Trabajos Seguridad en BarcelonaCrear alertasJornada parcial

Busco una persona de confianza para cuidado a largo plazo de mi hijo de 5 años.Necesito apoyo de lunes a viernes, principalmente por las tardes, con llegada a las 15:00 y atención hasta las 19:00.Es importante que la persona tenga experiencia con niños pequeños, capacidad para ayudar con la meri

Busco una persona de confianza para cuidado infantil a tiempo completo o parcial a largo plazo. El objetivo es cubrir jornadas regulares entre semana, con flexibilidad para fines de semana en caso de emergencia. Se agradece referencias y cita previa para conocernos.

Estoy buscando una persona responsable para cuidar a mis hijos después de la escuela.Necesito que les haga merienda, les ayude con tareas y les supervise hasta que llegue yo a casa.Preferible experiencia en enseñanza o actividades lúdicas y capacidad para entretener a niños de 6 a 10 años.El tr

Busco una persona de confianza para cuidado diario y continuo de mi hijo de 4 años en nuestro hogar. El trabajo incluye rutina diaria: juegos educativos, comida, siesta y apoyo para actividades fuera de casa.

Busco una persona responsable para cuidar a mis dos hijos después de la escuela de 16:30 a 19:00, de lunes a viernes.La tarea incluye recogerlos, ayudar con deberes ligeros y supervisión en casa o en el vecindario cercano.Es importante ser puntual, cariñoso y capaz de entretener con actividades s

El trabajo incluiría acompañamiento a actividades extraescolares y apoyo básico en tareas ligeras de casa relacionadas con el niño. Necesito alguien disponible de lunes a viernes, con horario flexible y posibilidad de fines de semana ocasionalmente. Busco una persona de confianza para cuidado de

Estoy buscando una niñera para cuidado puntual de mi hijo de 4 años mañana por la tarde.El horario sería de 15:00 a 19:00 aproximadamente, para ayudar con merienda, juego supervisado y unas tareas simples de repaso de vocabulario.Es importante que la persona sea responsable, paciente y que tenga

Busco una persona responsable para cuidado périscolar de mi hijo de 6 años a partir de las 4:00 p. Si puedes, me gustaría que la persona pase una breve entrevista y una visita a casa antes de empezar. La tarea incluye recogerlo del colegio, ayudar con deberes ligeros, merienda y supervisión hast

Estoy buscando una persona de confianza para cuidado de mis dos hijos a largo plazo. Horario semanal regular, con disponibilidad para fines de semana alternos si es necesario.

About Legacy Legacy is an easy-to-use, non-custodial Web3 wallet designed to protect digital assets through beneficiary protection and seamless DeFi access. Users can swap across chains, earn yield in one click, and safeguard wealth for the next generation. About the Software Division We are building a portfolio of software products inside the Decentralized Masters ecosystem, including: Legacy Wallet - a non-custodial Web3 wallet with beneficiary protection and seamless DeFi access Trading Bot - automated crypto execution tools for serious investors Future fintech and investor infrastructure tools We are now building the retention and lifecycle engine that will power long‑term recurring revenue across all products. About The Role You will be the single person responsible for the security of a platform that tracks hundreds of millions in digital assets. That is the job. Everything else is secondary. We need someone who breaks things for a living. Someone who looks at a login page and sees six attack vectors. Someone who reads a pull request and catches the injection vulnerability that two senior developers missed. Someone who lies awake thinking about the phishing campaign that hasn’t been invented yet. If that sounds exhausting, this is not your role. If that sounds like Tuesday, keep reading. Your primary responsibilities are security and quality assurance. You own penetration testing, vulnerability assessments, threat modeling, automated test frameworks, and CI quality gates across every product we ship. You also own infrastructure: AWS, CI/CD pipelines, monitoring, and incident response. And because we are a small, senior team, you will write production code when security and QA responsibilities are covered. You are not a consultant or a checkbox auditor. You are an engineer who ships, and whose code happens to make everything else harder to break. The ideal candidate has spent time at major product‑driven fintech and crypto companies where a single security failure can destroy user trust overnight. Security (Primary) Own the security posture across all products: Legacy, Trading Bot, and future platforms. If something gets breached, it is your problem. If nothing gets breached, it is because of your work Conduct regular penetration testing, vulnerability assessments, and threat modeling aligned with OWASP standards and methodologies Ensure full coverage of the OWASP Top 10 in application security testing, code reviews, and deployment checks Perform security‑focused code reviews across frontend, backend, and infrastructure code, catching what standard code reviews miss Implement and manage secrets management (Vault, AWS Secrets Manager, or KMS), access controls, and least‑privilege policies Build and maintain incident response playbooks. When something breaks, you lead the response, run the post‑mortem, and ship the fix Stay ahead of Web3 and crypto‑specific attack vectors: phishing campaigns, wallet exploits, API key compromises, supply chain attacks, and social engineering Manage and coordinate external security audits and penetration tests from third‑party firms Quality Assurance & Testing (Primary) Design and implement test strategies across all products: unit tests, integration tests, end‑to‑end tests, API tests, and regression suites Build and maintain automated testing frameworks and CI quality gates that prevent broken code from reaching production Define and track quality metrics: test coverage, flakiness rate, regression detection latency, and bug escape rate Write and execute security test cases: authentication flows, authorization controls, input validation, API abuse scenarios, and edge cases around financial data Perform both white‑box and black‑box testing, leveraging full codebase access to catch issues that surface‑level QA would miss Test across the full stack: frontend UI, backend APIs, database queries, third‑party integrations, and on‑chain interactions Infrastructure & DevOps (Foundation) Maintain and improve cloud infrastructure on AWS using Infrastructure as Code (Terraform or CloudFormation) Own CI/CD pipelines (GitHub Actions preferred): automated testing, security scanning, linting, and deployment Harden infrastructure: network security, IAM policies, container security, and environment isolation Build logging, monitoring, and alerting across all services (CloudWatch, Prometheus, Grafana, or equivalent) Ensure audit trails for user actions, system changes, and access events Manage production reliability, incident response, and cost optimization Fullstack Development (When the fortress is secure) Contribute production code across frontend and backend, bringing a security‑first mindset to every feature you build Build features, fix bugs, and ship improvements alongside the engineering team Every line you write should make the product better and harder to break: input validation, error handling, authentication, and data protection by default Participate in architecture discussions and code reviews, advocating for testability, reliability, and security in every decision Requirements Required 5+ years in software engineering roles with meaningful, hands‑on security and QA experience. We will verify this. If your security experience is theoretical, this is not the right fit Fullstack development experience: you can build and ship features across frontend (React or equivalent) and backend (Node.Js, Python, Go, or equivalent) Hands‑on penetration testing and vulnerability assessment experience across web applications, APIs, and cloud infrastructure Strong working knowledge of OWASP standards, including the OWASP Top 10, OWASP Testing Guide, and OWASP secure coding practices Experience building automated test frameworks and integrating testing into CI/CD pipelines AWS expertise (EC2, ECS/EKS, Lambda, VPC, IAM, S3, RDS, CloudFront, WAF) Infrastructure as Code experience (Terraform, CloudFormation, or Pulumi) Container technologies: Docker and Kubernetes in production environments Scripting and automation proficiency in Bash and Python Experience with secrets management tools (HashiCorp Vault, AWS Secrets Manager, or similar) Familiarity with security and testing tools (Burp Suite, OWASP ZAP, Selenium, Cypress, Jest, Postman, or equivalent) Strong communication skills: you can explain security risks and quality tradeoffs clearly to non‑technical stakeholders Nice‑to‑Have Security certifications: OSCP, CISSP, CompTIA Security+, AWS Security Specialty, or equivalent Experience at a crypto, DeFi, Web3, or fintech product company (Coinbase, Phantom, Stripe, Casa, MetaMask, Zerion, Ramp, or similar) Familiarity with Web3‑specific security concerns: wallet security, key management, on‑chain monitoring, phishing mitigation SDET background or experience in a hybrid development‑and‑testing role Experience testing financial systems: payment flows, ledger integrity, double‑spend prevention, or transaction monitoring Experience implementing zero‑trust architectures Bug bounty participation, CVE publications, or contributions to open‑source security tooling Benefits What We Offer Competitive salary + performance‑based incentives tied to retention & LTV improvement Direct exposure to founders Team Offsites Remote work High ownership, high‑impact role #J-18808-Ljbffr

Colt provides network, voice and data centre services to thousands of businesses around the world, allowing them to focus on delivering their business goals instead of the underlying infrastructure. Why we need this role We are looking for a Security Architect specialising in Application Security and Dev Sec Ops to join the Security and Resilience – Security Architecture team. This role will act as a subject matter expert for secure software development and Dev Sec Ops practices, supporting the integration of security controls into Colt’s development pipelines and ensuring applications are secure by design and by default. The successful candidate will work closely with Engineering, Dev Ops, Cloud, SOC and Risk teams to embed security throughout the software development lifecycle, ensuring that Colt’s applications and services are designed, built and tested with security as a core requirement. The Role Combines Application security architecture and design Dev Sec Ops pipeline integration and tooling Security assurance and governance across internally developed applications You Will Play An Important Role In Supporting Secure software development practices across Colt Security integration into CI/CD pipelines (Git Lab) Reduction of vulnerabilities through automated scanning and testing Assurance of internet-facing applications through structured penetration testing activities What You Will Do Provide security architecture expertise for application security and Dev Sec Ops, supporting standards and best practices across the software development lifecycle Contribute to the target architecture for secure software development, aligned to Colt’s Secure by Design principles Support the integration of security controls into CI/CD pipelines (Git Lab), including automated testing and policy enforcement Design and implement application security controls, including: Static Application Security Testing (SAST) Dynamic Application Security Testing (DAST) Software Composition Analysis (SCA) / dependency scanning Secrets and credentials scanning Work with engineering teams to ensure consistent adoption of Dev Sec Ops practices and secure coding approaches Support security architecture reviews and assurance activities for internally developed applications and services Identify and help reduce risks related to application vulnerabilities, insecure coding practices and exposed credentials Support the coordination and execution of third‑party penetration testing of Colt’s internet‑facing applications Assist in defining test scope, tracking execution and ensuring remediation of findings is properly managed Provide guidance to engineering teams on remediation and prioritisation of vulnerabilities Contribute to the development and maintenance of secure coding standards and architectural patterns Ensure alignment with regulatory requirements such as TSA, DORA and ISO27001 in application design and deployment Promote a security‑first culture within development teams, including awareness and best practices Maintain awareness of emerging risks and technologies, including basic AI/LLM‑related application risks, and support translation into practical controls where required Produce and maintain architecture artefacts, standards and guidance documentation Must Haves What we're looking for 5+ years of experience in information security, with a strong focus on application security and Dev Sec Ops Strong understanding of secure software development practices and common application security risks (e.G. OWASP Top 10) Hands‑on experience working with or integrating Dev Sec Ops tooling within CI/CD environments (e.G. Git Lab pipelines) Experience with application security testing tools and practices, including: SAST, DAST, SCA / dependency scanning and Secrets / credentials scanning. Experience contributing to security design reviews for applications and APIs Experience supporting or participating in penetration testing activities, including remediation tracking Strong understanding of modern application architectures (e.G. APIs, microservices, cloud‑native applications) Knowledge of authentication and session management concepts within applications Experience performing or supporting risk assessments aligned to recognised frameworks Ability to translate technical vulnerabilities into business‑aligned risk and remediation actions Strong collaboration skills with engineering and development teams Strong communication skills (technical and non‑technical) Might Haves Experience with Git Lab security tooling and pipeline integrations Familiarity with cloud‑native application security (Azure / GCP environments) Exposure to API security controls and testing approaches Basic understanding of AI/LLM application risks, such as prompt injection or data exposure Experience working within regulated environments (telecommunications, financial services, critical infrastructure) Understanding of Telecoms Security Act (TSA) requirements in application design What We Offer You Looking to make a mark? At Colt, you’ll make a difference. Because around here, we empower people. We don’t tell you what to do. Instead, we employ people we trust, who come together across the globe to create intelligent solutions. Our global teams are full of ambitious, driven people, all working together towards one shared purpose: to put the power of the digital universe in the hands of our customers wherever, whenever and however they want. We give our people the opportunity to inspire and lead teams, and work on projects that connect people, cities, businesses, and ideas. We want you to help us change the world, for the better. Diversity and inclusion Inclusion and valuing diversity of thought and experience are at the heart of our culture here at Colt. From day one, you’ll be encouraged to be yourself because we believe that’s what helps our people to thrive. We welcome people with diverse backgrounds and experiences, regardless of their gender identity or expression, sexual orientation, race, religion, disability, neurodiversity, age, marital status, pregnancy status, or place of birth. Most Recently We Have Signed the UN Women Empowerment Principles which guide our Gender Action Plan Trained 60 (and growing) Colties to be Mental Health First Aiders Please speak with a member of our recruitment team if you require adjustments to our recruitment process to support you. For more information about our Inclusion and Diversity agenda, visit our DEI pages. Benefits Our benefits support you through all parts of life, for both physical and mental health. Flexible working hours and the option to work from home. Extensive induction program with experienced mentors and buddies. Opportunities for further development and educational opportunities. Global Family Leave Policy. Employee Assistance Program. Internal inclusion & diversity employee networks. A global network When you join Colt you become part of our global network. We are proud of our colleagues and the stories and experience they bring – take a look at ‘Our People’ site including our Empowered Women in Tech. #J-18808-Ljbffr

At Spendesk, we're building the leading spend management platform for modern businesses, processing billions of euros across Europe and beyond. Security is at the heart of what we do: our customers trust us to safeguard their financial data, and we're committed to raising the bar for security in fintech. We're creating a dedicated Security Engineering function. You'll be the first senior hire in this space, shaping how we protect our platform, how we respond to threats, and how we build a security‑aware engineering culture from the inside. Your Mission You'll be the security conscience for engineering: building tooling, training developers, and partnering with Infrastructure on secure‑by‑default solutions. You own the technical security roadmap: partnering with the compliance team to identify risks, translating findings into actionable engineering‑native tools and processes, driving remediation, and raising the bar across the organisation. This is a pure engineering role, not governance or compliance: a separate team owns policy and risk frameworks. It's an individual contributor track with high influence, focused on technical depth, not people management. You'll mentor an Associate Security Engineer, shape practices across squads, and be the go‑to person when engineering teams need security guidance. You'll be hands‑on across the full security surface from day one. As the team grows, you'll move from day‑to‑day operations toward architecture, strategy, and mentoring, acting as the escalation point for the Associate Security Engineer. Key Responsibilities Vulnerability & incident management Own and operate our bug bounty program: manage the platform, set escalation thresholds, and drive strategic improvements. Act as escalation point for vulnerability triage, taking the lead on complex or high‑severity findings. Lead security incident response: qualification, forensics (including fraud investigations), fix coordination, post‑mortem, and resolution tracking. Detection & SIEM Own our SIEM platform (Elastic Search, multi‑node Linux): architecture, detection rules, and indicators of compromise. Build and evolve detection coverage, focusing on signal quality over manual toil. Build and maintain security runbooks and operational documentation. Identity & access management Own IAM implementation and operations for product and infrastructure systems, downstream of corporate IT: SSO/MFA configuration, role and access‑rights implementation, periodic permission reviews, and secrets rotation. Work within the authentication standards set by the security governance team. Secure development & audits Embed security into the development lifecycle: threat modelling, secure code patterns, CI/CD hardening. Conduct technical security reviews of code (Type Script, Node.Js, Python), infrastructure‑as‑code (Terraform), and multi‑tenant AWS environments. Drive security tooling in CI/CD: design and own the automated gate suite (SAST, SCA, container scanning, AI‑generated code risk detection) and ensure pipeline coverage scales with engineering growth. Assess and govern AI tooling adoption across engineering: define security standards for code assistants and LLM‑powered workflows, and conduct AI‑specific threat modelling. Coordinate and execute penetration tests and security audits: prepare environments, manage auditor relationships, drive post‑audit action plans. Drive remediation within the qualification rules and timeframes set by the security governance team. Education & influence Coach engineers on secure development through workshops, secure‑code guidance, and design reviews. Surface security risks and recommendations to engineering leadership; own the security backlog and roadmap. Partner with Infrastructure on secure‑by‑default solutions. Must‑haves What We're Looking For A track record of owning security outcomes end to end, with hands‑on experience across at least three of: code auditing, infrastructure security (AWS/Linux), penetration testing, SIEM operations, incident response. Ability to own a roadmap: identify priorities, build a plan, execute autonomously, and communicate progress to non‑specialists. Deep understanding of modern web architectures (microservices, cloud‑native, Paa S/Saa S) and where they break. Strong scripting and automation ability (Python, Bash, or similar). Experience mentoring other engineers or security practitioners. Excellent communication: you can explain a CVSS 9.8 to a PM and get them to prioritise it. Nice‑to‑haves Experience with Elastic Search / ELK stack in production. Familiarity with AWS, GCP, Snowflake, Datadog, Okta. Knowledge of security standards and frameworks (ISO 27001, OWASP, SOC 2, PCI‑DSS). Experience in a regulated fintech or payments environment. Reverse engineering and analysis of minified/obfuscated code. Not ticking every box? We’d still love to hear from you. At Spendesk, we value skills, potential and diverse experiences. About Spendesk Spendesk is the AI‑powered spend management and procurement platform that transforms company spending. By simplifying procurement, payment cards, expense management, invoice processing, and accounting automation, Spendesk sets the new standard for spending at work. Its single, intelligent solution makes efficient spending easy for employees and gives finance leaders the full visibility and control they need across all company spend, even in multi‑entity structures. Trusted by thousands of companies, Spendesk supports over 200,000 users across brands such as Payfit, Accor, Welcome to the Jungle, Swile, Big Mamma, Malt and Yousign. With offices in the United Kingdom, France, Spain and Germany, Spendesk also puts community at the heart of its mission. About Our People & Culture We believe that people do their best work when they're given the freedom to thrive and grow. That's why liberation is at the core of everything we do. We empower Spendeskers to take ownership of their work, to navigate ambiguity, and seize every opportunity. Spendeskers come from all over the world (35+ countries and counting!) but we have plenty in common: we're bold, ever‑curious, committed to kindness, and tackle every challenge with a positive mindset. About Our Benefits Flexible on‑site and remote policy Latest Apple equipment — the tools you need to excel Access to Moka.Care — for emotional and mental health wellbeing Great office snacks — to fuel your day A positive team to work with daily! We also offer location‑specific benefits tailored to each market, including health insurance, wellness allowances, commuter support, meal vouchers, and gym memberships — ensuring you're well supported wherever you're based. Diversity & Inclusion At Spendesk, we're committed to fostering an environment where all differences are encouraged, supported and celebrated. We're building our culture for everyone, with everyone. Our goal is to attract and build a diverse, equal and inclusive team, where everyone feels welcome and we truly embrace and encourage people from all backgrounds to apply. #J-18808-Ljbffr

Continue to make an impact with a company that is pushing the boundaries of what is possible. At NTT DATA, we are renowned for our technical excellence, leading innovations, and making a difference for our clients and society. Our workplace embraces diversity and inclusion – it’s a place where you can continue to grow, belong, and thrive. Your career here is about believing in yourself and seizing new opportunities and challenges. It’s about expanding your skills and expertise in your current role and preparing yourself for future advancements. That’s why we encourage you to take every opportunity to further your career within our great global team. Your day at NTT DATA The Senior Associate Collaboration Technical Services (TS) Systems Integration Specialist is a developing subject matter expert, responsible for ensuring that client solution requirements are resolved in line with Service Level Agreements (SLAs). This role performs configurations, actions installations and attends to break/fix events. This role works towards associate to professional level certification, whilst at the same time developing business knowledge. Key responsibilities Owns larger portions of an installation, break/fix incidents at a low to medium level of complexity during project lifecycle Takes responsibility for problem resolution and troubleshooting during project lifecycle Escalates complex problems to the relevant third parties. Assists with the documentation of standard operating procedures relating to installations and fixes during ops handover Compiles and maintains project administration (Time Capture and feedback to stakeholders) Conducts elementary presentations within the customer's organization. Expected to take leadership from senior resources on relevant technologies according to specialization and best practice. Performs any other related task as required. To thrive in this role, you need to have Developing fundamental project and administration ability Developing understanding and appreciation of technical design principles and compute layers. Ability to develop an understanding of fundamental project and administration processes. Display a strong learning orientation. Good verbal communication skills. Demonstrate a client service orientation. Hands‑on proactive in approach. Knowledge on security concepts and application of those concepts. Ability in configuring/managing security controls, such as SIEM, Firewall, IDS/IPS, EDR, NDR, UTM, Proxy, SOAR, Honeypots, decoys, and other security tools. Developing knowledge on log collection mechanism such as Syslog, Log file, DB API. Developing knowledge in security architecture. Developing knowledge on log collection mechanism such as Syslog, Log file, DB API. Developing knowledge in security architecture. Developing knowledge in ETL concepts, data processing at scale and data stream pipelines through Terraform. Ability in cloud services on at least one of the following providers: AWS, Azure, GCP. Developing knowledge web service protocols and frameworks for high‑availability, low‑latency, resiliency, and auto‑scaling. Developing understanding any of the following - Java, Python, TypeScript, JavaScript, R, .NET, PowerShell. Developing knowledge in serverless development. Analytical skills and ability to communicate effectively. Ability to solve problems in innovative ways while adhering to industry standards and practices. Developing understanding practices on securing data and systems by applying appropriate authentication and authorization controls. Developing understanding of Event Driven Development and asynchronous operations. Developing understanding project fundamentals which are demonstrated in the execution of installations and other assignments. Developing knowledge of security technologies and understanding of managed services concepts. Academic qualifications and certifications Bachelor's degree or equivalent in Information Technology or Computing or a related field. Vendor certification is mandatory. Azure Certified Security Engineer / PCNSA / FCA / CCNA Security. Cloud Security certifications and certifications like AZ-500, SC-200, Security+, CEH, CISSP, CISM or similar Certification in different networking technologies such as CCDP /CCNP Security, JNCIA, ACCA, PCNSE, PCNSA, FCP, CCSA, ITIL, Azure Security Engineer, Azure Certified DevOps Engineer, Azure Certified Network Engineer, Azure Administrator Associate, will be an advantage. Certifications relevant to the services provided (certifications carry additional weightage on a candidate’s qualification for the role) Terraform, Azure, Sentinel, EDR Defender for Cloud, Microsoft Security, Devops Ci/CD Pipelins, Azure Governance (Defender for Cloud, Azure Policies, Secure Score and Compliance), Version Control (Git), Microservices (Kubernetes, Azure Containers), Azure / AWS/ GCP Infrastructure (IaaS, PaaS, SaaS), Azure Infrastructure as Code, Azure Administration, Hybrid Cloud, Networking (Firewalls, LAN, VPN), Automation, MS Office365, Power BI Administration, Scripting (PowerShell), ZTNA. Required experience Moderate level experience in SOC Analysis Operations. Moderate level experience in SIEM usage. Moderate level experience in Azure or AWS or GCP. Moderate level experience in Security technologies like Firewall, IPS, IDS, Proxy etc. Moderate level experience in technical support to clients. Moderate level experience in handling security incidents end to end. Moderate level experience in Security Analysis or Engineering. Moderate level experience in configuring/managing security controls, such as SIEM, Firewall, IDS/IPS, EDR, NDR, UTM, Proxy, SOAR, Honeypots, and other security tools. Workplace type Hybrid Working Equal Opportunity Employer NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Accelerate your career with us. Your career here is about believing in yourself and taking on great opportunities and new challenges. It’s about growing your skills and expertise in your current role and preparing yourself for the future. That’s why we encourage you to take every opportunity to grow your career within our great global team. #J-18808-Ljbffr

Join a multinational team and contribute to ISO 27001 / SOC 2 readiness, manage partner assessments, and lead vulnerability management initiatives across our AWS environment.

Colt provides network, voice and data centre services to thousands of businesses around the world, allowing them to focus on delivering their business goals instead of the underlying infrastructure. We are looking for a Security Architect specialising in Application Security and DevSecOps to join the Security and Resilience – Security Architecture team. This role will act as a subject matter expert for secure software development and DevSecOps practices, supporting the integration of security controls into Colt’s development pipelines and ensuring applications are secure by design and by default. The successful candidate will work closely with Engineering, DevOps, Cloud, SOC and Risk teams to embed security throughout the software development lifecycle, ensuring that Colt’s applications and services are designed, built and tested with security as a core requirement. • Application security architecture and design, • DevSecOps pipeline integration and tooling, • Security assurance and governance across internally developed applications, • Secure software development practices across Colt, • Security integration into CI/CD pipelines (GitLab), • Reduction of vulnerabilities through automated scanning and testing, • Assurance of internet-facing applications through structured penetration testing activities, • Provide security architecture expertise for application security and DevSecOps, supporting standards and best practices across the software development lifecycle, • Contribute to the target architecture for secure software development, aligned to Colt’s Secure by Design principles, • Support the integration of security controls into CI/CD pipelines (GitLab), including automated testing and policy enforcement, • Design and implement application security controls, including:, • Static Application Security Testing (SAST), • Dynamic Application Security Testing (DAST), • Software Composition Analysis (SCA) / dependency scanning, • Secrets and credentials scanning, • Work with engineering teams to ensure consistent adoption of DevSecOps practices and secure coding approaches, • Support security architecture reviews and assurance activities for internally developed applications and services, • Identify and help reduce risks related to application vulnerabilities, insecure coding practices and exposed credentials, • Support the coordination and execution of third‑party penetration testing of Colt’s internet‑facing applications, • Assist in defining test scope, tracking execution and ensuring remediation of findings is properly managed, • Provide guidance to engineering teams on remediation and prioritisation of vulnerabilities, • Contribute to the development and maintenance of secure coding standards and architectural patterns, • Ensure alignment with regulatory requirements such as TSA, DORA and ISO27001 in application design and deployment, • Promote a security‑first culture within development teams, including awareness and best practices, • Maintain awareness of emerging risks and technologies, including basic AI/LLM‑related application risks, and support translation into practical controls where required, • Produce and maintain architecture artefacts, standards and guidance documentation, • 5+ years of experience in information security, with a strong focus on application security and DevSecOps, • Strong understanding of secure software development practices and common application security risks (e.g. OWASP Top 10), • Hands‑on experience working with or integrating DevSecOps tooling within CI/CD environments (e.g. GitLab pipelines), • Experience with application security testing tools and practices, including: SAST, DAST, SCA / dependency scanning and Secrets / credentials scanning., • Experience contributing to security design reviews for applications and APIs, • Experience supporting or participating in penetration testing activities, including remediation tracking, • Strong understanding of modern application architectures (e.g. APIs, microservices, cloud‑native applications), • Knowledge of authentication and session management concepts within applications, • Experience performing or supporting risk assessments aligned to recognised frameworks, • Ability to translate technical vulnerabilities into business‑aligned risk and remediation actions, • Strong collaboration skills with engineering and development teams, • Strong communication skills (technical and non‑technical), • Experience with GitLab security tooling and pipeline integrations, • Familiarity with cloud‑native application security (Azure / GCP environments), • Exposure to API security controls and testing approaches, • Basic understanding of AI/LLM application risks, such as prompt injection or data exposure, • Experience working within regulated environments (telecommunications, financial services, critical infrastructure), • Understanding of Telecoms Security Act (TSA) requirements in application design At Colt, you’ll make a difference. Because around here, we empower people. We don’t tell you what to do. Instead, we employ people we trust, who come together across the globe to create intelligent solutions. Our global teams are full of ambitious, driven people, all working together towards one shared purpose: to put the power of the digital universe in the hands of our customers wherever, whenever and however they want. We give our people the opportunity to inspire and lead teams, and work on projects that connect people, cities, businesses, and ideas. We want you to help us change the world, for the better. • Inclusion and valuing diversity of thought and experience are at the heart of our culture here at Colt. From day one, you’ll be encouraged to be yourself because we believe that’s what helps our people to thrive. We welcome people with diverse backgrounds and experiences, regardless of their gender identity or expression, sexual orientation, race, religion, disability, neurodiversity, age, marital status, pregnancy status, or place of birth., • Signed the UN Women Empowerment Principles which guide our Gender Action Plan, • Trained 60 (and growing) Colties to be Mental Health First Aiders, • Please speak with a member of our recruitment team if you require adjustments to our recruitment process to support you. For more information about our Inclusion and Diversity agenda, visit our DEI pages. Our benefits support you through all parts of life, for both physical and mental health. • Flexible working hours and the option to work from home., • Extensive induction program with experienced mentors and buddies., • Opportunities for further development and educational opportunities., • Global Family Leave Policy., • Employee Assistance Program., • Internal inclusion & diversity employee networks., • When you join Colt you become part of our global network. We are proud of our colleagues and the stories and experience they bring – take a look at ‘Our People’ site including our Empowered Women in Tech. #J-18808-Ljbffr

We’re looking for a Security Engineer to own and improve the security of our internal environment - the identities, SaaS apps, endpoints, AI tooling, and networks our employees use every day. This is a hands-on senior role: we expect you to design controls, find the gaps, and drive the changes that close them - and to build the automation that makes it scale. We’re an EMI-licensed fintech in a fully cloud-native AWS environment, we use AI heavily, and we’re growing fast. We need someone who can lead technical initiatives independently, influence our security architecture, challenge approaches that no longer fit, and explain it clearly to engineers and leadership. • Own SIEM alerting end-to-end: ship logs from endpoints, IdP, VPN, SaaS, and cloud; write and tune detection rules; cut false positives., • Act as first responder for security incidents - investigate, contain, drive to closure with clear runbooks - and feed recurring issues back into preventive controls., • Administer the IdP (SSO via SAML/OIDC, MFA, conditional access) and run access recertification end-to-end across IdP, SaaS, AWS, and internal tools - scope, evidence, follow-through on revocations., • Hunt down over-permissive and stale access, enforce least privilege and PAM, catch SoD gaps, and make JML and third-party access work in practice., • Improve SaaS security posture (Google/Microsoft, Slack, GitHub, others) and apply DLP controls to limit data leakage., • Keep the endpoint stack healthy and well-tuned - MDM, XDR/AV, device-compliance checks for VPN/ZTNA - and define posture requirements (disk encryption, EDR present, OS version) with automated remediation., • Defend against phishing and spoofing - secure email gateway rules, DMARC/SPF/DKIM - and run phishing simulations and security awareness, acting on the results., • Build internal tooling and automate repetitive operations - reduce manual work, don't just operate it., • Own the roadmap for your areas: identify gaps, lead initiatives independently, and raise the bar rather than just maintain it., • 5+ years in security operations, corporate/IT security, or endpoint engineering., • Strong with a SIEM (Splunk, Elastic, Panther, Sumo Logic) - detection engineering and incident response - plus an identity provider (Okta, Entra ID, Google Workspace), access recertification, and least-privilege / PAM., • Working knowledge of endpoint security (MDM, XDR/EDR/AV) and email / phishing defense., • Practical experience securing how a company uses AI internally: shadow AI discovery, DLP for AI tools, controls for AI assistants and agents, and a working risk framework for adopting new ones. You've done this for real, not from a vendor pitch deck., • Strong scripting and automation skills - you build tooling against APIs, not just configure consoles., • Track record of driving improvements end-to-end and leading initiatives with little oversight., • Сclear written and spoken English for engineers and leadership., • We have a hybrid model in our Limassol office, or fully remote outside office locations., • We support relocation to Cyprus (visa, package) when needed., • Learning & development budget to support your professional growth., • Fully paid vacation and sick leave., • Sports compensation., • Real growth prospects, significant responsibility, and the ability to make an immediate impact from day one. Enhance your expertise and shape the future of FinTech. Join Vivid's talented team and help us revolutionize how businesses think about their finances! Final compensation is determined individually, based on your experience, skills and the scope of the role, assessed against objective, gender-neutral criteria. At Vivid, we're on a mission to change how businesses and individuals manage their money across Europe. For businesses, we build tools that actually make a difference: multi-IBAN accounts, high-yield savings, business cashback, team cards, and accounting integrations that save real time - all in one place. And for individuals, we offer a simple way to manage and grow your wealth: access to global stocks, ETFs and 150+ cryptocurrencies, cashback, and personalised financial insights. Our mission? Your success. Everyone deserves the chance to see their finances flourish, and we're dedicated to empowering our customers to make this a reality. Founded in 2019 in Berlin by Alexander Emeshev and Artem Iamanov, Vivid has quickly grown into one of Germany's top financial platforms for SMEs and private accounts. Since then, we've expanded rapidly across Europe, earning the trust of over 500,000 customers - and with over €200 million raised and a valuation of €775 million, we're just getting started. We're building Vivid as an AI-native organization - across every function, from product to compliance to operations. Automation handles a growing share of day-to-day execution. For us, this means our teams can focus on architecture, strategy, and high-impact decision-making. This changes how we work: less manual execution, more ownership in building systems that scale. We want to help define what AI-native looks like in a regulated financial environment - and we're looking for people who want to build that future with us. #J-18808-Ljbffr

Semidynamics is seeking a hardware-focused Product Security Engineer to analyze the security architecture of RISC-V cores, RoT, firmware and SoC platforms to support compliance with security regulations and certifications. You will collaborate with the hardware development team to transform publishe

Описание: The TKWW Info Sec Team is seeking a Senior Security Engineer to lead strategic security initiatives, mentor team members, and address the most complex and ambiguous technical and programmatic security challenges. You will act as a subject-matter expert, taking ownership of critical security domains, influencing architectural decisions across engineering teams, and helping to set the long-term vision for security at TKWW. Задачи: Lead and Drive the strategy, design, and implementation of security controls and secure patterns across all TKWW corporate and production environments. Mentor junior security engineers and provide technical guidance on complex security issues, fostering a culture of security within engineering. Architect and implement advanced, secure, and scalable containerized architectures in multi-cloud environments. Collaborate with engineering leads to define product and platform roadmaps, ensuring security requirements are integrated from the initial design phase. Own and continuously improve threat detection, application security, vulnerability management, and assessment procedures, acting as the final escalation point for complex remediation efforts. Act as a Subject Matter Expert (SME) for one or more critical security domains (e.G., Identity and Access Management, Data Protection, Cloud Network Security). Lead the response and post-mortem analysis for high-severity security incidents, driving long-term preventative measures. Identify and implement strategic opportunities to improve process maturity and automation, including developing sophisticated internal security tools and procedures. Provide continuous technical support and escalation management for security-related issues throughout TKWW. Требования: Bachelor's Degree in Computer Science or a related field (Master's degree preferred). A minimum of 5+ years of progressive security engineering or security architecture experience is required, with a focus on large-scale, production environments. 5+ years of hands-on experience securing cloud applications and infrastructure (AWS strongly preferred, multi-cloud experience a plus). The candidate should have a proven track record of leading or mentoring major cross-functional projects to their successful completion. Deep and comprehensive understanding of security vulnerabilities, attacker exploit techniques, and methods for large-scale, automated remediation. Expert-level understanding/working knowledge of public cloud infrastructure and services in Akamai, AWS (IAM, VPC, KMS, Cloud Watch, Systems Manager, S3, RDS, Route53, Lambda, AWS Config, etc.). Expert-level understanding of Docker and container orchestration with Kubernetes and hands-on experience securing production EKS/GKE clusters. Proven experience with advanced application security concepts, including designing and securing microservice and API-based architectures. Experience with security tooling, including WAF and Bot Management platforms. Excellent written and verbal communication skills, with the ability to articulate complex security risks and technical requirements to both non-technical executive stakeholders and highly technical engineering/Dev Ops teams. Proven ability to operate with a high degree of autonomy, acting as a self-starter who drives projects to successful completion with minimal oversight. Будет плюсом: Experience with scripting and automation (Python, Go, or other modern languages); Relevant industry certifications (e.G., CISSP, CISM, AWS/Azure Security, GSEC); Advanced experience in security engineering, Dev Ops, or IT operations roles, with expertise in CI/CD pipeline security; Experience in defining and enforcing security policies across a diverse, global organization Условия: We believe in a wide range of holistic offerings to support our employees so that they can live our values day in and day out. From mental wellbeing, physical health and financial planning, to engaging perks and discounts, we are in the business of celebrating and supporting the Moments that Matter, both in and out of the office. We offer flexible vacation, generous parental leave, and prioritize initiatives that support the growth, development, and happiness of our people. Together@TKWW is our approach to hybrid work. It’s designed to support how we work best: combining the flexibility we value with meaningful opportunities to connect in person. For Together@TKWW-eligible roles, this includes regular in-office time to foster collaboration and connection. For roles not eligible for in-office expectations, we support connection through virtual collaboration and intentional gatherings. #J-18808-Ljbffr

Select how often (in days) to receive an alert: Date: Jul 24, 2026 Location: Sant Just Desvern, B, ES, 08960 City: Sant Just Desvern State: Barcelona (ES-B) Country: Spain (ES) Bunge has an exciting opportunity available for a Information Security Manager EMEA . In this role you will be part of a global team working on challenging, meaningful projects impacting core business activities. Since 1818, Bunge has been connecting farmers to consumers to deliver essential food, feed, and fuel to the world. Looking to the future, our ambition is to continuously reinvent ourselves, leveraging data to be at the forefront of analytics, technology and talent to accomplish our purpose in a better, faster and simpler way. Bunge is committed to operating and thriving in the digital world – creating world class agile teams where teammates are empowered and encouraged to collaborate and test and learn to succeed. At Bunge, people don’t just come here to work, they come here to grow – solving challenges that directly impact the world with a diverse team of thinkers and doers. Bunge offers a strong compensation and benefits package, generous paid time off program, flexible work arrangements, and opportunity to progress. Our hybrid work environment provides a balance of in office and remote work. • Act as One Team by fostering inclusion, collaboration, and respect, • Drive for Excellence by being agile, innovative and efficient, • Do What's Right by acting safely, ethically, and sustainably The Information Security Manager EMEA plays a critical leadership role in ensuring the security and compliance of Bunge's information technology (IT) systems within the EMEA region. Responsibilities include overseeing regional cybersecurity operations, managing a team of security professionals, and collaborating with global and regional stakeholders to uphold Bunge's cybersecurity standards and mitigate risks effectively. • Oversee the implementation and maintenance of robust security controls aligned with Bunge's global cybersecurity policies and standards., • Conduct comprehensive regional security assessments and risk analyses, proactively identifying and mitigate potential vulnerabilities., • Develop and execute regional cybersecurity strategies and initiatives, aligning with global cybersecurity objectives and addressing region-specific challenges., • Manage security incidents within the region, coordinating investigation, containment, eradication, and recovery efforts while ensuring timely and effective communication with stakeholders., • Undirect leadership and management of a team of cybersecurity professionals within the assigned region, fostering a culture of excellence, collaboration, and continuous improvement., • Collaborate closely with regional IT teams to ensure the secure configuration and operation of IT systems and infrastructure., • Promote cybersecurity awareness and provide training to employees within the region, fostering a culture of security consciousness., • Stay informed about emerging cybersecurity threats and vulnerabilities pertinent to the region and adapt security strategies accordingly., • Develop and manage the regional cybersecurity budget, ensuring efficient allocation of resources., • Report on regional cybersecurity posture, key metrics, and performance indicators to IT leadership., • Typically a Bachelor's in Computer Science or related field., • 6+ years of increasing leadership roles in Cybersecurity, with proven track record of implementing and managing cybersecurity programs (SOC, GRC, IAM, Risk & Compliance, others)., • Demonstrated experience in leading and managing cybersecurity teams., • Industry-recognized cybersecurity certifications (e.g., CISSP, CISM) are highly desirable.Extensive knowledge of cybersecurity principles, frameworks, best practices, and industry standards., • Strong understanding of risk management methodologies and security technologies., • Experience in leading and managing cybersecurity teams, fostering collaboration and professional development., • Excellent communication, interpersonal, and leadership skills At Bunge (NYSE: BG), our purpose is to connect farmers to consumers to deliver essential food, feed and fuel to the world. As a premier agribusiness solutions provider, our team of ~34,000 dedicated employees partner with farmers across the globe to move agricultural commodities from where they’re grown to where they’re needed—in faster, smarter, and more efficient ways. We are a world leader in grain origination, storage, distribution, oilseed processing and refining, offering a broad portfolio of plant-based oils, fats, and proteins. We work alongside our customers at both ends of the value chain to deliver quality products and develop tailored, innovative solutions that address evolving consumer needs. With 200+ years of experience and presence in over 50 countries, we are committed to strengthening global food security, advancing sustainability, and helping communities prosper where we operate. Bunge has its registered office in Geneva, Switzerland and its corporate headquarters in St. Louis, Missouri. Learn more at Bunge.com. Every day our people exemplify these values, which represent Bunge at its core: • We Are One Team – Collaborative, Respectful, Inclusive, • We Lead The Way – Agile, Empowered, Innovative, • We Do What’s Right – Safety, Sustainability, With Integrity #J-18808-Ljbffr

About the Job At Allianz Technology, safeguarding our data platforms is mission‑critical. We are looking for a hands‑on Senior Security Architect / Lead Engineer to own and continuously elevate the security and compliance posture of our cloud database platforms, including Oracle Databases on OCI and Postgre SQL environments. In this role, you will define and drive the security strategy for business‑critical data infrastructure, working at enterprise scale in a highly regulated, international environment. You will combine deep technical expertise with people leadership, leading a dedicated security squad while collaborating closely with platform architects, operations, and governance teams across the organization. If you are passionate about building secure‑by‑design platforms, translating regulatory requirements into robust engineering controls, and mentoring engineers while staying hands‑on, this role offers both technical depth and strategic impact. What You Do Design and implement secure end‑to‑end architectures for Oracle Databases (OCI) and Postgre SQL, including encryption, key management, and hardening. Define and enforce Zero Trust network security controls for cloud database environments (private endpoints, segmentation, certificates). Lead threat‑modelling activities and translate risks into concrete engineering controls. Own identity and access integration with Microsoft Entra ID, including OAuth/OIDC, Conditional Access, and Privileged Identity Management. Establish vulnerability management and apply Dev Sec Ops practices across the database platform. Act as primary contact for security audits, converting findings into remediation actions and improvements. Lead and mentor a cross‑functional security squad, managing priorities, incidents, and stakeholder communication. What You Bring Strong hands‑on experience securing Oracle Database (including Advanced Security) and Postgre SQL in cloud environments. Solid expertise in OCI security, networking, and cloud database infrastructure. Proven background in network security, certificate lifecycle management, and secrets management. Deep practical knowledge of Microsoft Entra ID and identity‑based access for databases. Experience working with security and compliance frameworks such as ISO 27001, SOC 2, GDPR, CIS Benchmarks, or DORA. Previous experience leading or tech‑leading teams in agile or Dev Ops environments. Excellent communication skills, able to explain complex security topics to technical and non‑technical audiences. What We Offer We offer a hybrid work model which recognizes the value of striking a balance between in‑person collaboration and remote working incl. up to 25 days per year working from abroad. We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location). From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered. Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach. Commitment to Integrity, Fairness & Inclusion Allianz Technology is proud to be an equal opportunity employer dedicated to fostering an inclusive work environment for everyone. We embrace individuals of all gender identities and expressions, sexual orientations, ethnicities, ages, nationalities, religions, disabilities, and philosophies of life. Ultimately, our greatest strength as a company lies in the unique skills, experiences, and backgrounds our employees contribute. We therefore welcome applications regardless of race, ethnicity or cultural background, age, gender, nationality, religion, social class, disability, or sexual orientation, or any other characteristics protected under applicable local laws and regulations. #J-18808-Ljbffr

Infrastructure Security Engineer Factorial is looking for a skilled and experienced Infrastructure Security Engineer to join our team and reinforce the end-to-end security management of our systems and cloud environments. In this role, you will be the guardian of our core foundations, taking full ownership of infrastructure security from risk assessment and vulnerability management to proactive defense and incident response. As a key member of the Security Team, you will ensure that our global infrastructure remains resilient, compliant, and secure. You’ll work closely with SRE and IT teams to maintain a strong security posture, implementing hardening strategies and managing the entire lifecycle of infrastructure risks. The Mission End-to-End Infrastructure Management: Drive the security strategy for our cloud environments, ensuring security is baked into the architecture from day one. Detection & Response: Continuously monitor security alerts and incidents. Conduct thorough incident response and detailed investigations to identify root causes within the infrastructure stack. Vulnerability & Risk Management: Lead the identification, assessment, and remediation of infrastructure vulnerabilities. Maintain the infrastructure risk register and prioritize mitigation efforts based on business impact. Hardening & Resilience: Implement and maintain rigorous hardening strategies across our infrastructure to increase resilience against sophisticated cyberattacks. AI, Tooling & Automation: Develop and manage infrastructure security tooling (CNAPP, CSPM, Vulnerability Scanners) to ensure accurate threat detection and automated compliance. Secure Delivery Pipelines: Secure the infrastructure and runners within our CI/CD pipelines, ensuring the environment where code is built and deployed is protected. Collaboration: Partner with Infra, IT, DX and SRE teams to integrate infrastructure security best practices and automate security controls. Strategy & Documentation: Develop, maintain, and regularly update incident response plans and infrastructure security policies. Your Profile 5+ years of experience in Infrastructure Security or Security Engineering, specifically within Cloud environments, Infrastructure as Code, and Containerization (Kubernetes). Tooling Proficiency: Experience using and managing EDR, CNAPP, DLP, SIEM, and vulnerability management solutions. Threat Knowledge: Strong understanding of Cyberattacks and Threat Actor Tactics, Techniques, and Procedures (TTPs) related to infrastructure and cloud escape. Vulnerability Management Expert: Deep experience managing enterprise-grade vulnerability scanning and risk prioritization workflows. Infrastructure Specialist: Strong understanding of network security, OS hardening (Linux/Unix), and identity management (IAM). Automation Mindset: Proficiency in scripting and automation using Python, Bash, and AI, to streamline SOC operations. Education: Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent experience. Bonus Points: Industry certifications. How We Work At Factorial, we believe the best products are built when people come together—in person—to collaborate, challenge ideas, and move fast. That’s why our Engineering Team follows an office-first, flexible approach. We work on-site several days a week (80%), using that time to connect, align, and innovate as a team. However, we also support remote work when it makes sense (20%) for deep focus or personal needs. Perks of being part of our team High growth, multicultural and friendly environment Continuous training and learning based on your needs Alan private health insurance Healthy life with Wellhub (Gyms, pools, outdoor classes) Save expenses with Cobee Language classes with Preply Get the most out of your salary with Payflow And when at the office... Breakfast in the office and organic fruit Nora and Apeteat discounts Pet Friendly About Factorial Factorial is an innovative Business Management Software solution designed to streamline company processes for small and medium-sized enterprises. Founded in 2016, our mission is to help companies automate workflows, centralize people data, and make better business decisions. With customers across over 60 countries, we've built a diverse team that's driving change in the tech space. Our Values We own it: We take responsibility for every project. We learn and teach: We share knowledge every day. We partner: Every decision is a team decision. We grow fast: We act fast and learn from our mistakes. Join Factorial, where people grow Diversity Diversity is part of our culture. We have more than 43 nationalities and provide an inclusive environment for all. We do not discriminate; we encourage everyone to join us! #J-18808-Ljbffr

YOUR BRILLIANT FUTURE IN TECH IS NOW Welcome to the world of Zoi! We transform manufacturing and retail enterprises through AI-first strategies that deliver measurable business value. We don't just advise: we implement, operate, and scale solutions that turn AI adoption into competitive advantage. We are expanding our European teams in Lisbon, Barcelona, Figueres, Sevilla and Las Palmas. Just choose your favorite Zoi city! Travel between our locations is possible. WHAT YOU DO Manage and maintain SAP authorizations, user accounts, and security profiles across ABAP and S/4 HANA environments. Design, build, test, and deploy single, derived, and composite roles using transaction PFCG in accordance with security best practices. Perform Segregation of Duties (So D) conflict analyses and support audit compliance and access review processes. Administer user access and role collections in SAP Business Technology Platform (BTP) and connected cloud services. Handle daily authorization support tickets, troubleshooting access issues, missing authorizations, and emergency access requests. Collaborate closely with internal project teams, functional consultants, and client stakeholders at Kärcher to ensure robust security posture. WHO YOU ARE Professional experience in SAP Basis with a strong focus on SAP Security, Authorizations, and Role Maintenance. Proficient in PFCG role management, authorization concept design, and SAP user lifecycle management. Familiar with SAP BTP authorization administration, role collections, and identity management concepts. Understanding of compliance frameworks, Segregation of Duties (So D), and audit requirements in enterprise IT environments. Fluent in English with strong written and verbal communication skills. A proactive problem-solver with a strong consulting mindset, who takes full ownership of responsibilities and thrives in collaborative client environments. Do you like to be surrounded by brilliant minds? Awesome. At Zoi, you become part of our community of tech enthusiasts and develop your full potential. Create fresh ideas and shape the digital transformation of our enterprise customers sustainably. GOOD WORK SHOULD BE REWARDED, which is why we offer various bonus models at our company TIME IS WISDOM, 20 % of your working time is available for experimenting and education SKILL YOURSELF UP, Zoi can only be as good as you are. That’s why we value constant training and development BE FREE thanks to our absolutely flexible working hours and work remotely from any of our locations LEVERAGE AI POWER with access to cutting-edge AI technologies, to automate tasks, gain insights, and innovate DEVELOP YOURSELF with our individual certification and training plan FAMILY COMES FIRST, rely on our financial support for childcare REFUEL at our regular free Friday lunch Zoi is an equal opportunity employer, we're committed to helping you do your best work. Our promise is to champion diversity, build an inclusive culture and do our part to create a more equitable professional landscape. #J-18808-Ljbffr

Job Description Our partner is looking for a Product Security Engineer, Hardware to strengthen the security of processor and So C platforms through architecture analysis, attack research and practical security testing. The role focuses on identifying weaknesses in processor hardware, Root of Trust, firmware and So C designs, then turning known and emerging attack techniques into concrete tests and mitigation recommendations. You will work closely with hardware teams and contribute to security documentation, regulatory readiness and product security improvements. Location: Barcelona, Spain, HybridLevel: Mid Responsibilities Analyse processor, So C, Root of Trust and firmware security Review hardware architecture and implementation for vulnerabilities Maintain hardware security specifications and technical documentation Research new hardware and platform attack techniques Reproduce published attacks against real implementations Develop new security tests and attack scenarios Identify microarchitectural, physical and memory related weaknesses Build proof of concept attacks using C and assembly Report vulnerabilities clearly and recommend mitigations Work with hardware teams to validate and resolve findings Support security certification and regulatory compliance activities Automate security testing and data analysis where relevant Requirements 2 to 5 years of hardware security, computer architecture or systems security experience Master's degree in a relevant technical field Strong understanding of RISC V architecture Processor microarchitecture and So C knowledge Knowledge of hardware attack techniques Microarchitectural attack knowledge Physical and memory attack awareness C programming experience Assembly knowledge, ideally RISC V Ability to create security tests and attack proofs of concept Strong technical documentation skills Ability to work independently and with engineering teams Optional / Desired Caliptra or Open Titan Side channel analysis Fault injection Hardware security research or CTF experience Classical cryptography Post Quantum Cryptography Confidential computing Trusted execution environments Remote attestation Memory isolation EU CRA Common Criteria FIPS 140-3 Python for test automation and analysis What's in it for you? Flexible working hours Hybrid model, 4 days office, 1 day from home 1 week per year working from anywhere 25 days annual leave plus December 24 and 31 Monthly food allowance Private medical insurance Relocation bonus Housing search support Visa support if required Family relocation support Virtual shares Language classes Tax incentive, subject to eligibility #J-18808-Ljbffr

Trend Micro's Trend AI unit seeks a Customer Success Technical Advisor (CSTA) to be the strategic technical linchpin for enterprise clients. You will drive security outcomes, guide onboarding, and lead workshops to mature SOC and SIEM operations. As a trusted advisor, you will coordinate with Product Eng, R&D, and Sales Eng to influence roadmaps, ensure high feature utilization, and provide proactive recommendations during security events. #J-18808-Ljbffr

Analyze and test hardware security for processors and SoC platforms, identifying vulnerabilities, researching attacks, and developing mitigation strategies.

Allianz Group in Barcelona seeks an experienced Information Security Solution Architect – Cloud Security to lead the design and governance of enterprise cloud security across major hyperscalers, with emphasis on Zero Trust, DevSecOps, and regulatory compliance. You will guide engineering teams, define security baselines, track KPIs, and participate in security gate reviews. A higher education in a related field and 5+ years in cloud security are expected; fluency in English and interest in GenAI #J-18808-Ljbffr

Job Purpose We are seeking a highly skilled and experienced Cybersecurity Architect to join our global team. The ideal candidate will be responsible for designing, implementing, and managing comprehensive security solutions across our global infrastructure. This role requires a wide range of security generalist skills, including proven expertise in cloud and AI security, to protect our organization from evolving cyber threats. The responsibilities further include reviewing our current security measures and processes in all geographies TD SYNNEX operates in, driving enhancements, identifying and addressing areas of weakness, and responding promptly to possible security breaches. Primary duties include ensuring security- and privacy-by-design, zero trust architecture, information protection, application security, identity and access management, risk assessment, controls assurance, threat analytics, incident response and security awareness. Job Purpose We are seeking a highly skilled and experienced Cybersecurity Architect to join our global team. The ideal candidate will be responsible for designing, implementing, and managing comprehensive security solutions across our global infrastructure. This role requires a wide range of security generalist skills, including proven expertise in cloud and AI security, to protect our organization from evolving cyber threats. The responsibilities further include reviewing our current security measures and processes in all geographies TD SYNNEX operates in, driving enhancements, identifying and addressing areas of weakness, and responding promptly to possible security breaches. Primary duties include ensuring security- and privacy-by-design, zero trust architecture, information protection, application security, identity and access management, risk assessment, controls assurance, threat analytics, incident response and security awareness. Responsibilities Advises IT and Security leaders in evolving TD SYNNEX's security strategies, technologies and processes. Design and implement robust security architectures for cloud, AI, and traditional IT environments. Ensure that security measures are integrated into all aspects of the organization's technology infrastructure. Work closely with cross-functional teams, including IT, application development, and business units, to ensure the security of cloud environments, AI applications, and infrastructure. Perform risk assessments of internal services, cloud and 3rd parties, drive remediation and improvements Develops the ISMS, security policies, standards and procedures, performs M&A due diligence Prepares and delivers security trainings to IT and Business colleagues Knowledge, Skills And Experience > 10 to 15 Years of relevant work experience selection of security and technology certifications and/or equivalent proven work experience Formal knowledge of Architecture concepts such as TOGAF, Zachman or FEAF Proficiency in cloud security (AWS, Azure, GCP), AI security, network security, and endpoint protection Strong knowledge of security frameworks such as NIST CSF, ISO 27001, and SOC 2 Experience with security information and event management (SIEM), intrusion detection, and user behavior analytics (UBA) Expertise in scripting languages such as Python or Power Shell for automation Experience with secure software development lifecycle (SDLC) and Dev Sec Ops practices and OWASP Knowledge of identity and access management (IAM), Cryptography and data loss prevention (DLP) Exposure to offensive security practices Hands-on IT Infrastructure and Network skills At TD SYNNEX, our values guide everything we do: Together, We Own It, We Dare to Go, We Grow and Win, and above all, We Do the Right Thing. These principles shape how we work with each other, our partners, and our communities as we drive innovation and create lasting impact. What's In It For You? Elective Benefits: Our programs are tailored to your country to best accommodate your lifestyle. Grow Your Career: Accelerate your path to success (and keep up with the future) with formal programs on leadership and professional development, and many more on-demand courses. Elevate Your Personal Well-Being: Boost your financial, physical, and mental well-being through seminars, events, and our global Life Empowerment Assistance Program. Diversity, Equity & Inclusion: It's not just a phrase to us; valuing every voice is how we succeed. Join us in celebrating our global diversity through inclusive education, meaningful peer-to-peer conversations, and equitable growth and development opportunities. Make the Most of our Global Organization: Network with other new co-workers within your first 30 days through our onboarding program. Connect with Your Community: Participate in internal, peer-led inclusive communities and activities, including business resource groups, local volunteering events, and more environmental and social initiatives. At TD SYNNEX, we're proud to be recognized as a great place to work and a leader in the promotion and practice of diversity, equity and inclusion. #J-18808-Ljbffr

ManyChat, Inc. is seeking a Cyber Security Lead in Barcelona, Spain. This role involves leading a team of security engineers and managing end-to-end security operations. You will define operational roadmaps and work closely with other teams to implement security controls. The ideal candidate has over 7 years in technical security roles and strong AWS cloud security knowledge. You’ll ensure that ManyChat’s infrastructure and products remain secure. The company offers comprehensive health insurance and a flexible benefits package. #J-18808-Ljbffr

Syntax is seeking a Global Director of Business AI Cyber Security (m/f/d) in Barcelona, with a remit to own security offerings across the Business AI portfolio. The role collaborates with the Global CISO to define strategy, method ownership, delivery, and roadmaps while leading engagements with the v CISO bench and cross-functional teams. The position requires end-to-end accountability for Business AI security, later transitioning to direct team leadership as demand grows, delivering #J-18808-Ljbffr

Allianz Technology is seeking a Senior Cloud Security Engineer to join the Cloud Defense team. You will secure AWS/Azure/GCP environments, implement guardrails, and drive threat detection, SIEM/SOAR workflows, and IaC security across global platforms. You will work with cross‑functional teams, contribute to automation initiatives, and help evolve a robust cloud security program in a fast‑paced, international environment. #J-18808-Ljbffr

CaixaBank Tech busca un Arquitecto de Ciberseguridad para unirse al dominio CYBER, aportando experiencia en Zero Trust y modelos ZTNA, y trabajando con el equipo Platform Protect para evolucionar el acceso seguro. Diseñarás arquitecturas seguras basadas en SSE y Prisma, definirás políticas basadas en identidad y contexto, e integrarás soluciones IAM, cloud y aplicaciones corporativas, con un enfoque de mejora continua y protección distribuida. #J-18808-Ljbffr

The Role Openchip is building new RISC-V chips with security at heart, enabling safer and more privacy-respectful execution of data processing workloads like AI models. As a Senior Offensive Security Engineer, you will help to ensure that our software and systems are designed and implemented to the highest security standards. You will perform technical security assessments, code reviews and vulnerability testing to highlight risk, helping Open Chip teams and partners to improve security, and work on a wide variety of software designs and technology stacks. The Role Openchip is building new RISC-V chips with security at heart, enabling safer and more privacy-respectful execution of data processing workloads like AI models. As a Senior Offensive Security Engineer, you will help to ensure that our software and systems are designed and implemented to the highest security standards. You will perform technical security assessments, code reviews and vulnerability testing to highlight risk, helping Open Chip teams and partners to improve security, and work on a wide variety of software designs and technology stacks. Key Responsibilities Identify Vulnerabilities: Discover security flaws before they can be exploited, using offensive security techniques across the full software and firmware stack. Threat Modeling: Development of comprehensive threat models covering all targeted usages and deployments of Openchip SW Stack. Security Documentation: create and maintain high-quality security guidance documentation, including best practices, design recommendations, and threat mitigation strategies. Security Standards Compliance: Drive the alignment of Open Chip products with industry-recognized security standards (e.G., FIPS 140-3, NIST SP 800-193, ISO/IEC 27001). Advanced Security Research, Conduct deep technical investigations in areas such as: Microarchitectural security (e.G., side-channel attacks) Cryptographic weaknesses - Fuzzing and reverse engineering Code and architecture-level security reviews Logic and memory vulnerabilities (e.G., kernel/firmware privilege escalation) Interact with colleagues across projects to unblock issues, or to reach consensus on technical topics. In Particular Collaborate with colleagues through code reviews, bug triaging, design documents,... Contribute to shared team responsibilities (CI failure triaging, documentation, code fixits, rotations...). Work with validation teams on required test cases, coverage, and methodologies to ensure robust security verification. Work with support Quality team by delivering security guidelines and best practices for implementing a secure development lifecycle (SDL). Work with hardware teams, providing requirements for security and influencing hardware/software co-design. Required Qualifications Bachelor or Master's degree in a relevant field. Experience in the relevant field (5-10yr). Experience with standard tools for source control (git), continuous integration, task management (Jira). Solid knowledge about computer architecture (CPU, cache and memory hierarchy, buses,...). Knowledge about at least two of the following areas: Microarchitectural security(side channel attacks, fault injection) Platform security features (kernel/firmware hardening, CHERI, CFI, pointer tagging, virtualization-based security, IOMMU). Cryptograpy usage across networks (certificates, signatures, TLS/SSL, PK, remote attestation). Boot integrity technologies (UEFI Secure Boot, measured boot, TPM). - Cryptography, including experience with cryptography libraries (Open SSL, libssl, wolfssl, mbedtls, libsodium). Soft Skills Team player: communicative and collaborative person who focuses on the outcome of the team above the individual needs. Curious about learning new technologies/stacks. Capable of within- and cross-team collaboration at the technical level. Can-do attitude, proactive and willing to step up and resolve any obstacle. Self-aware, self-starter, and self-motivated. Preferred Qualifications Experience designing for relevant security standards (TCG, IEEE, NIST, FIPS, PCI, ISO 28000 series) Experience designing for crypto security (e.G. certificate handling and PKI, attestation, TPM/HSM) Expert knowledge of common security-relevant protocols (e.G. SSH, TLS, DNS, DHCP, NTP, ICMP) Expert knowledge of Linux, and hypervisor security Experience with open source software development. In particular, engagement with Open SSF or other Open Source security organizations, and/or history of contributions to Open Source projects. What We Offer? The opportunity to build a cloud AI deployment platform that will power next generation AI systems. A collaborative, innovation-driven environment with significant autonomy and ownership. Hybrid work model with flexible scheduling. A chance to join one of Europe’s most ambitious companies at the intersection of AI and silicon engineering. Position based in Barcelona, Spain. We’re looking for exceptional engineers ready to shape the future of AI infrastructure. If building scalable, cloud-native AI deployment platforms excites you, we’d love to meet you. At Openchip & Software Technologies S. L., we believe a diverse and inclusive team is the key to groundbreaking ideas. We foster a work environment where everyone feels valued, respected, and empowered to reach their full potential- regardless of race, gender, ethnicity, sexual orientation, or gender identity. #J-18808-Ljbffr

Scopely is seeking a Principal Security Engineer in Barcelona to join its Information Security team on a hybrid basis. The role involves collaborating with game studios on security strategies, conducting threat assessments, and applying AI to enhance security processes. Ideal candidates should have over 8 years of experience in product security and strong knowledge of programming languages such as Python and C#. The position emphasizes leadership, technical expertise, and effective communication within a team environment, making it an exciting opportunity at a leading gaming company. #J-18808-Ljbffr

Eurofins is seeking an Applications Cybersecurity Specialist to act as a trusted security advisor within the Group Architecture Office. You will identify security gaps, define scalable remediation, and ensure secure architecture across Dev Ops and Cloud platforms. Join Eurofins IT Security and Architecture teams to drive security strategies, perform reviews, and lead security testing and tooling across multiple projects and geographies. English communication is required. #J-18808-Ljbffr

Continue to make an impact with a company that is pushing the boundaries of what is possible. At NTT DATA, we are renowned for our technical excellence, leading innovations, and making a difference for our clients and society. Our workplace embraces diversity and inclusion - it’s a place where you can continue to grow, belong, and thrive. Your career here is about believing in yourself and seizing new opportunities and challenges. It’s about expanding your skills and expertise in your current role and preparing yourself for future advancements. That’s why we encourage you to take every opportunity to further your career within our great global team. Your day at NTT DATA The Director, Information Security Governance, Risk and Compliance is a leadership role that supports the company by way of protecting its brand, warranting compliance to its regulatory and contractual obligations. Key responsibilities: Oversees the development, evaluation and implementation of Information Security Policy, Standards, and Guidelines. Oversees information security risk assessments, TRA, TFA and policy compliance reviews and supports the development and operational effectiveness of IT security controls. Manages and monitors Group risk in the company preferred risk management solution, ensure that risk is assessed, allocated and assigned, managed, monitored, and treated appropriately. Develops, scopes and discusses security compliance review schedules, reviews risk registers, risk and policy exceptions and authorization and performs threat and risk assessments of new technologies and vendors. Documents improvement in service design and ensures that the required security plan is developed and reviewed. Reviews service level and business requirements to develop service methodologies and an information security policy, assessments and methodologies. Advises on the reporting requirements and ensures the overall implementation of the ISM policy in service operation. Assists with the design and operation of related compliance with both internal security policies and application laws and regulations. Ensures that appropriate security assessment have been carried out so that the ISMS security strategy is developed and aligned to service and operational requirements. Develops an ISMS security audit management strategy that is aligned to service and operational requirements and develop information security design criteria and templates. Considers technical requirements and implications of service and business levels and develop the ISMS security review criteria, verifying that the solution design meets ISMS, client, and regulatory requirements. Evaluates the adequacy, implementation, maintenance of operational processes, guides and drives the implementation of process controls to ensure alignment to ISMS obligations. When deviations occur, ensures root cause is identified and treated. Monitors and holds accountable managers to implement prevention and remediation to ensure ongoing compliance to ISM policy. To thrive in this role, you need to have: Relevant people management skills. Significant understanding of complex inter-relationships in an overall system or process. Excellent interpersonal and consultative skills with the ability to map business needs to technology solutions. Ability to discuss and report technology and information security risk with non-technology and executive business stakeholders. Ability to display analytical thinking and a proactive approach. Team player with the ability to display consistent client focus and orientation. Ability to develop, define and articulate ISM strategies. Excellent strategic thinking and decision-making abilities. Ability to plan and organize, with good project management skills. Significant understanding of security risk management, operational processes and controls - End-to-end information security risk lifecycle management. Significant knowledge of information security management and policies, risk management and risk frameworks. Maintains up-to-date knowledge of security threats, countermeasures, security tools, and network technologies. Significant knowledge of technological advances within the information security arena. Academic qualifications and certifications: Bachelor’s degree or equivalent in Information Technology or Computer Science degree or related field. Security certifications such as CISA, CRISC, COBIT, IIA or equivalent preferred. Certifications such as Lead audit/Implementer - ISO 27001, SOC TSP preferred. Required experience: Significant experience gained within the Technology Information Security Industry. Significant experience with Operational Risk Management and Enterprise Risk Management. Significant experience with Enterprise Risk Management solutions (i.E., Service Now GRC or similar). Significant experience in technical Information Security consulting, architecture, design, implementation. Significant experience managing and leading Information Security, Governance, Risk and Compliance teams preferably gained within a similar organizational environment. Workplace type: Hybrid Working Equal Opportunity Employer NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Accelerate your career with us. Your career here is about believing in yourself and taking on great opportunities and new challenges. It’s about growing your skills and expertise in your current role and preparing yourself for the future. That’s why we encourage you to take every opportunity to grow your career within our great global team. #J-18808-Ljbffr

Application Security Engineer role focused on offensive security testing, exploit discovery, and research to improve product security. Requires strong coding, penetration testing, and AI/LLM experience.

Apple ищет инженера ML для разработки и развёртывания систем обнаружения злоупотреблений. Ваша работа охватит текст, изображения и аудио, включая полный цикл — от прототипирования до продакшн-мониторинга и улучшений в реальном времени. Вы будете работать над архитектурами мониторинга и автоматизации действий, сотрудничать с инженерами, исследователями и продакт-менеджерами для достижения надёжных защитных решений. Требуется опыт вывода моделей в прод и работа с LLM/Foundation моделями. #J-18808-Ljbffr

ES - Barcelona, Spain; ES - Spain; PT - Portugal Scopely is looking for a Principal Security Engineer to join our Information Security team in Spain/Portugal on a hybrid basis.

Lead deployment of secure file transfer and file security platforms, ensuring secure data exchange, malware scanning, threat prevention, and compliance with security standards. Experience with Secure File Transfer, file security, content security, or threat prevention solutions. Senior IT Project Ma

Decentralized Masters is looking for a security-focused software engineer to own the security posture of their platform managing significant digital assets. The ideal candidate will have extensive experience in security and quality assurance, with a strong background in fullstack development and cloud infrastructure like AWS. The role offers competitive compensation, remote work flexibility, and direct exposure to the company's founders. Join a high-impact team as they advance digital security in the Web3 space. #J-18808-Ljbffr

About The Job Join the Allianz Cyber Defense Center (ACDC) and play a key role in securing cloud environments at scale for one of the world’s leading insurance companies. As a Senior Cloud Security Engineer, you will be part of the Cloud Defense team, working across AWS, Azure, and GCP to protect critical workloads and Saa S platforms. You will contribute across the full security lifecycle—from prevention to detection and response—helping us stay ahead in an ever‑evolving threat landscape. This is a hands‑on, high‑impact role where you will work at the intersection of cloud security engineering, threat detection, and automation, collaborating with international teams in a fast‑paced and continuously evolving environment. What You Do Analyze and investigate cloud security findings across AWS, Azure, and GCP, prioritizing based on risk and business impact Manage and remediate cloud security posture issues, including misconfigurations, identity risks, and exposure scenarios Handle and respond to active threat detections, correlating signals across multiple data sources Monitor and improve Saa S security posture, identifying risks such as identity drift or third‑party access issues Develop and enhance detection use cases within SIEM and contribute to SOAR automation workflows Collaborate with engineering and platform teams to implement security guardrails and enforce best practices Support shift‑left security initiatives by integrating security into infrastructure pipelines (Ia C, CI/CD) Contribute to continuous improvement through automation, documentation, and knowledge sharing What You Bring Hands‑on experience securing cloud environments (AWS, Azure and/or GCP), including IAM, networking and workload protection Strong understanding of cloud threat detection and attacker techniques (e.G., credential abuse, lateral movement, misconfiguration exploitation) Experience with CNAPP/CSPM platforms (e.G., Wiz, Prisma Cloud, Lacework or similar) Proven ability to manage security incidents end‑to‑end, from investigation to containment and reporting Experience designing or working with event‑driven detection and SIEM/SOAR environments Knowledge of microservices and cloud‑native architectures, with a focus on scalability and resilience Hands‑on experience with Kubernetes, Docker and cloud platforms (AWS, Azure, GCP) Familiarity with Infrastructure as Code (Terraform, CI/CD, Git Ops) and shift‑left security practices Scripting or automation skills (e.G., Python or similar) Strong communication skills in English, with the ability to explain technical findings to non‑security stakeholders What We Offer We offer a hybrid work model which recognizes the value of striking a balance between in‑person collaboration and remote working incl. up to 25 days per year working from abroad. We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location). From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered. Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach. About Allianz Technology With its headquarters in Munich, Germany, Allianz Technology is Allianz's global IT service provider and delivers IT solutions that drive the group's digitalization. With more than 11,000 employees in over 20 countries around the world, Allianz Technology is tasked to run, optimize, transform, and innovate the infrastructure, applications, and services together with Allianz companies to co‑create the best customer experience. We service the entire spectrum of digitalization – from one of the industry's largest IT infrastructure projects that spans data centers, networks, and security, to application platforms ranging from workplace services to digital interaction. In short: We deliver comprehensive end‑to‑end IT solutions for Allianz in the digital age. We are the backbone of Allianz. Find us at: Commitment to Integrity, Fairness & Inclusion Allianz Technology is proud to be an equal opportunity employer dedicated to fostering an inclusive work environment for everyone. We embrace individuals of all gender identities and expressions, sexual orientations, ethnicities, ages, nationalities, religions, disabilities, and philosophies of life. Ultimately, our greatest strength as a company lies in the unique skills, experiences, and backgrounds our employees contribute. #J-18808-Ljbffr

Infrastructure Engineer sought for a global IT organization in Barcelona, responsible for the daily operation, maintenance, and upkeep of critical infrastructure including networks, servers, and user support across Europe.

Bending Spoons is seeking a talented security-focused professional to strengthen our systems and protect company data. You will identify vulnerabilities, automate security controls, and collaborate with privacy experts to ensure regulatory compliance. The role involves working across teams to maintain high security standards and proactive threat detection. We offer flexible start dates, potential part-time options, and a compensation package tied to market ranges across Europe. #J-18808-Ljbffr

Preply in Barcelona (hybrid) is seeking a Senior II Security Engineer for the Platform team to own cloud and platform security across AWS, Kubernetes, and GCP, focusing on detection, incident response, and secure development practices. You will work with SRE, Data, Engineering, and GRC, drive end-to-end security initiatives, evolve monitoring, and build practical guardrails and automation while participating in on-call rotations. #J-18808-Ljbffr

At The Knot Worldwide, we champion celebration – and that starts with celebrating our people. Our employees are passionate dreamers, thoughtful doers, and lifelong learners who power meaningful moments for millions around the world. We’re united by authentic connection, shared purpose, and a deep commitment to the global community we serve. Here, flexibility and belonging go hand in hand with high performance. The TKWW InfoSec Team is seeking a Senior Security Engineer to lead strategic security initiatives, mentor team members, and address the most complex and ambiguous technical and programmatic security challenges. You will act as a subject‑matter expert, take ownership of critical security domains, influence architectural decisions across engineering teams, and help set the long‑term vision for security at TKWW. Successful Senior Security Engineers at TKWW are recognized as technical leaders who work with full autonomy, solve ambiguous problems, mentor junior team members, and effectively drive cross‑functional change. You must possess exceptional problem‑solving and communication skills, a comprehensive understanding of advanced cloud security architectures and emerging threats, the ability to influence technical and executive stakeholders, and a proven track record of delivering highly secure platforms and technologies. • Lead and drive the strategy, design, and implementation of security controls and secure patterns across all TKWW corporate and production environments., • Mentor junior security engineers and provide technical guidance on complex security issues, fostering a culture of security within engineering., • Architect and implement advanced, secure, and scalable containerized architectures in multi‑cloud environments., • Collaborate with engineering leads to define product and platform roadmaps, ensuring security requirements are integrated from the initial design phase., • Own and continuously improve threat detection, application security, vulnerability management, and assessment procedures, acting as the final escalation point for complex remediation efforts., • Act as a Subject Matter Expert (SME) for one or more critical security domains (e.g., Identity and Access Management, Data Protection, Cloud Network Security)., • Lead the response and post‑mortem analysis for high‑severity security incidents, driving long‑term preventative measures., • Identify and implement strategic opportunities to improve process maturity and automation, including developing sophisticated internal security tools and procedures., • Provide continuous technical support and escalation management for security‑related issues throughout TKWW., • Bachelor's Degree in Computer Science or a related field (Master's degree preferred)., • A minimum of 5+ years of progressive security engineering or security architecture experience is required , with a focus on large‑scale, production environments., • 5+ years of hands‑on experience securing cloud applications and infrastructure (AWS strongly preferred, multi‑cloud experience a plus)., • Proven track record of leading or mentoring major cross‑functional projects to their successful completion., • Deep and comprehensive understanding of security vulnerabilities, attacker exploit techniques, and methods for large‑scale, automated remediation., • Expert‑level understanding of public cloud infrastructure and services in Akamai, AWS (IAM, VPC, KMS, CloudWatch, Systems Manager, S3, RDS, Route53, Lambda, AWS Config, etc.)., • Expert‑level understanding of Docker and container orchestration with Kubernetes and hands‑on experience securing production EKS/GKE clusters., • Proven experience with advanced application security concepts, including designing and securing microservice and API‑based architectures., • Experience with security tooling, including WAF and Bot Management platforms., • Excellent written and verbal communication skills, with the ability to articulate complex security risks and technical requirements to both non‑technical executive stakeholders and highly technical engineering/DevOps teams., • Proven ability to operate with a high degree of autonomy, acting as a self‑starter who drives projects to successful completion with minimal oversight., • Experience with scripting and automation (Python, Go, or other modern languages)., • Relevant industry certifications (e.g., CISSP, CISM, AWS/Azure Security, GSEC)., • Advanced experience in security engineering, DevOps, or IT operations roles, with expertise in CI/CD pipeline security., • Experience in defining and enforcing security policies across a diverse, global organization., • Commit to our customers : You act as one team on behalf of our customers. You lead with head and heart, and build what matters for life's most meaningful moments., • Raise the bar : You define "great" and work backwards. You don't just accept how it’s been done, but boldly define how it should be. You are unafraid to innovate, learn, and keep moving forward toward our shared vision., • Be all in : You believe in our mission and take ownership of your work. You debate openly to reach the best outcomes, speaking with clarity and care, embracing diverse perspectives, then commit fully., • Celebrate impact : You measure success by the outcomes you create. You hold yourself accountable to delivering value, while recognizing progress and the lessons learned along the way. You love to win, together. We believe in a wide range of holistic offerings to support our employees so that they can live our values day in and day out. From mental wellbeing, physical health and financial planning, to engaging perks and discounts, we are in the business of celebrating and supporting the Moments that Matter, both in and out of the office. We offer flexible vacation, generous parental leave, and prioritize initiatives that support the growth, development, and happiness of our people. is our approach to hybrid work. It’s designed to support how we work best: combining the flexibility we value with meaningful opportunities to connect in person. Whether a role is ‑eligible or not, we believe in purposeful moments to come together, build strong relationships, and drive bold ideas forward. • For ‑eligible roles , this includes regular in‑office time to foster collaboration and connection., • For roles not eligible for in‑office expectations , we support connection through virtual collaboration and intentional gatherings. To facilitate in‑person collaboration, we have office spaces in Barcelona, Spain; Delhi, India; Galway, Ireland; London, England; New York, NY; and Washington, D.C. The Knot Worldwide provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, or disability. In addition to federal law requirements, The Knot Worldwide complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. The Knot Worldwide expressly prohibits any form of workplace harassment based on race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. Privacy Notice: The Knot Worldwide (TKWW) processes your personal data to evaluate your application, based on the legal ground of taking steps prior to entering into a potential employment contract. Only the data strictly necessary for this purpose is collected. In some cases, your data may also be processed based on TKWW’s legitimate interests (e.g., to improve recruitment practices or manage candidate pools), to which you can object at any time. You have the right to access, rectify, or delete your data, and to object to certain uses. To learn more about your rights, please consult our Privacy Policy. If you wish to file a complaint, you may contact the competent data protection authority. #J-18808-Ljbffr

Businessinsights is seeking an experienced Project Manager to lead a global cybersecurity program focused on strengthening identity and access security across a large enterprise. You will oversee the deployment of the Password Robustness Enforcer within the organization's Global Active Directory, coordinating Architecture, Cyberdefense, IAM and Infrastructure teams and driving successful project execution and user adoption. #J-18808-Ljbffr

Apple ищет инженера ML для разработки и развёртывания систем обнаружения злоупотреблений.

Описание: One of the companies we work with at Joppy is looking for an Infrastructure Security Engineer to join the team. Задачи: Drive the security strategy for our cloud environments, ensuring security is baked into the architecture from day one. Continuously monitor security alerts and incidents. Conduct thorough incident response and detailed investigations to identify root causes within the infrastructure stack. Lead the identification, assessment, and remediation of infrastructure vulnerabilities. Maintain the infrastructure risk register and prioritize mitigation efforts based on business impact. Implement and maintain rigorous hardening strategies across our infrastructure to increase resilience against sophisticated cyberattacks. Develop and manage infrastructure security tooling (CNAPP, CSPM, Vulnerability Scanners) to ensure accurate threat detection and automated compliance. Secure the infrastructure and runners within our CI/CD pipelines, ensuring the environment where code is built and deployed is protected. Partner with Infra, IT, DX and SRE teams to integrate infrastructure security best practices and automate security controls. Develop, maintain, and regularly update incident response plans and infrastructure security policies. Требования: 4+ years of experience in Infrastructure Security or Security Engineering, specifically within Cloud environments, Infrastructure as Code, and Containerization (Kubernetes). Experience using and managing EDR, CNAPP, DLP, SIEM, and vulnerability management solutions. Strong understanding of Cyberattacks and Threat Actor Tactics, Techniques, and Procedures (TTPs) related to infrastructure and cloud escape. Deep experience managing enterprise-grade vulnerability scanning and risk prioritization workflows. Strong understanding of network security, OS hardening (Linux/Unix), and identity management (IAM). Proficiency in scripting and automation using Python, Bash, and AI, to streamline SOC operations. Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent experience. Будет плюсом: Industry certifications Условия: Collaborative, multicultural, and high-growth work environment Private health insurance Access to gym, pools, and wellness programs Savings on expenses Language classes Office breakfasts and organic fruit Exclusive discounts on meals Free coffee and tea Pet-friendly environment #J-18808-Ljbffr