the industry, strong negotiation skills, and fluency in both English and Spanish. GMV offers a hybrid working model with flexible hours and a comprehensive wellbeing program. #J-18808-Ljbffr

GFT TECHNOLOGIES SE busca un/a Penetration Tester con experiencia en pruebas de penetración y evaluación de vulnerabilidades en aplicaciones, redes y sistemas. Se trabajará en un entorno híbrido en España y se realizará reporting técnico y ejecutivo con evidencias y recomendaciones. Se valorarán conocimientos en Burp Suite y Metasploit, scripting (Python, PowerShell o Bash) y certificaciones como OSCP/CEH/GPEN/GWAPT. Formación y desarrollo serán parte de la propuesta de valor de la empresa. #J-18808-Ljbffr

GMV invites you to join an Application Security and SSDLC service, helping implement and evolve a DevSecOps model by automating security controls from the earliest development stages. You will integrate SAST/SCA into CI/CD pipelines, configure and optimize security tools, define Security Gates, analyze vulnerabilities, and automate with APIs using Python, PowerShell, or Bash. This role offers a hybrid work arrangement, ongoing training, and opportunities to collaborate with development teams #J-18808-Ljbffr

If you want to take the next step in your cybersecurity career, combining technical service management with a hands‑on role in Application Security and DevSecOps, this opportunity will allow you to contribute to the evolution of a corporate security service within a large organization. We´ll get to the point; we'll tell you what's not on the web. If you want to know more about de GMV You will combine two key responsibilities: acting as the technical reference and customer point of contact, while also contributing hands‑on to the implementation and evolution of Application Security, SSDLC and DevSecOps capabilities. Your main responsibilities will include: • Technically coordinating the service, managing demand, planning, priorities, capacity, SLAs and KPIs., • Integrating, configuring and optimizing SAST/SCA controls in CI/CD pipelines., • Coordinating application onboarding and defining Security Gates., • Contributing to vulnerability triage, prioritization, remediation and revalidation., • Acting as the technical point of contact for the customer, providing reporting and service follow‑up., • Driving automation and industrialization through APIs and scripting., • Managing risks, incidents, deviations and escalations., • Advising development teams and coordinating with different technical areas., • Driving the evolution of the SSDLC/DevSecOps model, including the safe and supervised adoption of AI. We are looking for a professional with solid experience in Application Security, SSDLC and DevSecOps, combining technical expertise with experience in service or team coordination. You should have knowledge of: • SAST/SCA, vulnerability management and CI/CD security., • OWASP, CWE, CVE, CVSS and Secure Coding., • Git, pipelines and Security Gates., • SLA, KPI, demand, capacity and risk management., • APIs, scripting and automation., • Customer interaction and technical/executive reporting., • AI governance and risk management, including traceability and human oversight. We will also value previous experience with Checkmarx, Fortify, SonarQube and CI/CD platforms such as Azure DevOps, Jenkins, GitHub Actions or GitLab CI/CD will be valued, as well as knowledge of Cloud, containers, IaC and software supply chain security. Knowledge of NIST SSDF, OWASP ASVS/SAMM, SBOM, SARIF and security automation will also be valued, as well as experience applying AI to AppSec/DevSecOps and relevant training or certifications. Hybrid working model and 8 weeks per year of teleworking outside your usual geographical area. Flexible start and finish times, and intensive working hours Fridays and in summer. Personalized career plan development, training and language learning support. National and international mobility. Do you come from another country? We can offer you a relocation package. Competitive compensation with ongoing reviews, flexible compensation and discount on brands. Wellbeing program: Health, dental and accident insurance; free fruit and coffee, physical, mental and financial health training, and much more! In our recruitment processes you will always have telephone and personal contact, face‑to‑face or online, with our talent acquisition team. In addition, bank transfers and bank cards will never be requested. If you are contacted through another process, please get in touch with the person responsible for the selection process. We promote equal opportunities in recruitment, and we are committed to inclusion and diversity. #J-18808-Ljbffr

Seleccione la frecuencia (en días) para recibir una alerta: Lugar de trabajo: Híbrido GFT es una compañía pionera en transformación digital. Diseñamos soluciones de negocio centradas en la inteligencia artificial (AI-Centric), modernizamos infraestructuras de TI y desarrollamos sistemas core de nueva generación para líderes del sector bancario, asegurador e industrial. En estrecha colaboración con nuestros clientes, desafiamos los límites para ayudarles a alcanzar todo su potencial. Buscamos un/a AI Security & Risk Consultant con experiencia en seguridad aplicada a sistemas de inteligencia artificial, modelos ML/LLM y marcos de gobernanza AI. Tus principales responsabilidades serán: • Evaluar riesgos de seguridad en soluciones de IA y proponer medidas de mitigación., • Diseñar defensas frente a ataques adversariales como prompt injection, data poisoning o model theft., • Auditar modelos ML/LLM para identificar vulnerabilidades, sesgos y riesgos de privacidad., • Definir marcos de gobernanza AI alineados con buenas prácticas y regulación aplicable., • Colaborar con equipos de desarrollo para securizar pipelines MLOps y despliegues de IA., • Experiencia en ML/LLM security y adversarial ML., • Conocimiento de OWASP Top 10 for LLM y técnicas de AI red teaming., • Experiencia con frameworks como TensorFlow o PyTorch., • Conocimientos de privacidad diferencial, explainability y fairness., • Nivel alto de inglés en entorno internacional., • Conocimiento de AI Act UE y marcos de gobernanza de IA., • Certificaciones como Certified AI Security Professional, CISSP o CCSP., • Experiencia en proyectos de IA a escala o entornos regulados. Competencias personales: • Actitud proactiva y orientación a la mejora continua., • Capacidad para trabajar de forma colaborativa en equipos multidisciplinares., • Buenas habilidades de comunicación con perfiles técnicos y no técnicos., • Autonomía, responsabilidad y orientación a resultados., • Capacidad de aprendizaje y adaptación a nuevos entornos y tecnologías. En GFT consideramos que la diversidad es uno de nuestros pilares fundamentales y promovemos un entorno de trabajo inclusivo basado en la cooperación y el respeto mutuo. Ofrecemos igualdad de oportunidades a todas las personas sin tener en cuenta su raza, origen cultural, sexo, edad, orientación sexual, identidad de género, discapacidad o creencias religiosas. GFT dispone y ha registrado un Plan de Igualdad que recoge las medidas a adoptar con el objetivo de alcanzar en la empresa la igualdad de trato y de oportunidades entre mujeres y hombres y a eliminar, si es que la hay, la discriminación por razón de sexo. • Conciliación y Flexibilidad: Posibilidad de trabajar desde casa híbrido/remoto, jornadas flexibles y viernes intensivos., • Formación y Desarrollo: Plan personalizado, programas formativos., • Beneficios Sociales: Seguro vida, apoyo teletrabajo., • Beneficios Flexibles "a la carta": Bolsa corporativa para comida, transporte, seguro médico, guardería y formación, ajustada a tus necesidades y combinada con retribución flexible, • Paquete de Reubicación (si aplica): Apoyo económico, asesoramiento, patrocinio visas., • Programa de Recomendaciones., • Programa de Bienestar: Nutrición, Física, Mental. Descuentos con Wellhub. Servicio de apoyo psicológial gratuito., • Vida en GFT: Oficinas inteligentes, eventos, premios de valores, charlas inspiradoras., • Cultura corporativa internacional. #J-18808-Ljbffr

GMV in Madrid is expanding its Cybersecurity team to tackle space projects. You will help develop the secure key management system for a major space program using Java and modern web stacks. You will design, code, unit test, integrate, fix bugs and support testing activities. Knowledge of Spring, Hibernate, Angular, Docker, Git, Maven, PostgreSQL and Linux scripting is advantageous. Hybrid work, relocation options and language training are offered to support your career growth. #J-18808-Ljbffr

Overview Usted podría ser el solicitante perfecto para este trabajo. Lea toda la información asociada y asegúrese de presentar su candidatura. In this role you help evolve a corporate security service by combining technical leadership with hands-on AppSec work. You will coordinate the security service while implementing and advancing SSDLC and DevSecOps capabilities within a large organization. Expect to drive security gates, automate controls in CI/CD, and guide risk management and reporting. This is a hands-on, cross-functional role with a strong focus on impact, automation, and AI-enabled security. You will collaborate with development teams to shape secure software delivery. Compensaciones / Beneficios Hybrid working model 8 weeks teleworking per year Flexible start/end times; intensive Fridays and summer Personalized career plan development; training and language learning support National and international mobility; relocation package Competitive compensation with ongoing reviews; flexible compensation; brand discounts Responsabilidades Technically coordinate the security service, manage demand, plan priorities, capacity, SLAs and KPIs Integrate, configure and optimize SAST/SCA controls in CI/CD pipelines Coordinate application onboarding and define Security Gates Contribute to vulnerability triage, remediation and revalidation Act as technical point of contact for customers, providing reporting and follow-up Drive automation and industrialization through APIs and scripting Manage risks, incidents, deviations and escalations Advise development teams and coordinate with different technical areas Drive evolution of the SSDLC/DevSecOps model, including AI governance and supervised adoption Requisitos principales Solid experience in Application Security, SSDLC and DevSecOps with service or team coordination Knowledge of SAST/SCA, vulnerability management, and CI/CD security Familiarity with OWASP, CWE, CVE, CVSS and Secure Coding Experience with Git, pipelines and Security Gates Understanding of SLA, KPI, demand, capacity and risk management Experience with APIs, scripting and automation Customer interaction and technical/executive reporting AI governance xqziphu and risk management, including traceability and human oversight Experience with Checkmarx, Fortify, SonarQube and CI/CD platforms (Azure DevOps, Jenkins, GitHub Actions, GitLab CI/CD) is valued Knowledge of Cloud, containers, IaC and software supply chain security Knowledge of NIST SSDF, OWASP ASVS/SAMM, SBOM, SARIF; security automation; and applying AI to AppSec/DevSecOps Relevant training or certifications are valued Strong communication and stakeholder management Collaborative team player with cross-functional coordination Problem-solving and analytical mindset SAST/SCA and vulnerability management CI/CD security and pipelines Security Gates and gate-based on-boarding