Soc jobs in MadridCreate job alerts

Job DescriptionBuscamos para incorporar de manera estable en nuestra Unidad de proyectos Cyber un Security Service Delivery Manager con 5+ años de experiencia en un entorno SOC / MSSP, incluyendo al menos 2 años en servicios de prestación, líder de equipo o gestión de atención al cliente.

NCC Group is seeking a Senior Analyst - Tactical Intelligence to strengthen cyber defence through high-quality threat intelligence that informs detection, response, and strategic decisions. You will analyze threat actors, TTPs, and infrastructure across the intelligence lifecycle, producing actionable outputs for technical and non-technical stakeholders. The role requires collaboration with DFIR/SOC, development of detection content like YARA rules, and contributions to threat hunting and #J-18808-Ljbffr

About AbbVie AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people's lives across several key therapeutic areas including immunology, oncology and neuroscience - and products and services in our Allergan Aesthetics portfolio. Lead the Market Access Value Proposition strategy for Onco‑hematology, ensuring the development and execution of strong value propositions aligned with brand priorities, stakeholder needs, and the local healthcare environment. This role acts as a strategic interface between Market Access, Government Affairs, Medical, Marketing, Regulatory, and other key functions, ensuring the proper integration of evidence, access, positioning, and advocacy to maximize patient access to AbbVie Onco‑hematology solutions. • Onco‑hematology value proposition strategy, • Define, lead, and adapt the Onco‑hematology value proposition strategy according to portfolio priorities, stakeholder needs, and the local context, • Ensure value propositions are supported by clinical, pharmacoeconomic, and outcomes evidence relevant to payers and decision makers, • Oversee the execution of tactical access value proposition plans for the onco‑hematology portfolio, • Pricing, reimbursement, and access, • Support the definition of pricing, reimbursement, and market access strategies for Onco‑hematology, • Ensure early anticipation of assessment processes, HTA reviews, and changes in the competitive or regulatory environment, • Lead the preparation of access materials and arguments for internal and external committees, • Evidence and HEOR, • Identify local evidence needs and coordinate with Medical and other functions the generation of studies, analyses, and economic models, • Ensure adaptation of HEOR models to the local environment, including HTA requirements, payers, and other decision makers, • Drive the incorporation of relevant access‑related endpoints and evidence needs into clinical studies and medical programs, • Stakeholder engagement, • Maintain ongoing relationships with key stakeholders across the healthcare ecosystem, including payers, healthcare authorities, onco‑hematology pharmacist and KOLs, • Capture market and customer insights to anticipate trends, risks, and opportunities, • Coordinate effectively with National MA Mgr. and Regional MA Mgrs. to ensure the best support to MA IFT (tasks planning & prioritization), • Strategic Health Initiatives, • Coordinate effectively with GA Lead to define and implement strategic health initiatives in Onco‑hematology to improve the care model, elevate the SoC and elevate its priority in Spain, • Market monitoring and intelligence, • Monitor the healthcare environment, public policy, access decisions, and oncology trends, • Communicate opportunities and risks in a structured way to the Onco‑hematology BTs, • Maintain an up‑to‑date view of the competitive landscape and its impact on local access, • Cross‑functional leadership, • Lead cross‑functional coordination with Pricing & Reimbursement, Medical, Marketing, Regulatory, Finance, Field Market Access, and Government Affairs, • Ensure alignment between the value strategy, the brand plan, and the overall access strategy, • Translate business needs into concrete actions for the MAVP Onco‑hematology team, • Team leadership, • Manage, develop, and provide direction to the Onco‑hematology MAVP Managers, • Set priorities, objectives, and execution follow‑up, • Foster collaboration, capability building, and operational excellence within the team Experience • Minimum 6‑8 years of experience in Market Access, Value Proposition, HEOR, Pricing/Reimbursement, or related roles, • Proven experience in onco‑hematology or specialty care is strongly preferred, • Experience working cross‑functionally with Medical, Commercial, and Government Affairs teams, • Experience leading people and projects is required Knowledge • Deep knowledge of the Spanish healthcare environment, reimbursement pathways, and market access processes, • Strong understanding of HTA, HEOR, and pharmacoeconomic principles, • Knowledge of payer mindset and institutional decision‑making, • Understanding of pharmaceutical marketing and brand planning processes, • Fluent English; Spanish native or fluent Skills and behaviors • Strategic thinking and ability to build long‑term plans, • Strong influencing, negotiation, and stakeholder management skills, • Ability to lead cross‑functional teams in complex environments, • Customer‑oriented mindset and ability to translate insights into action, • Strong communication, collaboration, and decision‑making skills, • Ability to coach, develop, and empower team members Additional Information AbbVie is an equal opportunity employer and is committed to operating with integrity, driving innovation, transforming lives and serving our community. Equal Opportunity Employer/Veterans/Disabled. US & Puerto Rico only - to learn more, visit & Puerto Rico applicants seeking a reasonable accommodation, click here to learn more: #J-18808-Ljbffr

Department: Cyber Services and Capabilities Employment Type: Full Time Location: ESP Madrid Senior Analyst - Tactical Intelligence UK (Manchester, Cheltenham or London), Spain (Madrid), the Netherlands (Rijswijk) The purpose of this role is to strengthen the organisation’s cyber defence capabilities by generating high-quality, actionable threat intelligence that informs detection, response, and strategic decision-making. The position exists to proactively identify, analyse, and communicate emerging threats, including adversary behaviours, malware, and infrastructure, while ensuring intelligence outputs are operationally relevant, technically robust, and aligned to business and security priorities. Operating across the full intelligence lifecycle, the role transforms complex technical findings into meaningful insights for both technical and non-technical stakeholders, enabling the organisation to anticipate adversary activity, enhance detection engineering, support incident response, and advance intelligence-led security operations. The role also contributes to continuous improvement through research, tooling development, collaboration with wider security teams, and active participation in the broader threat intelligence community. Threat Intelligence Analysis and Research: • Identify, track, and document threat actors, their TTPs, infrastructure, and indicators of compromise across the full intelligence lifecycle., • Monitor and analyse Command and Control (C2) infrastructures, malicious domains, and emerging campaigns, providing context-rich assessments that combine technical findings with geopolitical and regional context., • Map observed threat activity to established frameworks (e.g., MITRE ATT&CK) and produce structured intelligence outputs using formats such as STIX/TAXII., • Conduct technical analysis of malware samples to support intelligence assessments, including static and dynamic analysis to extract configurations, identify capabilities, and attribute activity to known threat actors., • Stay current with the evolving threat landscape, proactively identifying emerging threats, novel attack vectors, and shifts in adversary tradecraft. Documentation and Reporting: • Produce high-quality finished intelligence products, including threat actor profiles, campaign analyses, and technical advisories, suitable for both technical and non-technical audiences., • Document and report on malware behaviour, TTPs, and indicators derived from technical analysis, leveraging internal TIP tooling to generate and disseminate IoCs., • Contribute to external communications through blog posts, conference presentations, or published research that highlights significant threat intelligence findings., • Respond to Requests for Information (RFIs) from internal and external stakeholders, delivering timely, actionable intelligence. Tool Development and Detection: • Develop and maintain detection signatures such as YARA rules based on malware analysis and threat research. Identify network and host-based detection opportunities., • Manage and optimise threat intelligence platforms, sources, and feeds to improve analysis efficiency and intelligence output quality., • Develop scripts and tooling to support analysis workflows, including automation of intelligence collection, enrichment, or dissemination tasks., • Evaluate and recommend new tools or platforms to strengthen the team's analytical capabilities. Collaboration and Information Sharing: • Support and mentor other analysts within the GTI team, providing guidance on analytical tradecraft and technical methodology., • Work closely with DFIR and SOC teams to provide threat context, malware insights, and intelligence support during investigations and incidents., • Generate detection leads from intelligence and malware analysis, maintaining a structured handoff process., • Contribute to intelligence-led threat hunting by producing targeted threat assessments and hypotheses for the threat hunting team, and maintaining a feedback loop on findings, • Partner with external partners, information-sharing communities, and industry forums to maintain situational awareness and contribute to collective defence. Core Skills and Experience: • Demonstrated experience in Cyber Threat Intelligence analysis with a strong understanding of the intelligence lifecycle, including experience in threat actor tracking, APT research, and C2 infrastructure analysis., • Strong understanding of networking protocols (e.g., TCP/IP, DNS) and how adversaries leverage network infrastructure., • Familiarity with frameworks such as MITRE ATT&CK and structured intelligence formats, including STIX/TAXII., • Experience supporting or interfacing with DFIR and SOC teams in an operational capacity., • Understanding of offensive security reconnaissance and attacker methodologies. Desirable Skills and Experience: • Experience performing triage-level malware analysis, including behavioural analysis, sandbox detonation, and basic static analysis. Exposure to reverse engineering tools is beneficial but not essential., • Experience developing YARA rules and other detection signatures based on technical analysis., • Familiarity with programming or scripting languages such as Python for developing analysis tools, automation, and data processing., • Experience with threat intelligence platforms such as OpenCTI, MISP, or similar., • Exposure to geopolitical risk analysis and its impact on the cyber threat landscape., • Track record of published research, blog posts, or conference presentations in the threat intelligence domain. Qualifications (desired but not required): • Certifications such as SANS FOR578 (Cyber Threat Intelligence), CREST Threat Intelligence Analyst (CRTIA), GREM, or equivalent. Ways of working • Focusing on Clients and Customers., • Working as One NCC., • Always Learning., • Being Inclusive and Respectful., • Delivering Brilliantly., • Flexible Working: Balance your work and personal life with our flexible working options., • Generous Holiday Allowance: Enjoy 25 days of holiday, plus bank holidays, with the option to buy up to 5 additional days of annual leave., • Medicash & Critical Illness Scheme, • Financial & Investment Benefits: Enjoy peace of mind with our Pension, Life Assurance, and Share Save Scheme., • Community & Volunteering Programmes: Make a difference in your community with our volunteering opportunities., • Green Car Scheme: Drive green and save money with our eco-friendly car scheme., • Cycle Scheme: Stay fit and healthy with our cycle-to-work scheme., • Special Time Off: Take time off for those big moments in life, like getting married/entering into a civil partnership, becoming a grandparent, and welcoming home a new pet., • Family Planning: Benefit from our generous maternity and paternity leave, as well as time off and support for those undergoing fertility treatments. #J-18808-Ljbffr

ARQUIMEA, we are a technology company operating globally and providing innovate solutions and products in highly demanding sectors. Our areas of activity are Aerospace, Defense & Security, Big Science, Biotechnology and Fintech. We are looking for a Digital Signal Processing (DSP) Engineer with solid experience in the design, modelling and validation of signal-processing algorithms for Software Defined Radio (SDR) and real-time embedded systems. The initial focus of the position will be the development of modulation and demodulation algorithms for secure defense radio systems. The role may also contribute to space communication payloads and other advanced signal-processing applications. • Define, develop and validate DSP algorithms for space and defense communication systems., • Design modulation and demodulation chains, digital filters, sample-rate conversion, channelization and spectral-processing functions., • Develop algorithms for synchronization, channel estimation, equalization, error correction, interference mitigation, noise reduction and non-linearity correction., • Create and validate signal-processing models using MATLAB/Simulink, Python and C/C++, evaluating solutions through quantitative performance metrics., • Collaborate with FPGA/digital hardware and embedded software teams to integrate algorithms into real-time FPGA, SoC and processor-based platforms., • Deploy prototypes and characterize end-to-end performance under representative conditions using RF and electronic laboratory equipment., • Work within multidisciplinary engineering teams and contribute to technical reviews, validation activities and project planning., • University degree in Telecommunications Engineering, Electrical/Electronic Engineering, Physics, Mathematics or a related discipline., • At least 5 years of professional experience in DSP algorithm development, preferably for SDR, telecommunications, space, aerospace, defense or another high-reliability sector., • Strong foundation in digital signal processing and digital communications, supported by practical algorithm-development experience., • Advanced proficiency in MATLAB and Simulink for modelling, simulation, analysis and verification of signal-processing systems., • Proficiency in Python and C/C++ for modelling, test automation and reference implementations., • Experience designing and developing SDR architectures and communication waveforms., • Understanding of FPGA and SoC architectures and hardware/software partitioning for real-time signal processing., • Proficient English, both written and spoken., • Implementation of real-time DSP algorithms on FPGAs or SoCs., • MIMO systems, digital beamforming or direction-of-arrival estimation., • Defense communications or Electronic Warfare, including robust waveforms and interference or jamming mitigation., • Satellite communication payloads and communication standards such as DVB-S2/S2X, CCSDS, 3GPP/LTE/5G or GNSS., • Hands-on experience with RF laboratory instrumentation, such as signal generators, spectrum analyzers, vector signal analyzers and oscilloscopes. We're looking for curious, creative, tenacious and collaborative people, eager to do things and unafraid to tackle challenges in order to contribute to improving the society in wich we live. At ARQUIMEA, we value diversity and inclusion. We do not discriminate on the basis of race, color, religion, gender, sexual orientation, gender identity, national origin, age, disability, or other protected factors by law. All candidates will be considered equally based on their skills and experience #J-18808-Ljbffr

The company: Our customer is a technology-based startup with solid funding that is in the midst of expansion. They will hire the selected candidate as an internal and permanent employee, based in Madrid, but providing services to their global organization. Description of the position: We’re looking for a Governance Risk & Compliance Lead for its global operations in Madrid. He/She will be responsible for designing and operationalizing the company’s governance, risk, and compliance framework. Reporting to the Head of Information Security, he/she will play a critical role in enabling company growth by ensuring regulatory readiness, managing risk, and embedding security and compliance into business and product operations. Key Responsibilities and tasks: • Lead the implementation of GDPR, ISO 27001, SOC 2, and NIS 2 compliance programmes, with a roadmap aligned to business priorities and client expectations., • Develop and maintain policies, procedures, and controls that support certification and audit readiness., • Coordinate with external auditors, consultants, and vendors to streamline evidence collection and reporting., • Operationalize the NIST Cybersecurity Framework across the corporate, product and operational domains, • Conduct regular risk assessments and maintain a centralized risk register., • Collaborate with IT, Product and Legal teams to ensure risk mitigation strategies are prioritized correctly., • Governance & Policy Enforcement:, • Establish governance structures for security and compliance decision-making., • Run regular risk committees and track related actions., • Maintain and enforce policies such as password management, access control, and vendor risk., • Reporting & Communication:, • Provide regular updates to executive leadership on compliance progress, risk posture, and audit outcomes., • Develop dashboards and visualizations to communicate timelines and milestones to stakeholders., • Act as the primary liaison for compliance-related queries from clients, partners, and regulators. Working Experience: • 5+ years of proven experience in cybersecurity landscape within cloud-first or SaaS organisations., • At least 2+ years in GRC roles., • Working experience of GDPR, ISO 27001, SOC 2, NIS 2, and NIST CSF., • Familiarity with compliance automation platforms (e.g., Vanta, OneTrust). Not mandatory but preferred: • Lead on ISO 27001, SOC2 or GDPR compliance implementation., • In-depth knowledge of the NIS2 directive., • Working knowledge of Azure cloud environments., • Working knowledge of OT security., • Excellent communication and stakeholder management skills., • International work experience working with international teams. Education and Training: • Bachelor's Degree or vocational training qualification: In information technology, or a related field. Certifications: Not mandatory but preferred • Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), or ISO 27001 Lead Implementer. Languages: • Spanish: Very good Business Spanish required (excellent communication skills). B2/C1 level., • English: Very good Business English required (excellent communication skills). B2/C1 level. Job Conditions: Job location: Tres Cantos (Madrid). EU nationality or valid EU/Spain work permit required. Employment Type: Permanent Full Time, as internal employee. Salary: Depending on qualification and experience. Work from home: Hybrid working model including the possibility of working from home (70%) but according to the specific needs that may arise from the perspective of project development, department, clients, and/or partners. How to apply: If you are interested, please apply here or email grc@montarelo.com with the subject Governance Risk & Compliance Lead and your English CV. • Mid-Senior level, • Full-time, • Information Technology, • IT Services and IT Consulting and Space Research and Technology #J-18808-Ljbffr

At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters. Are you ready to reshape IT compliance into an agile business enabler? As an RDT Quality Assurance & Compliance Specialist, you won't be a gatekeeper; you will be a Catalyst within Roche Digital Technologies. Our mission is to empower IT teams to deliver quality efficiently, right the first time. You will apply smart regulatory guardrails to cutting-edge technologies—including Cloud Computing, Machine Learning, RPA, DevOps, and SAFe. If you thrive on transforming compliance into an automated, data-driven framework, join us! • Agile IT Compliance Consultancy: Provide expert guidance on CSV, GDPR, Data Integrity, and ICFR for dynamic project and system delivery teams, • Quality & Risk Oversight: Oversee validation, qualification, and system risk assessments across assigned Informatics systems, • Future Quality Framework: Co-create SOPs, checklists, and guardrails for our Informatics Quality Management System, keeping it aligned with evolving external standards, • Audits & Control: Co-audit internal/external IT processes, conduct periodic system reviews, and define control specifications based on global policies, • Coaching & Continuous Improvement: Train delivery teams on Built-In IT Compliance and data integrity, fostering a culture of quality ownership, • Experience: 2+ years in IT Quality Assurance (Validation Lead, Quality Management, Auditing), preferably in pharma/healthcare, • Regulatory Expertise: Strong knowledge of CSV, Data Integrity, ICFR, and GDPR, • Agile & Tech Savvy: Proven experience in SCRUM/SAFe and adapting compliance to Cloud, RPA, and Machine Learning, • Mindset & Skills: Systematic thinker, skilled in data-driven automation, and adept at influencing diverse, global virtual teams, • Languages: Excellent English communication skills. Willingness for occasional travel, • Bonus Points: Experience in SOC 1/2 reporting, CISA, or Lean Six Sigma certifications, • Impact & Innovation: Reframe compliance as a driver for digital transformation alongside state-of-the-art tech, • Global Exposure: Connect and grow within a multicultural, global network, • A Culture of Belonging: Diversity and inclusion are vital to our success. We warmly encourage candidates with disabilities to apply, offering dedicated benefits, tailored support, and an inclusive workplace where you can truly thrive A healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact. Let’s build a healthier future, together. Roche is an Equal Opportunity Employer. #J-18808-Ljbffr

¿Quieres desarrollarte en el área de sistemas, comunicaciones y seguridad en una empresa líder en el sector? ¡Te estamos esperando! Westcon-Comstor está liderando el mercado con una distribución IT de 4,35 millones de beneficio. Nuestro trabajo es ofrecer servicios de seguridad y ofrecer soluciones a nuestros clientes. Actualmente estamos seleccionando a un Business Development Senior Manager para formar parte de nuestra plantilla en una compañía situada en Madrid El candidato ideal combina un profundo entendimiento del go‑to‑market de servicios de ciberseguridad, la transformación de SOC y el desarrollo de negocio basado en partners. • Impulsar nuevas líneas de ingresos para servicios SOC centrados en SASE y SecOps (MDR, XDR, SOC‑as‑a‑Service, Threat Intelligence, automatización SOAR), • Apoyar a los equipos comerciales regionales en la estructuración de deals complejos, incluyendo cross‑selling de servicios SOC en cuentas empresariales existentes, • Actuar como experto en servicios SOC, traduciendo capacidades técnicas en propuestas de valor para clientes, • Liderar la estrategia de desarrollo de negocio para servicios SOC habilitados por Fortinet, alineándola con el roadmap de ciberseguridad, • Construir programas conjuntos de go‑to‑market con los equipos de desarrollo de negocio de Fortinet para maximizar coinversión, generación de pipeline y diferenciación, • Desarrollar propuestas sectoriales (por ejemplo, finanzas, manufactura, sector público) para acelerar la penetración en el mercado, • Definir, gestionar y hacer seguimiento del pipeline y funnel de ventas específico para servicios SASE y SecOps, • Colaborar con Product Marketing, otros Business Development Managers, equipos de Preventa y Operaciones para refinar continuamente las ofertas, • Formar y habilitar a las unidades comerciales locales del cliente en las propuestas de valor de SOC, asegurando un mensaje coherente y preparación comercial, • Liderar y apoyar reuniones con clientes estratégicos, sesiones ejecutivas y respuestas a RFPs con un posicionamiento sólido tanto de negocio como técnico, • Más de 8 años de experiencia en desarrollo de negocio en ciberseguridad, MSSP o ventas enterprise, • Historial demostrado en la venta de servicios SOC, SecOps o SASE en mercados empresariales o telco, • Horario 8x5, • modelo híbrido (4 días en la oficina, 1 teletrabajo) #J-18808-Ljbffr

Una empresa de tecnología líder en Madrid busca un Business Development Senior Manager para impulsar nuevas líneas de ingresos en servicios SOC. Se requiere más de 8 años de experiencia en el área de ciberseguridad y un historial en ventas de servicios SOC, SecOps o SASE. La posición ofrece un modelo híbrido (4 días en la oficina, 1 teletrabajo) y la oportunidad de colaborar con equipos comerciales en la estructuración de deals complejos. #J-18808-Ljbffr

Liebherr-Werk Nenzing GmbH is seeking an Access Control & Network Visibility Product Owner in Madrid to lead the technical ownership of NAC, Remote Access, and NDR platforms. The role requires end-to-end service quality, design of secure access controls, and collaboration with IAM, PKI, SOC, and Product teams. A hybrid work model is offered with on-site presence required. The candidate will manage lifecycle, changes, and incident responses, ensuring Zero Trust alignment and auditable operations #J-18808-Ljbffr

FoshTech in Madrid seeks a seasoned SIEM/Log Analytics professional to collect, normalize, analyze, and exploit security logs across the organization, ingest into SIEMs, and detect threats. You will design pipelines, dashboards, and alerts, and play a key role in incident response and forensic investigations. You will collaborate with the SOC, IT, and security teams to maintain data quality, extend detection capabilities, and document processes for audit and continuous improvement. #J-18808-Ljbffr

Inetum busca un profesional de ciberseguridad senior para liderar la definición, gobierno y evolución del servicio EDR/XDR y MDR. Coordinará con SOC y Service Manager para alinear la estrategia con las necesidades de clientes y capacidades tecnológicas. El/la candidato/a ideal deberá aportar visión estratégica, experiencia en plataformas EDR/XDR y diseño de servicios, con foco en madurez, adopción y valor del servicio. #J-18808-Ljbffr

SWISSto12 in Madrid seeks a Digital RF Systems Engineer to lead end-to-end digital and RF architectures for space telecom applications. You will work on DSP, FPGA/SoC platforms, SDR, and FPGA design, collaborating with hardware, firmware and software teams across sites in Europe. Fluency in English essential; masters in EE/telecom preferred. Role emphasizes system-level verification, model-based design in MATLAB/Simulink, Python/C++, and hands-on testing of high-frequency systems. #J-18808-Ljbffr

FoshTech seeks a security data analyst to collect, normalize, and analyze logs from multiple sources. You will ensure ingestion into SIEM platforms, develop dashboards, and tune alerts to detect threats and incidents. You will support forensic investigations, incident response, and documentation. The role collaborates with SOC Analysts, IAM, Threat Hunting, and other security teams, driving continuous improvement in detection capabilities. Strong scripting and regex skills are valued. #J-18808-Ljbffr

This Full time on site position offers great opportunities for career growth. AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people's lives across several key therapeutic areas including immunology, oncology and neuroscience - and products and services in our Allergan Aesthetics portfolio. For more information about AbbVie, please visit us at Lead the Market Access Value Proposition strategy for Onco-hematology, ensuring the development and execution of strong value propositions aligned with brand priorities, stakeholder needs, and the local healthcare environment. This role acts as a strategic interface between Market Access, Government Affairs, Medical, Marketing, Regulatory, and other key functions, ensuring the proper integration of evidence, access, positioning, and advocacy to maximize patient access to AbbVie Onco-hematology solutions. • Onco-hematology value proposition strategy, • Define, lead, and adapt the Onco-hematology value proposition strategy according to portfolio priorities, stakeholder needs, and the local context, • Ensure value propositions are supported by clinical, pharmacoeconomic, and outcomes evidence relevant to payers and decision makers, • Oversee the execution of tactical access value proposition plans for the onco-hematology portfolio., • Pricing, reimbursement, and access, • Support the definition of pricing, reimbursement, and market access strategies for Onco-hematology, • Ensure early anticipation of assessment processes, HTA reviews, and changes in the competitive or regulatory environment, • Lead the preparation of access materials and arguments for internal and external committees, • Evidence and HEOR, • Identify local evidence needs and coordinate with Medical and other functions the generation of studies, analyses, and economic models., • Ensure adaptation of HEOR models to the local environment, including HTA requirements, payers, and other decision makers., • Drive the incorporation of relevant access-related endpoints and evidence needs into clinical studies and medical programs., • Stakeholder engagement, • Maintain ongoing relationships with key stakeholders across the healthcare ecosystem, including payers, healthcare authorities, onco-hematology pharmacist and KOLs, • Capture market and customer insights to anticipate trends, risks, and opportunities., • Coordinate effectively with National MA Mgr. and Regional MA Mgrs. to ensure the best support to MA IFT (tasks planning & priorization…), • Strategic Health Initiatives, • Coordinate effectively with GA Lead to define and implement strategic health initiatives in Onco-hematology to improve the care model, elevate the SoC and elevate its priority in Spain, • Market monitoring and intelligence, • Monitor the healthcare environment, public policy, access decisions, and oncology trends., • Communicate opportunities and risks in a structured way to the Onco-hematology BTs, • Maintain an up-to-date view of the competitive landscape and its impact on local access., • Cross-functional leadership, • Lead cross-functional coordination with Pricing & Reimbursement, Medical, Marketing, Regulatory, Finance, Field Market Access, and Government Affairs, • Ensure alignment between the value strategy, the brand plan, and the overall access strategy, • Translate business needs into concrete actions for the MAVP Onco-hematology team, • Team leadership, • Manage, develop, and provide direction to the Onco-hematology MAVP Managers, • Set priorities, objectives, and execution follow-up., • Foster collaboration, capability building, and operational excellence within the team., • Minimum 6–8 years of experience in Market Access, Value Proposition, HEOR, Pricing/Reimbursement, or related roles., • Proven experience in onco-hematology or specialty care is strongly preferred., • Experience working cross-functionally with Medical, Commercial, and Government Affairs teams., • Experience leading people and projects is required., • Knowledge Deep knowledge of the Spanish healthcare environment, reimbursement pathways, and market access processes, • Knowledge Strong understanding of HTA, HEOR, and pharmacoeconomic principles., • Knowledge Knowledge of payer mindset and institutional decision-making, • Understanding Understanding of pharmaceutical marketing and brand planning processes, • Fluent English; Spanish native or fluent, • Strategic thinking and ability to build long-term plans., • Strong influencing, negotiation, and stakeholder management skills., • Ability to lead cross-functional teams in complex environments., • Customer-oriented mindset and ability to translate insights into action., • Strong communication, collaboration, and decision-making skills., • Ability to coach, develop, and empower team members. AbbVie is an equal opportunity employer and is committed to operating with integrity, driving innovation, transforming lives and serving our community. Equal Opportunity Employer/Veterans/Disabled. US & Puerto Rico only - to learn more, visit US & Puerto Rico applicants seeking a reasonable accommodation, click here to learn more: #J-18808-Ljbffr

About the jobJob purpose The Cyber Defense Project Management team is in charge of managing and delivering the Security projects and Programs related to the Cyber Defense products.Security Operations Center (SOC), is one of Cyber Defense products, delivers the following capabilities to the AXA entities around the globe: Security Monitoring and Detection, Security Incident Response and Threat Intelligence.Main missions Your responsibilities include:Accountable for the operational delivery of security projects and programs, ensuring they are delivered on time, on budget, and within scope.Leading the project team, including central team, project managers within markets, and third parties.Reviewing and negotiating project plans and schedules, maintaining full accountability for the delivery of the project within your scope.Establishing metrics and KPIs to monitor and control the performance of the project.Reviewing and managing the progress of projects to ensure execution is in accordance with defined plans.Ensuring execution of the project is aligned with AXA GO project management and project lifecycle processes.Monitoring and managing the project/program budget and expenditure to ensure the project is delivered to agreed budgetary commitments.Identifying and tracking risks, issues, and alerts on projects and ensuring appropriate action plans are established and actively monitored.Acting as a liaison between Cyber Defense and various technical and business communities within AXA to communicate the project status, ensure alignment with their own change activities, and promote continuous collaboration.Communicating relevant and timely information to stakeholders to ensure visibility of progress, budget/expenditure, risks, issues, and associated with delivery.Managing change requests (budget, planning, scope), exposing decisions to be made, proposing solutions, gaining and recording decision approvals.Managing procurement and contract matters in conjunction with Group Procurement.In addition to the responsibilities outlined above, as a Subject Matter Expert, you will focus on Security Operations Center (SOC) related projects and initiatives. A continuación se detalla todo lo que necesita saber sobre lo que implica esta oportunidad, así como lo que se espera de los solicitantes. This will include:Overseeing and providing expertise in the expansion and enhancement of our Security Operations Center and monitoring capabilities.Managing the deployment of new security tools and technologies within the SOC environment.Assisting AXA entities in their security transformation and usage of AXA global security products.Driving the adoption and utilization of security solutions such as SOAR, EDR, XDR, cloud security capabilities within the SOC environment.Automation focus:Automated Threat Detection and Response: Implementing automated tools and processes for real-time threat detection and response, including the use of AI and machine learning to identify and mitigate security threats more efficiently.Automated Incident Response: Developing automated incident response playbooks and workflows to streamline the response to security incidents, reducing the time to detect and respond to security events.Automated Security Orchestration: Deploying security orchestration and automation tools to integrate and automate security processes, such as incident response, threat intelligence, and vulnerability management.Automated Security Monitoring: Utilizing automation to enhance security monitoring capabilities, including the automation of log analysis, anomaly detection, and security event correlation.Automated Threat Intelligence Integration: Integrating automated threat intelligence feeds and tools to enhance the SOC's ability to proactively identify and respond to emerging threats.Expected skills & experienceWe are looking for someone with the following experience and skills:ExperienceExperience in project management and program management, with a focus on security projects and initiatives.Strong communication and stakeholder management skills to effectively engage with diverse technical and business communities within AXA.Proven ability to manage change and establish processes for organizational change management to achieve required business outcomes.Expertise in customer needs analysis and the formulation of technical requirements to meet those needs.Extensive experience in third-party management and quality management within the context of security projects and programs.Engineering Degree, BS/MS Business Administration, Project management, Computer ScienceProject management certification (PMI, PMI-ACP, Prince 2, …)Agile methodology (e.G. SCRUM or equivalent) is an advantageProcess improvement certification (e.G. Lean, Six Sigma) is an advantageTechnical skillsExperience in project management 5 yearsExperience in managing complex international IT projects 5 yearsExperience in program management or managing multiple projects in parallel and multi-local projectsManaged budget between 2-5M €Experience in delivering fixed price projects (preferred)Experience in Information Security field > 1 yearsExperience in Security, Network or Infrastructure solution deployment > 5 yearsExperience in delivering transversal projects touching multiple dimensions > 5 yearsExperience in managing third parties > 5 yearsFluent in Englishis a necessity (including technical Information security English)French is a plusWhat we offerWe bring together the expertise, cultural diversity and creativity of over 8,000 employees worldwide and we’re committed to equal opportunities in all aspects of employment (gender, LGBT+, disabled persons, or people of different origins) and to promoting Diversity & Inclusion by creating a work environment where all employees are treated with dignity and respect, and where individual differences are valued.About the entity AXA is becoming a sustainable tech-led company and at AXA Group Operations we are one of the major catalysts for this transformation. We set the tone by triggering and empowering the evolution of our insurance business model through technology and innovation, driving its concrete implementation globally at speed, with a high quality of advisory and execution.We are present across 17 countries with committed, highly qualified teams. We leverage technology, data, sourcing, security and investment allocation in a global way, but also achieve economies of scale and synergies when necessary.At AXA Group Operations, we want to be recognized in three fields of action:State-of-the-art Data Technology to drive customer experienceState-of-the-art Procurement & Sourcing to drive efficiency and better manage risksHigh-Performing Global Team for stronger partnerships with AXA entitiesAbout AXAAs a world-leading insurance company, we act for human progress by protecting what matters. With 153,000 employees in 54 countries working for 105 million customers, we’ve created a truly dynamic and vibrant community. Inclusion and diversity link closely with our values, and together we’re nurturing a culture of respect, for each other, for our customers and the communities around us. Join AXA and you’ll feel like you belong, are included and can thrive. You’ll be able to shape the way you work and truly grow your potential as you seek out new opportunities, push boundaries and benefit people in critical moments of their lives. xhfqzwm This is your chance to build the tomorrow you want. Know you can.

At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters. The Global Security Monitoring and Incident Response (MIR) team at Roche strives to keep our networks and users safe from constantly evolving threats. As a Cybersecurity Engineer, you will help protect proprietary information, patient data, keep computer systems clean, and provide a safe information environment for our users . Combing through massive amounts of signals, you will have to identify signs of abuse or compromise of on-premise as well as cloud resources. All team members share a set of core responsibilities, handling incidents, requests from experts, as well as enquiries from end users. Cybersecurity are responsible for monitoring security information, identifying threats, and showing initiative to defend all Roche information systems. As a member of the Incident Response Enablement team, you are encouraged to support on-call rotation during weekends, and will be mobilized during major incidents. • Monitoring and Incident Response for a global environment, • Elicit feedback and obtain data to continuously strengthen detection and response processes, • Be a force of proposition to steer continuous improvement efforts, partnering with other teams within the Cybersecurity space, • Enhance the platforms and automations that empower detection, investigation and response, • Drive remediation efforts by turning investigations and lessons learned into structural improvements across the company, partnering with other experts across the Roche group, • Brief peers and leadership on threats relevant to the Roche group, • Communicate information security concepts and situations to senior management, • Organize structured knowledge exchange sessions with partners and peers, • Mentor team members Education / Experience / Technical Skills • Bachelor’s degree in a technical field and 5+ years of experience in information security, including at least 3 years in a SOC/CERT/CSIRT environment, • Ability to design and implement complex security systems and processes to strengthen Roche’s posture, • Familiarity with TLP and information sharing best practices, • Ability to communicate information security-related concepts and situations to a non-technical audience, • Demonstrated ability to analyze, triage, and escalation information security incidents, • Ability to take decisions, often under pressure and given partial information, • Knowledge of detection engineering and threat-hunting concepts, • Scripting and programming skills (Python, Javascript, Go, Rust), • Demonstrated knowledge of operating systems (Windows, Linux, macOs ), • Experience in Cloud security for major providers, • Excellent organization and communication skills, • Attention to detail, • Fluent spoken and written English, • Network and Endpoint security monitoring experience in a large complex environment, • Knowledge of modern IAM controls and concepts (Zero Trust, Identity Aware Proxies, Active Directory Security, …), • Experience designing/building/improving logging, monitoring and detection pipelines, • Capacity to identify vulnerabilities, propose pragmatic hardening measures, and influence platform or development teams, • Familiarity with various defensive AND offensive security toolsets, • A passion for the field of computer and network security A healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact. Let’s build a healthier future, together. Roche is an Equal Opportunity Employer. #J-18808-Ljbffr

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We're proud to work for a mission-driven company leveraging AI to transform the way we work. CrowdStrikers drive their careers through flexibility and autonomy while also being expected to contribute to a culture of responsible AI adoption, experimentation, and innovation. We use an AI-first mindset as a force multiplier to proactively and continuously accelerate execution, build expertise, uncover insights, and solve complex problems. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.About the Role:Join the CrowdStrike mission to stop breaches as a technical expert working with our largest Global System Integrators and Telco partners.Ideal candidates are based close to Madrid, Spain, or in the UK, and have strong experience in architecting and enabling security solutions with major GSI and Telco partners, transforming how they deliver cybersecurity to their customers. Working closely with our Global Alliance Managers, you'll shape how global partners build and deliver next-generation security services using CrowdStrike's technology.As a Solution Architect, you will be part of the team revolutionizing the cybersecurity landscape through CrowdStrike's AI-Native Security Platform. Working with the world's leading technology partners, your expertise will directly influence how major global partners protect millions of endpoints and help organizations worldwide secure their customers.This role is remote in or around the Madrid area in Spain.What You'll Do:Architect and design security services with partners, leveraging CrowdStrike's Falcon platform capabilitiesDrive platform adoption strategy, helping partners build comprehensive security offeringsDrive technical strategy and growth with assigned Global System Integrators and Telco partnersDevelop and execute long-term technical plans supporting go-to-market initiativesBuild and maintain relationships with partner technical and sales leadership teams across endpoint, cloud, identity, data protection and AIDR solutionsGuide partners in embedding Falcon Platform within their managed services portfolioDesign technical solutions that integrate CrowdStrike into partners' existing security servicesCreate and deliver technical training programs enabling partners to demo, deploy, and support CrowdStrike solutionsLead partners to achieve technical self-sufficiency in service delivery and platform implementationSupport POC/POV methodologies and provide competitive positioning guidanceParticipate in quarterly business reviews and technical planning sessionsDrive technical partner programs including Falcon ChampionsRepresent CrowdStrike at partner events and conferencesBridge communication between partners and CrowdStrike technical teamsOversee proper usage of partner resources and demo environmentsWhat You'll Need:Proven track record in Technical Consulting or Solution Architecture with GSI / MSPs PartnersStrong background in endpoint security, cloud security, AI-Driven SOC operations, identity security, and in securing AI usage and AI agentsExperience designing and implementing security solutions at enterprise scaleHands-on experience with major cloud platforms (AWS, Azure, GCP)Working knowledge of SIEM/XDR solutions and security operationsTechnical expertise in endpoint protection, identity management, and cloud workload securityExperience with API integration and scripting capabilitiesUnderstanding of threat intelligence and incident response methodologiesStrong communication and presentation skills, able to engage technical and business audiencesAbility to build and maintain technical relationships at all levelsSelf-motivated with excellent organizational and problem-solving skillsComfortable working autonomously in a fast-paced environmentProven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes.Ability to travel regularly to partner offices, corporate locations, and industry events within Europe and, occasionally, worldwideFluent Spanish and English required, additional languages such as French are valuedIndustry certifications (CISSP, SANS, etc.) preferred#LI-Remote#LI-PD1Benefits of Working at CrowdStrike:Market leader in compensation and equity awardsComprehensive physical and mental wellness programsCompetitive vacation and holidays for rechargePaid parental and adoption leavesProfessional development opportunities for all employees regardless of level or roleEmployee Networks, geographic neighborhood groups, and volunteer opportunities to build connectionsVibrant office culture with world class amenitiesGreat Place to Work Certified across the globeCrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program.CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisions-including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, return from lay-off, terminations and social/recreational programs-on valid job requirements.If you need assistance accessing or reviewing the information on this website or need help submitting an application for employment or requesting an accommodation, please contact us at for further assistance. #J-18808-Ljbffr

Thales in Madrid is seeking a Cybersecurity Solutions Administrator & Support Engineer to operate, administer and continuously improve security platforms across on-premises and cloud environments. You will coordinate with SOC, DFIR, network, and cloud teams to resolve incidents and implement changes in line with security policies. The role emphasizes hands-on management of security solutions, accurate documentation, and collaboration with vendors. #J-18808-Ljbffr

NCC Group in Madrid is seeking a Senior MXDR Engineer to deploy and maintain MXDR solutions, combining technical depth with strong communication to protect customer environments. You will collaborate with SOC, SDM, and stakeholders, serving as SME for MXDR tools such as Microsoft Sentinel, Splunk, CrowdStrike, and Sentinel One, and you will help improve services through automation and knowledge sharing. #J-18808-Ljbffr

Cybersecurity Engineer for Space Surveillance | Job DetailsWould you like to take on new challenges without giving up the stability offered by a highly experienced technology group? At GMV, we are expanding our cybersecurity team in the space sector to take on space surveillance projects.Well get to the point; we'll tell you what's not on the web. If you want to know more about us go to GMV websiteWHAT CHALLENGE WILL YOU BE TAKING ON?In our team, you will provide support for the deployment, integration, and maintenance of space surveillance systems in mission-critical environments and infrastructures.The role involves supporting the configuration and administration of Windows and Linux servers, virtualization platforms, network services, storage, and PKI components, ensuring the secure and reliable operation of the system.You will also contribute to the deployment of solutions in accredited environments, helping with system hardening, compliance with security requirements, vulnerability mitigation and accreditation activities.Additional responsibilities include supporting backup and recovery processes, troubleshooting infrastructure issues, and contributing to the continuous improvement of secure deployment and operational procedures.WHAT DO WE NEED IN OUR TEAM?For this position, we need you to have knowledge and experience in cybersecurity, particularly in network and system hardening and Public Key Infrastructure (PKI). Knowledge of SOC/SIEM and vulnerability management is also a plus.WHAT DO WE OFFER?Hybrid ¿Le gusta esta oportunidad? Asegúrese de inscribirse rápido, ya que se espera un gran volumen de solicitudes. Desplácese hacia abajo para leer la descripción completa del puesto. working model and 8 weeks per year of teleworking outside your usual geographical area.Flexible start and finish times, and intensive working hours Fridays and in summer. Personalized career plan development, training and language learning support. National and international mobility. Do you come from another country? We can offer you a relocation package.Competitive compensation with ongoing reviews, flexible compensation and discount on brands. Wellbeing program: Health, dental and accident insurance; free fruit and coffee, physical, mental and financialhealth training, and much more! In our recruitment processes you will always have telephone and personal contact, face-to-face or online, with our talent acquisition team. In addition, bank transfers and bank cards will never be requested. If you are contacted through any other process, please write to our team at promote equal opportunities in recruitment, and we are committed to inclusion and diversity. xhfqzwm WHAT ARE YOU WAITING FOR? JOIN US#LI-HybridIf you have any questions please do not hesitate to contact Natalia Serrano Madrid, in charge of this vacancy. Natalia Serrano Madrid

Department: Cyber Services and Capabilities Employment Type: Fixed Term Contract Location: ESP Madrid As a Senior MXDR Engineer, you are a true multitasker with both technical depth and strong communication skills. Deploying and maintaining MXDR solutions is your core responsibility - your 'bread and butter'. You assess customer needs, collaborate with stakeholders across organizational levels, and ensure their environments become safer and more resilient against threats. Your expertise is also a trusted resource within the team. Whether it's helping the SOC interpret the logging associated with a Splunk alert, troubleshooting CPU spikes of CrowdStrike agents during a DFIR engagement, or assisting SDM in interpreting technical questions - you’re the go-to person. This role requires a broad skill set. A major focus is on technical consultancy, meaning a strong technical foundation, professional communication skills, and a passion for continuous learning are essential. We’re looking for someone with experience with SIEM & EDR tools. We see MXDR as Microsoft Sentinel, Splunk, CrowdStrike or Sentinel One. Familiarity with these platforms is a strong plus. Because this is a customer-facing role, you should feel confident engaging with clients in both in-person and digital environments. As part of a global organization, proficiency in written and spoken English is a must. • Implement and support MXDR solutions for customers, ensuring effective deployment and configuration., • Independently operate in multidisciplinary teams for projects, proactively contributing to client deliverables and addressing internal and external technical and organizational challenges., • Serve as a Subject Matter Expert on specific MXDR tools, supporting and advising customers and colleagues across teams., • Continuously improve the MXDR services through automation, process enhancements and knowledge sharing., • Expert knowledge of cybersecurity and proficiency in one or multiple MXDR technologies., • Demonstrated ability to analyze and interpret complex data., • Strong leadership and communication skills., • Exceptional client engagement and problem-solving skills., • Flexible Working : Balance your work and personal life with our flexible working options., • Generous Holiday Allowance : Enjoy 25 days of holiday, plus bank holidays, with the option to buy up to 5 additional days of annual leave., • Medicash & Critical Illness Scheme, • Financial & Investment Benefits : Enjoy peace of mind with our Pension, Life Assurance, and Share Save Scheme., • Community & Volunteering Programmes : Make a difference in your community with our volunteering opportunities., • Green Car Scheme : Drive green and save money with our eco-friendly car scheme., • Cycle Schem e: Stay fit and healthy with our cycle-to-work scheme., • Special Time Off : Take time off for those big moments in life, like getting married/entering into a civil partnership, becoming a grandparent, and welcoming home a new pet., • Family Planning : Benefit from our generous maternity and paternity leave, as well as time off and support for those undergoing fertility treatments. #J-18808-Ljbffr

Make an impact with NTT DATA Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion -- it's a place where you can grow, belong and thrive. Your day at NTT DATA The Senior Associate Collaboration Technical Services (TS) Systems Integration Specialist is a developing subject matter expert, responsible for ensuring that client solution requirements are resolved in line with Service Level Agreements (SLAs). This role performs configurations, actions installations and attends to break/fix events. This role works towards associate to professional level certification, whilst at the same time developing business knowledge. Key responsibilities: • Owns larger portions of an installation, break/fix incidents at a low to medium level of complexity during project lifecycle, • Takes responsibility for problem resolution and troubleshooting during project lifecycle, • Escalates complex problems to the relevant third parties., • Assists with the documentation of standard operating procedures relating to installations and fixes during ops handover, • Compiles and maintains project administration (Time Capture and feedback to stakeholders), • Conducts elementary presentations within the customer's organization., • Expected to take leadership from senior resources on relevant technologies according to specialization and best practice., • Performs any other related task as required. To thrive in this role, you need to have: • Developing fundamental project and administration ability, • Developing understanding and appreciation of technical design principles and compute layers., • Ability to develop an understanding of fundamental project and administration processes., • Display a strong learning orientation., • Good verbal communication skills., • Demonstrate a client service orientation., • Hands-on proactive in approach., • Knowledge on security concepts and application of those concepts., • Ability in configuring/managing security controls, such as SIEM, Firewall, IDS/IPS, EDR, NDR, UTM, Proxy, SOAR, Honeypots, decoys, and other security tools., • Developing knowledge on log collection mechanism such as Syslog, Log file, DB API., • Developing knowledge in security architecture., • Developing knowledge on log collection mechanism such as Syslog, Log file, DB API., • Developing knowledge in security architecture., • Developing knowledge in ETL concepts, data processing at scale and data stream pipelines through Terraform., • Ability in cloud services on at least one of the following providers: AWS, Azure, GCP., • Developing knowledge web service protocols and frameworks for high-availability, low-latency, resiliency, and auto-scaling., • Developing understanding any of the following - Java, Python, TypeScript, JavaScript, R, .NET, PowerShell., • Developing knowledge in serverless development., • Analytical skills and ability to communicate effectively., • Ability to solve problems in innovative ways while adhering to industry standards and practices., • Developing understanding practices on securing data and systems by applying appropriate authentication and authorization controls., • Developing understanding of Event Driven Development and asynchronous operations., • Developing understanding project fundamentals which are demonstrated in the execution of installations and other assignments., • Developing knowledge of security technologies and understanding of managed services concepts Academic qualifications and certifications: • Bachelor's degree or equivalent in Information Technology or Computing or a related field., • Vendor certification is mandatory., • Azure Certified Security Engineer / PCNSA / FCA / CCNA Security., • Cloud Security certifications and certifications like AZ-500, SC-200, Security+, CEH, CISSP, CISM or similar Certification in different networking technologies such as CCDP /CCNP Security, JNCIA, ACCA, PCNSE, PCNSA, FCP, CCSA, ITIL, Azure Security Engineer, Azure Certified DevOps Engineer, Azure Certified Network Engineer, Azure Administrator Associate, will be an advantage., • Certifications relevant to the services provided (certifications carry additional weightage on a candidate's qualification for the role) Terraform, Azure, Sentinel, EDR Defender for Cloud, Microsoft Security, Devops Ci/CD Pipelins, Azure Governance (Defender for Cloud, Azure Policies, Secure Score and Compliance), Version Control (Git), Microservices (Kubernetes, Azure Containers), Azure / AWS/ GCP Infrastructure (IaaS, PaaS, SaaS), Azure Infrastructure as Code, Azure Administration, Hybrid Cloud, Networking (Firewalls, LAN, VPN), Automation, MS Office365, Power BI Administration, Scripting (PowerShell), ZTNA. Required experience: • Moderate level experience in SOC Analysis Operations., • Moderate level experience in SIEM usage for Moderate level experience in Azure or AWS or GCP., • Moderate level experience in Security technologies like Firewall, IPS, IDS, Proxy etc., • Moderate level experience in technical support to clients., • Moderate level experience in handling security incidents end to end., • Moderate level experience in Security Analysis or Engineering, • Moderate level experience in configuring/managing security controls, such as SIEM, Firewall, IDS/IPS, EDR, NDR, UTM, Proxy, SOAR, Honeypots, and other security tools. Workplace type: Hybrid Working About NTT DATA NTT DATA is a $30+ billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world's leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. Our consulting and industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 70 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is part of NTT Group, which invests over $3 billion each year in R&D. Equal Opportunity Employer NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us. #J-18808-Ljbffr

Job Description:About Highly Integrated Systems – TADYSAs part of the newly established Highly Integrated Systems (HIS) domain within Aircraft Systems Centre of Competence (CoC), you will join the Computing Platforms & Multisystems HW/SW Integration group (TADYS2).HIS is the Multisystem and IMA Design Office and Airborne Computing Platforms responsible and centralizes expertise and competencies for driving architectural reuse, strategic alignment, and economies of scale across the CoC. ¿Tiene las habilidades necesarias para este puesto? Lea todos los detalles a continuación y presente su candidatura hoy mismo. Within this framework, the TADYS2 subdomain focuses on the standardization of embedded software and computing platforms.As a Senior Software Platform Integration Engineer, you will spearhead the CoC’s computing platforms strategy, ensuring the delivery of robust, certifiable, and high-performance software artifacts for computing platforms and you will be dealing with the HW/SW integration for multi-systems architectures, essential for the next generation of AirPower systems.Key responsibilitiesIn this role, you will drive the integration and standardization of software platforms through the following pillars:Requirements & Design: Elicit and maintain Software Requirements Specifications (SRS) for onboard safety-critical computers. Design, develop, and perform Validation & Verification (V&V) of software artifacts in strict adherence to RTCA DO-178C (up to DAL-A).Platform Integration & Architecture: Lead the definition of full software platform architectures for multisystem computing platforms. This includes partitioning, scheduling, resource allocation, and the integration of third-party application and low-level software (RTOS BSPs, drivers, and middleware).Standardization & API Development: Drive the CoC strategy by providing common APIs and standardized access to platform support software (RTOS, BSP, low-level I/O, and middleware) to support various Design and Development Offices.Architecture Evolution: Design and implement new capabilities for embeddable solutions, including secure mathematical functions, robust file system services, and time/logging services to support the communalization strategy.Certification & Compliance: Share responsibility for the platform software certification process, interfacing with certification authorities to demonstrate compliance with RTCA DO-178C.Technology Assessment & Bring-up: Support the CoC strategy by performing trade-off analyses, technical benchmarking, and rapid prototyping on reference boards. Collaborate in the evaluation and board bring-up of new target platforms, with a focus on multicore architectures.Required Qualifications & SkillsTechnical Expertise:Programming: Advanced proficiency in C for real-time embedded systems. Experience with GNU toolchains and modern/legacy compilers (GCC, Clang/LLVM, Diab).Computer Architecture: Strong background in ARM, PowerPC, or x86 and SoC architectures. Deep understanding of MMUs, caches, memory hierarchies, and pipelining.Avionics & Protocols: Expert knowledge of avionics data buses, including legacy (ARINC-429, MIL-STD-1553B, CAN) and modern digital networks (AFDX, TSN), as well as analog/discrete I/O.Peripherals & Interconnects: Extensive experience with low-speed peripherals (UART, SPI, I2C) and high-speed interconnects (PCIe) and DMA.RTOS & ARINC-653: Advanced knowledge of safety-critical RTOS and the ARINC-653 specification. Hands-on experience with COTS solutions (e.G., Wind River VxWorks 653, PikeOS, Green Hills Integrity, or DEOS).Certification Standards: In-depth knowledge of RTCA DO-178C and RTCA DO-330.Scripting & Data:Proficiency in Python for automation (CI/CD, hardware setup) and solid understanding of data serialization (JSON, XML).Language Skills:English: Professional negotiation level.Additional Valuable SkillsEmbedded Linux: Experience in driver development and platform software for mission or safety-critical Linux systems.Modeling: Familiarity with UML and hands-on experience with SysML tools (e.G., Cameo, IBM Rhapsody).Safety-Critical Analysis: Experience with static analysis tools (Polyspace, SciTools Understand) and structural code coverage tools (LDRA).Performance Profiling: Knowledge of Processor Performance Monitor Counters (PMC) and hardware event monitors, specifically regarding multicore resource contention and interference mitigations.Methodologies: Experience working in Agile environments using Jira and Confluence.Core CompetenciesProactivity and high autonomy.Strong analytical problem-solving mindset.Ability to collaborate effectively in complex, cross-functional teams.Which Benefits will you have as an Airbus employee?:Vacation days plus additional days-off along the yearAttractive salary.Hybrid model of working when possible.Collective transport service subject to working calendar/home location.Benefits such as life insurance, health insurance, employee stock options, retirement plan, or study grants.On-site facilities (among others): free canteen, kindergarten, medical office.Possibility to collaborate in different social and corporate social responsibility initiatives.Excellent upskilling opportunities and great development prospects in a multicultural environment.Option to access special rates in products & benefits.This job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company’s success, reputation and sustainable growth.Company:Airbus Defence and Space SAUEmployment Type:Permanent-------Experience Level:ProfessionalJob Family:Software Engineering By submitting your CV or application you are consenting to Airbus using and storing information about you for monitoring purposes relating to your application or future employment. This information will only be used by Airbus.Airbus is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation or religious belief.Airbus is, and always has been, committed to equal opportunities for all. As such, we will never ask for any type of monetary exchange in the frame of a recruitment process. Any impersonation of Airbus to do so should be reported to Airbus, we support you to work, connect and collaborate more easily and flexibly. xhfqzwm Wherever possible, we foster flexible working arrangements to stimulate innovative thinking.SummaryLocation: Getafe AreaType: Full timePosted: 2026-09-22Country: SpainRequisition: JR10430082Posting ID: a672e0edb955104178c906a71f210000

At Goodweek, we're building a next-generation AI tool designed to revolutionize business productivity. We are focusing on delivering a secure, scalable, and reliable system that supports real business use cases across different departments. The goal is to make AI practical, controlled, and truly embedded in how modern organizations operate. Goodweek is a partner-led AI Management Platform, built exclusively for our Partners: Distributors and MSPs (Managed Service Providers), who deploy it to their own clients. We give MSPs and Distributors a secure, governed, multi-model AI workspace with 40+ bidirectional integrations, SOC 2 certification, GDPR compliance, and 100% tenant isolation: the platform infrastructure they need to turn AI from a SKU they resell into a packaged, recurring service line they admin, bill, and support. Our team spans across France, Spain, and the United States, and our vision is backed by 6 international investment funds. You will drive the activation of MSPs and their end customers by helping them understand, adopt and get ongoing value from Goodweek. Reporting to the VP of Revenue and working closely with our Partner Account Managers, you combine product expertise, field engagement and co-selling to turn product capabilities into practical customer use cases. You lead demonstrations, present new releases, run practical workshops and execute MIP (Managed Intelligence Provider) program activities for assigned partners. Your role follows partners and customers from their first use of Goodweek to regular adoption, new use cases and broader deployments. Drive partner and customer activation • Agree activation plans with the Partner Account Executives and MSPs, including priority customers, relevant use cases and practical milestones., • Run customer meetings, onboarding sessions and workshops, remotely and on site., • Help users achieve their first meaningful result and follow up with existing customers to address adoption blockers and develop regular usage. Act as a product specialist in the field • Develop strong working knowledge of Goodweek, its features, supported use cases and limitations., • Proactively present new features and releases to MSP teams and existing end customers, explaining their relevance to each audience., • Translate product capabilities into tailored demonstrations and practical examples, then help customers put them into use., • Answer product questions and coordinate specialist input when needed. Execute the MIP activation program • Translate the MIP framework into concrete activation activities for assigned MSPs, with clear owners, follow-up and milestones., • Coach partner teams to demonstrate Goodweek, introduce relevant use cases and guide their customers through adoption., • Identify stalled partners or customers, agree recovery actions and help MSPs repeat successful activation approaches independently. Develop opportunities through co-selling • Identify customer needs and growth opportunities during activation work and progress them with MSP sales teams., • Participate in discovery, demonstrations and trial follow-up., • Help partners address objections, prepare proposals and convert successful use cases into paid or expanded deployments. Track adoption and share field feedback • Maintain clear activation plans, customer follow-up and opportunity records; review progress and blockers with the PAM., • Use available usage data and partner feedback to identify where further engagement is needed., • Share customer needs, product feedback and effective use cases with Product and the MIP team., • Fluent English and Italian., • Proven background in partner or customer activation, product enablement, solutions consulting, sales engineering, or a related customer-facing software role., • Solid understanding of the Managed Service Provider (MSP) ecosystem and how MSPs operate., • Strong appetite and ability to master software capabilities in depth and translate complex features into clear, practical customer value., • Confidence and experience in leading engaging product demonstrations, onboarding sessions, and interactive workshops, both remotely and on‑site., • Practical ability to coach partner sales and technical teams, helping them build autonomy in demonstrating and activating the product., • Sound commercial judgment with the ability to identify growth opportunities, handle objections, and support co‑selling and deal progression., • High organizational rigor with a track record of disciplined follow-up, tracking adoption metrics, and managing customer milestones., • Excellent communication and relationship‑management skills, comfortable working with both operational teams and senior stakeholders., • A hands‑on, proactive and accountable mindset. We are an early‑stage company, so the person must be comfortable working across functions, adapting quickly and taking ownership beyond a narrow sales remit., • Health insurance provided by the employer, • Flexible working hours, • Hybrid remote work, • Our office is situated in a lively innovation hub, offering access to local meetups, events, and a strong professional community. #J-18808-Ljbffr

Babel, consultora tecnológica multinacional, busca fortalecer su equipo de ciberseguridad en Madrid. El candidato participará en actividades técnicas, investigación de incidentes y mejoras de controles, trabajando junto a equipos técnicos y de negocio para proteger la información y los sistemas. Se valorará mantenerse al día con amenazas y tendencias, y aplicar estándares de calidad en el servicio. #J-18808-Ljbffr

AXA Group Operations is seeking an experienced Security Operations professional to build on and continuously improve SOC analytics and SIEM content. The role involves mentoring First Level Security Analysts, performing professional data analysis, and supporting intrusion detection and incident response across the organization. You will collaborate with global security teams, communicate findings to stakeholders, and maintain technical capabilities through ongoing certifications to stay ahead of #J-18808-Ljbffr

• We are seeking a talented and motivated best-in-class Principal Software Engineer to own and lead the evolution of authentication and authorization at Sezzle. This role presents an exciting opportunity to thrive in a dynamic, fast-paced environment within a rapidly growing team, with abundant prospects for career advancement, • Sezzle is investing in the next generation of its authentication and authorization platform, centered on a purpose-built API auth gateway and a clean set of identity and access management services. As the Principal Software Engineer leading this effort, you will own the technical vision, architecture, and migration strategy for this transformation, • In this backend focused role, you will work closely with stakeholders from Product, Security, Support and the business, • You’ll also partner with engineering teams across the organization to deliver auth capabilities that are safe, incremental to adopt, and invisible to customers, • Your day-to-day responsibilities will include designing, developing, and delivering gateway and identity services, as well as unblocking and mentoring your teammates, • Your work will generally focus on foundational platform capabilities, security-critical paths, and performance at the edge, • At Sezzle, AI-assisted development is a standard part of how we build, paired with the rigorous review and security discipline the auth-critical path demands. As a principal engineer, you will help set the pattern for how AI tooling is used well on security-sensitive systems, • Own the technical vision and roadmap for Sezzle’s authentication and authorization platform, including a dedicated API auth gateway and supporting identity services, • Architect, design, and build scalable, highly-available auth services and gateway components primarily in Golang, leveraging AWS, RDS (MySQL/Postgres), and modern distributed patterns, • Design and lead phased, zero-downtime migrations of auth traffic and functionality, with clear rollback and safety mechanisms at every step, • Establish and evolve authentication and authorization standards across the platform: OAuth2/OIDC flows, token strategy (JWT, opaque, refresh), service-to-service auth (mTLS, workload identity), and fine-grained authorization models (RBAC/ABAC/policy engines), • Drive consistency and scalability across a distributed microservices architecture while maintaining the performance, reliability, and latency budgets expected of an edge gateway, • Partner with Security and Compliance to ensure the new platform meets fintech-grade security and regulatory requirements, and champion secure-by-default patterns across engineering, • Establish and evolve engineering best practices for observability, security, and CI/CD across teams, with particular rigor on the auth-critical path, • Participate in the on-call rotation for the services you own, and help lead incident response and postmortems on the auth-critical path, • Mentor engineers and champion a culture of learning, innovation, and operational excellence, • Collaborate cross-functionally to translate business goals into technical roadmaps and deliver results that matter, • Comprehensive Benefit Plans, • Generous Parental & Family Leave, • Competitive 401k Match, • Paid Time Off & Volunteer Time Off, • Ownership Through Equity, • 100% of Donations to Charity Matched, • Remote Friendly Company, • Highly Discounted Fitness Membership Deployed significant changes to a production application in the past 30 days12+ years of professional software engineering experience, including significant backend experienceDeep, hands-on expertise in authentication and authorization systems: OAuth2, OpenID Connect, SAML, JWT and session-based auth, token lifecycle management, and modern authorization patterns (RBAC, ABAC, policy-as-code)Expertise with SQL-based RDBMS (MySQL, PostgreSQL) and experience optimizing schema and queries for performance at scaleDemonstrated AI-forward engineering: you actively use AI tooling (e.g., Claude Code, Codex, Cursor, or custom LLM integrations) in your development work today, have opinions grounded in practice about where it helps and where it doesn’t, and help teammates adopt AI-assisted workflowsBachelor’s degree in Computer Science or a similar technical field (required)Demonstrated ability to bring new ideas forward, influence decisions, and lead complex technical initiatives across many teamsSolid understanding of distributed systems design patterns (e.g., transactional outbox, event-driven architecture, queues) and the specific challenges of high-throughput, low-latency edge servicesStrong proficiency in Golang, with experience building and maintaining RESTful APIsExperience designing, building, or operating an API gateway or auth proxy at scale: whether a commercial/open-source gateway (e.g., Kong, Envoy, AWS API Gateway, Traefik) or an in-house edge serviceProven track record leading a large-scale service extraction or migration: decomposing a monolith or large legacy service into well-bounded services with zero or minimal customer impactYou have relentlessly high standards - many people may think your standards are unreasonably high. You are continually raising the bar and driving those around you to deliver great results. You make sure that defects do not get sent down the line and that problems are fixed so they stay fixedYou need action - speed matters in business. Many decisions and actions are reversible and do not need extensive study. We value calculated risk-takingYou’re not bound by convention - your success—and much of the fun—lies in developing new ways to do thingsYou earn trust - you listen attentively, speak candidly, and treat others respectfullyYou deliver results - you focus on the key inputs and deliver them with the right quality and in a timely fashion. Despite setbacks, you rise to the occasion and never settleYou have backbone; disagree, then commit - you can respectfully challenge decisions when you disagree, even when doing so is uncomfortable or exhausting. You have conviction and are tenacious. You do not compromise for the sake of social cohesion. Once a decision is determined, you commit whollyExperience with identity platforms and standards implementations (e.g., Keycloak, Auth0, Okta, Ory, or in-house IdPs), and familiarity with fine-grained authorization approaches (policy-as-code, relationship-based access control) as we centralize authorization over timeExperience with service mesh and edge technologies (Envoy, Istio, mTLS, rate limiting, WAF integration)Familiarity with threat modeling, secure design review, and common auth attack vectors (token theft, replay, CSRF, session fixation, privilege escalation)Proficiency in observability tools (Prometheus, Grafana, Datadog, New Relic), especially for latency-sensitive edge servicesExperience with AWS cloud infrastructure, mainly AWS Aurora RDS, both MySQL and PostgresExperience in fintech, payments, BNPL, or consumer lending - familiarity with financial compliance (PCI-DSS, SOC 2), credit decisioning, or transaction processing systemsExperience with CI/CD pipelines and containerized microservices (Docker, Kubernetes)Track record of shipping commercial APIs and platform infrastructure in high-growth environmentsProven leadership in guiding technical direction, improving system reliability, and scaling engineering organizations #J-18808-Ljbffr

T-Systems sucht einen Cybersecurity Automation Engineer für Standorte in Madrid, Barcelona oder Granada. Die Rolle unterstützt SOC-Abläufe durch SIEM/SOAR-Automatisierung, Alarmkonfigurationen und API-Integrationen, um Erkennung und Reaktion zu verbessern. Sie arbeiten mit SOC-Teams, Architektur und IT zusammen, implementieren automatisierte Lösungen und passen Systeme kontinuierlich an neue Bedrohungen an. erforderliche Kenntnisse in Python und Bash/PowerShell runden das Profil ab. #J-18808-Ljbffr

T-Systems, ein führendes multinationales Unternehmen im Bereich Informations- und Kommunikationstechnologien, sucht einen Cybersecurity Automation Engineer für ihre Standorte in Madrid, Barcelona oder Granada. Diese Position ist Teil des T-Systems Cybersecurity-Bereichs, speziell innerhalb des T-Systems SOC (Security Operations Center). Die Rolle konzentriert sich auf die Unterstützung der Automatisierung von SOC-Abläufen durch die Nutzung und Integration verschiedener Tools, die SOC-Prozesse unterstützen. Als Cybersecurity‑Ingenieur im SOC implementierst und pflegst du SIEM/SOAR‑Plattformen zur Analyse von Sicherheitsereignissen, konfigurierst Alarme zur proaktiven Bedrohungserkennung und arbeitest bei der Anpassung von Konfigurationen mit. Du nutzt SOAR‑Tools zur Automatisierung von Incident‑Responses und verbesserst so die Effizienz und Effektivität im Cybersecurity‑Betrieb. Ein tiefes Verständnis von Cybersecurity‑Prinzipien und SIEM/SOAR‑Systemen ist entscheidend für die Implementierung effektiver automatisierter Lösungen und die Verbesserung der Abwehr gegen Cyberbedrohungen. • SIEM-Konfigurationen und Anwendungsfälle durchführen: Entwicklung und Implementierung komplexer Konfigurationen innerhalb des SIEM-Systems, um optimale Erkennungs- und Reaktionsfähigkeiten zu gewährleisten, einschließlich Korrelationsregeln, Filter und Datenquellenintegrationen., • Automatisierungen und Playbooks in SOAR entwickeln: Erstellung benutzerdefinierter Skripte oder Automatisierungs-Workflows zur Verbesserung der Automatisierungsfähigkeiten der SOAR-Plattform, die eine effizientere Reaktion auf Vorfälle und deren Eindämmung ermöglichen., • SOC-Tools über APIs integrieren, um die Effizienz und Effektivität von SOC-Prozessen zu automatisieren und zu verbessern., • Skripte und Programme entwickeln: Code in Sprachen wie Python, PowerShell oder Bash schreiben, um benutzerdefinierte Skripte für Automatisierung, Integration und Datenmanipulation zu entwickeln., • Systeme optimieren: Kontinuierliche Anpassung und Optimierung der SIEM/SOAR-Module, um ihre Effektivität im Laufe der Zeit zu verbessern und sie an Veränderungen in der Bedrohungslandschaft und an organisatorische Bedürfnisse anzupassen., • Teamübergreifend zusammenarbeiten: Enge Zusammenarbeit mit SOC‑Teams, Cybersecurity‑Architektur, CuSM und anderen IT-Teams, um die Infrastruktur, Anwendungen und Netzwerkarchitektur der Organisation zu verstehen und eine effektive SIEM/SOAR-Integration zu gewährleisten. Wir suchen einen Cybersecurity Automation Engineer mit Erfahrung in SOC‑Betrieb, SIEM/SOAR‑Plattformen und Automatisierungsskripten zur Unterstützung und Verbesserung von Cybersicherheitsoperationen. • Spanischkenntnisse (mittleres Niveau), • Hochschulausbildung in IT, Telekommunikationstechnik oder vergleichbare technische Qualifikation, • Mindestens 3 Jahre Erfahrung im Bereich Cybersicherheit, • Mindestens 2 Jahre Erfahrung in einem SOC oder ähnlicher Umgebung, • Kenntnisse der Grundlagen der Cybersicherheit (CIA‑Prinzipien), • Verständnis von Bedrohungsarten (Malware, Phishing, DoS‑Angriffe, APTs, TTPs), • Erfahrung mit Vorfallanalyse, -identifikation, -eindämmung und -untersuchung, • Kenntnisse der Netzwerkarchitektur, -topologien und gängigen Protokolle (TCP/IP, HTTP, HTTPS, DNS), • Vertrautheit mit Windows-, Linux- und Unix‑Betriebssystemen, • Kenntnisse von Event‑Logging‑Systemen, • Erfahrung mit SIEM‑Tools, • Verständnis von Datenaufnahme, -normalisierung, Regeln und Ereigniskorrelation, • Fähigkeit, Alarme zu analysieren und Fehlalarme zu identifizieren, • Erfahrung mit SOAR‑Plattformen, • Kenntnisse in Workflow‑Automatisierung und -Orchestrierung, • Programmierkenntnisse in Python, • Erfahrung mit Bash/PowerShell‑Scripting, • Fähigkeit zur Interaktion mit Security‑Tool‑APIs, • Effektive Kommunikationsfähigkeiten mit technischen Teams, • Fähigkeiten im Berichtswesen und in der Dokumentation, • Kritisches Denken und Problemlösungsfähigkeiten, • Anpassungsfähigkeit an neue Bedrohungen und aufkommende Sicherheitstechnologien, • Fort #J-18808-Ljbffr

Imagine stepping into a role where every system you manage directly supports teams working on mission-critical, high-impact technology. As a Systems & Networks Administrator , you’ll be a key player in managing, securing, and optimizing a diverse IT environment across the organisation. This is a true “jack of all trades” role, ideal for someone with deep hands‑on experience across Microsoft 365, AWS, Jira, Windows Server, and network infrastructure, paired with a strong, proactive security mindset. You’ll ensure the reliability, scalability, and security of the systems that power day‑to‑day operations and future growth. • Administer, monitor, and optimize Microsoft 365 services (Exchange Online, SharePoint, Teams, Defender, Entra ID, Intune), • Manage and maintain AWS cloud infrastructure , including identity sources, networking, security controls, HPC, SAML, and Route53, • Support Windows Server environments , including Active Directory, file services, patching, and backups, • Administer and customize Atlassian Jira and Confluence , aligning tools with team workflows and integrations, • Support network infrastructure including switches, routers, firewalls, VPNs, site connectivity, and basic SD‑WAN, • Design and maintain network layouts and subnet allocations for new and existing facilities, • Apply security best practices across systems and networks, supporting compliance, monitoring, and incident response, • Troubleshoot complex issues across infrastructure, cloud platforms, networks, and applications, • Provide guidance to IT support teams on complex software and hardware issues, • Contribute to IT strategy and propose improvements to performance, security, and reliability, • Maintain clear documentation of systems, configurations, and processes, • Bachelor’s degree in IT, Computer Science, or equivalent practical experience, • 5+ years of experience in systems and network administration, • Strong hands‑on experience with Microsoft 365 administration and identity management, • Solid knowledge of AWS services, IAM, networking, and security configuration, • Strong Windows Server and Active Directory skills, • Good understanding of Zero Trust and modern cybersecurity frameworks (e.g. ISO 27001, NIS), • Experience with monitoring tools such as PRTG, SolarWinds, CloudWatch, SIEM, SOC/NOC platforms, • Basic to intermediate Linux administration skills, • Exposure to DevOps practices and CI/CD tooling, • Experience with virtualization and storage technologies (VMware / Hyper‑V), • Strong understanding of OIDC, SAML 2.0, SCIM, MFA , and SaaS integrations, • Scripting or automation experience (PowerShell, Python, Bash ), • Solid networking fundamentals (TCP/IP, VLANs, routing, firewalls, VPNs ), • Ability to translate technical challenges into clear solutions for non-technical stakeholders, • Microsoft 365 Administrator, • AWS Associate or Professional, • Network+ or CCNA, • Security-focused certifications (e.g. Security+) #J-18808-Ljbffr

We are looking for a Cloud Infrastructure Engineer to take ownership of the cloud infrastructure that supports Triskell Software’s SaaS platform, ensuring its availability, performance, and security. • Design and maintain AWS-based infrastructure., • Automate resources and deployment processes., • Monitor and optimize performance and costs., • Manage security, backups, and business continuity plans., • Provide infrastructure support to development teams., • Experience with AWS (EC2, S3, VPC, IAM, CloudWatch)., • Infrastructure as Code (Terraform or CloudFormation)., • Knowledge of cloud networking and security., • Experience with CI/CD pipelines., • Experience with Kubernetes, ECS, or serverless architectures., • AWS certifications., • Experience in production SaaS environments., • Knowledge of security standards (ISO 27001, SOC 2)., • Participation in a well-established and evolving SaaS product., • Stable technical environment focused on best practices., • Collaboration with multidisciplinary teams., • Hybrid or remote work model (depending on the role)., • Professional development and continuous training. #J-18808-Ljbffr

Location: Madrid Emilio Vargas, Spain Thales people architect identity management and data protection solutions at the heart of digital security. Business and governments rely on us to bring trust to the billions of digital interactions they have with people. Our technologies and services help banks exchange funds, people cross borders, energy become smarter and much more. More than 30,000 organizations already rely on us to verify the identities of people and things, grant access to digital services, analyze vast quantities of information and encrypt data to make the connected world more secure. Thales in Spain is a leader in technological solutions applied to Defence, Aeronautics, Security, Transportation and Space and, furthermore, is a global centre for excellence in Space, Security of Critical Infrastructures and Transportation. With a turnover of €320 million and a staff of 1,200, it exports approximately 40% of its total production principally to the Middle East, North Africa and Latin America. At Thales S21sec Spain , we are looking for a SOC Technical Lead – Threat Hunting & Incident Response with 4+ years of experience in cybersecurity to join our central services team. We are seeking a highly motivated professional with strong expertise in cybersecurity infrastructures , capable of supporting and managing complex technological environments across leading security vendors. • Drive Proactive Defense: You will spearhead our threat hunting strategy, utilizing advanced telemetry and intelligence to uncover sophisticated attacker patterns before they impact our infrastructure., • Lead Through Crisis: You will be the technical force behind our Incident Response, guiding the team through high‑pressure situations, conducting deep‑dive forensics, and refining our defense playbook to stay ahead of the adversary., • Mentor and Innovate: You will elevate the talent around you. Through hands‑on mentorship, technical workshops, and collaboration, you will cultivate a culture of continuous improvement and technical excellence., • Architect the Future: You will partner with our cloud and product teams to integrate security into every stage of the lifecycle. By championing "Security-as-Code" and automation, you will transform how we monitor and protect our global ecosystem., • Experience: Minimum 2–5 years of experience in Cybersecurity, with a strong focus on Security Operations, Incident Response, or Threat Hunting., • Demonstrated experience in a technical lead or senior‑level advisory role, guiding teams through complex technical challenges., • Proven background in managing security operations within high‑scale, distributed environments (Cloud or Hybrid)., • Advanced understanding of attacker TTPs (Tactics, Techniques, and Procedures) and the MITRE ATT&CK framework., • Deep expertise in SIEM/SOAR platforms, EDR/XDR tools, and network traffic analysis., • Experience with Cloud security (AWS, Azure, or GCP) and understanding of shared responsibility models., • Experience leading large‑scale incident investigations and performing root‑cause analysis., • Familiarity with forensic analysis tools and procedures. At Thales S21sec, we pride ourselves on being innovative and flexible in how we work. We continuously evolve our policies to ensure a true work‑life balance . Work from home or come to the office whenever you choose. • 24 vacation days + additional flexible days, • Option to enjoy one free Friday per month (12 per year), • Choose between summer reduced hours or extra days of flexible working Optimize your net salary with benefits such as meal vouchers, transport cards, childcare vouchers, and training support. Access to an annual training plan including technical certifications, languages, and soft skills. Participate in our voluntary Speakers Program and share your expertise. Clear and transparent objectives aligned with KPI‑based annual bonuses. Choose your path: • Leadership and team management, • Deep technical specialization with top experts If you are passionate about cybersecurity and want to make an impact, we are your company. We're looking forward to meeting you! At Thales we provide CAREERS and not only jobs. With Thales employing 80,000 employees in 68 countries our mobility policy enables thousands of employees each year to develop their careers at home and abroad, in their existing areas of expertise or by branching out into new fields. Together we believe that embracing flexibility is a smarter way of working. Great journeys start here, apply now! #J-18808-Ljbffr

SOC Technical Lead – Threat Hunting & Incident ResponseApplyremote type: Hybridlocations: Madrid Emilio Vargastime type: Full timeposted on: Posted Todayjob requisition id: R Location: Madrid Emilio Vargas, SpainThales people architect identity management and data protection solutions at the heart of digital security. Business and governments rely on us to bring trust to the billions of digital interactions they have with people. Our technologies and services help banks exchange funds, people cross borders, energy become smarter and much more. More than 30,000 organizations already rely on us to verify the identities of people and things, grant access to digital services, analyze vast quantities of information and encrypt data to make the connected world more secure.Thales in Spain is a leader in technological solutions applied to Defence, Aeronautics, Security, Transportation and Space and, furthermore, is a global centre for excellence in Space, Security of Critical Infrastructures and Transportation. With a turnover of €320 million and a staff of 1,200, it exports approximately 40% of its total production principally to the Middle East, North Africa and Latin America.At Thales S21sec Spain, we are looking for a SOC Technical Lead – Threat Hunting & Incident Response with 4+ years of experience in cybersecurity to join our central services team.We are seeking a highly motivated professional with strong expertise in cybersecurity infrastructures, capable of supporting and managing complex technological environments across leading security vendors.Join the Team Defending Thales’ Future At Thales, we don't just respond to threats—we anticipate them. We are looking for a visionary SOC Technical Lead who thrives at the intersection of advanced threat hunting, rapid incident response, and team mentorship. If you are passionate about building resilient security architectures and want to lead a team that is defining the next generation of SOC services, this is your opportunity to make a lasting impact.### Key Responsibilities Drive Proactive Defense: You will spearhead our threat hunting strategy, utilizing advanced telemetry and intelligence to uncover sophisticated attacker patterns before they impact our infrastructure. Lead Through Crisis: You will be the technical force behind our Incident Response, guiding the team through high-pressure situations, conducting deep-dive forensics, and refining our defense playbook to stay ahead of the adversary. Mentor and Innovate: You will elevate the talent around you. Through hands-on mentorship, technical workshops, and collaboration, you will cultivate a culture of continuous improvement and technical excellence. Architect the Future: You will partner with our cloud and product teams to integrate security into every stage of the lifecycle. By championing "Security-as-Code" and automation, you will transform how we monitor and protect our global ecosystem.### Requirements ### Experience: Minimum 2–5 years of experience in Cybersecurity, with a strong focus on Security Operations, Incident Response, or Threat Hunting. ### Demonstrated experience in a technical lead or senior-level advisory role, guiding teams through complex technical challenges. ### Proven background in managing security operations within high-scale, distributed environments (Cloud or Hybrid). ### Advanced understanding of attacker TTPs (Tactics, Techniques, and Procedures) and the MITRE ATT&CK framework. ### Deep expertise in SIEM/SOAR platforms, EDR/XDR tools, and network traffic analysis. ### Experience with Cloud security (AWS, Azure, or GCP) and understanding of shared responsibility models. ### Experience leading large-scale incident investigations and performing root-cause analysis. ### Familiarity with forensic analysis tools and procedures.### ### Why Join Thales S21sec Spain?At Thales S21sec, we pride ourselves on being innovative and flexible in how we work. We continuously evolve our policies to ensure a true work-life balance.100% Flexible Hybrid Work Work from home or come to the office whenever you choose.Up to 41 Days Off Per Year 24 vacation days + additional flexible days Option to enjoy one free Friday per month (12 per year)* Choose between summer reduced hours or extra days ofFlexible Compensation PackageOptimize your net salary with benefits such as meal vouchers, transport cards, childcare vouchers, and training support.Continuous Learning & Certifications Access to an annual training plan including technical certifications, languages, and soft skills.Knowledge Sharing Culture Participate in our voluntary Speakers Program and share your expertise.Performance-Based Bonuses Clear and transparent objectives aligned with KPI-based annual bonuses.Career Growth Your Way Choose your path: Leadership and team management Deep technical specialization with top experts### Join UsIf you are passionate about cybersecurity and want to make an impact, we are your company. We’re looking forward to meeting you!At Thales we provide CAREERS and not only jobs. With Thales employing 80,000 employees in 68 countries our mobility policy enables thousands of employees each year to develop their careers at home and abroad, in their existing areas of expertise or by branching out into new fields. Together we believe that embracing flexibility is a smarter way of working. Great journeys start here, apply now! #J-18808-Ljbffr

TrendAI™, the global AI security leader and enterprise business unit of Trend Micro, empowers organizations with full AI visibility and consolidated security that inspires confidence, drives innovation, and eliminates risk. At TrendAI™, we’re always seeking exceptional talent; people who want to collaborate with the best and push boundaries together. Here, your work goes beyond building a career. You will help protect what matters and play a vital role in shaping a safer, more trustworthy AI-powered future. AI Fearlessly. POSITION OVERVIEW As a Customer Success Technical Advisor (CSTA), you are the strategic technical linchpin for TrendAI's enterprise clients. Your mission is to move beyond reactive troubleshooting to become a Trusted Advisor, ensuring customers achieve measurable cybersecurity resilience. You will lead the technical journey for our most strategic accounts, transforming complex security requirements into scalable, operational successes within the TrendAI Vision One™ ecosystem. • Outcome-Driven Management: Act as the primary technical voice post-deployment, shifting the focus from "ticket resolution" to "security outcome attainment." Success Planning: Contribute technical milestones to the broader Customer Success Plan, ensuring a clear roadmap for platform adoption, version upgrades, and feature deployments. Platform Mastery: Conduct regular architectural reviews and configuration audits to ensure customers are utilizing the full breadth of the TrendAI platform., • Proactive Operations & Enablement Value Realization: Guide clients through a structured onboarding and deployment process, ensuring rapid time-to-value and high feature utilization. Technical Workshops: Design and deliver bespoke workshops and "Best Practice" sessions to mature the customer's internal SOC and SIEM operations. Advanced Threat Defense: Provide technical oversight during critical security events, offering proactive recommendations to harden the customer's posture against evolving threats., • Operational Excellence & Leadership Root Cause Strategy: Perform deep-dive root cause analysis (RCA) on complex issues, providing long-term strategic recommendations to prevent systemic failures. Cross-Functional Orchestration: Serve as the regional liaison between the customer and internal Product Engineering, R&D, and Sales Engineering to influence product roadmaps. Account Health Integrity: Maintain a "Single Source of Truth" for account health, including detailed environment maps, troubleshooting playbooks, and operational reports. Language: Fluent in written & spoken English & Spanish, Portuguese is an advantage. Experience: 10 or more years of experience in technical support, security architecture, systems engineering, or a relevant client-facing consulting field. Domain Expertise: Strong knowledge of security frameworks (NIST, MITRE ATT&CK), SIEM/SOC operations, and endpoint/network defense technologies. Technical Depth: Deep understanding of multiple operating systems (Windows Server, Linux, Solaris) and hybrid-cloud infrastructure (AWS, Azure, GCP). Strategic Communication: Excellent written and verbal communication skills, including the ability to articulate complex technical risks in simple, business-centric terms for executive stakeholders. Analytical Mindset: Highly process-oriented with a passion for digital organization, documentation, and technical reporting. Education: Bachelor’s Degree in Engineering, Computer Science, or equivalent is preferred. Certifications: Technical certifications are strongly preferred (e.g., TCAP, TSCE, CISSP, CCNA, CCNP, or Cloud Platform Certifications). At Trend Micro, we embrace change, empower people, and encourage innovation in a connected world. Our diversity and multicultural workforce are key contributing factors to our success across the globe. We like to have fun while taking our culture seriously. We are an equal opportunity employer and are committed to this regardless of race, colour, religion, sex, nationality, age, citizenship, sexual orientation, marital status, gender identity or veteran status. We do not allow discrimination or harassment of any kind. #J-18808-Ljbffr

We are expanding our Global Corporate Information Security team and are looking for an IGA (Identity Governance and Administration) & PAM (Privileged Access Management) Product Owner (m/f/d) who is responsible for the delivery, prioritization, and operational execution of the Identity Governance & Administration (IGA) and Privileged Access Management (PAM) product backlogs. This role owns the day-to-day responsibility for translating IAM strategy, regulatory requirements, and risk drivers into consumable IGA and PAM services, while overall accountability remains with the Head of IAM Security. The Product Owner ensures close alignment across architecture, engineering, SOC, and business stakeholders to deliver scalable, compliant identity and privileged access capabilities. This role is central to the organization’s Zero Trust and regulatory compliance journey, directly reducing the highest impact cyber risks related to over privileged access and poor identity governance. You will shape how identities, entitlements, and privileged access are governed across 55,000+ users and 2,500 applications, influencing both security posture and operational efficiency at enterprise scale. • Own and manage the IGA & PAM product backlogs, priorities, and sprint objectives., • Act as day to day Product Owner for Global IGA and Global PAM initiatives., • Translate IAM strategy, regulatory obligations (NIS2, ISO 27001), and risk assessments into delivery backlog items., • Coordinate with IAM Architects to ensure architectural intent is correctly implemented by engineering teams., • Drive onboarding of applications, identities, and platforms into IGA lifecycle and PAM controls., • Ensure alignment between IGA, PAM, IAM analytics, and SOC monitoring., • Support tool selection, vendor engagement, and roadmap planning for IGA and PAM platforms., • Drive adoption, communication, and change management with business and IT stakeholders., • Provide clear reporting on delivery progress, risk reduction, and compliance KPIs to the Head of IAM., • Delivered a production ready Global IGA service covering JML automation, access governance, and access reviews., • Established a unified Global PAM service enforcing least privilege, MFA, and just in time access., • Implemented governance for non human identities (service accounts, technical IDs, automation)., • Defined and operationalized RBAC / PBAC role models across priority applications., • Achieved measurable reduction in standing privileges and audit findings related to access governance., • Bachelor’s degree in IT, Cyber Security, or equivalent experience. Cybersecurity certifications are advantageous: CISSP, CISM, Microsoft Endpoint-related certifications, or comparable alternatives., • Fluency in English is a must. Skills in German and French are a plus., • Knowledge of modern security frameworks (MITRE ATT&CK, NIST CSF, ISO 27001)., • Experience implementing KPIs and running continual service improvement processes. Required skills and/or experience: Strong Product Owner experience in IAM, IGA, or PAM domains., • Deep understanding of Identity Governance concepts: Joiner Mover Leaver (JML); Access reviews & certifications; Role and entitlement modelling (RBAC / PBAC)., • Strong knowledge of Privileged Access Management: Vaulting & credential rotation; Just in time access & MFA enforcement; Privileged session monitoring., • Ability to balance risk, compliance, and delivery pragmatism in complex enterprises., • Experience with IGA and PAM tooling in large, multi domain environments., • Exposure to non human identity governance (service accounts, automation, APIs)., • Experience operating in regulated environments (ISO 27001, NIS2)., • Strong collaboration experience with SOC and audit teams., • Competitive compensation and benefits package that recognizes your expertise., • Flexible and hybrid working model., • Creative freedom and responsibility to shape processes and solutions in our global transformation., • Continuous learning and development with tailored training and certification opportunities., • Meal vouchers., • Life and accident insurance., • Option to include a premium private health insurance package as part of the flexible remuneration., • A safe, stable and international workplace within a trusted family business that invests in people. Liebherr IT Shared Service Centre Ibérica, S.L. Parque Norte. Alamo building Serrano Galvache, 56 28033 Madrid Spain (ES) Karoliina Rissanen #J-18808-Ljbffr

Thales in Spain is seeking a cybersecurity operations professional to join our Madrid team. You will contribute to advanced monitoring and incident response, leveraging automation, threat intelligence and analytics to protect the organization against evolving threats. The role requires proven experience in cybersecurity operations or SOC/Blue Team, knowledge of SIEM/XDR/SOAR, MITRE ATT&CK, and familiarity with Google SecOps, Microsoft Sentinel, and other providers. #J-18808-Ljbffr

Ebury helps ambitious businesses unlock global growth, and we take the same approach with our people. We encourage innovation and movement, collaboration and problem-solving, and foster an environment where everyone can feel they belong, are valued, supported and empowered to succeed. • Location: Madrid, • Work Model: Hybrid (4 days in-office / 1 day WFH) The Developer Experience (DevExp) team builds and operates the foundational platform powering all engineering at Ebury—from CI/CD, deployment, and test infrastructure to self-service tooling and enterprise AI systems across the development lifecycle. We treat our development process as a product, our engineers as customers, and success as measurable outcomes: lead time, change failure rate, and platform adoption. Our North Star is simple: driving modern SDLC evolution, scaling AI adoption safely, and maximizing developer autonomy across the business. You will lead this team as a player-coach . You will hire, mentor, and grow a team of platform engineers while staying technically grounded enough to drive direction on platform architecture, progressive delivery, and AI agent execution frameworks. You will own two core mandates end-to-end—from design and architectural strategy through to day-to-day operations: • The Delivery Platform (CI/CD & Infrastructure), • The AI-Assisted Developer Platform, • Run CI/CD as a Product: Define and deliver against strict SLOs for the SDLC platform. Continuously innovate and propose infrastructure improvements based on developer feedback., • Build Progressive Delivery into the Paved Path: Implement automated canary releases, real-time metric analysis, instant rollbacks, feature flag management, and safe database migrations across our AWS and GCP environments (Kubernetes, ECS/EKS)., • Evolve Observability & Self-Service Infrastructure: Provide developer self-service tooling in partnership with product engineering, including automated service scaffolding, a centralized software catalog with ownership scorecards, episodic PR preview environments, and standardized Terraform modules., • Elevate Quality Gates: Maintain shared test infrastructure and automated quality guardrails to keep change failure rates low—even as overall code volume grows through AI-assisted engineering., • Operate Ebury’s Agent Harness: Build and run managed, sandboxed execution environments for coding agents (Claude CLI, Gemini CLI, and emerging successors) featuring isolated Git worktrees, short-lived scoped credentials, session audit logs, and multi-model routing to prevent vendor lock-in., • Integrate AI Where It Pays Off: Deploy evaluated AI tooling into the SDLC for pull-request reviews, test generation, automated dependency/code migrations, internal docs, and incident summarization., • Build Context Layers for Agents: Expose internal context via Model Context Protocol (MCP) servers over our software catalog, engineering standards, runbooks, ADRs, and internal docs., • Implement Financial-Grade Guardrails: Engineer strict security guardrails tailored to a regulated financial institution, including sandboxed execution with egress controls, prompt-injection defenses, human-in-the-loop approval gates, and eval suites to prevent AI behavioral regression., • Instrument the Entire SDLC: Track traditional DORA metrics alongside AI-specific telemetry (adoption rate, suggestion acceptance/reversal rates, agent session success, and review overhead)., • Hire & Coach: Recruit, grow, and retain high-performing platform engineers while remaining hands-on enough to review designs and unblock technical obstacles., • Lead with Evidence: Drive the product roadmap using developer research, adoption metrics, and satisfaction surveys rather than reactive ticket queues., • Set Ebury’s AI Engineering Stance: Clear guidelines, permitted tools, and best practices that encourage fast experimentation within secure boundaries., • Drive Enablement: Partner with Security, Compliance, and Core Engineering to ensure the safest path is always the fastest path through active documentation, training, and internal advocacy., • Platform Background: You have built or operated an Internal Developer Platform (Backstage or similar) at scale, backed by clear delivery and adoption metrics., • Leadership Experience: You have managed engineering teams or served as a Tech Lead with formal hiring, coaching, and performance management responsibilities., • Core Tech Stack Proficiency: Deep expertise in AWS/GCP, Terraform, Kubernetes, ECS/EKS, GitHub Actions, Python, and Linux., • Hands-on Engineering Roots: Background in backend software development, enabling you to design and build custom platform tools alongside senior Staff Engineers., • Daily AI User: You actively use coding agents daily and have brought AI tooling past the proof-of-concept stage into production (agent sandboxes, MCP servers, evaluation pipelines, or CI-integrated agents)., • Engineering Discipline: You are rigorous about foundational principles—trunk-based development, small batch sizes, version control hygiene, automated testing, and deep observability., • Product Mindset: You measure platform success through data (DORA/SPACE frameworks) combined with qualitative developer research, pivoting strategy based on hard evidence., • FinTech & Regulated Industry Experience: Familiarity with SOC 2, GDPR, or the EU’s Digital Operational Resilience Act (DORA compliance framework)., • Open Source Contributions: Active contributions to platform or AI ecosystem projects (Backstage plugins, MCP servers, or agent tooling frameworks)., • Advanced AI System Knowledge: Hands-on experience with LLM evaluation pipelines, agent scoring frameworks, Spec-Driven Development, or tokenomics optimization. Ebury delivers sophisticated, integrated solutions — business accounts, hedging, and financing — on a single platform with a seamless workflow. Our success is built on a simple premise and singular purpose: To help businesses operate and scale globally. Since its founding in 2009, Ebury has always been a fast-growing leader in fintech. Today, we bring together 2000+ Eburians across nearly 70 cities and we’re always looking to add to our team. At the heart of our offering is a proprietary platform, purpose-built to help businesses seamlessly streamline and manage global cash flow. We focus on continuous product evolution and innovation to build the infrastructure for borderless growth and help our clients scale at every stage. The opportunities at Ebury are as diverse as our people, ranging from business development to engineering roles across our tech pillars. We believe in inclusion. We stand against discrimination in all forms and are against the intolerance of differences that makes us a modern and successful organisation. At Ebury, you can be whoever you want to be and still feel a sense of belonging no matter your story. Important Security Notice for Job Applicants: Ebury only accepts applications via official Ebury channels. We will only contact you from an@ebury.com domain. Always check the emails you receive from us, and note that we willnever request payment for any part of the recruitment process. Stay safe and report suspicious activity. Notice to Recruitment Agencies and Search Firms: Ebury does not accept unsolicited resumes, CVs, or candidate profiles from recruitment agencies or search firms without signed written Ebury recruitment terms in place for a specific role. Any unsolicited applications will be considered the sole property of Ebury. Ebury will not be responsible or liable for any placement fees or costs associated with unagreed candidate submissions or subsequent hires. AI Transparency Statement: Ebury uses Artificial Intelligence (AI) and automated tools to help streamline certain parts of our recruitment process, however, these tools are strictly for administrative efficiency. All hiring decisions, including application reviews, shortlisting, and final selections are evaluated and conducted by human talent acquisition professionals and hiring managers. #J-18808-Ljbffr

Pragmatike is recruiting on behalf of a major international organization for a Security Operations Analyst specializing in SIEM and Threat Detection. You’ll join a global Cybersecurity Operations team focused on building, operating, and continuously improving the security monitoring capabilities protecting international organizations and their technology environments. Unlike a traditional SOC monitoring role, this position has a strong focus on SIEM administration, detection engineering, security content, data-source onboarding, use-case lifecycle management, and detection optimization. You’ll work closely with Threat Intelligence, Incident Response, and Cybersecurity Operations teams to turn security requirements and emerging threats into effective, measurable detection capabilities. • Develop, implement, validate, tune, and maintain security monitoring and detection capabilities., • Administer and optimize SIEM platforms across multiple customer environments., • Manage security detection rules and use cases throughout their lifecycle., • Onboard, integrate, test, and validate new security data sources and telemetry feeds., • Review and improve detection logic, security content, and monitoring configurations., • Collaborate with Threat Intelligence and Incident Response teams to translate threats into actionable detection capabilities., • Support cybersecurity architecture reviews and provide recommendations to improve security monitoring., • Build and maintain security metrics, dashboards, KPIs, and service-performance reports., • Evaluate detection effectiveness and identify opportunities to reduce false positives., • Contribute to quality assurance, process reviews, control validation, and corrective actions., • Maintain SOC procedures, standards, documentation, knowledge bases, and operational guidance., • Prepare technical reports, findings, and recommendations for internal and external stakeholders., • 5+ years of relevant IT/cybersecurity experience., • Proven hands-on experience administering a SIEM platform, ideally Splunk or Microsoft Sentinel., • Strong experience with SIEM/EDR environments and technical security analysis., • Deep knowledge of Microsoft Security technologies., • Strong cloud security knowledge across Azure, AWS, and/or GCP., • Experience with platforms such as Splunk, QRadar, ArcSight, Microsoft Sentinel, or ELK., • Experience with at least one EDR platform such as Microsoft Defender for Endpoint or CrowdStrike., • Knowledge of email security, network monitoring, and incident response., • Strong Linux, macOS, and Windows knowledge., • Fluent English with excellent written and verbal communication skills., • Experience designing SIEM architecture from initial design through implementation., • Experience building data-ingestion pipelines for diverse cloud and on-premise log sources., • AWS security monitoring experience., • Scripting experience with Python, PowerShell, Bash, Ruby, or similar., • Security certifications such as SC-200, GCIH, CEH, GCFA, GIAC, CCNA, or MCSE., • Experience working across multiple customer environments., • Work beyond traditional SOC monitoring and contribute to the engineering and optimization of security detection capabilities., • Gain exposure to large-scale SIEM, EDR, cloud, and threat-detection environments., • Work directly with Threat Intelligence, Incident Response, and Cybersecurity Operations teams., • Help shape detection use cases, monitoring architecture, and operational processes., • Work on cybersecurity services supporting multiple international organizations. Pragmatike is committed to a fair, transparent, and inclusive recruitment process. We do not discriminate based on age, disability, gender, gender identity or expression, marital or civil partner status, pregnancy or maternity, race, religion or belief, sex, or sexual orientation. In accordance with GDPR, your personal data will be processed lawfully, fairly, and securely and used solely for recruitment purposes, including sharing it with our client(s) for employment consideration. #J-18808-Ljbffr

• Join the InfoSec - Security Architecture team as a Senior Information Security Infrastructure Engineer, where you’ll have the chance to play a key role in protecting our organization’s data and systems. This position offers the opportunity to work on meaningful projects that directly impact our security posture and collaborate with a skilled team passionate about information security, • In more details: We ingest the security telemetry that the whole security org runs on. In this role you’ll get that telemetry into Elasticsearch consistently and keep the underlying Elastic clusters healthy. You own the pipeline end to end: from a new security data source landing, through ingest pipelines, into the indices detection, IR, and consulting teams query, plus the clusters that store it all, • Security telemetry ingestion - build and maintain ingestion of security-relevant data into Elasticsearch (cloud provider audit logs, identity/SaaS activity, endpoint and asset data). This means integrating with third-party and cloud provider APIs to pull telemetry: auth, pagination, rate limits, and handling schema changes. Both Elastic integrations and one-off custom integrations, • Keep the Elastic Cloud on Kubernetes clusters healthy. Monitor and upgrade them regularly. This involves updating versions and builds. Manage capacity and shards. Handle index lifecycle management (ILM). Enable cross-cluster search (CCS), • Use Terraform to manage cloud infrastructure and Elasticsearch resources. This includes managing pipelines, index templates, and alerts. Utilize Kubernetes and Helm to deploy scheduled ingest jobs, • Use AI automation and tooling to reduce toil. This includes self-healing jobs and health checks. It also involves alerting, internal CLIs, and AI or agent-assisted workflows for investigation and operations, • Data quality & reliability - Own the “is the security data actually flowing correctly?” question. Monitor backfills. Ensure that schemas and fields are consistent. Keep an eye on costs, • Toast to your health: Fully paid health coverage for you and your family, in many locations., • Craft your calendar: Flexible location and schedule for most roles., • Create space for you: Distributed by design workforce, plus generous number of vacation days each year., • Embrace parenthood: Minimum of 16 weeks of parental leave, plus generous family formation benefits., • Give back your time: 40 hours each year to use toward volunteering with organizations and causes you’re passionate about., • Amplify your impact: Double your charitable giving — we match donations up to $1500 USD (or local currency equivalent). API integration - consuming REST APIs for data ingestion: authentication, pagination, rate limiting concurrency, and error handlingAbility to operate Elastic and Elasticsearch in production. This includes managing ingest pipelines, index templates, mappings, and queries, while ensuring that clusters are healthy and upgraded. Experience with ECK or Elasticsearch on Kubernetes is strongly preferredKubernetes - deploying and operating workloads (scheduled jobs, Helm charts, operators); troubleshooting pods/jobs in a clusterProven track record of using AI to accelerate development, debug complex systems, and accelerate operations, while still owning the final outcomesTerraform - managing cloud and Elasticsearch resources as codeEligibility to work in Department of Defense (DoD) Impact Level 4 or above cloud service environmentsPython scripting - able to read, write, and modify ingestion/automation scripts. Scripting-level, not full software-engineering depthExperience with cloud providersHands-on experience with cloud providers, preferably GCP, and working with audit and logging dataKnowledge of GitHub, PR-based workflows, GitHub Actions and Continuous Integration (CI)Ability to develop and use dashboard/visualization toolsKnowledge of SOC operations and incident response (IR) workflows, including the use of security telemetry during investigations #J-18808-Ljbffr

Allfunds Bank SAU seeks an senior cybersecurity expert to act as a technical reference point within the team, ensuring production security controls operate reliably. You will work with Infrastructure, Networks, SOC and other teams to maximize the value of security platforms, drive improvements, and manage incidents and detections in a risk-aligned manner. This role offers a challenging environment in Madrid with global exposure. #J-18808-Ljbffr

Buscamos un/a profesional altamente cualificado para unirse a nuestro equipo como Threat Intelligence Analyst. Este rol desempeñará un papel fundamental en el equipo y tendrá como objetivo anticipar, prevenir y responder a ataques. • Elaborar informes estratégicos (tendencias, perfil de actores, riesgos a largo plazo)., • Preparar inteligencia táctica y operacional (IoCs, reglas YARA, indicadores de phishing)., • Generaralertas tempranas para el SOC y equipos de respuesta a incidentes., • Diseñar y mantener bases de datos internas de amenazas., • Titulación Superior en Informática o Telecomunicaciones, • Programación en Python, • Conocimiento de Amenazas Persistentes Avanzadas, • Conocimiento de Tácticas, Técnicas y Procedimientos empleados por adversarios, • Conocimiento del framework MITRE ATT&CK, • Conocimiento de Análisis de Malware, • Operación con MISP y OpenCTI, • Generación de reglas SIGMA y Yara Habilidades Adicionales: • Pensamiento analítico y capacidad para conectar puntos de datos aparentemente no relacionados., • Excelentes habilidades de comunicación para informar eficazmente los hallazgos a los equipos relevantes., • Actitud proactiva, curiosidad y capacidad para adaptarse a un entorno en constante evolución. #J-18808-Ljbffr

En INETUM ofrece la oportunidad de integrarse en una empresa especializada en Consultoría IT, para participar en proyectos innovadores, con tecnologías actualizadas y con un plan de carrera y evolución a largo plazo. Desde la línea de desarrollo de Inetum, buscamos a un/a profesional que tenga experiencia como Jefe/a de Proyectos para liderar e implementar soluciones tecnológicas de alto impacto, en el sector de la ciberseguridad. El candidato ideal será responsable de coordinar equipos multidisciplinarios, asegurar la correcta ejecución de proyectos bajo metodologías ágiles y garantizar la entrega de valor en tiempo y forma. • Gestión integral de proyectos de ciberseguridad (planificación, ejecución, seguimiento y cierre)., • Coordinación de equipos técnicos internos y proveedores externos., • Definición de alcance, cronograma, riesgos y presupuesto de los proyectos., • Implantación de controles de seguridad., • Proyectos de cumplimiento normativo (ISO 27001, ENS, RGPD, NIST, etc.)., • Gestión de riesgos y planes de remediación., • Proyectos de SOC, SIEM, IAM, cloud security o seguridad perimetral., • Elaboración de documentación de proyecto e informes de seguimiento para stakeholders., • Identificación y mitigación de riesgos de seguridad y del propio proyecto., • Garantizar el cumplimiento de metodologías, políticas internas y buenas prácticas de ciberseguridad., • Más de 3años de experiencia en el ámbito tecnológico , con sólida trayectoria en gestión de proyectos en ciberseguridad ., • Conocimientos sólidos en ciberseguridad (perfil funcional, no necesariamente técnico profundo)., • Experiencia con metodologías de gestión de proyectos:, • Agile oScrum., • Conocimientos de marcos y normativas de seguridad:, • ISO 27001, ENS, NIST, CIS, RGPD., • Capacidad para gestionar proyectos simultáneos y entornos complejos., • Certificaciones en PMP, Scrum Masterotras relacionada con gestión de proyectos.z, • Experiencia en la dirección de equipos distribuidos., • Conocimiento de herramientas de gestión como Jira, Confluence, MS Project, etc., • Tener la habilitación personal HPS. InetumesunacompañíalíderenEuropaqueacompañaalasorganizacionesenuncontextodecambiotecnológicoconstante.Graciasaunasólidaexperienciasectorial,unafuerteculturadeinnovaciónyunmodelointernacionalescalable,ayudamosanuestrosclientesatransformarsusoperacionesyagenerarunimpactosostenibleensunegocioyenlasociedad. Guiadosporvaloreseuropeos,impulsamosalasorganizacionesparagenerarunimpactopositivoyliberartodoelpotencialdelasociedad. Estavisiónnosinspiraparacumplirnuestroscompromisos,atraerelmejortalentoytransformarlaincertidumbreenoportunidad,alconstruirunfuturoenelquelatecnologíadestacalascapacidadesdecadaunodenosotros. Úneteaunequipoqueimpulsalainnovaciónytrabajaenproyectosdealtoimpacto.EnInetumvaloramoslaexpertiseyelconocimiento,yqueremosayudarteallevartucarreraalsiguientenivelenunambientecolaborativoydinámico. Ofrecemoslaoportunidaddeasistir,juntoalequipodeciberseguridad,aconferencias,ponenciasycharlasenCongresosdeSeguridadInformática,comoNavajaNegra,RootedCON,Hacken,jornadasCCNSTIC,etc.alserpatrocinadoresdemuchosdeestoseventos. Ponemosatudisposiciónunampliocatálogoformativoencompetenciastecnológicasycertificacionesdeacuerdoconlasexigenciasdelosproyectosyclientes.Formaciónenidiomas,dondepodráselegirentre12opciones.Formaciónenhabilidadespersonalesdentrodelámbitoprofesional.UsodeotrasplataformasadicionalescomoUdemyyOpenWebinars. Teofrecemosunaretribuciónalacarta,pudiendoelegirdiferentesproductosymodelartúmismocómodistribuirlos:segurodesalud,ticketsdecomida,guardería,tarjetatransporteyformación.Además,contarásconunsegurodevidaincluidocomopartedetusbeneficios.Tambiéntendrásaccesoaventajasdelgrupodeempresa,comodescuentosendiversosproductosyservicios. Elcontratoseráindefinido,conunhorarioflexibledeoficina,conposibilidaddeteletrabajarparapoderconciliardelamejorformatuvidapersonal-profesional.Proporcionamosestabilidadyunexcelenteambientelaboral,formadoporlosmejoresprofesionalesenelámbitodelaCiberseguridad. Ofrecemosunaatractivacarreraprofesionalenfuncióndelaexperienciaypotencialpersonal,dentrodeunacompañíaencontinuaevoluciónyconunsólidocrecimiento. #J-18808-Ljbffr

GMV Spain is seeking a SOC-CERT Project Manager to lead the management and evolution of security monitoring and incident response services for complex infrastructures. You will coordinate SOC teams, drive detection and response improvements, and manage client communications during critical incidents. The role requires experience in cybersecurity project management, knowledge of SOC/CERT environments, and the ability to lead technical cybersecurity teams. #J-18808-Ljbffr

Are you looking for an innovative and well-established company where you can grow professionally? At GMV, you’ve found the perfect opportunity! We’re expanding our teams in the aerospace sector to join our avionics and space equipment team, where you’ll work at the cutting edge of high-speed communications and high-sensitivity GNSS applications aboard spacecraft. We’ll get to the point; we'll tell you what's not on the web. If you want to know more about us go to GMV website As part of our team, you’ll contribute to the design, development, and architecture of advanced space application systems, covering the entire signal chain, from RF front-end design to digital signal processing and on-board implementation. You’ll participate directly in in-orbit hardware demonstrations, developing innovative solutions that push the limits of performance in space environments. Key responsibilities include: • Designing and developing RF front-ends and transceivers for space applications, • Implementing digital signalprocessing (DSP) and software-defined radio (SDR) solutions, • Contributing to system architecture , including signal conditioning, filtering, and antenna interfaces, • You will analyze and design analogand digital RF circuits, • You will perform testing, verification, and validation o f engineering models, supporting hardware integration and system-level validation, • You will conduct cutting-edge analysis , risk assessments, and prepare technical reports For this position, we are looking for engineers in telecommunications, electronics, or related fields , with knowledge and experience in RF, electricity, and electronics; digital signal processing; C/C++ programming; MATLAB filters; embedded software and hardware; SoC architectures; and HW-in-the-loop verification. We also value expertise in GNSS transceiver modeling, space systems, or RTOS hardware design. Hybrid working model and 8 weeks per year of teleworking outside your usual geographical area. Flexible start and finish times , and intensive working hours Fridays and in summer. Personalized career plan development, training and language learning support. National and international mobility . Do you come from another country? We can offer you a relocation package. Competitive compensation with ongoing reviews , flexible compensation and discount on brands. Wellbeing program: Health, dental and accident insurance; free fruit and coffee , physical, mental and financial health training, and much more! In our recruitment processes you will always have telephone and personal contact, face-to-face or online, with our talent acquisition team. In addition, bank transfers and bank cards will never be requested. If you are contacted through any other process, please write to our team at We promote equal opportunities in recruitment, and we are committed to inclusion and diversity. If you have any questions please do not hesitate to contact Diego Hernandez Rojo , in charge of this vacancy. #J-18808-Ljbffr

At Smart Working, we believe your job should not only look right on paper but also feel right every day. This isn’t just another remote opportunity — it’s about finding where you truly belong, no matter where you are. From day one, you’re welcomed into a genuine community that values your growth and well-being. Our mission is simple: to break down geographic barriers and connect skilled professionals with outstanding global teams and products for full-time, long-term roles. We help you discover meaningful work with teams that invest in your success, where you’re empowered to grow personally and professionally. Join one of the highest-rated workplaces on Glassdoor and experience what it means to thrive in a truly remote-first world. Applicants must have the right to work in the country they are applying from and be able to work without employer sponsorship. As a Senior PHP/Symfony Engineer, you will take hands-on ownership of backend development within a mature Symfony platform that manages marketing and revenue data for enterprise customers. The core application currently runs on Symfony 6.1, with an upgrade to Symfony 7 planned, alongside an Angular front end and TypeScript and Python AI agent microservices. This is a strongly backend-weighted, senior hands-on engineering role requiring an architect mindset, strong independence and the ability to understand how technical decisions affect the wider system. You will work within a remote, cross-functional product squad alongside engineering, product, QA and DevOps colleagues. • Take ownership of backend development within the core Symfony application, becoming fully independent in delivering work within 2–3 months of joining., • Review and critically assess code written by the team and AI tools, challenging proposed approaches and making sure key considerations have been properly addressed., • Support the migration from Symfony 6.1 to Symfony 7 by resolving versioning, compatibility and legacy issues currently preventing the upgrade., • Improve the application’s performance, scalability and maintainability, making it easier and safer to introduce new functionality., • Work across the Angular front end, TypeScript and Python‑based AI agent services, collaborating with DevOps where backend changes impact other areas of the system., • Be comfortable reading and understanding the Angular/TypeScript codebase, even though the role is primarily backend focused. Strong front‑end development experience is not required., • Understand the wider impact of technical decisions across Symfony, Angular and AI services, while spotting gaps or issues in both human‑written and AI‑generated code., • Question existing approaches, identify root causes and look for better ways of building things rather than simply completing assigned tickets., • Deliver thoughtful, maintainable solutions within a legacy codebase while maintaining a consistent pace of delivery., • Work with a high level of autonomy and ownership while collaborating effectively with a remote, cross-functional team., • Follow SOC 2, PII and security requirements consistently and without exception., • 8+ years of commercial software engineering experience, including at least 5 years working with PHP., • 7+ years of Expert‑level PHP development experience., • 3+ years of recent commercial experience with Symfony 6.x/7 at Advanced level., • Strong senior‑level Laravel experience may be considered where the experience is clearly transferable and the candidate has a good understanding of the differences between Laravel and Symfony., • 4+ years of Advanced experience in backend architecture, system design and scalability., • 2+ years of Advanced experience using AI development tools critically, including reviewing, validating and challenging AI‑generated code rather than accepting it without question., • 5+ years of Advanced MySQL experience, including database schema design and query optimisation. Equivalent depth of experience with PostgreSQL or another relational database may also be considered., • At least 1 year of experience working with or understanding Angular/TypeScript. Experience with React or Vue using TypeScript may also be considered, but some front‑end exposure is essential., • 3+ years of Advanced experience with automated testing using PHPUnit. Experience with Pest or another equivalent PHP testing framework may also be considered., • At least 1 year of Intermediate experience working on framework upgrades and modernising legacy codebases. Experience with major-version upgrades or significant refactoring in other large PHP applications may be considered., • 2+ years of Intermediate AWS experience. Equivalent experience with Azure or GCP may also be considered., • Fluent written and spoken English. Strong written and verbal communication skills, with a demonstrated ability to work effectively in a remote environment., • Ability to work UK hours., • Ability to successfully complete strict background checks and adhere to PII and data protection requirements., • Strong self‑sufficiency, with the ability to operate independently and without handholding after 2–3 months, while continuing to collaborate effectively with the wider team., • A hands‑on engineering approach combined with an architectural mindset, with the ability to understand how and why the wider system works rather than focusing only on writing code., • 2+ years of Intermediate CI/CD experience with GitHub Actions; GitLab CI, Jenkins or Azure DevOps are suitable alternatives., • Basic experience with Amazon Redshift or data warehousing; Snowflake or BigQuery may be considered., • Azure exposure alongside AWS., • Previous project leadership experience., • Previous mentoring and technical leadership experience with other engineers. We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us. #J-18808-Ljbffr

Definition, implementation and oversight of the Information Security Management System (ISMS) and the security measures of the IRIS² programme, in line with the security requirements set out in: • EU and ESA security policies, • the concession contract,, • EUSPA security accreditation standards, • International reference frameworks (ISO/IEC 27000 and 31000 series, NIST SP 800-53, CIS CSC, ISO 22301, NIST SSDF). This assessment must cover the entire multi-tier supply chain of the SpaceRISE consortium., • The specific requirements defined in the project documentation Coordination and oversight of the management and protection of the project's classified information, in accordance with current regulations and legislation. Definition and oversight of a security control system, with particular attention to the security requirements defined for the programme. • Ensure compliance with legal and regulatory safety requirements associated with the program., • Implement and maintain the Security Management System for the IRIS² programme, in accordance with the requirements of the concession contract and the instructions of the European Commission, ESA and EUSPA., • Develop security policies and procedures, including the creation and continuous update of security guidelines, guides and manuals., • Coordinate the integration of protective measures (encryption, access control, alert monitoring) and oversee vulnerability remediation., • Establish the organization's priorities, limits, risk tolerances, and assumptions, and use them to support risk management decisions (both internal and supply chain-related)., • Develop and oversee the operational risk matrix for the Program and its supply chain; identify and document internal and external threats. Identify strategies and plans to mitigate them., • Oversee operational resilience and ensure business continuity, reducing security incidents and minimizing disruptions., • Develop and coordinate the necessary business continuity plans, establishing resilience requirements for all operating states (under duress/attack, during recovery, normal operations)., • Oversight of technical plans, design and coordination of incident response protocols, and ensuring compliance with NIS2 regulatory guidelines within the program., • Oversee audits, assess the impact of potential security breaches and define contingency plans., • Coordinate with other areas of the organisation on security/cybersecurity matters (SOC, etc.)., • Oversight of the management of classified information associated with the programme., • Ensure compliance with security requirements throughout the multi-tier supply chain of the SpaceRISE consortium: prime contractors, subcontractors and suppliers., • Coordinate with stakeholders and participate in projects to implement security measures, including coordination with programme stakeholders. Bachelor of Industrial Engineering, Computer Science, Information Systems or an equivalent technical discipline. A specialisation in cybersecurity or European space law will be an advantage. • ISO/IEC 27001 ISMS Lead Auditor, • Specialist in the implementation of the National Security Scheme, • Personal security clearance (Spain), • CISSP (Certified Information Systems Security Professional), • CISM (Certified Information Security Manager), • CISA (Certified Information Systems Auditor), • CCSP / Cloud Security Specialty (AWS, Azure), • CEH / OSCP / CompTIA Security+, • A minimum of 4 to 6 years’ experience in the implementation and maintenance of security management systems, preferably in space programmes, government satellite communications or critical telecommunications infrastructure., • Practical expertise in the following frameworks: the ISO/IEC 27000 series, ISO/IEC 31000, NIST SP 800-53, CIS CSC, ISO 22301, NIST SSDF, OWASP and SAFECode., • Experience in managing classified information, • Knowledge of the multi-tier supply chain in EU programmes (public procurement, satellite operators, satellite manufacturers, ground segment suppliers, technology subcontractors)., • Planning and execution of security management systems, • Security maturity assessment (NIST CSF, ISO 27001, ISO 22301, NIST SP 800-53, NIST SSDF)., • Collaborating in secure‑by‑design security architectures in space and satcom systems., • Management of the multi-tier supply chain in European space programmes (SpaceRISE and the New Space ecosystem)., • Compliance assessment of the EU regulatory framework applicable to critical government satcom infrastructure (NIS2, DORA, EU Secret, Regulation 2023/588)., • Independent judgement and integrity — ability to act with complete impartiality vis‑to‑vis the SpaceRISE/ESA programme management authorities., • Effective communication with technical (systems engineers, cybersecurity) and non-technical (European Commission, EUSPA, management boards) stakeholders., • Leadership of multidisciplinary teams and coordination of auditors across a pan-European supply chain. At Hispasat we promote equal opportunities and an inclusive environment. All our selection processes are based on objective criteria, without distinction of gender, age, origin, sexual orientation, disability or other personal or social conditions. We value diversity as a driver of innovation and growth. #J-18808-Ljbffr

Shine is the financial copilot for entrepreneurs and small business owners. Founded by serial entrepreneurs Rico Andersen and Martin Hegelund, Shine is a leading European fintech unicorn on a mission to restore the joy of running a business, by ending wasted time on financial admin. Shine offers a connected solution for invoicing, accounting, payroll, business accounts, payments, and financing, meaning business owners can focus their energy on growing a healthy business, not held back by manual admin. Part of something bigger Today we're part of Cegid, a European leader in cloud software for finance and accounting. Together we're building Europe's leading financial copilot for small businesses and their accountants. Shine already supports more than 400,000 small businesses. As part of Cegid, we now reach over one million small businesses and 15,000 accountants across Europe. We're a multicultural team working from France, Germany, Denmark and the Netherlands, contributing to a wider European network that spans Spain, Portugal and Belgium. Your hiring experience matters Just as we respect our customers' time, we respect yours. Your experience with Shine and Cegid should feel simple, transparent and genuinely supportive. If this sounds like somewhere you want to grow, we'd love to hear from you. At Shine, our Security team operates as a strategic driver rather than a support function. We work directly with leadership to integrate resilience into the company’s core, navigating the complex intersection of cloud-native architecture, AI innovation, and rigorous regulatory standards like DORA and ISO 27001. By partnering cross-functionally with Engineering and Risk, we aren’t just maintaining a perimeter; we are building a scalable, high-visibility security framework that defines the future of digital operational excellence in the fintech space. Shine Bank is looking for an Cyber Security Manager (Incident Response) to help shape and operate our information security and digital operational resilience framework. Reporting directly to the CISO , you will take a key role in implementing and maturing our Cyber Defence capabilities in close collaboration with IT, Risk, Internal Audit and Management. As Cyber Security Manager, you will own our defensive security technology stack and our incident-readiness capability. Design, write, and maintain incident response playbooks for our most relevant scenarios aligned with DORA ICT incident-management expectations. Ensure robust DDoS protection across our internet-facing and payment-critical services — selecting and managing mitigation solutions (e.g. Cloudflare, Akamai, AWS Shield) validating that protection holds up to the availability expectations regulators place on a payment institution. Plan and facilitate regular tabletop exercises and simulations across technical, operational, and executive stakeholders; capture findings and drive remediation to closure. Manage security vendor and MSSP relationships, contribute to the security technology roadmap and budget, and translate threat intelligence into concrete control improvements. Partner with the SOC Manager to ensure tooling supports detection and response use cases (mapped to MITRE ATT&CK). Provide the technical evidence and control assurance the Information Security (GRC) function needs for PCI-DSS, DORA, and ACPR-related obligations. Report on resilience metrics and the effectiveness of deployed controls to security leadership. Job located in Berlin or Madrid office, with possibility of two remote working days per week Hands-on background in technical / engineering security operations, ideally within regulated financial services, payments, or fintech. Practical experience deploying and operating EDR/XDR platforms (e.g. CrowdStrike, SentinelOne, Microsoft Defender) and other core defensive tooling. Hands-on experience with DDoS mitigation and edge/CDN security (e.g. Cloudflare, Akamai, AWS Shield/WAF) and an understanding of how to protect high-availability, customer-facing services. Demonstrated incident response experience — you have built playbooks and run tabletop exercises, not just read about them. Working knowledge of DORA, PCI-DSS, ISO 27001 and MITRE ATT&CK. Strong stakeholder and vendor management skills, with the ability to bridge technical detail and business risk. Fluent English required; German is a strong advantage . Equal Opportunity Employer We follow the principle of equal treatment to consider all job applicants and do not discriminate based on their gender, sexual orientation, color, racial or ethnic origin, religion, disability, etc. as per applicable law. A 30' first call with Talent Acquisition to get to know you better and share more about Shine. A 60' interview with your potential lead to discuss your past experiences and the role we are offering. A 30' Interview with our Chief Complience Officer to dive deeper into the technical aspects. A 60' business case presentation to highlight your skills and give you a hands-on feel for the role. A soft skills interview to see how we can best support your growth at Shine. #J-18808-Ljbffr