Trabajos Seguridad en RosasCrear alertasSin experiencia

Hola, quiero alguien que me ayude a cambiar la cerradura de la puerta principal de mi casa.La cerradura actual no funciona bien y quiero una solución fiable, preferiblemente con cerrojo de seguridad y instalación en marco existente.El trabajo incluye medir, quitar la cerradura vieja, instalar la n

Senior Network Security Architect En Exdesis incorporamos un/a Senior Network Security Architect con experiencia en seguridad de redes y criptografía para liderar iniciativas de evaluación de riesgos criptográficos y transición hacia tecnologías de criptografía post-cuántica (PQC).Requisitos:

Global Security Architect Purpose of the role Infront builds and operates financial technology products for banks and asset managers across thirteen countries, on a technology estate that has grown by acquisition.Today, security is built in product by product: encryption, authentication, secrets han

Lead Security Architect (70-85k) ¿Te apasiona diseñar la estrategia tecnológica del futuro y garantizar que la seguridad sea la columna vertebral de la transformación digital? Si eres un profesional visionario capaz de proteger grandes ecosistemas tecnológicos sin frenar el ritmo de negocio, ¡

Horario de lunes a viernes, opción de primeras horas de la tarde. La idea es recogerlos de la escuela, ayudarles con tareas ligeras y supervisar un rato en casa hasta que regrese alguno de los padres. Si es posible, agradecería una breve orientación sobre actividades educativas o lúdicas para ma

Busco una persona responsable y cariñosa para cuidar a mi hija de 6 años después de la escuela.Tareas: supervisión ligera, ayuda con deberes, merienda y juego seguro en casa o en el vecindario hasta que llegue un familiar.Preferible experiencia previa en cuidado de niños y permiso de conducir o

El/la niñero/a se encargaría de la merienda, ayudar con deberes ligeros, juegos educativos y garantizar la seguridad. Busco una persona de confianza para cuidado puntual de mi hijo de 5 años. Ofrezco flexibilidad de horario y una pequeña compensación por hora.

La tarea incluye ir y venir del colegio, ayudar con la merienda, supervisión de deberes ligeros, juego y actividades seguras en casa o en parque cercano. Preferible experiencia en atención a niños, paciencia y buenas referencias. Busco una persona responsable para cuidado y supervisión de mi hij

Busco una persona de confianza para cuidar a mi hijo de 6 años después de la escuela en días laborables. Idealmente, alguien con experiencia en educación infantil y disponibilidad de 16:00 a 18:00, con flexibilidad ocasional para días de salida de colegio.

Quieres trabajar en las mejores empresas, nacionales e internacionales, como experto/a en Ciberseguridad? Desde EIP International Business School, buscamos jóvenes talentos con gran potencial para impulsar su carrera en uno de los sectores con mayor demanda profesional.

Apeiron Sumus is seeking a Solution Assessment Consultant who speaks Portuguese to join our team focused on Microsoft technology services, based in Tenerife or willing to relocate. You will lead the successful execution of Microsoft Azure and Security Solution Assessment projects from start to finish and drive new account opportunities. The ideal candidate is a self-starter with excellent time-management and problem-solving abilities, thrives in fast-paced environments, and has Microsoft #J-18808-Ljbffr

Senior Technology and Security Auditor In Alcobendas, MD, ES, we are looking for a Senior Technology and Security Auditor. This Full time on site position offers great opportunities for career growth. At Euronet, we don't just build solutions - we shape the future of how the world moves money as a global leader in payments processing and cross-border transactions. From mobile wallets and card issuing to real-time payment platforms, our products drive digital transformation in 160+ countries. Your life @Euronet: As a #Euronetter, you will be part of a truly human-centered culture built on trust, respect and cooperation. Your contributions will be recognized, and your growth supported through meaningful career development opportunities. We are currently seeking an experienced technology or security auditor to join our growing Corporate Internal Audit organization. If you enjoy identifying and evaluating technology and security risks across several technologies and infrastructures, providing thoughtful leadership and working directly with application developers, security engineers and technology process owners, this role is for you. Perks & Benefits That Matter A genuine feeling of being a valued member, part of a truly multinational matrix organization. Become part of a team with a true team spirit, ambitious goals and fun to work with. Enjoy autonomy and flexibility. Private Healthcare (option to be deducted from your gross salary). Voucher meal. Euronet Employee Stock Purchase Discounted Plan (ESPP). How You’ll Make an Impact Lead the planning and execution of General IT Controls audits in close collaboration with business process owners and our external auditors. Drive the growth and implementation of the company’s security and operational audit programs. Facilitate the identification of information technology and security risks and assess the design and implementation of the internal controls framework throughout the organization by partnering with segment leaders and process owners. Serve as a subject matter expert for SOX general IT and ISO27001 processes and provide clear and consistent guidance to IT and security process owners for the effective identification of control requirements and mitigation of related risks. Participate in the pre-deployment evaluation of internally developed applications and tools. Prepare audit workpapers, including flowcharts, narratives, control design evaluations and substantive testing. Prepare and present accurate and timely written audit findings and recommendations to process owners and senior management. Collaborate with process owners to ensure the timely remediation of action plans. Coordinate the follow-up, and remediation testing of technology and security audit findings. Partner with internal and external stakeholders to build strong relationships and support the coordination of internal risk assessments and internal audits. Assist with ad-hoc operational reviews and or process assessments, including internal investigations and other management requests. Assist in the ongoing development and integration of the company’s data analytics and robotics audit program. Assist with the recruiting, onboarding, and ongoing development of Internal Audit resources. What Makes You a Great Fit 3-6 years of relevant work experience in public accounting or internal audit with emphasis on General IT Controls and security testing. Experience planning and performing SOX 404 General IT Controls audits. Bachelor’s degree in finance, accounting, information systems management or computer science. Experience working with a variety of technologies, security tools and system development methodologies. Relevant certifications including CPA, CISA, CIA, ISO27001 lead auditor, NIST CSF LI, etc. International and/or financial services industry experience, including experience designing and assessing technical controls. Experience working directly with internal and external auditors. Fluent English required, other languages a plus. The ability to travel domestically and internationally - 20%. What Will Help You Thrive Excellent quantitative, problem solving and analytical skills. Excellent communication skills; written, oral and presentation. Outstanding time/project management skills and demonstrated interpersonal skills. Including the ability to work independently in a hybrid/remote work environment. At Euronet, we are an Equal Opportunity Employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, gender identity, national origin, age, disability status, genetic information, protected veteran status, or any other characteristic protected by law. #J-18808-Ljbffr

CrowdStrike’s CTO Labs seeks a Manager to lead data scientists at the intersection of ML, Big Data, and security. You will guide researchers and engineers to advance threat detection and AI-driven security capabilities. You’ll mentor a team, set technical standards, and drive ML initiatives from research to production while collaborating across security, engineering, and product teams. #J-18808-Ljbffr

OUR MISSION UNITES US "Making the world a safer and more secure place." It’s our mission, plain and simple. It drives everything we do – from research to client work to community involvement. And it unifies our global team into an elite force with integrity, fierce passion, and relentless creativity that doesn’t just "push the envelope" or "think outside the box." We shred the envelope, crush the box, and we have fun doing it. We are always looking for people who share our mission to join us. About IOActive IOActive, a trusted partner for Global 1000 enterprises, provides research-fueled security services across all industries. Our cutting‑edge cybersecurity teams provide highly specialized technical and programmatic services including full‑stack penetration testing, program efficacy assessments, and hardware hacking. IOActive brings a unique attacker’s perspective to every engagement to maximize cybersecurity investments and improve the security posture and operational resiliency of our clients. Founded in 1998, IOActive is headquartered in Seattle with global operations, including state‑of‑the‑art hardware hacking labs in Seattle, WA, Madrid, Spain and Cheltenham, UK. About The Role The Senior Consultant, Application Security is a senior technical practitioner in IOActive’s Application Security practice, with secure code review as the central specialty.[AM1] [AM2] The role centers on deep manual code audit work across web and systems languages, paired with application penetration testing, threat modeling, and Secure Development Lifecycle (SDLC) advisory engagements. Code review engagements at IOActive span the full landscape: source code reviews on production codebases for enterprise web applications, mobile backends, embedded systems, and cryptographic implementations; application penetration testing against web, API, and mobile targets; threat modeling for new product designs; and SDLC advisory work helping clients integrate security into their development processes. The Senior Consultant brings particular depth in code review and broad competence across the adjacent work. What You’ll Do Engagement Delivery — Code Review (primary, ~50–60%) Lead manual source code reviews on complex production codebases spanning web applications, mobile backends, APIs, and embedded systems Identify vulnerability classes ranging from common (injection, authentication and authorization flaws, SSRF, XSS, deserialization) to nuanced (race conditions, deserialization gadgets, cryptographic implementation flaws, business logic vulnerabilities, architectural weaknesses) Author findings reports that developers can act on: clear remediation guidance, working proof‑of‑concepts where appropriate, and architectural recommendations beyond the immediate fix Lead client developer workshops to explain findings and patterns, helping teams build security resilience rather than just fixing the listed issues Engagement Delivery — Adjacent Application Security Work Application penetration testing across web, API, and mobile targets, particularly where engagements span code review and dynamic testing Threat modeling on new product designs and existing systems using STRIDE, attack trees, or equivalent frameworks Secure design reviews of architecture, authentication systems, cryptographic implementations, and inter‑service communication SDLC advisory engagements: helping clients integrate code review, threat modeling, and security testing into their development lifecycle (CI/CD, pull‑request workflows, developer training) Client Engagement Serve as the senior technical voice in engagement status meetings, client workshops, technical deep‑dives, and developer training sessions Build trusted technical relationships with client engineering leadership, AppSec teams, and security architects Translate technical findings for two distinct audiences: developers who need to fix the issue, and security leadership who need to understand the business risk and pattern Support pre‑sales conversations with technical credibility — scoping calls, capability discussions, and proposal input Practice Contribution and Mentorship Mentor junior and mid‑level consultants in code review methodology, vulnerability research, and client engagement — even without direct reporting authority Contribute to IOActive’s code review playbooks, tooling, methodologies, and report templates Identify opportunities to extend IOActive’s AppSec capability — new tooling, target stacks, research directions, or service offerings Collaborate with adjacent practices (Red Team, Hardware/Silicon, Advisory) on composite engagements Research and Market Presence Contribute to IOActive’s application security research — vulnerability discovery, novel attack techniques, framework‑oriented findings Build personal profile in the application security community: conference talks (Black Hat, DEF CON, OWASP Global, BSides, regional AppSec events), published research, working group participation Represent IOActive in AppSec industry conversations, OSS security efforts, and customer advisory engagements as opportunities arise What You’ll Bring Experience and Background 5+ years in offensive security services, with at least 2–3 years focused on application security and source code review Hands‑on engagement delivery across multiple AppSec disciplines — code review, application penetration testing, threat modeling, or SDLC consulting Deep code review expertise in at least two of: JavaScript / TypeScript (Node.js, modern frontends), Python (Django, Flask, FastAPI), Java (Spring, J2EE), C# / .NET (ASP.NET, Core), C / C++, Rust, GoLang. Working competence in additional languages a strong plus. Working knowledge of common framework patterns, ORM behavior, authentication and authorization libraries, cryptographic libraries, and the security pitfalls particular to each Familiarity with vulnerability classes Nice to have - Familiarity with relevant standards and frameworks: OWASP ASVS, NIST SSDF, BSIMM, SAMM[AM3] [AM4] Capabilities Strong technical credibility and the comfort to operate as the senior voice on engagements Excellent written communication — you produce reports that developers act on rather than file Strong verbal communication, with the ability to both present as a subject matter expert in technical discussions and deliver complex concepts, results, etc. to a general audience Comfort moving between languages and stacks — specialists who insist on a single technology stack don’t fit this role Collaborative mindset — AppSec engagements typically involve close coordination with delivery teams and client developers Genuine curiosity about how systems work, and patience for reading code carefully — code review consultants who succeed at IOActive are the ones who find the work interesting rather than tedious Credentials Relevant bachelor's degree or equivalent experience Relevant industry certifications strongly preferred: OSCP, OSWE, GWAPT, CSSLP, GWEB, or equivalent application‑security focused credentials What We Offer A chance to work with an industry leader in cyber security Access to world‑class technical teams and research A high‑energy, collaborative team that values innovation Flexibility—work remotely or from the office as needed Opportunities for travel Competitive compensation and performance‑based incentives US base salary range $75,000 - $175,000, depending on experience level, background and location. Let’s talk! We’d love to hear from you. Why IOActive We have over 25 years of experience that’s established and stable; yet high‑growth with the energy, passion and dynamic work environment of a startup. We are renowned for our innovation and thought leadership within our high‑profile, cutting edge space. We're one of "the good guys" doing crazy cool stuff to thwart bad guys in a critically important business, social and political arena. Our work is great fun with great importance. Above all else, we value our people and our customers. Relationships matter. IOActive is an equal opportunity employer that is committed to diversity and inclusion in the workplace. We prohibit discrimination and harassment of any kind based on race, color, sex, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws. This policy applies to all employment practices within our organization, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. IOActive makes hiring decisions based solely on qualifications, merit, and business needs at the time. #J-18808-Ljbffr

Security Solutions ArchitectApplylocations: Bilbaotime type: Full timeposted on: Posted 8 Days Agotime left to apply: End Date: September 28, 2026 (30+ days left to apply)job requisition id: J017440Security Solutions ArchitectLocation:BilbaoAt Sibelco, we advance life through materials. For over 150 years, we’ve been a trusted leader in sourcing, transforming, and distributing specialty industrial minerals. Our work powers progress across industries as diverse as glass, ceramics, construction, coatings, polymers, and water purification. Beyond our materials, we’re proud of our commitment to sustainability, innovation, and empowering people from all walks of life to thrive and make a meaningful impact.Are We the Perfect Match?At Sibelco, we believe building a successful career is a two-way journey. We’re looking for individuals who share our values and vision, just as much as you’re seeking a company that aligns with your aspirations. Together, we can shape the future.Job Description:Are you passionate about designing secure digital solutions and enabling innovation through cybersecurity? Join Sibelco as a Security Solution Architect and help shape the security foundations of our global IT and OT landscape.We are looking for an experienced Security Solution Architect to provide security architecture guidance across projects, platforms, and technology domains. In this role, you will ensure security is embedded from the earliest design stages, translating security principles into practical architecture decisions that support business objectives while protecting our digital ecosystem.Working closely with Enterprise Architecture, Cloud, Identity, Workplace, Engineering, Operational Technology teams, and external partners, you will act as a trusted advisor, driving security-by-design across hybrid environments while supporting the adoption of modern technologies, including cloud and AI solutions.In the role, your responsibilities will include but are not limited to: Embedding security-by-design principles across IT and OT projects, ensuring secure architecture from the earliest design phase. Reviewing solution architectures across cloud, workplace, network, identity, application, and OT domains, providing recommendations aligned with Sibelco's security standards. Designing and validating Zero Trust architectures, secure access models, network segmentation, firewall configurations, and cloud security controls. Supporting the secure adoption of emerging technologies, including AI solutions, by assessing architecture, data protection, and regulatory compliance.* Collaborating with cybersecurity, infrastructure, and engineering teams to identify security improvements, develop reusable architecture patterns, and contribute to the Digital & Cybersecurity roadmap.To be successful in this role, you have: 5–8+ years of experience as a Cybersecurity or Security Solution Architect, with expertise across cloud, application, enterprise, and OT security. Strong knowledge of Zero Trust, network security, cloud security, identity security, data protection, and secure application and integration architectures. Experience designing secure architectures for hybrid cloud environments and working with technologies such as micro-segmentation, firewalls, SSE, and SASE. The ability to translate complex security risks into practical technical requirements and clear business recommendations while effectively managing stakeholders and third-party partners.* Excellent communication skills, a collaborative mindset, and a strong sense of ownership to drive secure innovation across a global organization.Join Sibelco and help build a secure digital future where innovation and cybersecurity go hand in hand. Apply today and become part of a global team committed to protecting and enabling our business through world-class security architecture.#LI-HybridEmployee Type:PermanentWhy Join Us?Sibelco is more than a workplace—it’s a community that encourages growth, innovation, and collaboration. Here’s what you can look forward to when you join our team:* Meet Our People: Careers* Learn About Our Recruitment Process: Learn More* Discover Our Sustainability Goals: Sibelco prioritiesWe also welcome applications from all backgrounds and are committed to providing reasonable adjustments to support you through the selection process.How to ApplyFollow us on LinkedIn, Instagram, Twitter/X and Facebook to learn more about life at Sibelco. Submit your application in the Apply option. #J-18808-Ljbffr

AXA Group Operations is seeking a forward-thinking AI CISO to shape the future of AI security at a global scale, protecting models, data, and infrastructure from emerging threats while fostering responsible AI innovation. The role leads the holistic AI security program, establishes governance, risk management, and security controls to ensure secure and trustworthy AI across AXA's AI initiatives, with emphasis on ecosystem collaboration and regulatory alignment. #J-18808-Ljbffr

Search AI Company, a leading AI-powered search platform, is seeking a senior engineer for the Prism team to turn raw security data into a trustworthy picture of users, hosts, and services in a customer's environment. You will help build the Entity Store, entity risk scoring, and data maintainers used by analysts to understand what happened and what to investigate next. You will own small-to-medium projects from design through production, write high-quality TypeScript/React code with Node.js #J-18808-Ljbffr

Senior Security Engineer – Sector Espacio y Defensa | Madrid (Presencial) Eres un/a ingeniero/a de seguridad senior con un perfil técnico sólido y visión global. Aportarás tu experiencia en ciberseguridad a sistemas críticos que manejan información clasificada, y sabrás defender tus análisis ante los más altos niveles de decisión, en un entorno internacional y altamente confidencial. Garantizar la seguridad de sistemas de información que manejan información clasificada. Definir y validar arquitecturas de seguridad para sistemas no expuestos a internet. Asesorar sobre soluciones de cifrado y seguridad de las comunicaciones por satélite. Realizar análisis de riesgos técnicos en entornos de defensa y espacio. Participar en reuniones de alto nivel con actores nacionales e internacionales. Mínimo 5 años de experiencia demostrable en seguridad de sistemas (más de 10 años muy valorado). Habilitación Personal de Seguridad (HPS) en vigor. Inglés fluido , imprescindible para reuniones internacionales de alto nivel. Experiencia en entornos de defensa, espacio o información clasificada. Disponibilidad para viajar. Valorable: conocimientos en criptografía (incluido cifrado post-cuántico), electrónica, tecnologías satelitales, cloud. Modalidad 100 % presencial, en Madrid. Crecimiento personalizado: te ayudamos a construir un plan de formación y certificación alineado con tus objetivos profesionales a través de nuestra SquadExperience. Desarrollo de expertise: participa en eventos internos como nuestros webinars MixYourTalent y sesiones mensuales de CTF. Visibilidad: asiste a conferencias del sector y contribuye a nuestro blog técnico #TheExpert. Cultura : disfruta de un ambiente dinámico y cercano, con after-works y encuentros de equipo. #J-18808-Ljbffr

Extia Group seeks an experienced DevSecOps & Cloud Security Engineer to lead protection of our clients’ global cloud infrastructure (AWS and Azure) and ensure confidentiality, integrity, and availability across multi-cloud environments. You will apply a true DevSecOps culture, implement automation, and run real-time incident response, collaborating with development and operations teams across Europe in a hybrid work model. #J-18808-Ljbffr

An international technology company in Madrid is seeking a Network Security Architect to design and implement secure network architectures. The ideal candidate will have 3+ years in cybersecurity and a strong understanding of network security concepts. This role offers a hybrid working model and excellent development opportunities. Essential qualifications include a Bachelor's/Master's in Cybersecurity and preferred certifications like CISSP and Cloud certifications. #J-18808-Ljbffr

NTT DATA is seeking a Senior Associate Collaboration Technical Services Systems Integration Specialist to support client solutions aligned with SLAs. The role involves configuring installations, handling break/fix events, and learning toward professional certifications while expanding business knowledge. You will develop expertise in security controls (SIEM/Firewall/EDR/IDS/IPS) and cloud services (AWS/Azure/GCP), contributing to technical delivery and client satisfaction in a hybrid work #J-18808-Ljbffr

Bringing with us the winning SuccessDay values, with our people and customers at the heart of everything we do, we are looking for our next Workday Consultant to join us on this exciting journey. You can only be considered for this role if you are based in one of our existing locations : Spain, UK, Netherlands, Belgium, Germany. Role Description: As a Workday Security Consultant, your main responsibilities will include configuring, maintaining, and optimising Workday security to meet the specific needs of our clients. You will work closely with customers to understand security requirements, design solutions, and implement appropriate access controls. The Security Consultant will be responsible for managing security groups, domain security policies, business process security policies, and resolving complex security issues. As well as their technical expertise, the consultant can effectively lead a security workstream and independently advise AMS clients, offering proactive recommendations on security best practices, access management, and compliance. Strong communication skills, technical expertise in Workday Security, and a customer-focused approach are essential for success in this role. Requirements: A minimum of 3 years’ experience as a Workday Security Consultant Strong knowledge of Workday security configuration, including security groups, domain security policies, and business process security policies Existing Workday Security certification preferred Experience within Workday implementation projects and/or AMS assignments Must be able to communicate effectively in a client-facing position Ability to manage schedules effectively and work across multiple projects where necessary Ability to manage stakeholders and provide proactive security advice What do we offer: We value transparency, honesty, winning attitude and do business fair and square. We are always open to our clients and ourselves. SuccessDay is one big family, where we listen and value each other’s opinion. After a long hard day of work, we know how to play hard. No one gets left behind, except maybe in our FIFA rankings. Of course, this is not the only thing you can expect from us. In fact, we also offer, among other things: A fun and fair workplace with our employees at the heart of everything we do; A team of great colleagues within an informal organization; #J-18808-Ljbffr

Deel is seeking a Senior Platform Security Engineer to own security architecture across its cloud-native platform. You will lead security design, tooling, and enforcement throughout the SDLC, focusing on AWS IAM, container security, and supply chain integrity. The role requires deep knowledge of cloud and application security, threat modeling, and experience steering cross-functional teams to reduce risk while enabling rapid product delivery. #J-18808-Ljbffr

SentinelOne is seeking an Offensive Security Researcher to proactively study new attack techniques and refine our detection capabilities. You will design detections and write behavioral signatures while building tools for assessment and automation. Join a team that drives AI-driven security across endpoints and cloud, contributing to industry-leading protection used by hundreds of Global2000 enterprises. #J-18808-Ljbffr

Making Science is seeking an experienced cybersecurity professional to join its global team. You will monitor security events, lead incident response, and refine detection rules across cloud and SaaS environments. The role spans multiple countries and requires strong English and Spanish communication. You’ll collaborate with partners to assess risks, improve security posture, and ensure ISMS alignment with ISO/IEC 27001:2022 and GDPR, while enabling secure AI-driven marketing platforms. #J-18808-Ljbffr

SEGULA Technologies busca un Ingeniero Dev Ops Senior para participar en proyectos de defensa y seguridad en Alcobendas. Diseñarás y mantendrás infraestructuras con Ia C, integrarás contenedores y aplicarás prácticas de seguridad y observabilidad. Colaborarás con equipos de desarrollo para optimizar despliegues y garantizar la calidad operativa. La posición requiere experiencia en Terraform, Ansible, Kubernetes/Open Shift y Helm Charts, con interés en entornos de alta seguridad y cumplimiento. #J-18808-Ljbffr

Continue to make an impact with a company that is pushing the boundaries of what is possible. At NTT DATA, we are renowned for our technical excellence, leading innovations, and making a difference for our clients and society. Our workplace embraces diversity and inclusion - it’s a place where you can continue to grow, belong, and thrive. Your career here is about believing in yourself and seizing new opportunities and challenges. It’s about expanding your skills and expertise in your current role and preparing yourself for future advancements. That’s why we encourage you to take every opportunity to further your career within our great global team. Your day at NTT DATA The Director, Information Security Governance, Risk and Compliance is a leadership role that supports the company by way of protecting its brand, warranting compliance to its regulatory and contractual obligations. Key responsibilities: Oversees the development, evaluation and implementation of Information Security Policy, Standards, and Guidelines. Oversees information security risk assessments, TRA, TFA and policy compliance reviews and supports the development and operational effectiveness of IT security controls. Manages and monitors Group risk in the company preferred risk management solution, ensure that risk is assessed, allocated and assigned, managed, monitored, and treated appropriately. Develops, scopes and discusses security compliance review schedules, reviews risk registers, risk and policy exceptions and authorization and performs threat and risk assessments of new technologies and vendors. Documents improvement in service design and ensures that the required security plan is developed and reviewed. Reviews service level and business requirements to develop service methodologies and an information security policy, assessments and methodologies. Advises on the reporting requirements and ensures the overall implementation of the ISM policy in service operation. Assists with the design and operation of related compliance with both internal security policies and application laws and regulations. Ensures that appropriate security assessment have been carried out so that the ISMS security strategy is developed and aligned to service and operational requirements. Develops an ISMS security audit management strategy that is aligned to service and operational requirements and develop information security design criteria and templates. Considers technical requirements and implications of service and business levels and develop the ISMS security review criteria, verifying that the solution design meets ISMS, client, and regulatory requirements. Evaluates the adequacy, implementation, maintenance of operational processes, guides and drives the implementation of process controls to ensure alignment to ISMS obligations. When deviations occur, ensures root cause is identified and treated. Monitors and holds accountable managers to implement prevention and remediation to ensure ongoing compliance to ISM policy. To thrive in this role, you need to have: Relevant people management skills. Significant understanding of complex inter-relationships in an overall system or process. Excellent interpersonal and consultative skills with the ability to map business needs to technology solutions. Ability to discuss and report technology and information security risk with non-technology and executive business stakeholders. Ability to display analytical thinking and a proactive approach. Team player with the ability to display consistent client focus and orientation. Ability to develop, define and articulate ISM strategies. Excellent strategic thinking and decision-making abilities. Ability to plan and organize, with good project management skills. Significant understanding of security risk management, operational processes and controls - End-to-end information security risk lifecycle management. Significant knowledge of information security management and policies, risk management and risk frameworks. Maintains up-to-date knowledge of security threats, countermeasures, security tools, and network technologies. Significant knowledge of technological advances within the information security arena. Academic qualifications and certifications: Bachelor’s degree or equivalent in Information Technology or Computer Science degree or related field. Security certifications such as CISA, CRISC, COBIT, IIA or equivalent preferred. Certifications such as Lead audit/Implementer - ISO 27001, SOC TSP preferred. Required experience: Significant experience gained within the Technology Information Security Industry. Significant experience with Operational Risk Management and Enterprise Risk Management. Significant experience with Enterprise Risk Management solutions (i.e., ServiceNow GRC or similar). Significant experience in technical Information Security consulting, architecture, design, implementation. Significant experience managing and leading Information Security, Governance, Risk and Compliance teams preferably gained within a similar organizational environment. Workplace type: Hybrid Working Equal Opportunity Employer NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Accelerate your career with us. Your career here is about believing in yourself and taking on great opportunities and new challenges. It’s about growing your skills and expertise in your current role and preparing yourself for the future. That’s why we encourage you to take every opportunity to grow your career within our great global team. #J-18808-Ljbffr

KPMG España busca un/a Senior Consultant con experiencia en Seguridad Cloud y Arquitectura de seguridad para entornos on premises y en la nube. Se valorará trabajo en equipo y claridad en comunicaciones técnicas, con formato híbrido en Madrid. Se requiere 3 a 5 años de experiencia en seguridad cloud, y capacidad para diseñar, auditar y optimizar infraestructuras de seguridad, con inglés alto. Ofrecemos oportunidades internacionales, formación continua y plan de carrera. #J-18808-Ljbffr

Amaris Consulting is seeking a Cybersecurity Consultant specializing in Threat & Vulnerability Management and Cloud Security (Azure). The role includes leading remediation, prioritizing findings, and reporting via Power BI within the European Cybersecurity Directorate. You will work in a multinational setting, with hybrid work options (Madrid). Fluent Spanish and English are preferred; Azure certifications are a plus. #J-18808-Ljbffr

Desde BEIGAR buscamos un/a Responsable Técnico/a de Producto para incorporarse a una compañía líder en proyectos de innovación y ciberdefensa. Buscamos un perfil con sólida experiencia técnica y capacidad para coordinar equipos multidisciplinares, liderando el desarrollo de productos innovadores desde un enfoque técnico y organizativo. La persona seleccionada trabajará estrechamente con arquitectura de producto y equipos de desarrollo, participando en la planificación, seguimiento y evolución de soluciones tecnológicas de alto valor añadido dentro del ámbito de la ciberseguridad. Modalidad híbrida en Madrid. Responsabilidades Liderar técnicamente el desarrollo de productos de innovación. Coordinar equipos multidisciplinares implicados en el proyecto. Trabajar junto al Arquitecto de Producto para asegurar la correcta evolución de la solución. Planificar desarrollos y colaborar en la gestión y priorización del backlog. Realizar el seguimiento diario de los desarrollos y asegurar el cumplimiento de los objetivos técnicos. Gestionar recursos, esfuerzos, riesgos y posibles desviaciones del proyecto. Coordinar entregables e hitos técnicos. Impulsar el diseño de arquitecturas, prototipos y pruebas de concepto alineadas con la estrategia tecnológica. Favorecer la colaboración entre los distintos equipos técnicos y funcionales. Participar en la mejora continua de procesos y metodologías de desarrollo. Beneficios Incorporación estable mediante contrato indefinido. Modalidad híbrida en Madrid. Participación en proyectos de innovación tecnológica y ciberseguridad de alto impacto. Desarrollo profesional dentro de un entorno altamente especializado. Formación continua y posibilidades de crecimiento. Incorporación inmediata. #J-18808-Ljbffr

Yuno is hiring a Security Compliance Engineer to drive security and privacy programs across AWS and GCP. You will translate ISO, SOC 2, and PCI DSS requirements into auditable technical controls and work with Engineering to implement secure cloud solutions for a global payments platform. You will build internal security tooling in Python and support privacy initiatives to enable compliant operations worldwide. This role offers remote work from anywhere with a focus on fintech compliance. #J-18808-Ljbffr

Buscamos un Cloud Security Specialist para incorporarse a un proyecto dentro del sector banca, especializado en seguridad cloud y administración de herramientas de ciberseguridad. La posición está orientada a un perfil técnico, con experiencia en la configuración, administración y gestión de soluciones de seguridad en entornos cloud, especialmente sobre AWS. Funciones principales Configuración y administración de herramientas de seguridad cloud. Gestión y mantenimiento de soluciones de seguridad en entornos AWS. Monitorización y seguimiento de los controles de seguridad. Análisis y resolución de incidencias relacionadas con seguridad cloud. Aplicación de medidas y buenas prácticas de seguridad. Colaboración con equipos técnicos para garantizar la correcta protección de los entornos cloud. Identificación de posibles mejoras en las herramientas y configuraciones de seguridad. Requisitos imprescindibles Mínimo 3 años de experiencia en posiciones relacionadas con Cloud Security. Experiencia práctica en seguridad en AWS. Experiencia en configuración y administración de herramientas de seguridad. Conocimientos generales de ciberseguridad en entornos cloud. Capacidad de análisis y resolución de problemas. Inglés B2. Condiciones Perfil: Cloud Security Specialist. Sector: Banca. Ubicación: 100 remoto. Guardias: 1-2 días al mes en remoto. Inglés: B2. AWS, Seguridad, Cloud #J-18808-Ljbffr

Ayesa Digital está buscando un Red Team Operator para unirse al área de Seguridad Ofensiva, dentro de la línea de Simulación Adversarial. El candidato participará en ejercicios de simulación adversarial, emulación Purple Team y en la evasión de defensas para evaluar detección y respuesta. Se requiere experiencia en pentesting y operaciones Red Team, con conocimiento de herramientas como Cobalt Strike, Sliver o Havoc, y experiencia en Active Directory y entornos Cloud. #J-18808-Ljbffr

aDvens busca un profesional de Ciberseguridad con interés en Ciberinteligencia (CTI) para colaborar en su equipo Defensivo junto al SOC. Te beneficiarás de ejercicios de Purple Team y gestión de inteligencia de amenazas para operaciones diarias. La posición exige capacidad analítica, redacción de informes y buen inglés. Se valora experiencia en CTI, emulación de adversarios y scripting para automatización. Modelo de trabajo híbrido y oportunidades de desarrollo. #J-18808-Ljbffr

Axpo Group in Madrid is seeking an Application Security Lead to govern security amid emerging technologies. You will design security frameworks, guardrails, and controls for AI platforms and ensure compliance with GDPR, EU AI Act, and NIS2. Strong cloud and DevSecOps foundations, plus English fluency, are essential. The role involves risk assessments, security reviews, and awareness/training initiatives, with hybrid work options and Madrid office presence. #J-18808-Ljbffr

At Capitole Consulting, we keep growing and we’re looking for a Cloud Security Architect to join an international project focused on designing, securing and continuously improving enterprise Cloud environments. If you enjoy combining Cloud Architecture, Security and hands-on technical problem solving, this could be a great next step for you. What are we looking for? Strong experience with at least one major Cloud platform: AWS, Azure or GCP Solid background in Cloud Security Architecture, security principles and governance Experience with CNAPP solutions , ideally Wiz or similar platforms Experience performing Root Cause Analysis (RCA) and troubleshooting complex environments Basic scripting skills with Python, PowerShell or Bash Experience collaborating with Infrastructure, Security, DevOps or Platform Engineering teams German would be a plus What will you be doing? You’ll help design and review secure Cloud architectures, assess and improve Cloud Security posture, identify and mitigate risks, work with CNAPP solutions, perform technical RCA and collaborate with engineering teams to implement security best practices across enterprise environments. What do we offer at Capitole? Flexible working hours Private medical insurance fully covered by Capitole Employee discounts through Club Capitole Monthly follow-up and continuous feedback Team Buildings, Summer Party, Christmas Dinner and much more Internal tech communities to share knowledge and keep growing Interested in Cloud Security, CNAPP/Wiz and Cloud Architecture and looking for your next challenge? #CloudSecurity #CloudSecurityArchitect #CyberSecurity #CloudArchitecture #CNAPP #Wiz #AWS #Azure #GCP #DevSecOps #CloudComputing #Hiring #TechJobs #CapitoleConsulting The employee will adhere to information security policies: -Will have access to confidential information related to Capitole and the project they are working on. -Must comply with the security policies and internal policies of the company and the client. #J-18808-Ljbffr

Clinical Monitoring Analyst (Cluepoints) - Remote London, United Kingdom Budapest, Hungary Reading, Berkshire, United Kingdom Bloemfontein, South Africa Dublin, Ireland Centurion, South Africa Barcelona, Spain Sofia, Bulgaria Madrid, Spain Full time This unique role within IQVIA lends itself to a Lead programmer on Cluepoints called Centralized Monitoring Analyst (CMA) with strong communication and organisation skills. Having experience with SAS programming is necessary. This role is part of a sponsor dedicated project where you will be working with the client directly to manage deliveries. The CMA contributes to the execution of the Centralized Monitoring process by performing the setup, programming and refresh(es) of the Centralized Monitoring platform, according to the study-specific Centralized Monitoring Plan (CMP). Main responsibilities include: Supports the Centralized Monitoring Lead (CML) in the development of the fit-for purpose CM strategy by contributing to the identification of the relevant CM elements to be implemented for the study (Quality Tolerance Limits (QTL), Key Risk Indicators, data visualizations and Data Quality Assessments) Setup/Program QTL, KRI and Data Quality Assessments according to the study CMP Refresh the Centralized Monitoring Platform at predefined frequency to enable signal identification Generate and maintain the Centralized Monitoring Platform specifications document and file it in eTMF Review and understanding of protocol is key Understand the data sources for the study, the data transfer specifications and the data structure Execute and document peer-review of CM platform setup done by other CMA colleagues Experience: At least 3 years relevant experience in the area of pharmaceutical research and development or related field preferably in centralized Monitoring, data management, and/or biostatistics 2-3 years SAS experience including macro language Knowledge/ experience working on Cluepoints Ability to work in an autonomous way and engage with relevant stakeholders to execute activities related to study level centralized monitoring process. Ability to understand basic statistical analysis concepts and to interpret their outcome. Ability to maintain confidentiality of data and information during interactions with staff at all levels Ability to work with limited close supervision. Demonstrated communication, interpersonal, organizational and problem-solving skills High levels of initiative, drive and commitment. Prior experience in a Data Management related field is required Experience with relational databases, preferably Clinical Data Management and EDC Systems Experience communicating with all levels of personnel and participating in collaborative work team (locally and globally). Advanced knowledge of federal regulations, Good Clinical Practice, and Good Clinical Data Management Practices. Excellent command, both verbal and written, of English This role is not eligible for UK visa sponsorship IQVIA is a leading global provider of clinical research services, commercial insights and healthcare intelligence to the life sciences and healthcare industries. We create intelligent connections to accelerate the development and commercialization of innovative medical treatments to help improve patient outcomes and population health worldwide. Learn more at is committed to integrity in our hiring process and maintains a zero tolerance policy for candidate fraud. All information and credentials submitted in your application must be truthful and complete. Any false statements, misrepresentations, or material omissions during the recruitment process will result in immediate disqualification of your application, or termination of employment if discovered later, in accordance with applicable law. We appreciate your honesty and professionalism. IQVIA is a leading global provider of clinical research services, commercial insights and healthcare intelligence to the life sciences and healthcare industries. We create connections that accelerate the development and commercialization of innovative medical treatments. Everything we do is part of a journey to improve patient outcomes and population health worldwide. To get there, we seek out diverse talent with curious minds and a relentless commitment to innovation and impact. No matter your role, everyone at IQVIA contributes to our shared goal of helping customers improve the lives of patients everywhere. Thank you for your interest in growing your career with us. EEO Minorities/Females/Protected Veterans/Disabled #J-18808-Ljbffr

DWS Group in Madrid is seeking a Cyber Security Risk, Controls & Assurance, VP to lead the AI security risk framework and assurance programs in a rapidly evolving threat landscape. You will map technical vulnerabilities to policies, standards, regulatory expectations, and audit evidence; coordinate AI risk assessments and control testing; and support third-party AI security assurance, reporting to the CSO AI Security CoE Lead. This senior role shapes security strategy across the organization. #J-18808-Ljbffr

Syntax is seeking a Global Director of Business AI Cyber Security (m/f/d) in Barcelona, with a remit to own security offerings across the Business AI portfolio. The role collaborates with the Global CISO to define strategy, method ownership, delivery, and roadmaps while leading engagements with the vCISO bench and cross-functional teams. The position requires end-to-end accountability for Business AI security, later transitioning to direct team leadership as demand grows, delivering #J-18808-Ljbffr

Senior Application Security Architect At JLL, we're reimagining how the world's most complex real estate environments are secured, operated, and experienced. The Application Security Architect is a senior individual contributor responsible for bridging application security engineering and enterprise security architecture at JLL. This role designs and owns security architectures for application ecosystems, integrates security into the software development lifecycle (SDLC), and serves as a technical authority on secure design patterns, threat modeling, and Dev Sec Ops practices. Operating at the Senior level, this position independently leads application security initiatives, mentors junior engineers and developers, and partners across engineering, architecture, and business teams to reduce risk and enable secure digital transformation. If you’re a strategic thinker with application security expertise who thrives in a large, dynamic environment and wants their work to have real, visible impact, we want to hear from you. Essential Duties and Responsibilities: Security Architecture & Design Design and maintain security architecture standards, policies, and patterns for enterprise applications, platforms, and cloud-native environments, ensuring alignment with JLL's technology strategy and risk posture. Develop and enforce secure design patterns, reference architectures, and architecture decision records (ADRs) for application security across development teams. Lead security architecture reviews for new and existing applications, evaluating designs against frameworks such as OWASP, NIST, and SANS. Integrate zero-trust principles and defense-in-depth strategies into application architecture to reduce attack surface and support enterprise risk management goals. Dev Sec Ops & Secure Development Lifecycle Define and maintain a standardized set of enterprise application security requirements and produce metrics to report performance against those requirements. Lead threat modeling sessions for new application features and system integrations, producing actionable remediation guidance for development teams. Champion secure coding standards and developer security enablement programs in collaboration with platform and application engineering teams. Risk, Compliance & Stakeholder Engagement Analyze complex security requirements across multiple technology domains and design comprehensive security solutions that address enterprise risk and regulatory compliance obligations. Communicate security architecture designs, risk assessments, and remediation recommendations to technical and non-technical stakeholders across business units. Coordinate security design reviews and approval processes, facilitating alignment between security, engineering, and enterprise architecture teams. Contribute to JLL's application security strategy roadmap, identifying emerging threats and recommending enhancements to the secure development and architecture programs. Mentorship & Team Leadership Provide technical guidance and mentoring to junior security engineers, developers, and architects on application security principles, secure coding practices, and architectural standards. Lead cross-functional security initiatives, driving collaborative approaches to security integration across development and architecture teams. Support secure development training and awareness programs to build security competency across engineering organizations. Required Knowledge, Skills, and Abilities: Technical Knowledge Comprehensive knowledge of application security methodologies, including OWASP Top 10, SANS/CWE, secure development frameworks, and security architecture design patterns. Demonstrated experience designing security architectures for cloud-native environments (AWS, Azure, GCP), microservices, APIs, and containerized workloads. Strong proficiency in Dev Sec Ops practices and tooling: SAST, DAST, SCA, container image scanning, secrets management, and CI/CD security integration. Experience with enterprise security frameworks including NIST CSF, NIST SP 800-53, ISO 27001, and zero-trust architecture principles. Working knowledge of identity and access management (IAM), OAuth 2.0/OIDC, and application-layer authentication and authorization controls. Understanding of cryptography, data protection, encryption, and Public Key Infrastructure Familiarity with threat modeling methodologies (STRIDE, PASTA, or equivalent) and their application to complex distributed application architectures. Knowledge of OWASP: Gen Ai, LLM Top 10, Security Exchange, Ai Exchange a plus Skills & Abilities Ability to analyze complex application architectures and translate security requirements into practical, implementable design solutions. Strong communication skills with the ability to convey technical security risks and architectural recommendations to diverse stakeholders including development teams, business leaders, and enterprise architects. Demonstrated ability to lead security assessments, architecture reviews, and cross-functional security initiatives independently. Proven capability to mentor and guide junior security professionals and developers on secure design practices and security engineering standards. Analytical and problem-solving skills applied to sophisticated security integration challenges with enterprise-wide implications. Ability to balance security rigor with development velocity, enabling secure delivery of digital applications and services. Education & Experience Bachelor's degree in Computer Science, Information Security, Software Engineering, or a related field; equivalent experience considered. 7+ years of experience in information security with a focus on application security engineering, secure software development, or security architecture. Relevant certifications preferred: CSSLP, CISSP, AWS/Azure Security Specialty, OSCP, or equivalent application security or architecture credentials. #J-18808-Ljbffr

Amazon is seeking a Loss Prevention Expert to deliver security as a service to its operational sites across the end-to-end supply chain, protecting people and preventing loss. You will conduct physical security audits, investigate incidents, and collaborate with external security providers to ensure high-quality security services and a smooth customer experience. You will lead and execute loss prevention initiatives, monitor systems, analyze data, and drive improvements while working with local #J-18808-Ljbffr

About the Opportunity Dentons Europe is currently seeking a Information Security Engineer, specializing in Microsoft cloud technologies to play a key role in strengthening and evolving our security landscape. In this role, you will design and implement security controls across cloud and hybrid environments, with a strong focus on Microsoft 365 and Microsoft Azure. You will operate at the intersection of architecture and execution shaping security decisions, guiding technical teams, and ensuring that systems, applications, and integrations meet the firm's security, compliance, and reliability standards. As a trusted advisor and technical authority, you will work closely with Information Security, IT, and business stakeholders across Europe, embedding security into the design and delivery of technology solutions while continuously improving the organization's overall security posture. This is an opportunity to make a visible, enterprise-wide impact in a complex, international environment. Primary Responsibilities Design, implement, and maintain robust security and compliance controls across Microsoft 365, Microsoft Azure, and hybrid environments. Act as a cybersecurity subject‑matter expert for Europe and Country IT teams providing clear, practical guidance on secure design and implementation. Assist in embedding security into application, infrastructure, identity, endpoint, and integration architectures (including APIs and data flows), ensuring alignment with secure development lifecycle practices and architectural standards. Collaborate with architects, engineers, project teams, and business stakeholders to define security requirements as integral part of enterprise initiatives and technology solutions from the outset. Work closely with SOC and CSIRT teams to support incident response activities, including investigation, containment, and remediation, and ensure lessons learned are reflected in improved controls and architecture. Lead end‑to‑end vulnerability management activities, including vulnerability scanning, assessments, penetration testing coordination, and remediation tracking with system owners and technical teams. Identify, assess, and mitigate security risks across cloud and enterprise environments, driving measurable improvements in the firm’s security posture. Provide advanced troubleshooting and technical leadership for complex or high‑impact security issues. Develop and maintain security documentation, standards, reports, and control frameworks. Requirements Minimum 3 years of experience in cloud security or enterprise cybersecurity engineering Advanced expertise in Microsoft Azure security, including at least two of: Defender for Cloud Microsoft Sentinel Infrastructure / Network Security (Iaa S) Application and API security Storage and database security Advanced expertise in Microsoft 365 security, including at least two of: Microsoft Entra ID, identity and access management Microsoft Purview, data protection and compliance Microsoft 365 Defender suite Intune / Endpoint Manager Strong understanding of: Security architecture principles, including Zero Trust, defense‑in‑depth and least privilege Hybrid cloud environments and system integrations Vulnerability management, including analyzing penetration testing and coordinating remediation of results API security and modern integration technologies Scripting and automation skills, e.g., Power Shell, Python or Bash Strong interest in security architecture, with a desire to deepen exposure and grow toward architectural responsibilities Professional Experience Proven experience designing and implementing secure solutions in Microsoft technologies-based enterprise environments Experience working with large‑scale or multi‑country IT environments Solid exposure to security operations, incident response and security tooling Experience collaborating across infrastructure, development and business teams Benefits Remuneration and benefits package will reflect the successful candidates experience and country where hired. Please apply with an English resume #J-18808-Ljbffr

Actual Talent is the talent acquisition consultancy that offers Executive Search, RPO and Talent Solutions. Our purpose is to drive the growth and fulfillment of individuals and organizations. We facilitate individuals in finding inspiring opportunities and help organizations discover professionals who will take them to the next level. We do this through talent acquisition and development solutions that focus on people, diversity and inclusion, innovation, and cutting-edge technology. Sobre la empresa Desde Actual Talent, consultora especializada en atracción y selección de talento, queremos conectar con profesionales de Ciberseguridad IT interesados en desarrollar su carrera en compañías tecnológicas vinculadas al sector energético.. La organización apuesta por la innovación tecnológica, la eficiencia y la seguridad como pilares fundamentales para desarrollar soluciones robustas, escalables y preparadas para los retos de un entorno energético en constante evolución. ¿Cuál será tu misión? Tu misión será contribuir a la protección de los sistemas, infraestructuras y activos digitales de la compañía, identificando riesgos, reforzando los controles de seguridad y ayudando a garantizar la confidencialidad, integridad y disponibilidad de la información. Trabajarás en colaboración con los equipos de IT, desarrollo y operaciones para integrar las mejores prácticas de ciberseguridad en los sistemas, aplicaciones y procesos tecnológicos de la organización. ¿Cuáles serán tus responsabilidades? Seguridad de sistemas e infraestructuras: supervisar y reforzar la seguridad de redes, servidores, sistemas corporativos y entornos cloud. Gestión de vulnerabilidades: identificar, analizar y priorizar vulnerabilidades, coordinando la aplicación de medidas correctivas y preventivas. Monitorización y respuesta ante incidentes: colaborar en la detección, investigación y resolución de incidentes de seguridad. Gestión de riesgos tecnológicos: evaluar riesgos, proponer medidas de mitigación y contribuir a la mejora continua de los controles de seguridad. Seguridad cloud: participar en la implementación de buenas prácticas de seguridad en entornos AWS, Azure o GCP. Políticas y cumplimiento: colaborar en la definición y mantenimiento de políticas, procedimientos y controles de seguridad, tomando como referencia estándares como ISO 27001 y NIST. Colaboración transversal: trabajar con los equipos técnicos para incorporar la seguridad desde las fases iniciales del diseño y durante todo el ciclo de vida de los sistemas. ¿Qué buscamos? Formación en Ingeniería Informática, Telecomunicaciones, Ciberseguridad o titulaciones relacionadas, o experiencia profesional equivalente. Experiencia en ciberseguridad IT, administración segura de sistemas o protección de infraestructuras tecnológicas. Conocimientos sólidos de seguridad de redes, sistemas operativos, gestión de identidades y control de accesos. Experiencia en análisis de vulnerabilidades, gestión de riesgos y respuesta ante incidentes. Conocimientos de seguridad en entornos cloud y herramientas de monitorización. Familiaridad con estándares y marcos de seguridad como ISO 27001, NIST o CIS Controls. Capacidad analítica, orientación a la resolución de problemas y atención al detalle. Buenas habilidades de comunicación y capacidad para colaborar con equipos multidisciplinares. Se valorará especialmente Experiencia en empresas EnergyTech, utilities, energías renovables o entornos industriales digitalizados. Conocimientos de ciberseguridad OT/ICS, sistemas SCADA o protocolos industriales. Experiencia con herramientas SIEM, EDR/XDR y plataformas de gestión de vulnerabilidades. Certificaciones profesionales como Security+, CISSP, CISM o especializaciones en seguridad cloud. Conocimiento de marcos regulatorios aplicables al sector energético, como NIS2, cuando corresponda. #J-18808-Ljbffr

A global cybersecurity company is seeking a Senior Security Engineer to automate exploit generation and analyze zero-day attacks on WordPress. This role requires a strong background in security engineering and hands-on experience with exploiting PHP applications and WordPress plugins. Candidates should possess strong Python skills to build automation pipelines and tools for analyzing execution traces. The position is fully remote, offering flexible hours and comprehensive benefits, including paid vacation and health insurance. #J-18808-Ljbffr

Tecdata está buscando un/a Consultor/a Senior de Ciberseguridad Ofensiva para unirse a su equipo en Madrid. La posición es 100% remota y requiere un profesional con experiencia en auditorías técnicas de seguridad y habilidades en pentesting. El candidato ideal debe tener más de 3 años de experiencia en auditoría técnica y estar certificado como Ethical Hacker. Se ofrece la oportunidad de participar en proyectos de alto nivel tecnológico. #J-18808-Ljbffr

¡Buscamos DevOps Security Engineer (+6 años) Si te apasiona la seguridad en entornos cloud y quieres trabajar con tecnologías punteras, esta oportunidad es para ti. Profesional senior con experiencia en DevOps y Seguridad, orientado a automatización, cloud (Azure) y protección de infraestructuras modernas. Buscamos perfiles que trabajen habitualmente con: Seguridad en cloud y gestión de accesos Integración y despliegue continuo (CI/CD) Seguridad en pipelines Seguridad & Policies Troubleshooting y observabilidad Observabilidad y otros Buenas prácticas de seguridad y arquitectura +6 años de experiencia en IT +3 años en roles DevOps / Infraestructura / Automatización Experiencia en proyectos con foco a seguridad e identidades Proyectos innovadores en entornos cloud Crecimiento en áreas de Cloud Security & DevSecOps ¿Te interesa o conoces a alguien? Hablemos! #J-18808-Ljbffr

Syntax Iberia is seeking a Global Director, Business AI Cyber Security (m/f/d) to build and lead security offerings within the Business AI practice. You will define strategy with the Global CISO, design end-to-end services and own the delivery roadmap, ensuring security-by-design across AI initiatives for Syntax and its customers. You will act as the senior security advisor to clients, translating complex technical findings into business risk and guiding governance, architecture, and secure AI #J-18808-Ljbffr

Join Amaris Consulting and work on Threat & Vulnerability Management and Cloud Security Posture for a leading international group in its sector. Be part of an international cybersecurity team , grow in a hybrid environment in Madrid , and develop your career within a global organization that values ownership, collaboration, and technical excellence . As a Cybersecurity Consultant – Threat & Vulnerability Management & Cloud Security Posture (Azure) , you will ensure that vulnerabilities and cloud misconfigurations are identified, prioritized, remediated on time, and properly reported , coordinating IT teams across multiple European countries . You will work across server vulnerability management (TVM) and Cloud Security Posture Management (CSPM) with Prisma Cloud on Azure and GCP environments. What we’re looking for 2–3 years of experience in operational cybersecurity , ideally in vulnerability management . Solid technical foundation in Windows/Linux systems and networking fundamentals . Strong understanding of the vulnerability management lifecycle ( CVE, CVSS, prioritization, remediation ). Ability to distinguish between software vulnerabilities and cloud configuration errors . Knowledge of Azure ( GCP is a plus). Experience with at least one vulnerability scanning tool ( Qualys, Tenable, Rapid7, Microsoft Defender Vulnerability Management , etc.). Excellent communication skills : able to lead meetings , influence without direct authority , and defend priorities with technical teams. High level of English (C1) for daily collaboration with European teams . Strong proactivity, organization, and autonomy . What you will do Analyze internal vulnerability scan results on a large server landscape . Prioritize and qualify findings (CVE, CVSS severity, exposure, asset criticality , false positives). Build action plans with IT teams and lead remediation follow‑up (meetings, reminders, escalations). Manage the backlog of non‑compliances and misconfigurations detected by Prisma Cloud in Azure and GCP . Explain to each team what needs to be fixed , support them during remediation , and monitor cloud perimeter compliance . Propose improvements to the vulnerability management process and new use cases to identify vulnerabilities and risks. Update and present monitoring KPIs using an existing Power BI dashboard . Prepare presentations for committees and lead meetings with European IT teams . Handle tickets and incidents related to TVM and CSPM (≈ 20% of your time). Strong analytical and problem‑solving skills applied to cybersecurity risks and prioritization . Excellent stakeholder management and communication , comfortable interacting with multi‑country IT teams . Proactive , structured , and autonomous , able to drive remediation and follow‑up without constant supervision. Comfortable working in international environments , adapting your communication to different cultures and technical levels. Experience with CSPM/CNAPP tools such as Prisma Cloud, Microsoft Defender for Cloud, Wiz , etc. Azure certifications ( AZ‑900, AZ‑104, AZ‑500 ) or security certifications ( Security+, SC‑900 ). Experience in multinational or multi‑country environments . Join a fast‑growing global consulting group with strong cybersecurity practices . Work in a hybrid model in Madrid within an international environment (IT teams across Europe). Develop your skills on Azure, GCP, Prisma Cloud, vulnerability management, and Power BI . Grow your career within Amaris Consulting and the Mantu Group , with access to international opportunities and continuous learning . At Amaris Consulting , we are committed to creating an inclusive environment. We welcome all qualified applications regardless of gender, sexual orientation, race, ethnicity, age, or any other characteristic. #J-18808-Ljbffr