Att jobs in MadridCreate job alerts

WTW in Madrid is looking for a Threat-Led Detection Engineer Lead responsible for developing and leading the detection engineering strategy across various environments. ¿Tiene lo que se necesita para triunfar? La siguiente información debe ser leída atentamente por todos los candidatos. This position requires strong leadership, a deep understanding of cyber threats, and hands-on experience with detection frameworks like MITRE ATT&CK. The ideal candidate possesses a solid background in cyber security, with the ability to translate intelligence into effective detections while fostering a security-aware culture. xkdbapo Responsibilities include mentoring teams and maintaining a robust detection library. #J-18808-Ljbffr

The Threat-Led Detection Engineer Lead will drive WTW’s detection engineering capability within the Global Information and Cyber Security Defence (ICSD) function, owning the strategy, quality, and continuous improvement of how WTW detects threats across its global estate in AI era. This role blends deep technical detection expertise with team leadership, driving a threat-led, intelligence-informed approach to detection that maps directly to real adversary behaviour. Siga leyendo para comprender completamente lo que este trabajo requiere en cuanto a habilidades y experiencia. Si su perfil encaja, presente su candidatura. The Lead will set the standard for how detections are designed, written, tested, documented, and maintained – championing Detection-as-Code, measurable detection coverage, and a strong engineering culture. Working closely with SOC, Threat Hunting, Cyber Threat Intelligence (CTI), Incident Response, and Vulnerability Management teams, the Lead will ensure WTW’s detection library evolves ahead of the threat landscape. The individual will work as part of a global, multi-disciplined security community with strong support across the business, helping to foster a security-aware culture while ensuring WTW remains a great place to work. With WTW’s large global footprint, this role offers a fascinating range of work, and occasional global travel may be required. The Threat-Led Detection Engineer Lead will grow WTW’s detection engineering function within the Global Cyber Security Defence team. Responsibilities of this role will include: • Drive WTW’s detection engineering strategy, setting the vision, standards, and roadmap for threat-led detection across cloud, endpoint, identity, network, and SaaS environments., • Lead, mentor, and grow a team of detection engineers, establishing engineering best practices, peer review, and a culture of high-quality, well-documented detections., • Drive a threat-led detection approach, prioritising detection development against adversary tradecraft using the MITRE ATT&CK framework, the Cyber Kill Chain, and the Diamond Model of Intrusion Analysis., • Translate Cyber Threat Intelligence and threat-hunting findings into robust, high-fidelity detections with low false-positive rates., • Establish, own, and maintain the central detection library, ensuring detections are version-controlled, tested, documented, and mapped to MITRE ATT&CK coverage., • Champion Detection-as-Code, implementing Git-based workflows, CI/CD pipelines, automated testing, and peer review for all detection content., • Define and track detection coverage, efficacy, and quality metrics (e.g. ATT&CK coverage, detection fidelity, time-to-detect) and report on detection posture to senior leadership., • Lead detection validation and tuning through adversary emulation, purple-team exercises, and breach-and-attack-simulation tooling (e.g. Atomic Red Team, Caldera)., • Support the integration of AI and automation into detection workflows – including AI-assisted detection authoring, enrichment, and triage – and lead detection efforts for AI/GenAI-specific threats., • Partner with SOC, Threat Hunting, CTI, Incident Response, and Vulnerability Management to close detection gaps identified during incidents and hunts., • Govern the full detection lifecycle: intake, development, testing, deployment, monitoring, tuning, retirement, and continuous improvement., • Evaluate and onboard new log sources, telemetry, and tooling to expand detection coverage across the global estate., • Set standards for detection documentation, runbooks, and response guidance so every detection is clear and actionable for the SOC. Qualifications We are looking for a candidate for the Threat-Led Detection Engineer Lead role who has the following: Must-have • 5+ years in cyber security with detection engineering experience, including a track record of leading, mentoring, or coordinating technical teams., • Strong cyber security mindset with a deep, thorough understanding of adversary behaviour, attacker tradecraft, and the modern threat landscape., • Expert knowledge of the MITRE ATT&CK framework, the Cyber Kill Chain, and the Diamond Model, with proven ability to map and drive detection coverage against them., • Proven expertise writing, testing, and maintaining detection rules across SIEM and EDR/XDR platforms (e.g. Microsoft Sentinel, Splunk, Elastic, CrowdStrike, Microsoft Defender XDR), using query languages such as KQL, SPL, EQL, or Sigma., • Demonstrated ability to develop high-fidelity detections swiftly in response to emerging threats, intelligence, and live incidents., • Experience owning and maturing a detection library, including detection lifecycle governance and ATT&CK coverage mapping., • Hands‑on experience with Detection-as-Code: Git, version control, CI/CD pipelines, and automated testing of detection content., • Understanding of AI/ML in security operations and awareness of AI‑specific threats (prompt injection, model/data poisoning, sensitive‑data exposure via GenAI), with familiarity with the OWASP LLM Top 10 and MITRE ATLAS., • Exceptional written and verbal communication skills, able to convey complex technical concepts to both engineers and non‑technical stakeholders, including executives. Good to have • Strong threat‑hunting mindset and hands‑on hunting experience to proactively surface detection gaps and feed detection development., • Scripting and automation skills (e.g. Python, PowerShell) for tooling, enrichment, and SOAR integration., • Familiarity with detection data pipelines (log routing, parsing, normalisation, data lakes) and how they affect detection quality. xcskxlj We’re committed to equal employment opportunity and provide application, interview and workplace adjustments and accommodations to all applicants. If you foresee any barriers, from the application process through to joining WTW, please email Job Info • Job Identification 202604211, • Job Category Information and Cyber Security, • Posting Date 06/29/2026, 02:14 PM #J-18808-Ljbffr

pABB i Madrid-området söker en teknikinriktad ansvarig för testbänkarna. Rollen innefattar att sammanställa statusrapporter till PCV, leda skapande och underhåll av manualer och driva förbättringar i tillgänglighet och prestanda. /ppDu hanterar budgetprognoser, upphandling och koordinering av underleverantörer. Yrkesrollen kräver civilingenjörs- eller likvärdig utbildning och minst tre års erfarenhet i en liknande tjänst, med starkt fokus på SCADA, LabVIEW och Python. /p #J-18808-Ljbffr

is looking for a Threat Intelligence Engineer in Madrid to enhance its cybersecurity posture. Todos los posibles candidatos deben leer con atención los siguientes detalles de este trabajo antes de presentar una candidatura. This role includes analyzing attacks, creating detection content, and applying AI to improve defenses. Ideal candidates will have hands-on experience with intrusion analysis and a strong grasp of MITRE ATT&CK. The position promotes a hybrid work model, offering flexibility while dealing with global cybersecurity challenges. xcskxlj Join a dynamic team aiming to defend against evolving threats effectively. #J-18808-Ljbffr

HBX Group is a leading independent B2B travel technology marketplace connecting travel businesses globally through advanced technology, data-driven solutions, and a network of interconnected products and services. Our Cyber Security team is responsible for protecting global platforms, cloud infrastructure, corporate environments, data assets, and emerging AI-enabled services.Role OverviewThe Red Team Security Expert is responsible for proactively assessing and validating HBX Group's security posture across corporate, cloud, application, and AI-enabled environments.The role combines penetration testing, adversary emulation, offensive security assessments, Purple Team activities, security research, and AI security testing. The successful candidate will work closely with Blue Team, Security Architecture, DevOps, Engineering, Data, and AI teams to identify weaknesses, validate security controls, and strengthen cyber resilience.Offensive Security AssessmentsConduct penetration testing activities across web applications, APIs, cloud platforms, infrastructure services and corporate environments.Identify, validate and assess security vulnerabilities, attack paths and exposure risks affecting business services and technology platforms.Perform security assessments throughout the technology lifecycle to support secure development and deployment practices.Collaborate with engineering and infrastructure teams to ensure vulnerabilities are effectively remediated and validated.AI Security & Emerging ThreatsAssess risks related to Generative AI, Large Language Models (LLMs), AI agents, and machine learning systems.Identify and mitigate threats such as:AI supply chain attacksSensitive data leakage through AI platformsShadow AI usagePartner with AI and Data teams to implement secure-by-design AI solutions.Contribute to AI governance, monitoring, and security controls.Stay up to date on emerging AI security frameworks and industry best practices.Adversary Emulation & Red Team OperationsPlan and execute realistic Red Team engagements that emulate real-world threat actors and attack scenarios.Leverage MITRE ATT&CK methodologies to assess detection, prevention and response capabilities.Evaluate security controls across on-premises, cloud and hybrid environments.Support cyber resilience initiatives through controlled attack simulations and adversary emulation exercises.Application Security & Code ReviewPerform web application, API and source code security assessments.Identify weaknesses associated with authentication, authorisation, session management and secure coding practices.Support agile delivery teams by providing security findings and remediation guidance during development cycles.Help improve the organisation's ability to identify and mitigate vulnerabilities early in the software development lifecycle.Perform offensive security assessments across AWS, Azure and GCP environments.Assess Kubernetes clusters, Docker environments and cloud-native architectures.Review Infrastructure-as-Code deployments and cloud configurations for security weaknesses.Identify privilege escalation opportunities, misconfigurations and potential attack paths.Support cloud security validation and architecture review activities.Security Research & AutomationResearch emerging attack techniques, exploitation methods and offensive security tools.Develop and maintain automation, scripts and testing utilities to improve offensive security capabilities.Support continuous improvement of Red Team methodologies and testing approaches.Contribute to knowledge sharing, research initiatives and internal security innovation.Collaborate with Blue Team teams to validate detections and strengthen defensive capabilities.Support the development and testing of monitoring rules, alerting mechanisms and incident response processes.Simulate realistic attack techniques to improve visibility and detection coverage.Promote continuous improvement through joint Red Team and Blue Team exercises.What You Will BringPrevious experience in a Red Team, Penetration Testing, Offensive Security, Application Security or equivalent security-focused role.Strong understanding of offensive security methodologies, attack techniques and adversary emulation practices.Up-to-date knowledge of cyber security threats, exploitation techniques and offensive tooling.Experience performing vulnerability assessments, penetration testing and security validation activities.Knowledge of application security, secure development practices and source code reviews.Good understanding of DevOps and Agile principles, with the ability to support security activities in fast-moving delivery environments.Knowledge of cloud and container technologies, including Kubernetes, Docker and cloud environments such as AWS, GCP or Azure.Experience using scripting languages and automation tools to improve offensive security capabilities and testing efficiency.Desired skillsAbility to translate technical security findings into clear risk-based recommendations.Strong analytical mindset, with the ability to investigate complex attack scenarios and identify realistic exploitation paths.Good collaboration skills, with the ability to work effectively with Security, Engineering, DevOps and infrastructure teams.Proactive approach to learning and staying current with emerging threats, attack techniques and security technologies.Ability to balance security requirements with business priorities in agile and cloud-based environments.Personal attributesOwnership and accountability when managing security findings, assessments and remediation activities.Clear communication style, especially when explaining technical risks to non-security stakeholders.Continuous improvement mindset, with a focus on advancing offensive security practices and organisational resilience.Team-oriented approach and willingness to collaborate across technical and business areas.#J-18808-Ljbffr

The Threat-Led Detection Engineer Lead will drive WTW’s detection engineering capability within the Global Information and Cyber Security Defence (ICSD) function, owning the strategy, quality, and continuous improvement of how WTW detects threats across its global estate in AI era. This role blends deep technical detection expertise with team leadership, driving a threat-led, intelligence-informed approach to detection that maps directly to real adversary behaviour.Siga leyendo para comprender completamente lo que este trabajo requiere en cuanto a habilidades y experiencia. Si su perfil encaja, presente su candidatura.The Lead will set the standard for how detections are designed, written, tested, documented, and maintained – championing Detection-as-Code, measurable detection coverage, and a strong engineering culture. Working closely with SOC, Threat Hunting, Cyber Threat Intelligence (CTI), Incident Response, and VulnerabilityManagement teams, the Lead will ensure WTW’s detection library evolves ahead of the threat landscape.The individual will work as part of a global, multi-disciplined security community with strong support across the business, helping to foster a security-aware culture while ensuring WTW remains a great place to work. With WTW’s large global footprint, this role offers a fascinating range of work, and occasional global travel may be required.The Threat-Led Detection Engineer Lead will grow WTW’s detection engineering function within the Global Cyber Security Defence team. Responsibilities of this role will include:Drive WTW’s detection engineering strategy, setting the vision, standards, and roadmap for threat-led detection across cloud, endpoint, identity, network, and SaaS environments.Lead, mentor, and grow a team of detection engineers, establishing engineering best practices, peer review, and a culture of high-quality, well-documented detections.Drive a threat-led detection approach, prioritising detection development against adversary tradecraft using the MITRE ATT&CK framework, the Cyber Kill Chain, and the Diamond Model of Intrusion Analysis.Translate Cyber Threat Intelligence and threat-hunting findings into robust, high-fidelity detections with low false-positive rates.Establish, own, and maintain the central detection library, ensuring detections are version-controlled, tested, documented, and mapped to MITRE ATT&CK coverage.Champion Detection-as-Code, implementing Git-based workflows, CI/CD pipelines, automated testing, and peer review for all detection content.Define and track detection coverage, efficacy, and quality metrics (e.G. ATT&CK coverage, detection fidelity, time-to-detect) and report on detection posture to senior leadership.Lead detection validation and tuning through adversary emulation, purple-team exercises, and breach-and-attack-simulation tooling (e.G. Atomic Red Team, Caldera).Support the integration of AI and automation into detection workflows – including AI-assisted detection authoring, enrichment, and triage – and lead detection efforts for AI/GenAI-specific threats.Partner with SOC, Threat Hunting, CTI, Incident Response, and Vulnerability Management to close detection gaps identified during incidents and hunts.Govern the full detection lifecycle: intake, development, testing, deployment, monitoring, tuning, retirement, and continuous improvement.Evaluate and onboard new log sources, telemetry, and tooling to expand detection coverage across the global estate.Set standards for detection documentation, runbooks, and response guidance so every detection is clear and actionable for the SOC.QualificationsWe are looking for a candidate for the Threat-Led Detection Engineer Lead role who has the following:Must-have5+ years in cyber security with detection engineering experience, including a track record of leading, mentoring, or coordinating technical teams.Strong cyber security mindset with a deep, thorough understanding of adversary behaviour, attacker tradecraft, and the modern threat landscape.Expert knowledge of the MITRE ATT&CK framework, the Cyber Kill Chain, and the Diamond Model, with proven ability to map and drive detection coverage against them.Proven expertise writing, testing, and maintaining detection rules across SIEM and EDR/XDR platforms (e.G. Microsoft Sentinel, Splunk, Elastic, CrowdStrike, Microsoft Defender XDR), using query languages such as KQL, SPL, EQL, or Sigma.Demonstrated ability to develop high-fidelity detections swiftly in response to emerging threats, intelligence, and live incidents.Experience owning and maturing a detection library, including detection lifecycle governance and ATT&CK coverage mapping.Hands‑on experience with Detection-as-Code: Git, version control, CI/CD pipelines, and automated testing of detection content.Understanding of AI/ML in security operations and awareness of AI‑specific threats (prompt injection, model/data poisoning, sensitive‑data exposure via GenAI), with familiarity with the OWASP LLM Top 10 and MITRE ATLAS.Exceptional written and verbal communication skills, able to convey complex technical concepts to both engineers and non‑technical stakeholders, including executives.Good to haveStrong threat‑hunting mindset and hands‑on hunting experience to proactively surface detection gaps and feed detection development.Scripting and automation skills (e.G. Python, PowerShell) for tooling, enrichment, and SOAR integration.Familiarity with detection data pipelines (log routing, parsing, normalisation, data lakes) and how they affect detection quality. xhfqzwm We’re committed to equal employment opportunity and provide application, interview and workplace adjustments and accommodations to all applicants. If you foresee any barriers, from the application process through to joining WTW, please email Job InfoJob Identification 202604211Job Category Information and Cyber SecurityPosting Date 06/29/2026, 02:14 PM#J-18808-Ljbffr

Cyber Threat Hunter Envíe su solicitud a continuación después de leer todos los detalles y la información de apoyo sobre esta oportunidad de trabajo. At ING Hubs Spain we are looking for a Cyber Threat Hunter. Your role and work environment are driven by curiosity and the motivation to stay ahead of cyber adversaries. As a Cyber Threat Hunter, you will proactively uncover advanced and hidden threats before they become incidents, think like an attacker, challenge assumptions, and help strengthen ING's resilience against evolving cyber risks. Team You will join ING's Global Threat Management (GTM) team, a central capability within the CISO domain that focuses on intelligence-driven, proactive defense. The team works across geographies and disciplines to anticipate emerging threats, investigate advanced attack scenarios, and continuously improve ING's detection and defensive posture. Collaboration, communication, ownership and impact are core to how we work. Key Responsibilities • Proactively conduct intelligence-led threat hunting based on emerging threats, adversary activity, and major external cyber incidents., • Develop and test hypothesis-driven investigations to identify unknown or evasive malicious activity., • Analyze adversary behaviour across the full attack chain, identifying detection and control gaps., • Translate hunt outcomes into actionable improvements for detection, prevention, and defensive architecture., • Map findings to MITRE ATT&CK to clearly articulate threats, gaps, and priorities., • Communicate investigation outcomes in clear, executive-ready reports that support risk-based decision making., • Leverage automation, AI-assisted analytics, and Breach & Attack Simulation (BAS) to continuously validate threat hypotheses, test adversary techniques and prioritize high-risk attack paths. Qualifications • Several years of hands-on experience in threat hunting activities., • Ability to translate threat intelligence into concrete, high-impact investigations., • Skill in identifying meaningful security gaps rather than chasing alerts or noise., • Capacity to think and reason like an adversary while acting as a defender., • Ability to deliver investigation outcomes that improve detection, controls or resilience., • Clear communication of complex threats to both technical and non-technical stakeholders., • Ability to work effectively in an environment with ambiguity, autonomy and high trust. Extra Points • Experience or relevant certifications in cyber threat hunting, detection engineering or adversary simulation (e.g., GIAC, MITRE ATT&CK, cloud security or BAS-related certifications) are considered an advantage. Benefits Flexible remuneration model with benefits such as nursery, transport card, training aids… Transport allowance to help you get to the office. Pension plan available after one month of employment. Health insurance for you and your family (spouse/partner and children). Life insurance to protect what matters most. Restaurant card to cover lunch expenses. xcskxlj Electric mobility solutions, doctor, hairdresser, gym and The Good Service to help you with errands available in our offices. Flexible work model allowing you to decide which days you work at home and which you come to ING MAD. #J-18808-Ljbffr

Celonis is the global leader in Process Intelligence and the pioneer of Process Mining technology. As one of the world’s fastest-growing enterprise SaaS companies, we are changemakers pushing the boundaries of what’s possible. We invest heavily in advanced AI capabilities—specifically our Process Intelligence Graph—to turn data insights into immediate business action. We believe there is a massive opportunity to unlock global productivity and sustainability by placing intelligence at the core of every business process. Join our mission to make processes work for people, companies, and the planet. Si desea conocer los requisitos para este puesto, siga leyendo para obtener toda la información relevante. About The Role Celonis is seeking a Manager of Global Cyber Defense to lead our Security Operations (SecOps) and Incident Response teams. In this global leadership position, you will be the primary architect and custodian of the strategies, tools, and policies that safeguard Celonis’s enterprise data, corporate infrastructure, and cloud-native environments. Your team will ensure the security and integrity of our global execution management platform, protecting the critical business processes of our customers. By designing and deploying advanced technical controls, you will ensure that emerging cyber threats are automatically detected, isolated, and neutralized. As a core security leader, you will collaborate across Engineering, Product, and IT to build a resilient, security-first culture, integrating deep threat insights directly into our continuous software development lifecycle. You should be ready to lead by example, bring deep technical mastery of modern security ecosystems, and blend proprietary and open-source tooling into a seamless, next-generation global defense strategy. This position reports VP of Information Security. What You Will Do In This Role • Lead and Scale: Recruit, mentor, and develop a high‑performing global team of cyber defense engineers and security analysts., • Define Standards: Author and maintain enterprise‑wide cyber defense frameworks, incident response playbooks, and operational blueprints., • Drive SOC Evolution: Own the strategic architecture, tooling, and day‑to‑day operations of our modern Security Operations Center (SOC)., • Threat Mitigation: Oversee the rapid identification, containment, and remediation of advanced cyber attacks and vulnerabilities., • Tooling Innovation: Evaluate, select, and integrate cutting‑edge security technologies, focusing on automation (SOAR), telemetry, and SIEM optimization., • Proactive Defense: Champion threat modeling, breach simulations, and tabletop exercises across Engineering, Cloud Infrastructure, and IT., • Cultivate Enablement: Partner with internal learning teams to institutionalize security playbooks and upskill teams across the organization., • Metrics and Accountability: Establish, track, and report on high‑impact cyber defense KPIs to provide visibility to executive leadership., • Agile Execution: Manage the Cyber Defense roadmap within an agile engineering framework to ensure predictable, high‑velocity security delivery. What We Are Looking For • Threat Combat Experience: A proven track record of successfully mitigating advanced persistent threats (APTs) and sophisticated cyber adversaries., • SOC Architecture Mastery: In-depth, foundational knowledge of SOC design, including advanced logging strategies, network segmentation, cloud telemetry, and honeypots., • Cloud & SaaS Expertise: Strong technical understanding of securing enterprise SaaS platforms and cloud environments (AWS, Azure, or GCP)., • Automation-First Mindset: Demonstrated ability to build, automate, and orchestrate effective incident response workflows to minimize blast radiuses., • Framework Familiarity: Strong working knowledge of security risk management and threat frameworks (e.g., NIST CSF, MITRE ATT&CK)., • Academic Foundation: A strong academic background with a Bachelor’s degree in Computer Science, STEM, or a compelling narrative of equivalent real‑world technical experience., • Leadership and Drive: Proven capability to manage technical teams, manage high‑pressure situations, and consistently exceed operational goals., • Executive Communication: Exceptional English communication skills, with the confidence to deliver transparent, data‑driven security metrics to the CISO and executive board. Preferred Qualifications • Hybrid Security Background: Hands‑on experience spanning both offensive (red teaming/penetration testing) and defensive (blue teaming) disciplines., • Data-Driven Security: Familiarity with leveraging data analytics, SIEM engineering, or process‑oriented workflows to optimize security operations., • Industry Certifications: Relevant elite certifications such as CISSP, CISM, or GIAC., • Enterprise Endpoint Security: Experience managing and securing corporate endpoint fleets at a global scale. What Celonis Can Offer You • Pioneer Innovation: Work with the global leader in Process Mining and the Process Intelligence Graph to shape the future of AI‑driven business operations., • Ownership from Day 1: Every full‑time Celonaut is an owner, receiving Restricted Stock Units (RSUs) and merit‑based refresh grants., • Unrivaled Family Support: Benefit from our inclusive parental leave policy—24 weeks of fully paid leave for primary carers and 12 weeks for supporting carers, available from your first day of employment., • Work‑Life Integration: Enjoy Unlimited PTO (in applicable regions) and generous PTO globally, as well as a flexible hybrid work model that balances remote focus with vibrant office collaboration., • Continuous Growth: Elevate your skills through our 70‑20‑10 learning framework, mentorship programs, and access to a dedicated learning platform., • Holistic Well‑being: Prioritize your health with subsidized Wellhub memberships, mental health counseling, and dedicated “Wellness Weeks” that prioritize work/life balance., • Drive Sustainability: Participate in annual Impact Days, where you receive paid time off to volunteer for community and environmental causes with your local office, or virtually., • Global Inclusion & Belonging: Find community through our Inclusion Think Tank and participate in our annual Inclusion Days, ensuring every voice is heard and valued. xcskxlj, • Value‑Driven Impact: Join a mission‑led organization where our core values—Live for Customer Value, The Best Team Wins, We Own It, and Earth Is Our Future—drive every decision. #J-18808-Ljbffr

Description La descripción completa del puesto cubre todas las habilidades asociadas, la experiencia previa y cualquier cualificación que se espera que tengan los solicitantes. The Cyber Security Incident Response Assistant Manager will play a pivotal role within WTW’s Global Information and Cyber Security Defence (ICSD) function, leading the response to complex security incidents and driving initiatives to enhance WTW’s Cyber incident management capabilities. This mid senior-level role requires a highly experienced professional with more than 5 years of expertise in incident response and cybersecurity. As a key player in WTW’s Cyber Defense strategy, you will establish and refine incident response procedures, collaborate with diverse stakeholders across the organization, and engage closely with other Cyber-Defense teams, including SOC, Threat Hunting, Cyber Threat Intelligence (CTI), and Insider Threat. You will also work beyond the technical domain, liaising with HR, Legal, Compliance, and other business units to ensure effective incident management and mitigation. The individual will work as part of a global, multi-disciplined security community with strong support across the business, contributing to fostering a security-aware culture while ensuring WTW remains a great place to work. With WTW’s large global footprint, this role offers a fascinating range of work, and occasional global travel may be required. The Role The Cyber Security Incident Response Assistant Manager will play a key role in managing and responding to security incidents within WTW’s Global Cyber Security Incident Response Team. Responsibilities of this role will include: • Serve as the primary lead for significant security incidents, coordinating response efforts across technical and business teams to minimize impact and ensure timely resolution., • Establish, refine, and maintain incident response processes, playbooks, and workflows to align with industry best practices and WTW’s organizational needs., • Act as the central point of contact for incident response activities, ensuring effective communication with internal and external stakeholders, including senior leadership, Legal, HR, and Compliance teams., • Leverage AI and automation to accelerate incident containment, response, and remediation — embedding AI‑assisted triage, alert enrichment, and decision support into SOAR playbooks and response workflows, • Lead the in‑depth technical investigation of security incidents escalated from the SOC, ensuring timely containment, eradication, and recovery while identifying root causes and potential impact., • Adept at leading global response teams, integrating SIEM/SOAR platforms, and collaborating with MSSPs to mitigate cloud‑native and supply chain attack., • Work closely with SOC, Threat Hunting, CTI, Insider Threat, and Vulnerability Management teams to ensure seamless coordination and information sharing during incidents., • Lead root cause analysis and post‑incident reviews to identify gaps, implement lessons learned, and enhance the overall incident response program., • Evaluate and prioritize incidents based on potential impact and severity, escalating issues to higher levels of management or other teams as required., • Contribute to the development and maintenance of key performance indicators (KPIs) and metrics to measure the effectiveness of incident response processes., • Act as a liaison between technical teams and business stakeholders, ensuring clear communication during incidents and status updates. Qualifications We are looking for a candidate for Cyber Security Incident Response who has the following: • Minimum 5 years of experience in SOC or incident response, with a strong understanding of cybersecurity principles, frameworks, and tools., • Understanding of AI/ML applications in security operations, including AI‑augmented detection, triage, and response automation., • Awareness of AI‑specific threats and incident types (prompt injection, model/data poisoning, sensitive‑data exposure via GenAI), and familiarity with OWASP LLM Top 10 / MITRE ATLAS., • Hands‑on cloud incident response across Azure, AWS, and/or GCP, including cloud‑native log sources (Azure Activity/Entra ID sign‑in logs, AWS CloudTrail) and the reality that cloud IR differs from on‑prem., • Proven ability to lead high‑stakes security incidents and coordinate cross‑functional teams effectively., • Deep understanding of MITRE ATT&CK, cyber kill chain, and incident response methodologies., • Exceptional verbal and written communication skills, with the ability to convey complex technical concepts to non‑technical audiences, including executives., • A proactive and decisive mindset with the ability to operate under pressure., • Strong analytical and problem‑solving skills to make informed decisions in complex situations., • Collaborative and adaptable, with a passion for mentoring and developing team members. xcskxlj We’re committed to equal employment opportunity and provide application, interview and workplace adjustments and accommodations to all applicants. If you foresee any barriers, from the application process through to joining WTW, please email #J-18808-Ljbffr

SegurCaixa Adeslas es la compañía No Vida líder en España en seguros de salud, integrada en el Grupo Mutua Madrileña y participada por CaixaBank. ¿Es este el siguiente paso en su carrera? Descubra si es el candidato adecuado leyendo la descripción completa a continuación. En los últimos años se ha convertido en una entidad de referencia gracias a la implantación de un modelo de negocio basado en el crecimiento sostenido y rentable, que sitúa al cliente en el centro de la estrategia. A través de su acuerdo de bancaseguros con CaixaBank, SegurCaixa Adeslas comercializa sus productos en la mayor red bancaria de España. Adicionalmente, la aseguradora cuenta con una red tradicional con más de 4.000 puntos de venta y atención al cliente. Estamos de que las personas son el principal valor de nuestra compañía y por eso SegurCaixa Adeslas se muestra absolutamente comprometida con la igualdad de oportunidades entre hombres y mujeres. Nuestro Plan de Igualdad persigue hacer efectivo este principio y por ello, el proceso de selección de nuestras ofertas garantiza la igualdad de oportunidades a todas las candidaturas. Coordinador/a de Ciberseguridad SOC ¿Cuál será tu misión? En SegurCaixa Adeslas buscamos incorporar un/a Coordinador/a de Ciberseguridad SOC para formar parte del equipo de Ciberseguridad, contribuyendo a la protección de los activos y servicios críticos de la compañía. Serás el referente en la gestión de la operación SOC, coordinando la gestión de alertas, incidentes y herramientas de protección, participando activamente en la mejora continua de las capacidades defensivas de la organización. Principales responsabilidades • Actuar como punto de referencia técnico para la gestión y resolución de incidentes de seguridad complejos., • Gestionar escalados procedentes de servicios de seguridad externos y coordinar su resolución con equipos internos y fabricantes., • Administrar y optimizar herramientas de ciberseguridad como EDR, SIEM, WAF, DLP, IDS/IPS, SOAR y otras tecnologías de protección., • Analizar alertas e indicadores de compromiso, identificando riesgos y proponiendo acciones de mitigación., • Diseñar, desarrollar y mantener playbooks y casos de uso para la automatización de respuestas mediante plataformas SOAR., • Participar en actividades de respuesta ante incidentes y análisis forense cuando sea necesario., • Impulsar iniciativas de mejora continua en los procesos, procedimientos y capacidades de detección y respuesta., • Colaborar con equipos de Infraestructura, Sistemas, Redes y Desarrollo para garantizar la correcta implantación de medidas de seguridad., • Participar en proyectos de despliegue y evolución de soluciones de seguridad., • Elaborar documentación técnica, procedimientos operativos y reporting asociado al servicio. Requisitos • Titulación universitaria en Informática, Telecomunicaciones o similar., • Experiencia mínima de 5 años en posiciones relacionadas con Ciberseguridad, SOC o Seguridad Operativa., • Experiencia en administración y operación de herramientas de seguridad corporativa., • Experiencia en gestión de incidentes y análisis de alertas de seguridad., • Conocimientos sólidos en entornos de monitorización, detección y respuesta., • Experiencia participando en proyectos de implantación o evolución de soluciones de seguridad., • Capacidad de coordinación, trabajo en equipo y comunicación con distintos interlocutores técnicos. Conocimientos valorados • SOAR y automatización de procesos de seguridad., • Gestión de vulnerabilidades., • Marcos de referencia y buenas prácticas de seguridad (NIST, CIS Controls, MITRE ATT&CK)., • Auditorías de seguridad y gestión de riesgos. Valoraremos especialmente • Certificaciones CISSP, CISM, GCIA, GCIH, Security+, SC-200 o equivalentes., • Experiencia en grandes organizaciones y entornos altamente regulados. xkdbapo, • Experiencia coordinando servicios SOC o proveedores de seguridad gestionada., • Conocimiento de normativas como ISO 27001, ENS o NIS2. #J-18808-Ljbffr

ppPå ABB hjälper vi industrier att bli snabbare, mer resurseffektiva och hållbara. Här är framsteg en självklarhet - för dig, ditt team och hela världen. Som global marknadsledare ger vi dig rätt förutsättningar för att lyckas med det. Det kommer inte alltid att vara enkelt - utveckling kräver mod och styrka. På ABB är du aldrig ensam. Run what runs the world. /p pDenna position rapporterar till: NewCo Reference Job /p h3Your Role and Responsibilities /h3 ul liReport test bench operational status to PCV on a regular basis. /li liSupervise the creation and maintenance of operation and maintenance manuals. /li liDrive continuous improvement initiatives for the test bench (availability, functionality, performance). /li liManage test bench rental and expansion proposals, including billing oversight. /li liCoordinate subcontractor engagement for test bench modifications (in collaboration with PC) /li liTrain test bench operators on technical specifications, bench limitations, and test requirements. /li liProvide technical troubleshooting support during test execution. /li liManage SCADA system maintenance and support. /li liOversee Reinosa test bench operations and coordinate inter-site activities. /li liDevelop and track budget forecasts, identifying future resource needs and resource allocation requirements; submit forecasts to RD management. /li liProcure test bench materials and monitor expenditure tracking. /li liMaintain spare parts inventory levels. /li /ul h3Our Team Dynamics /h3 pOur teams support each other, collaborate, and never stop learning. Everyone brings something unique, and together we push ideas forward to solve real problems. Being part of our team means your work matters - because the progress we make here creates real impact out there. /p h3Qualifications for the Role /h3 ul liBachelor or Master degree in Engineering or assimilable education. /li liAt least 3 years of experience in a job similar to the one described. /li /ul ul liKnowledge in key tools, software, and skills: ul liSCADA systems /li liLabVIEW /li liPython /li liMicrosoft Office (Word, Excel, PowerPoint) /li liProject Planning/Scheduling tools /li liMaintenance and inventory management systems /li liBudget tracking and forecasting tools /li /ul /li /ul ul liRequired Competencies and Skills: ul liTeamwork – coordination with subcontractors, operators, and cross-site teams /li liLeadership and Influencing Skills – supervising operators and driving improvements /li liCritical Thinking and Problem Solving – technical troubleshooting and continuous improvement /li liEffective Communication – reporting to management and coordinating activities /li liAdaptability and Flexibility – managing changes and operational challenges /li liTime Management and Productivity – handling multiple responsibilities and budgets /li liContinuous Learning Ability – staying current with new systems and technologies /li liMindset to innovate, take ownership, drive improvement /li liEnglish: B1 (Intermediate): Can manage familiar situations and express simple opinions. /li liSpanish: C1 (Advanced): Can express ideas clearly, structured, and in detail on complex topics. /li /ul /li /ul p- Work model: #LI-hybrid /p pLocation: San Fernando de Henares, Madrid. /p h3What’s in it for you? /h3 pWe empower you to take initiative, challenge ideas, and lead with confidence. You’ll grow through meaningful work, continuous learning, and support that’s tailored to your goals. Every idea you share and every action you take contributes to something bigger. /p h3Benefits /h3 pGamesa Electric provides competitive benefits, ask us! /p ul libComprehensive Insurance Coverage /b: You’ll be covered by our collective insurance plans in Spain – life, accident, and travel assistance – so you can feel secure whether you're at work or on the road. /li libLunch Allowance /b: Receive a monthly allowance to enjoy your meals. /li libHome Office Flexibility /b: Work from wherever suits you best thanks to our flexible remote work options. /li libCompany Mobile Phone /b: Stay connected with a corporate phone – no need to mix work and personal calls. /li libEmployee Share Acquisition Plan /b: Want to invest in your future? Join our share acquisition plan and grow with the company. /li libLearning Training /b: Take advantage of a wide range of learning opportunities, grow, upskill, and move forward in your career. /li libCareer Development /b: Expect plenty of chances to advance your career internally with our Open Job Market, with support to explore new roles and take on exciting challenges! /li libFlexible Work Practices /b: We get that life happens – we support a healthy balance between your professional and personal life. /li /ul ul libWellbeing Program /b: From mental health support to wellness activities, we’ve got your back—mind and body. /li /ul ul liAs part of the flexible benefits:ul libPrivate health insurance for you and your family /b so you can focus on feeling your best. /li libKindergarten /b to support your children’s future. /li libTransport allowance /b: Encouraging sustainable commuting selecting an allowance for public transport. /li /ul /li /ul h3More about us /h3 pGamesa Electric is a worldwide leader in the design and manufacturing of electrical equipment, with extensive experience in photovoltaics, hydro-electric energy, marine propulsion, wind power and energy storage applications. Cutting-edge technology and innovation at service of renewable energies and environment, contributing with flexible complete solutions to make clean energy more affordable and reliable. Our target is leading the global renewable energy industry, driving the transition towards a sustainable world. /p pWe have the clear goal of driving diversity and inclusion across all dimensions: gender, LGBTQ+, abilities, ethnicity, generations, etc. Together, we are embarking on a journey where each one of us, individually and collectively, welcomes and celebrates individual differences. /p /p #J-18808-Ljbffr

Location: Madrid Emilio Vargas, Spain ¿Todo listo para enviar su solicitud? Por favor, lea la descripción al menos una vez antes de hacer clic en "Solicitar". Thales people architect identity management and data protection solutions at the heart of digital security. Business and governments rely on us to bring trust to the billions of digital interactions they have with people. Our technologies and services help banks exchange funds, people cross borders, energy become smarter and much more. More than 30,000 organizations already rely on us to verify the identities of people and things, grant access to digital services, analyze vast quantities of information and encrypt data to make the connected world more secure. Thales in Spain is a leader in technological solutions applied to Defence, Aeronautics, Security, Transportation and Space and, furthermore, is a global centre for excellence in Space, Security of Critical Infrastructures and Transportation. With a turnover of €320 million and a staff of 1,200, it exports approximately 40% of its total production principally to the Middle East, North Africa and Latin America. At Thales S21sec Spain, we are looking for a SOC Technical Lead – Threat Hunting & Incident Response with 4+ years of experience in cybersecurity to join our central services team. We are seeking a highly motivated professional with strong expertise in cybersecurity infrastructures, capable of supporting and managing complex technological environments across leading security vendors. Key Responsibilities • Drive Proactive Defense: You will spearhead our threat hunting strategy, utilizing advanced telemetry and intelligence to uncover sophisticated attacker patterns before they impact our infrastructure., • Lead Through Crisis: You will be the technical force behind our Incident Response, guiding the team through high‑pressure situations, conducting deep‑dive forensics, and refining our defense playbook to stay ahead of the adversary., • Mentor and Innovate: You will elevate the talent around you. Through hands‑on mentorship, technical workshops, and collaboration, you will cultivate a culture of continuous improvement and technical excellence., • Architect the Future: You will partner with our cloud and product teams to integrate security into every stage of the lifecycle. By championing "Security-as-Code" and automation, you will transform how we monitor and protect our global ecosystem. Requirements • Experience: Minimum 2–5 years of experience in Cybersecurity, with a strong focus on Security Operations, Incident Response, or Threat Hunting., • Demonstrated experience in a technical lead or senior‑level advisory role, guiding teams through complex technical challenges., • Proven background in managing security operations within high‑scale, distributed environments (Cloud or Hybrid)., • Advanced understanding of attacker TTPs (Tactics, Techniques, and Procedures) and the MITRE ATT&CK framework., • Deep expertise in SIEM/SOAR platforms, EDR/XDR tools, and network traffic analysis., • Experience with Cloud security (AWS, Azure, or GCP) and understanding of shared responsibility models., • Experience leading large‑scale incident investigations and performing root‑cause analysis., • Familiarity with forensic analysis tools and procedures. Why Join Thales S21sec Spain? At Thales S21sec, we pride ourselves on being innovative and flexible in how we work. We continuously evolve our policies to ensure a true work‑life balance. 100% Flexible Hybrid Work Work from home or come to the office whenever you choose. Up to 41 Days Off Per Year • 24 vacation days + additional flexible days, • Option to enjoy one free Friday per month (12 per year), • Choose between summer reduced hours or extra days of flexible working Flexible Compensation Package Optimize your net salary with benefits such as meal vouchers, transport cards, childcare vouchers, and training support. Continuous Learning & Certifications Access to an annual training plan including technical certifications, languages, and soft skills. Knowledge Sharing Culture Participate in our voluntary Speakers Program and share your expertise. Performance‑Based Bonuses Clear and transparent objectives aligned with KPI‑based annual bonuses. Career Growth Your Way Choose your path: • Leadership and team management, • Deep technical specialization with top experts Join Us If you are passionate about cybersecurity and want to make an impact, we are your company. We're looking forward to meeting you! At Thales we provide CAREERS and not only jobs. With Thales employing 80,000 employees in 68 countries our mobility policy enables thousands of employees each year to develop their careers at home and abroad, in their existing areas of expertise or by branching out into new fields. xcskxlj Together we believe that embracing flexibility is a smarter way of working. Great journeys start here, apply now! #J-18808-Ljbffr

Säljare sökes till ett nytt kontor i Barcelona.Ingen tidigare erfarenhet krävs, men driv och vilja att lära sig försäljning är viktigt.Erbjuder hög provision, grundlön och stöd vid flytt.

SOC - CERT Project Manager Are you passionate about cybersecurity and want to lead projects related to incident detection and response? The GMV cybersecurity team is looking for you! We like to get straight to the point and tell you what you won't find online. If you want to learn more about us, visit the GMV website. What challenge will you face? As a SOC-CERT Project Manager, you will lead the management and evolution of security monitoring and incident response services, coordinating technical teams and projects aimed at improving detection and response capabilities against cyber threats. You will work with SOC teams, security analysts, and incident response specialists to strengthen the protection of complex technological infrastructures and improve incident management processes. On a day-to-day basis you will: • Lead projects related to the operation and evolution of SOC and CERT services., • Coordinate technical teams of SOC analysts and cybersecurity specialists., • Oversee the detection, analysis, and management of security incidents., • Track KPIs and SLAs associated with monitoring and incident response services., • Define and improve detection, analysis, and incident response procedures., • Coordinate communication with clients and stakeholders during critical incidents., • Drive continuous improvement initiatives, automation, and SOC maturity., • Prepare technical and executive reports on the status of services and projects. What do we need in our team? We are looking for someone with experience in cybersecurity and project management, capable of coordinating technical teams and leading monitoring and incident response services in complex technological environments. • Experience in cybersecurity project management or SOC services., • Knowledge of SOC, CERT or CSIRT environments and security incident management., • Experience coordinating technical cybersecurity teams., • Knowledge of monitoring tools such as SIEM (Splunk, QRadar, ArcSight, Sentinel, or others)., • Knowledge of detection and response technologies such as EDR/XDR., • Familiarity with security frameworks and standards such as NIST, MITRE ATT&CK, or ISO 27001., • Experience tracking KPIs, SLAs, and reporting for security services., • Degree in Computer Engineering, Telecommunications, or similar., • Cybersecurity certifications such as CISSP, CISM, CEH, GIAC or equivalent are a plus. What do we offer? • Hybrid work model with 8 weeks per year of remote work outside your usual geographic area., • Flexible working hours with optional intensive Fridays and summer schedule., • Development of a personalized career plan, training, and language learning support., • National and international mobility. If you come from another country, we offer a relocation package., • Competitive compensation with continuous reviews, flexible benefits, and brand discounts., • Wellbeing program: health, dental, and accident insurance; free fruit and coffee; training in physical, mental, and financial health; and much more., • In our selection processes, you will always have personal or phone contact, in person or online, with our talent acquisition team. Transfers or bank card requests are never required. If contacted through another process, please contact the responsible recruitment person., • We promote equal opportunities in hiring, committed to inclusion and diversity. What are you waiting for? JOIN US. If you have any questions, feel free to contact Clara Sánchez Lobato, responsible for this vacancy. Clara Sánchez Lobato #J-18808-Ljbffr

Telefónica Tech es la compañía líder en transformación digital del Grupo Telefónica. Contamos con una amplia oferta de servicios y soluciones tecnológicas integradas de Ciberseguridad, Cloud, IoT, Big Data, Inteligencia Artificial y Blockchain, con la que acompañamos a nuestros clientes en su transformación digital. Si los siguientes requisitos del puesto y la experiencia coinciden con sus habilidades, por favor, asegúrese de enviar su solicitud sin demora. Somos un grupo de más de 6200 personas valientes que trabajamos a diario desde distintos puntos del mundo para alcanzar la excelencia, a través de un liderazgo basado en la transparencia y en el espíritu de equipo. Si te identificas con nuestros pilares, estamos deseando conocerte. En la unidad de Threats Intelligence de Telefónica Tech proveemos de manera proactiva información útil y accionable a nuestros clientes para ayudarles con su estrategia de seguridad y con la evaluación de riesgos y toma de decisiones. Realización de investigaciones y análisis técnicos sobre amenazas de diferente naturaleza. Se requerirá un conocimiento experto para atender escalados y elaborar informes técnicos y ejecutivos incorporando metodología de investigación de inteligencia, aportando información sobre vectores de ataque, descripción de Threat Actors y TTPS relacionadas. En el análisis de amenazas se requerirá el uso de máquinas virtuales y sandbox para analizar de forma segura enlaces sospechosos o artefactos de malware. Investigación y detección de nuevas formas de ataque utilizadas por adversarios relevantes para el sector financiero, así como para obtener información adicional sobre publicaciones relevantes dentro de foros underground y en Deep Web y Dark Web. Se necesitará desarrollar un amplio conocimiento sobre el conjunto de herramientas utilizado en el entorno de cliente, así como de los procedimientos internos. Será necesario mantener un enfoque proactivo de mejora continua, revisando los procesos en búsqueda de opciones de automatización y optimización de tareas. En el día a día se atenderán peticiones específicas de investigación y se dará soporte al equipo de nivel 1 y a cliente mediante la realización de guardias rotativas. Experiencia Necesario: 3-5 años trabajando en entornos analíticos o de inteligencia, idealmente en el ámbito de la ciberseguridad. Deseable: Experiencia adicional en consultoría. Necesario: Titulación relacionada con el ámbito de las TIC (Ingeniería Informática, Ingeniería de Telecomunicaciones o similares). Deseable: Certificación en materia de seguridad (CTIA, GCTI, CEH, GOSI, Cysa+, etc.). Conocimientos técnicos Necesario: • Uso de Expresiones Regulares (RegEx)., • Competencia en sistemas operativos basados en Linux., • Configuración y administración de máquinas virtuales (VMWare, VirtualBox)., • Experiencia previa en el modelado de amenazas utilizando la matriz de MITRE ATT&CK., • Experiencia en el uso de crawlers y técnicas de web scraping., • Capacidad para perfilar actores de amenaza., • Experiencia con herramientas de ticketing., • Conocimiento de las técnicas y metodologías de investigación y análisis de información en el ámbito del CTI., • Conocimiento del panorama actual de tendencias de ciberseguridad (Técnicas, Threat actors, campañas, etc.)., • Capacidad analítica y nivel alto de redacción en inglés y español., • Conocimientos sobre Threat Hunting, análisis forense o análisis de malware. Para desempeñar el rol, las skills que encajarían con el equipo y el proyecto serían • Trabajo en equipo, gestión de clientes, ganas de aprender, buena actitud, proactividad, alta capacidad de comunicación., • Medidas de conciliación y flexibilidad horaria., • Formación continua y certificaciones., • Modelo híbrido de teletrabajo., • Atractivo paquete de beneficios sociales., • Excelente ambiente de trabajo dinámico y multidisciplinar., • Programas de voluntariado. Somos diversos. xcskxlj Promovemos la inclusión de todas las personas sin importar género, edad, orientación e identidad sexual, cultura, discapacidad o cualquier otra condición. #J-18808-Ljbffr

pul liAtención y seguimiento del estado del paciente /li liAsistencia social al paciente y apoyo emocional /li liFavorecer la autonomía del paciente /li liVelar por la seguridad de los residentes /li /ul h3Requisitos /h3 ul liCertificado de profesionalidad o FP Grado Medio ATT socio sanitaria /li liBuena presencia /li liDisponibilidad total de lunes a domingo /li liValorable experiencia en el sector /li /ul h3Se Ofrece /h3 ul liTrabajo estable en prestigioso geriátrico del sector privado /li liInteresante retribución económica /li liCalidad de trabajo /li /ul /p #J-18808-Ljbffr

This job is with WTW, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. The Cyber Security Incident Response Assistant Manager will play a key role in managing and responding to security incidents within WTW's Global Cyber Security Incident Response Team. Responsibilities of this role will include: - Serve as the primary lead for significant security incidents, coordinating response efforts across technical and business teams to minimize impact and ensure timely resolution. - Establish, refine, and maintain incident response processes, playbooks, and workflows to align with industry best practices and WTW's organizational needs. - Act as the central point of contact for incident response activities, ensuring effective communication with internal and external stakeholders, including senior leadership, Legal, HR, and Compliance teams. - Leverage AI and automation to accelerate incident containment, response, and remediation — embedding AI-assisted triage, alert enrichment, and decision support into SOAR playbooks and response workflows - Lead the in-depth technical investigation of security incidents escalated from the SOC, ensuring timely containment, eradication, and recovery while identifying root causes and potential impact. - Adept at leading global response teams, integrating SIEM/SOAR platforms, and collaborating with MSSPs to mitigate cloud-native and supply chain attack. - Work closely with SOC, Threat Hunting, CTI, Insider Threat, and Vulnerability Management teams to ensure seamless coordination and information sharing during incidents. - Lead root cause analysis and post-incident reviews to identify gaps, implement lessons learned, and enhance the overall incident response program. - Evaluate and prioritize incidents based on potential impact and severity, escalating issues to higher levels of management or other teams as required. - Contribute to the development and maintenance of key performance indicators (KPIs) and metrics to measure the effectiveness of incident response processes. - Act as a liaison between technical teams and business stakeholders, ensuring clear communication during incidents and status updates. Qualifications The Requirements We are looking for a candidate for Cyber Security Incident Response who has the following: - Minimum 5 years of experience in SOC or incident response, with a strong understanding of cybersecurity principles, frameworks, and tools. - Understanding of AI/ML applications in security operations, including AI-augmented detection, triage, and response automation. - Awareness of AI-specific threats and incident types (prompt injection, model/data poisoning, sensitive-data exposure via GenAI), and familiarity with OWASP LLM Top 10 / MITRE ATLAS. - Hands-on cloud incident response across Azure, AWS, and/or GCP, including cloud-native log sources (Azure Activity/Entra ID sign-in logs, AWS CloudTrail) and the reality that cloud IR differs from on-prem. - Proven ability to lead high-stakes security incidents and coordinate cross-functional teams effectively. - Deep understanding of MITRE ATT&CK, cyber kill chain, and incident response methodologies. - Exceptional verbal and written communication skills, with the ability to convey complex technical concepts to non-technical audiences, including executives. - A proactive and decisive mindset with the ability to operate under pressure. - Strong analytical and problem-solving skills to make informed decisions in complex situations. - Collaborative and adaptable, with a passion for mentoring and developing team members. We're committed to equal employment opportunity and provide application, interview and workplace adjustments and accommodations to all applicants. If you foresee any barriers, from the application process through to joining WTW, please email candidate.helpdesk@willistowerswatson.com.

Anteriad söker en Business Development Representative (BDR) som primärt ringer IT-chefer i Norden, särskilt Sverige, för att samla information och skapa leads som bokar möten mellan IT-chefen och vår kunds säljteam. Dé el siguiente paso en su carrera profesional ahora: desplácese hacia abajo para leer la descripción completa del puesto y envíe su solicitud. Ingen telefonförsäljning sker i rollen. xcskxlj Vi erbjuder en fyra veckors onboarding och ett taklöst provisionssystem där insats och resultat ökar din intjäningspotential samt möjlighet till professionell tillväxt i organisationen. #J-18808-Ljbffr

I am looking to speak with Cyber Threat Hunting Managers, looking for a new opportunity in Madrid. Por favor, verifique que tiene el nivel de experiencia y las cualificaciones adecuadas leyendo la descripción completa de esta oportunidad a continuación. Working closely with an external security provider and a small internal team, you will take ownership of detection effectiveness, hunting outcomes, and the continuous improvement of security monitoring capabilities across a global enterprise environment. Responsibilities • Lead the threat detection and threat hunting function, providing technical leadership, strategic direction, and operational oversight, • Manage and coordinate internal resources and external security partners to deliver effective and consistent detection and hunting outcomes, • Assess detection coverage and develop, optimise, and maintain high-quality detection rules to improve visibility and reduce false positives, • Drive advanced, risk-based threat hunting activities to identify sophisticated and previously undetected threats, • Integrate findings from purple team exercises into detection engineering and hunting programmes, • Collaborate with Incident Response, Threat Intelligence, Vulnerability Management, and wider security teams to strengthen security operations and reduce risk, • Continuously improve detection capabilities, helping to reduce attacker dwell time and enhance threat visibility across the organisation Requirements • Degree in Computer Science, Cyber Security, or a related discipline, or equivalent experience, • 5+ years of experience in security monitoring, threat detection, threat hunting, or security operations, • Hands-on experience with SIEM, XDR, EDR, cloud security, identity protection, and network security technologiesStrong understanding of threat actors, attack methodologies, and frameworks such as MITRE ATT&CK, Cyber Kill Chain, and the Diamond Model xcskxlj • Experience working within large, global organisations and hybrid technology environments, • Excellent analytical, problem-solving, communication, and stakeholder management skills, • Demonstrated ability to drive continuous improvement and deliver measurable security outcomes, • Proactive, inquisitive, and solutions-focused approach with a strong sense of ownership and accountability This is an excellent opportunity to play a key role in developing and maturing an enterprise threat detection and hunting capability within a complex international environment. #J-18808-Ljbffr

If you dream of being a spy, but you don’t like Martinis. Your place is with us! Habilidades, experiencia, cualificaciones... Si tiene el perfil adecuado para esta oportunidad, asegúrese de inscribirse hoy mismo. We are expanding our teams in the defense sector. WHAT CHALLENGE WILL YOU BE TAKING ON? In our team you will participate in penetration testing projects and technical assessments on web and mobile applications, network infrastructures, Wi‑Fi networks, cloud environments (AWS, Azure, GCP), and emerging components such as artificial intelligence models. In addition, Red Team exercises will be conducted, oriented to simulate real attacks in a controlled manner, as well as Purple Team exercises, working in coordination with defensive teams to strengthen threat detection, response and mitigation. Activities will include: • Running penetration tests on web applications, mobile, network infrastructure, Wi‑Fi networks, cloud environments, artificial intelligence models, etc., • Participate in Red Team exercises, simulating real attacks, and Purple Team exercises, collaborating with defensive teams to improve threat detection and response., • Identify and report vulnerabilities, proposing technical recommendations for effective mitigation., • Collaborate with IT and cybersecurity teams in the implementation of security best practices WHAT DO WE NEED IN OUR TEAM? For this position, we are looking for cybersecurity or similar graduates with experience in penetration testing in: network infrastructure, web and mobile applications, cloud environments (AWS, Azure, GCP), Active Directory, wireless networks. In addition to experience in Red Team exercises, including planning, execution of simulated attacks, evasion techniques, persistence and exploitation in controlled or real environments. Scripting skills (Python, Bash, PowerShell) for automation of offensive tasks. Understanding of methodologies such as PTES, MITRE ATT&CK, OWASP will also be an asset. WHAT DO WE OFFER? • Hybrid working model and 8 weeks per year of teleworking outside your usual geographical area., • Flexible start and finish times, and intensive working hours Fridays and summer., • Personalized career plan development, training and language learning support., • National and international mobility. Do you come from another country? We can offer you a relocation package., • Competitive compensation with ongoing reviews, flexible compensation and discount on brands., • Wellbeing program: Health, dental and accident insurance; free fruit and coffee, physical, mental and financial health training, and much more! xcskxlj We promote equal opportunities in recruitment, and we are committed to inclusion and diversity. What are you waiting for? Join us #J-18808-Ljbffr

Do you enjoy cyber security and taking ownership to get the job done? Asegúrese de presentar su candidatura con toda la información solicitada, tal como se expone en la descripción del puesto a continuación. Are you excited about working with cutting edge security systems? Join our Infosec Threat and Vulnerability Management InfoSec TVM Team is responsible for safeguarding the security of Akamai's systems, infrastructure and providing internal advocacy for security practices. Opportunity to work closely with product and platform teams throughout the company. Become a Security Subject Matter Expert We're seeking a SecOps Engineer to serve as the operational hub of Guardicore's R&D Security Team, safeguarding our platform. Collaborating with engineers, you'll oversee detection, response, and vulnerability management to ensure risks are mitigated. If reducing noise, identifying threats, and ensuring remediation completion excites you, this role offers an engaging opportunity. As a Security Analyst Senior II, you will be responsible for: • Analyzing vulnerabilities by extracting findings from platforms like Wiz, Vulcan, Grype, and Tenable, while quantifying infrastructure impact for prioritization., • Creating AI automations streamlining security operations: auto‑triaging and containing SIEM while prioritizing vulnerability data from integrated tools effectively., • Engineering tools for signal quality by designing correlation searches, refining detection rules, and automating SOAR playbooks to reduce false positives efficiently., • Ensuring remediation governance by creating tickets, assigning owners, enforcing deadlines, and verifying fixes through rescans and evidence collection thoroughly., • Creating visibility and KPIs by managing dashboards tracking vulnerabilities, remediation speed, SLA adherence, MTTR/MTTD, patch age, and risk trends., • Monitoring SIEM telemetry, triaging alerts, containing and eradicating threats, and leading root‑cause analysis alongside post‑mortem evaluations., • Strengthening controls by mapping emerging TTPs (MITRE ATT&CK) to defenses, recommending detections, and implementing safeguards across cloud, container, and on‑prem environments. Do what you love To be successful in this role you will: • 4+ years in Security Operations / SOC / Incident Response, handling live incidents and vulnerability remediation programs end‑to‑end., • Demonstrate expertise with SIEM (e.g., Splunk), SOAR (e.g., XSOAR), and create parsers, analytics, or automation scripts using Python, Bash, Go., • Design vulnerability‑management dashboards and SLA tracking to enhance leadership transparency through proven experience and effective implementation strategies., • Demonstrate expertise in network protocols, Linux/Windows internals, and cloud telemetry (GCP or AWS) to adapt swiftly during investigations., • Demonstrate expertise with contemporary vulnerability‑management tools and implement risk‑based prioritization frameworks effectively., • Present metrics, incident summaries, and remediation roadmaps effectively to engineers and executives with clarity and professionalism. About us At Akamai, we make life better for billions of people, trillions of times a day. Whether you're streaming live events, scrolling social media, watching your favorite series, or managing your savings, we're the engine behind the scenes. We provide the world's most distributed platform from Cloud to Edge to help the giants of the digital world work faster and stay more secure, making the internet a better experience for everyone. Our focus is simple: Cloud and Edge: Running apps closer to users for instant performance. Security: Neutralizing threats before they ever reach your data. Content Delivery: Scaling the world's biggest moments without a glitch. AI: Enabling our customers to build, secure, and scale AI apps on the world's most distributed cloud platform. At Akamai, we don't just support the internet; we power and protect it, because behind every great digital experience is a massive hidden challenge. And we're the ones who solve it. When millions of people hit play or pay, Akamai ensures it just works. Benefits at Akamai We support your health, well‑being, finances, and life beyond work. See our benefits. FlexBase adapts to your job's needs Akamai's FlexBase program is yet another way we show our commitment to providing employees to an exceptional workplace experience. It's not about telling employees where to work; it's about supporting employees to do their best work. xcskxlj We trust our incredible employees to work in ways that suit them best: at home, in an office, or a combination of both. #J-18808-Ljbffr

SOC Analyst Revise detenidamente toda la documentación de la solicitud antes de hacer clic en el botón de solicitar al final de esta descripción. Department: Cyber Services and Capabilities Employment Type: Full Time Location: ESP Madrid Description As a SOC Analyst you will play a crucial role in strengthening the organisation's overall cybersecurity posture. You will be responsible for the monitoring, analysis, and response to security incidents and events. As an escalation point for R1 analysts, you will provide guidance and mentoring on complex security events, assist in tuning detection capabilities, and contribute to process improvements. Your expertise will also support data assurance, threat hunting, and vulnerability management, ensuring proactive defence against evolving cyber threats. This role requires strong analytical skills, technical proficiency, and a commitment to continuous learning in a dynamic security environment. Key Responsibilities Threat Detection and Monitoring: • Monitor the SOAR platform for SIEM Logs and bespoke logs from the customer., • Identify potential threats, vulnerabilities, and indicators of compromise., • Initiate escalation procedures to counteract potential threats and vulnerabilities., • Ability to analyze and interpret threat intelligence feeds and implement protective measures accordingly. Incident Remediation and Documentation: • Act as an escalation point for R1 analysts, providing technical guidance on complex security incidents., • Escalate to Team Lead or senior analyst should further clarification or four eyes be required., • Provide incident remediation and prevention recommendations to customers using established procedures and analyst experience., • Document and adhere to security monitoring processes., • Suggest process and procedure improvement based on working requirements to streamline processes. Customer Service and Escalation: • Exceed customer expectations by always delivering exceptional customer service., • Serve as an escalation point for junior and R1 team members, offering assistance and mentorship as needed., • Contribute to the creation and maintenance of security documentation, including incident response playbooks, standard operating procedures, and knowledge base articles. Reporting and Continuous Improvement: • Compile and review service-focused reports for effective communication., • Contribute to the creation and maintenance of security documentation, including incident response playbooks, standard operating procedures, and knowledge base articles., • Act as a mentor to junior R1 analysts. Threat Analysis and Collaboration: • Contribute practical insights to the analysis of common security incidents., • Maintain working relationships with the Analytic Development and Security Engineering teams., • Collaborate with shift partners to provide a high quality of service. General Duties: • Perform additional assigned duties as required., • Flexibility to quickly learn and adapt to new security tools, technologies, and processes., • Strong analytical and problem-solving skills., • Good communication skills, both written and verbal., • Ability to work collaboratively as part of a team., • Keep up to date with latest emerging threats and APT groups., • Ability to be a mentor to junior analysts. Skills, Knowledge & Expertise Minimum Requirements Network, Cloud and OS Knowledge: • Understanding of common network protocols and tools., • Proficient knowledge of Windows, Linux & MacOS operating systems., • Understanding of Content Delivery Networks Customer interaction: • Experience with documenting both high level and technical customer facing information., • Confidence providing critical/sensitive information accurately., • Contacting key stakeholders during major incidents Incident Analysis and Response: • Awareness of the MITRE ATT&CK framework, • Pedigree in performing in-depth analysis of security alerts., • Assess customer impact through investigation and work with senior analysts for resolution., • Initiate escalation procedure for potential threats, • Ability to interpret threat priority against the cyber kill chain., • Provide appropriate mitigation and remediation steps. Desirable Requirements Tooling • Hands-on experience with Security Information and Event Management (SIEM) platforms (e.g., Splunk, Sentinel, Swimlane) and their use in aggregating and analysing security event data., • Knowledge of cloud products and log events such as Azure, Amazon Web Services, Google Cloud Platform., • Proficiency with network analysis tools (Wireshark) to perform PCAP analysis. Desirable Certifications • CompTIA Security+, • CompTIA CySA +, • Security Blue Team Level One, • AWS Cloud Practitioner, • Azure Fundamentals, • MAD20 Att&ck Fundamentals Job Benefits • Flexible Working: Balance your work and personal life with our flexible working options., • Generous Holiday Allowance: Enjoy 25 days of holiday, plus bank holidays, with the option to buy up to 5 additional days of annual leave differs for SOC shift workers, please speak to your TA partner for more information)., • Medicash & Critical Illness Scheme, • Financial & Investment Benefits: Enjoy peace of mind with our Pension, Life Assurance, and Share Save Scheme., • Community & Volunteering Programmes: Make a difference in your community with our volunteering opportunities., • Green Car Scheme: Drive green and save money with our eco-friendly car scheme., • Cycle Scheme: Stay fit and healthy with our cycle-to-work scheme. xcskxlj, • Special Time Off: Take time off for those big moments in life, like getting married/entering into a civil partnership, becoming a grandparent, and welcoming home a new pet., • Family Planning: Benefit from our generous maternity and paternity leave, as well as time off and support for those undergoing fertility treatments. #J-18808-Ljbffr

Join a team of cybersecurity professionals and help Swiss Re to fulfil its mission in making the world more resilient. As the Senior Incident Coordinator, you'll play a crucial role in our cyber defense strategy, coordinating response activities, facilitating preparedness exercises, and driving improvement through thorough post‑incident analysis and documentation. You'll work in a hybrid setup, balancing work from home and the office premises. Descubra si esta oportunidad es adecuada para usted leyendo toda la información que sigue a continuación. About the Team The Cyber Incident Management team serves as the front‑line defense against cybersecurity threats across Swiss Re. We provide critical incident leadership and coordination, overseeing the triage, investigation, and containment of security events to minimize business impact. Our team excels in stakeholder communication and management during incidents, conducts post‑incident reviews to drive continuous improvement, and develops preparedness and resilience strategies. We also establish and monitor KPIs and metrics to enhance our security posture and response capabilities. Your Role • Exercise Planning & Facilitation: Design, organize, and facilitate regular tabletop exercises and simulations to test and enhance the organization's incident response capabilities., • Response Coordination: Support incident response efforts by coordinating resources, scheduling meetings, and ensuring proper communication channels are maintained., • Documentation Management: Create and maintain comprehensive incident response documentation, playbooks, and procedures., • Post‑Incident Reporting: Compile detailed incident reports capturing timeline, actions taken, and impact assessments., • Metrics & Analysis: Collect, analyse, and report on key incident metrics to identify trends and improvement opportunities., • Lessons Learned: Facilitate post‑incident review sessions and document findings to enhance future response efforts., • Stakeholder Communication: Coordinate communications between technical teams and business stakeholders during and after incidents., • Training Coordination: Organize and track participation in incident response training programs., • Process Improvement: Identify and implement refinements to incident management processes based on lessons learned., • Tool Administration: Support the maintenance and optimisation of incident management platforms and documentation repositories. Your Qualifications • Bachelor's degree in Business Administration, Information Technology, Cybersecurity, or equivalent practical experience., • Experience in incident management, business continuity, or security operations., • Demonstrated experience planning and facilitating tabletop exercises or simulations., • Strong documentation skills with experience creating reports, playbooks, or procedural documentation., • Excellent organisational and coordination abilities with attention to detail., • Strong communication skills in English. Nice‑to‑Have • Knowledge of cybersecurity frameworks (NIST, ISO 27001, MITRE ATT&CK)., • Experience with incident management or ticketing systems., • Background in metrics collection, analysis, and reporting., • Project or programme management experience or certifications., • Facilitation or training certification/experience., • Experience in process improvement methodologies., • Knowledge of security operations and incident response procedures. Role For Spain, the base salary range for this position is between EUR 62,000 and EUR 94,000 (for a full‑time role). The specific salary offered considers: • the requirements, scope, complexity and responsibilities of the role,, • the applicant's own profile including education, qualifications, specialisation, skills and experience. In addition to your base salary, Swiss Re offers an attractive performance‑based variable compensation component, designed to recognise your achievements. Further you will enjoy a variety of global and location‑specific benefits. Eligibility may vary depending on the terms of Swiss Re policies and your employment contract. Working Model Our company has a hybrid work model where the expectation is that you will be in the office at least three days per week. Equal Opportunity Our success depends on our ability to build an inclusive culture encouraging fresh perspectives and innovative thinking. We embrace a workplace where everyone can bring their authentic selves to work and their passion for sustainability. xcskxlj Reference Code 137235 #J-18808-Ljbffr Hay opciones de teletrabajo/trabajo desde casa disponibles para este puesto.

Do you want to participate in advanced offensive security assessments? The GMV Technical Audits team is looking for you! ¿Es usted el solicitante adecuado para esta oportunidad? Descúbralo leyendo el resumen del puesto a continuación. We like to get straight to the point and tell you what you won't find online. If you'd like to learn more about us, visit the GMV website. WHAT CHALLENGE WILL YOU TAKE ON? As a Senior Pentester, you will not only execute technical assessments but also design realistic attack scenarios based on MITRE ATT&CK TTPs and lead audit projects, helping organizations understand how they could be compromised before a real attacker does. You will work on web and mobile applications, network infrastructures, Wi‑Fi networks, cloud environments (AWS, Azure, GCP), Active Directory and AI‑based systems. You will also participate in Red Team and Purple Team exercises, simulating real attacks and collaborating with Blue Team professionals to improve threat detection and response capabilities. DAY‑TO‑DAY RESPONSIBILITIES • Execute and lead penetration tests in complex corporate environments., • Participate in Red Team exercises, applying evasion techniques against EDR, XDR, WAF and antivirus solutions., • Identify vulnerabilities, analyze their impact and propose effective mitigation strategies., • Develop or adapt offensive tools and automations using Python, Bash or PowerShell., • Produce clear technical and executive reports focused on risk., • Present findings to both technical and business audiences., • Manage technical audit projects, coordinating scope, timelines and deliverables. QUALIFICATIONS • 5+ years of experience in penetration testing (web, mobile, network, cloud, Active Directory, Wi‑Fi)., • Experience in Red Team operations designing and executing simulated attacks., • Advanced knowledge of tools such as Burp Suite, Nmap, Metasploit or C2 frameworks., • Ability to automate offensive tasks through scripting (Python, Bash or PowerShell)., • Experience producing technical and executive reports focused on risk., • Strong communication skills and ability to present results clearly., • Experience managing cybersecurity or technical audit projects., • Offensive certifications such as OSCP, OSEP, OSWE, eCPPT, CRTP or equivalent., • Knowledge of frameworks and methodologies such as PTES, MITRE ATT&CK or OWASP., • Experience assessing security in AI or LLM‑based systems (OWASP Top 10 for LLMs). BENEFITS • Hybrid work model and up to 8 weeks per year of remote work outside your usual geographical area., • Flexible working hours and intensive working days on Fridays and during summer., • A personalized career development plan, training opportunities and language learning support., • National and international mobility. Coming from another country? We offer a relocation package., • Competitive salary with continuous reviews, flexible compensation and brand discounts., • Wellbeing program: health, dental and accident insurance; free fruit and coffee; physical, mental and financial wellbeing initiatives. Throughout our recruitment process you will always have direct contact with our talent acquisition team, either by phone or in person/online. We will never request bank transfers or credit card details. If you are contacted through any other process, please reach out to the person responsible for the recruitment process. xcskxlj We promote equal opportunities in hiring and are committed to inclusion and diversity. WHAT ARE YOU WAITING FOR? JOIN US #J-18808-Ljbffr

VIEWNEXT, parte del Grupo IBM, está buscando profesionales apasionados por la seguridad ofensiva en Salamanca, España. ¿Todo listo para enviar su solicitud? Por favor, lea la descripción al menos una vez antes de hacer clic en "Solicitar". Este puesto implica trabajar en ejercicios de Red Teaming y pentesting, utilizando marcos como MITRE ATT&CK y OWASP para simular amenazas reales y analizar vulnerabilidades. Los beneficios incluyen formación continua, apoyo para certificaciones tecnológicas, un plan de carrera y horarios flexibles. Ofrecemos un ambiente de trabajo innovador y inclusivo, ideal para quienes buscan crecer en su carrera profesional. xcskxlj #J-18808-Ljbffr Hay opciones de teletrabajo/trabajo desde casa disponibles para este puesto.

Job Description La experiencia que se espera de los solicitantes, así como las habilidades y cualificaciones adicionales necesarias para este trabajo, se enumeran a continuación. We are seeking a SecOps Engineer to serve as the operational hub of Guardicore's R&D Security Team, safeguarding our platform. This role involves collaborating with product and platform engineering teams to oversee detection, response, and vulnerability management. Responsibilities • Analyze vulnerabilities by extracting findings from platforms such as Wiz, Vulcan, Grype, and Tenable, quantifying infrastructure impact for prioritization., • Create AI automations that streamline security operations, auto‑triaging and containing SIEM while prioritizing vulnerability data from integrated tools., • Engineer tools for signal quality by designing correlation searches, refining detection rules, and automating SOAR playbooks to reduce false positives., • Ensure remediation governance by creating tickets, assigning owners, enforcing deadlines, and verifying fixes through rescans and evidence collection., • Create visibility and KPIs by managing dashboards tracking vulnerabilities, remediation speed, SLA adherence, MTTR/MTTD, patch age, and risk trends., • Monitor SIEM telemetry, triage alerts, contain and eradicate threats, and lead root‑cause analysis alongside post‑mortem evaluations., • Strengthen controls by mapping emerging TTPs (MITRE ATT&CK) to defenses, recommending detections, and implementing safeguards across cloud, container, and on‑prem environments. Qualifications • 4+ years in Security Operations / SOC / Incident Response with end‑to‑end responsibility for live incidents and vulnerability remediation programs., • Demonstrated expertise with SIEM (e.g., Splunk), SOAR (e.g., XSOAR), and proficiency in scripting with Python, Bash, and Go., • Experience designing vulnerability‑management dashboards and SLA tracking to enhance leadership transparency., • Knowledge of network protocols, Linux/Windows internals, and cloud telemetry (GCP or AWS) for rapid investigations., • Proficiency with contemporary vulnerability‑management tools and implementation of risk‑based prioritization frameworks., • Strong communication skills to present metrics, incident summaries, and remediation roadmaps to engineers and executives with clarity and professionalism. About Akamai Akamai provides the world’s most distributed platform, helping digital leaders accelerate performance, improve security, and deliver a better Internet experience. Benefits Our benefits support health, well‑being, finances, and life beyond work. xcskxlj FlexBase allows employees to work in a way that best suits them. #J-18808-Ljbffr

We are expanding our Global Corporate Information Security team and are looking for an IGA (Identity Governance and Administration) & PAM (Privileged Access Management) Product Owner (m/f/d) who is responsible for the delivery, prioritization, and operational execution of the Identity Governance & Administration (IGA) and Privileged Access Management (PAM) product backlogs. This role owns the day-to-day responsibility for translating IAM strategy, regulatory requirements, and risk drivers into consumable IGA and PAM services, while overall accountability remains with the Head of IAM Security. The Product Owner ensures close alignment across architecture, engineering, SOC, and business stakeholders to deliver scalable, compliant identity and privileged access capabilities. This role is central to the organization’s Zero Trust and regulatory compliance journey, directly reducing the highest impact cyber risks related to over privileged access and poor identity governance. You will shape how identities, entitlements, and privileged access are governed across 55,000+ users and 2,500 applications, influencing both security posture and operational efficiency at enterprise scale. ¿Tiene lo que se necesita para triunfar? La siguiente información debe ser leída atentamente por todos los candidatos. Responsibilities • Own and manage the IGA & PAM product backlogs, priorities, and sprint objectives., • Act as day to day Product Owner for Global IGA and Global PAM initiatives., • Translate IAM strategy, regulatory obligations (NIS2, ISO 27001), and risk assessments into delivery backlog items., • Coordinate with IAM Architects to ensure architectural intent is correctly implemented by engineering teams., • Drive onboarding of applications, identities, and platforms into IGA lifecycle and PAM controls., • Ensure alignment between IGA, PAM, IAM analytics, and SOC monitoring., • Support tool selection, vendor engagement, and roadmap planning for IGA and PAM platforms., • Drive adoption, communication, and change management with business and IT stakeholders., • Provide clear reporting on delivery progress, risk reduction, and compliance KPIs to the Head of IAM. Immediate Contributions • Delivered a production ready Global IGA service covering JML automation, access governance, and access reviews., • Established a unified Global PAM service enforcing least privilege, MFA, and just in time access., • Implemented governance for non human identities (service accounts, technical IDs, automation)., • Defined and operationalized RBAC / PBAC role models across priority applications., • Achieved measurable reduction in standing privileges and audit findings related to access governance. Qualifications • Bachelor’s degree in IT, Cyber Security, or equivalent experience. Cybersecurity certifications are advantageous: CISSP, CISM, Microsoft Endpoint-related certifications, or comparable alternatives., • Fluency in English is a must. Skills in German and French are a plus., • Knowledge of modern security frameworks (MITRE ATT&CK, NIST CSF, ISO 27001)., • Experience implementing KPIs and running continual service improvement processes. Required skills and/or experience: Strong Product Owner experience in IAM, IGA, or PAM domains., • Deep understanding of Identity Governance concepts: Joiner Mover Leaver (JML); Access reviews & certifications; Role and entitlement modelling (RBAC / PBAC)., • Strong knowledge of Privileged Access Management: Vaulting & credential rotation; Just in time access & MFA enforcement; Privileged session monitoring., • Ability to balance risk, compliance, and delivery pragmatism in complex enterprises. Preferred • Experience with IGA and PAM tooling in large, multi domain environments., • Exposure to non human identity governance (service accounts, automation, APIs)., • Experience operating in regulated environments (ISO 27001, NIS2)., • Strong collaboration experience with SOC and audit teams. Benefits • Competitive compensation and benefits package that recognizes your expertise., • Flexible and hybrid working model., • Creative freedom and responsibility to shape processes and solutions in our global transformation., • Continuous learning and development with tailored training and certification opportunities., • Meal vouchers., • Life and accident insurance., • Option to include a premium private health insurance package as part of the flexible remuneration., • A safe, stable and international workplace within a trusted family business that invests in people. xcskxlj Location Liebherr IT Shared Service Centre Ibérica, S.L. Parque Norte. Alamo building Serrano Galvache, 56 28033 Madrid Spain (ES) Contact Karoliina Rissanen #J-18808-Ljbffr

Especialista en Ciberseguridad Por favor, verifique que tiene el nivel de experiencia y las cualificaciones adecuadas leyendo la descripción completa de esta oportunidad a continuación. En Metrica España, estamos en la búsqueda de un Especialista en Ciberseguridad con un mínimo de 1 año de experiencia para unirse a nuestro dinámico equipo. Buscamos a un profesional proactivo, con una gran actitud y un fuerte deseo de aprender y crecer en el campo de la ciberseguridad. Requisitos • Experiencia: Mínimo 1 año de experiencia profesional en ciberseguridad o un campo relacionado., • Conocimientos Técnicos:, • Python: Nivel de análisis, automatización y modelado., • SQL: Capacidad para consulta y manipulación de datos., • Machine Learning: Conocimientos aplicados a clasificación, detección de anomalías y clustering., • Visualización de Datos: Manejo de herramientas como Power BI, Tableau o similares., • SIEM: Conceptos básicos (logs, eventos, correlación de alertas)., • Threat Intelligence: Noción de IOCs, TTPs y marco MITRE ATT&CK., • IA Generativa/LLMs: Experiencia o familiaridad con herramientas de IA. ¿Qué Ofrecemos? • Oportunidad de unirte a una empresa en crecimiento con proyectos desafiantes., • Entorno de trabajo innovador y colaborativo., • Programas de formación continua y desarrollo profesional., • Paquete salarial competitivo acorde a la experiencia y el mercado. xcskxlj, • Oportunidades de crecimiento interno y desarrollo de carrera. #J-18808-Ljbffr

We are expanding our Global Corporate Information Security team and are looking for a Security Monitoring & Incident Response Product Owner (m/f/d) to establish and scale our global security operations. Asegúrese de leer la descripción completa a continuación y, si confía en que cumple todos los requisitos, envíe su solicitud de inmediato. Creating passion: your responsibilitiesSOC Operations & Service Management • Own the end-to-end operations of the global SOC, ensuring effective collaboration between internal analysts and the MSSP (L1/L2)., • Monitor, manage, and optimize processes, including alert triage, escalation flows, and incident response handovers., • Ensure all services related to Security Monitoring and Incident Response perform against defined SLAs and KPIs, and drive actions when service quality deviates., • Implement the SOC "product" roadmap related to Security Monitoring & Incident Response, including implementation of the strategic vision, backlog, and prioritization of improvements.Vendor & MSSP Management, • Act as the primary liaison between the organization and the MSSP to deliver SOC services., • Conduct recurring service governance meetings (operational and tactical)., • Track and validate MSSP deliverables, including detection operations, case handling quality, and runbook adherence., • Coordinate improvements to MSSP workflows, communication channels, and response processes.Incident Response Alignment, • Align with the internal incident response team to ensure seamless escalation., • Support the refinement of incident response procedures, playbooks, and communication guidelines., • Ensure major incidents are appropriately handled, documented, and followed by lessons learned sessions., • Guide the continuous evolution of incident management maturity and readiness.Governance, Compliance & Documentation, • Maintain alignment with internal security frameworks, standards, and regulatory requirements., • Produce regular reports on operational performance, risks, coverage, and incident trends., • Ensure processes, runbooks, service definitions, and operating procedures are consistently documented and kept up to date., • Support audits, assessments, and readiness activities related to detection and response.Contributing your strengths: your qualifications, • Bachelor's/Master's in Cybersecurity, Computer Science, or related field., • 7+ years of operational experience in SOC environments (L2/L3, threat hunting, incident response, service delivery, operational delivery)., • Exposure to global organizations and distributed security functions., • Knowledge of modern security frameworks (MITRE ATT&CK, NIST CSF, ISO 27001)., • Experience implementing KPIs and running continual service improvement processes., • Relevant certifications (e.g., CISSP, GCIH, CCSP, GCIA, GMON) are a plus, but not mandatory., • Fluency in English (written and spoken)., • Willingness and ability to travel to Liebherr sites worldwide up to 10% of the time.Our commitment to you: your benefits, • Competitive compensation and benefits package that recognizes your expertise., • Flexible and hybrid working model., • Creative freedom and responsibility to shape processes and solutions in our global transformation., • Continuous learning and development with tailored training and certification opportunities., • Meal vouchers., • Life and accident insurance., • Option to include a premium private health insurance package as part of the flexible remuneration., • A safe, stable and international workplace within a trusted family business that invests in people. xcskxlj Location Liebherr IT Shared Service Centre Ibérica, S.L. Parque Norte. Alamo building Serrano Galvache, 56 28033 Madrid Spain (ES) #J-18808-Ljbffr

Madrid | Working from home up to 40% | Reference 8166 Por favor, asegúrese de leer completamente el resumen y los requisitos de esta oportunidad de empleo que se detallan a continuación. The Security Operations Center (SOC) is a critical Line of Defense 1 function at SIX, responsible for detecting, investigating, and responding to cyber threats across endpoint, identity, network, cloud, and email environments. We are looking for a hands‑on security professional with experience in incident response, threat hunting, and security monitoring. In this role, you will investigate complex alerts, develop and tune detection use cases, support containment and remediation efforts, improve automation and playbooks, and proactively identify threats to strengthen SIX's overall security posture. What You Will Do • Develop, tune, and maintain threat detections and SIEM use cases across endpoint, network, identity, cloud, mail, and M365 environments., • Investigate complex security incidents, lead threat analysis, and coordinate containment and remediation activities., • Design and improve detection content, SOC automation, SOAR workflows, and incident response playbooks., • Conduct proactive threat hunting using threat intelligence and the MITRE ATT&CK framework., • Identify detection gaps and continuously enhance SOC capabilities and security posture., • Mentor junior analysts and contribute to SOC process improvements and knowledge sharing. What You Bring • 5+ years of experience in SOC operations, detection engineering, threat hunting, and incident response., • Hands‑on experience with SIEM, EDR, and SOAR platforms (preferably Sentinel, Elastic, Defender for Endpoint, and Cortex XSOAR)., • Strong background in detection rule development, security investigations, and threat hunting across multiple telemetry sources., • Experience with scripting, automation, APIs, and tools such as Python, GitLab, Azure DevOps, and CI/CD practices., • Knowledge of security query languages and frameworks, including MITRE ATT&CK., • Strong analytical, communication, collaboration, and mentoring skills. Diversity is important to us. Therefore, we are looking to receiving applications regardless of any personal background. What We Offer Flexible Work Models We trust our employees and offer a work environment that is well‑balanced, productive and fosters success. Personal Development You will benefit from a culture of continuous learning and feedback. Your personal growth is supported through an extensive learning offering. xcskxlj Agile Working Methods Whether through scrum or design thinking, we solve exciting tasks together in teams. #J-18808-Ljbffr

SOC Technical Lead – Threat Hunting & Incident ResponseApplyremote type: Hybridlocations: Madrid Emilio Vargastime type: Full timeposted on: Posted Todayjob requisition id: R0333099Location: Madrid Emilio Vargas, SpainThales people architect identity management and data protection solutions at the heart of digital security. La siguiente información ofrece un resumen de las habilidades, cualidades y cualificaciones necesarias para este puesto. Business and governments rely on us to bring trust to the billions of digital interactions they have with people. Our technologies and services help banks exchange funds, people cross borders, energy become smarter and much more. More than 30,000 organizations already rely on us to verify the identities of people and things, grant access to digital services, analyze vast quantities of information and encrypt data to make the connected world more secure.Thales in Spain is a leader in technological solutions applied to Defence, Aeronautics, Security, Transportation and Space and, furthermore, is a global centre for excellence in Space, Security of Critical Infrastructures and Transportation. With a turnover of €320 million and a staff of 1,200, it exports approximately 40% of its total production principally to the Middle East, North Africa and Latin America.At **Thales S21sec Spain , we are looking for a **SOC Technical Lead – Threat Hunting & Incident Response with **4 + years of experience in cybersecurity to join our central services team.We are seeking a highly motivated professional with strong expertise in **cybersecurity infrastructures , capable of supporting and managing complex technological environments across leading security vendors.Join the Team Defending Thales’ Future At Thales, we don't just respond to threats—we anticipate them. We are looking for a visionary SOC Technical Lead who thrives at the intersection of advanced threat hunting, rapid incident response, and team mentorship. If you are passionate about building resilient security architectures and want to lead a team that is defining the next generation of SOC services, this is your opportunity to make a lasting impact.### **Key Responsibilities * Drive Proactive Defense: You will spearhead our threat hunting strategy, utilizing advanced telemetry and intelligence to uncover sophisticated attacker patterns before they impact our infrastructure. • Lead Through Crisis: You will be the technical force behind our Incident Response, guiding the team through high-pressure situations, conducting deep-dive forensics, and refining our defense playbook to stay ahead of the adversary., • Mentor and Innovate: You will elevate the talent around you. Through hands-on mentorship, technical workshops, and collaboration, you will cultivate a culture of continuous improvement and technical excellence. • Architect the Future: You will partner with our cloud and product teams to integrate security into every stage of the lifecycle. By championing "Security-as-Code" and automation, you will transform how we monitor and protect our global ecosystem.### **Requirements * ### Experience: Minimum 2–5 years of experience in Cybersecurity, with a strong focus on Security Operations, Incident Response, or Threat Hunting. • ### Demonstrated experience in a technical lead or senior-level advisory role, guiding teams through complex technical challenges., • ### Proven background in managing security operations within high-scale, distributed environments (Cloud or Hybrid)., • ### Advanced understanding of attacker TTPs (Tactics, Techniques, and Procedures) and the MITRE ATT&CK framework., • ### Deep expertise in SIEM/SOAR platforms, EDR/XDR tools, and network traffic analysis., • ### Experience with Cloud security (AWS, Azure, or GCP) and understanding of shared responsibility models., • ### Experience leading large-scale incident investigations and performing root-cause analysis., • ### Familiarity with forensic analysis tools and procedures.### ### **Why Join Thales S21sec Spain? **At Thales S21sec, we pride ourselves on being **innovative and flexible in how we work. We continuously evolve our policies to ensure a true **work-life balance . **100% Flexible Hybrid Work Work from home or come to the office whenever you choose. **Up to 41 Days Off Per Year * 24 vacation days + additional flexible days • Option to enjoy **one free Friday per month (12 per year) * Choose between **summer reduced hours or extra days of **Flexible Compensation Package **Optimize your net salary with benefits such as meal vouchers, transport cards, childcare vouchers, and training support. **Continuous Learning & Certifications Access to an **annual training plan including technical certifications, languages, and soft skills. **Knowledge Sharing Culture Participate in our voluntary **Speakers Program and share your expertise. **Performance-Based Bonuses Clear and transparent objectives aligned with KPI-based annual bonuses. **Career Growth Your Way Choose your path: • Leadership and team management, • Deep technical specialization with top experts### **Join Us **If you are passionate about cybersecurity and want to make an impact, **we are your company . *We’re looking forward to meeting you! *At Thales we provide CAREERS and not only jobs. With Thales employing 80,000 employees in 68 countries our mobility policy enables thousands of employees each year to develop their careers at home and abroad, in their existing areas of expertise or by branching out into new fields. xcskxlj Together we believe that embracing flexibility is a smarter way of working. Great journeys start here, apply now! #J-18808-Ljbffr

SIX Group Services Ltd. Si sus habilidades, experiencia y cualificaciones coinciden con las de esta descripción del puesto, no demore su solicitud. is seeking a motivated Cyber Threat Intelligence Analyst to advance intelligence capabilities through automation and AI-driven analysis in Madrid, with up to 40% remote work. You will collaborate with an international CTI team and cross-functional partners to enhance threat detection and incident response. xcskxlj The role emphasizes automation, telemetry maturation, and integration of security tooling like OpenCTI, Elastic Stack, and SIEM, applying MITRE ATT&CK to contextualize #J-18808-Ljbffr Hay opciones de teletrabajo/trabajo desde casa disponibles para este puesto.

¿Te apasiona analizar amenazas, comprender las tácticas de los adversarios y transformar información en inteligencia accionable? Buscamos un/a Threat Intelligence Analyst para incorporarse a nuestro equipo de Ciberinteligencia y contribuir a la identificación, análisis y seguimiento de amenazas que afectan a organizaciones, infraestructuras críticas y entornos digitales complejos. Consulte la descripción del puesto a continuación. Si confía en que tiene las habilidades y la experiencia adecuadas, envíe su solicitud hoy mismo. Formarás parte de un equipo especializado que trabaja en la generación de inteligencia estratégica, operativa y táctica para anticipar riesgos, apoyar operaciones de ciberseguridad y fortalecer la capacidad de detección y respuesta frente a amenazas emergentes. Tu misión Recopilar, analizar y contextualizar información sobre amenazas cibernéticas para generar inteligencia útil que permita mejorar la toma de decisiones, fortalecer las capacidades defensivas y anticipar la actividad de actores maliciosos. Qué harás • Investigar amenazas, campañas maliciosas, actores de amenazas y tendencias del panorama de ciberseguridad., • Analizar indicadores de compromiso (IoCs), tácticas, técnicas y procedimientos (TTPs) utilizando marcos como MITRE ATT&CK., • Realizar actividades de recopilación, correlación y enriquecimiento de información procedente de múltiples fuentes., • Elaborar informes de inteligencia adaptados a diferentes audiencias, tanto técnicas como ejecutivas., • Monitorizar fuentes abiertas, comerciales y especializadas para identificar amenazas emergentes., • Colaborar con equipos SOC, DFIR, Red Team y otros equipos de ciberoperaciones para mejorar las capacidades de detección y respuesta., • Participar en ejercicios de análisis de campañas, atribución y evaluación del riesgo asociado a amenazas específicas., • Contribuir a la mejora continua de procesos, metodologías y capacidades de inteligencia de amenazas. Qué buscamos • Experiencia en Threat Intelligence, Cyber Threat Intelligence (CTI), análisis de amenazas o áreas relacionadas de ciberseguridad., • Conocimiento del ciclo de vida de la inteligencia y metodologías de análisis., • Conocimiento de actores de amenazas, malware, campañas de ciberataques y ecosistema de amenazas actual., • Familiaridad con MITRE ATT&CK, Cyber Kill Chain y otros marcos de referencia., • Capacidad analítica y pensamiento crítico para identificar patrones y extraer conclusiones relevantes., • Habilidades de redacción y elaboración de informes., • Inglés profesional. Valoraremos especialmente • Experiencia con plataformas de Threat Intelligence (TIP)., • Conocimientos de OSINT, Dark Web Monitoring y análisis de fuentes abiertas., • Experiencia en análisis de malware o investigación de incidentes., • Conocimientos de SIEM, EDR, DFIR o Threat Hunting., • Certificaciones relacionadas con inteligencia o ciberseguridad., • Experiencia en automatización de procesos mediante Python u otros lenguajes de scripting. Qué ofrecemos • Participación en proyectos de inteligencia de amenazas de alto impacto., • Acceso a tecnologías, fuentes y herramientas especializadas del sector., • Entorno altamente técnico y colaborativo., • Formación continua y desarrollo profesional., • Oportunidad de trabajar junto a expertos en ciberinteligencia, ciberoperaciones y análisis avanzado de amenazas. ¿Por qué unirte? La inteligencia de amenazas es una de las capacidades más estratégicas dentro de la ciberseguridad moderna. En esta posición contribuirás directamente a anticipar riesgos, proteger organizaciones y transformar datos en conocimiento útil para la toma de decisiones. xcskxlj Si te apasiona investigar, analizar y comprender cómo evolucionan las amenazas digitales, queremos conocerte. #J-18808-Ljbffr

About Us Aumente sus posibilidades de llegar a la fase de entrevista leyendo la descripción completa del puesto y enviando su solicitud sin demora. Integrity360 is the largest independent cyber security provider in Europe, with a growing international presence spanning the UK, Ireland, mainland Europe, Africa and the Caribbean. With over 700 employees across 12 locations and six Security Operations Centres (SOCs) – including Dublin, Sofia, Stockholm, Madrid, Rome and Cape Town – we support more than 2,500 clients across a wide range of industries. Over 80% of our team are technical experts, focused on helping clients proactively identify, protect, detect and respond to threats in an ever‑evolving cyber landscape. Our security‑first approach positions cyber resilience as a business enabler, empowering organisations to operate with confidence. At Integrity360, people come first. We invest heavily in learning, development and progression, fostering a dynamic culture where innovation, collaboration and continuous growth are at the heart of what we do. If you’re ready to take your cyber security career to the next level, we’d love to hear from you. Job Role / Responsibilities In this role you will act as a Level 3 escalation point within the MDR/SOC function, providing advanced technical support to Level 2 analysts during complex or high‑severity investigations. You will bring deep operational knowledge across modern security technologies, including SIEM, EDR, Network Intrusion Detection Systems, SOAR, DLP and related security monitoring platforms. The Principal SOC Analyst will support the investigation, containment and remediation of advanced threats, ensuring incidents are analysed in the correct business and technical context. You will contribute to the continuous improvement of the MDR service by supporting the definition of security monitoring strategies, improving detection logic, tuning security technologies, reviewing investigation processes and advising customers on technical optimisation opportunities. A strong understanding of malware behaviour, adversary tactics, techniques and procedures, and emerging threats will be critical to success. Primary Duties and Responsibilities • Act as the Level 3 escalation point for advanced, complex or high‑impact security investigations., • Support Level 2 analysts during complex investigations, providing technical guidance, validation and direction., • Perform in‑depth analysis of security events, alerts, logs, endpoint telemetry, network traffic and other relevant data sources., • Lead advanced incident investigations, including scoping, containment, eradication and remediation recommendations., • Analyse malicious activity, suspicious files, attacker behaviour and adversary TTPs., • Support customers from a technical perspective in the optimisation, tuning and improvement of their security monitoring capabilities., • Review and improve SIEM, EDR, NIDS, SOAR and other security tool configurations to reduce false positives and improve detection quality., • Contribute to the development and refinement of detection use cases, correlation rules, alerting logic and investigation playbooks., • Support the definition of customer security monitoring strategies based on risk profile, threat landscape and available telemetry., • Provide technical recommendations to strengthen customer cyber security posture and improve resilience against current and emerging threats., • Conduct threat hunting and proactive analysis based on indicators, behaviours, intelligence and attack patterns., • Document investigation findings, evidence, timelines, containment actions and remediation recommendations in a clear and structured manner., • Prepare and deliver technical reports to customers, partners and internal stakeholders., • Monitor trusted sources for emerging threats, vulnerabilities and adversary activity relevant to customer environments., • Contribute to the continuous improvement of SOC processes, procedures, documentation and knowledge base material., • Support mentoring and technical development of Level 1 and Level 2 analysts where required. Desired Skills • Strong hands‑on experience in Security Operations Centre or MDR environments., • Deep operational knowledge of SIEM, EDR, Network Intrusion Detection Systems, SOAR, DLP and related security monitoring technologies., • Strong experience with security event triage, correlation, investigation and escalation., • Ability to analyse endpoint, network, identity, cloud and application telemetry in support of complex investigations., • Experience with SIEM query languages and detection logic, such as KQL, SPL, Sigma or equivalent., • Experience tuning security controls and detection content to improve alert fidelity and reduce false positives., • Strong understanding of attacker tactics, techniques and procedures, including MITRE ATT&CK., • Ability to perform host‑based and network‑based threat analysis., • Experience analysing packet captures, endpoint artefacts, logs, scripts, documents and potentially malicious files., • Strong understanding of incident response lifecycle, including preparation, identification, containment, eradication, recovery and lessons learned., • Strong understanding of enterprise network architecture, TCP/IP, firewalls, proxies, VPNs, DNS, email security and cloud environments., • Understanding of security protocols, encryption technologies and common authentication mechanisms., • Experience supporting customer‑facing technical discussions, including investigation reviews, tuning recommendations and posture improvement activities., • Ability to manage multiple complex incidents and make effective decisions under pressure., • Strong written and verbal communication skills, with the ability to explain technical findings to both technical and non‑technical stakeholders., • Experience with Microsoft Sentinel, Microsoft Defender, Splunk, QRadar, CrowdStrike, SentinelOne, Palo Alto, Suricata, Zeek, Snort or similar technologies is highly beneficial., • Experience with cloud security monitoring across Microsoft Azure, AWS or Google Cloud is beneficial., • Experience with threat hunting, detection engineering or purple team activities is beneficial., • Ability to produce clear technical documentation, investigation reports and customer‑facing recommendations. Certifications and Qualifications • Security industry certifications such as GCIH, GCFA, GCIA, GNFA, GCTI, GSEC, CISSP, CySA+, SC‑200, AZ‑500 or equivalent are highly beneficial., • Minimum 2–3 years of experience in a SOC, MDR, incident response, CSIRT or cyber security operations role., • Proven experience handling complex security incidents and supporting advanced investigations., • Working knowledge of SIEM, EDR, SOAR, NIDS, DLP and threat intelligence platforms., • Experience working with threat hunting methodologies and security detection frameworks. xcskxlj, • Experience supporting customers or internal stakeholders with security optimisation, detection tuning and cyber security posture improvement. #J-18808-Ljbffr

The Threat-Led Detection Engineer Lead will drive WTW’s detection engineering capability within the Global Information and Cyber Security Defence (ICSD) function, owning the strategy, quality, and continuous improvement of how WTW detects threats across its global estate in AI era. This role blends deep technical detection expertise with team leadership, driving a threat-led, intelligence-informed approach to detection that maps directly to real adversary behaviour. The Lead will set the standard for how detections are designed, written, tested, documented, and maintained – championing Detection-as-Code, measurable detection coverage, and a strong engineering culture. Working closely with SOC, Threat Hunting, Cyber Threat Intelligence (CTI), Incident Response, and Vulnerability Management teams, the Lead will ensure WTW’s detection library evolves ahead of the threat landscape. The individual will work as part of a global, multi-disciplined security community with strong support across the business, helping to foster a security-aware culture while ensuring WTW remains a great place to work. With WTW’s large global footprint, this role offers a fascinating range of work, and occasional global travel may be required. The Threat-Led Detection Engineer Lead will grow WTW’s detection engineering function within the Global Cyber Security Defence team. Responsibilities of this role will include: • Drive WTW’s detection engineering strategy, setting the vision, standards, and roadmap for threat-led detection across cloud, endpoint, identity, network, and SaaS environments., • Lead, mentor, and grow a team of detection engineers, establishing engineering best practices, peer review, and a culture of high-quality, well-documented detections., • Drive a threat-led detection approach, prioritising detection development against adversary tradecraft using the MITRE ATT&CK framework, the Cyber Kill Chain, and the Diamond Model of Intrusion Analysis., • Translate Cyber Threat Intelligence and threat-hunting findings into robust, high-fidelity detections with low false-positive rates., • Establish, own, and maintain the central detection library, ensuring detections are version-controlled, tested, documented, and mapped to MITRE ATT&CK coverage., • Champion Detection-as-Code, implementing Git-based workflows, CI/CD pipelines, automated testing, and peer review for all detection content., • Define and track detection coverage, efficacy, and quality metrics (e.g. ATT&CK coverage, detection fidelity, time-to-detect) and report on detection posture to senior leadership., • Lead detection validation and tuning through adversary emulation, purple-team exercises, and breach-and-attack-simulation tooling (e.g. Atomic Red Team, Caldera)., • Support the integration of AI and automation into detection workflows – including AI-assisted detection authoring, enrichment, and triage – and lead detection efforts for AI/GenAI-specific threats., • Partner with SOC, Threat Hunting, CTI, Incident Response, and Vulnerability Management to close detection gaps identified during incidents and hunts., • Govern the full detection lifecycle: intake, development, testing, deployment, monitoring, tuning, retirement, and continuous improvement., • Evaluate and onboard new log sources, telemetry, and tooling to expand detection coverage across the global estate., • Set standards for detection documentation, runbooks, and response guidance so every detection is clear and actionable for the SOC. We are looking for a candidate for the Threat-Led Detection Engineer Lead role who has the following: Must-have • 5+ years in cyber security with detection engineering experience, including a track record of leading, mentoring, or coordinating technical teams., • Strong cyber security mindset with a deep, thorough understanding of adversary behaviour, attacker tradecraft, and the modern threat landscape., • Expert knowledge of the MITRE ATT&CK framework, the Cyber Kill Chain, and the Diamond Model, with proven ability to map and drive detection coverage against them., • Proven expertise writing, testing, and maintaining detection rules across SIEM and EDR/XDR platforms (e.g. Microsoft Sentinel, Splunk, Elastic, CrowdStrike, Microsoft Defender XDR), using query languages such as KQL, SPL, EQL, or Sigma., • Demonstrated ability to develop high-fidelity detections swiftly in response to emerging threats, intelligence, and live incidents., • Experience owning and maturing a detection library, including detection lifecycle governance and ATT&CK coverage mapping., • Hands‑on experience with Detection-as-Code: Git, version control, CI/CD pipelines, and automated testing of detection content., • Understanding of AI/ML in security operations and awareness of AI‑specific threats (prompt injection, model/data poisoning, sensitive‑data exposure via GenAI), with familiarity with the OWASP LLM Top 10 and MITRE ATLAS., • Exceptional written and verbal communication skills, able to convey complex technical concepts to both engineers and non‑technical stakeholders, including executives. Good to have • Strong threat‑hunting mindset and hands‑on hunting experience to proactively surface detection gaps and feed detection development., • Scripting and automation skills (e.g. Python, PowerShell) for tooling, enrichment, and SOAR integration., • Familiarity with detection data pipelines (log routing, parsing, normalisation, data lakes) and how they affect detection quality. We’re committed to equal employment opportunity and provide application, interview and workplace adjustments and accommodations to all applicants. If you foresee any barriers, from the application process through to joining WTW, please email candidate.helpdesk@willistowerswatson.com. • Job Identification 202604211, • Job Category Information and Cyber Security, • Posting Date 06/29/2026, 02:14 PM #J-18808-Ljbffr

Si disfrutas encontrando lo que otros no ven, rompiendo barreras y pensando como un atacante, queremos conocerte. En VIEWNEXT (Grupo IBM) estamos creciendo y buscamos nuevos profesionales con inquietud en seguridad ofensiva, participando en proyectos desafiantes con alto impacto técnico. Inscríbase rápido, consulte la descripción completa desplazándose hacia abajo para conocer todos los requisitos de este puesto. Tu día a día: • Ejercicios de Red Teaming y pentesting sobre aplicaciones, APIs e infraestructuras., • Uso de marcos como MITRE ATT&CK y OWASP para simular amenazas reales., • Análisis y explotación de vulnerabilidades, elaboración de informes y propuestas de mejora., • Mínimo 3 años de experiencia en Red Team / Ethical Hacking., • Certificación técnica (OSCP, eCPPT, eWPTX o similar)., • Curiosidad, precisión y ganas de seguir aprendiendo. Beneficios • Formación en Tecnología y también en Soft Skills., • Acceso a las certificaciones tecnológicas más importantes del mercado., • Plan de carrera, seguimiento y evaluación anual de tu desarrollo profesional., • Plan de retribución flexible (seguro médico, transporte, formación y guardería)., • Tarjeta Restaurante para trabajadores presenciales., • Ofrecemos modalidades de teletrabajo flexibles., • Horario: 09:00 a 18:00h - con flexibilidad horaria de entrada y salida. xcskxlj, • Buen ambiente de trabajo, innovador, abiertos e inclusivos. #J-18808-Ljbffr

Vulnerability Management Analyst (Hybrid set up) Envíe su CV y cualquier información adicional requerida después de haber leído esta descripción, haciendo clic en el botón de solicitud. Are you passionate about cybersecurity and ready to make a real impact in protecting one of the world's leading reinsurance companies? Join Swiss Re's Security Team in Madrid and play a pivotal role in keeping our global infrastructure safe, resilient, and ahead of emerging threats. This is your opportunity to bring your vulnerability management expertise to a collaborative, forward‑thinking environment where your work genuinely matters. About the Role As a Vulnerability Management Analyst, you will be at the heart of Swiss Re's cyber defence strategy. Working closely with Incident Response, Threat Intelligence, and Engineering teams, you will help identify, prioritise, and remediate vulnerabilities across our complex global landscape. From responding to zero‑day threats to refining operational processes, your contributions will directly strengthen Swiss Re's security posture every single day. Key Responsibilities • Monitor Swiss Re's attack surface to identify vulnerabilities and faulty internal processes, continuously improving our overall security posture, • Collaborate with the blue team to respond swiftly and effectively to zero‑day vulnerabilities and severe threats impacting our system landscape, • Maintain and optimise an end‑to‑end vulnerability management process, including associated Service Level Indicators and Objectives (SLIs & SLOs), • Partner with the Vulnerability Management Engineering team on vulnerability identification and the optimisation of scanning tools and technologies, • Analyse how current and emerging vulnerabilities can be exploited within our system landscape and translate findings into actionable insights, • Prioritise vulnerability remediation based on contextual risk ratings, ensuring the most critical risks are addressed first, • Support the development and improvement of vulnerability management processes in collaboration with the Team Lead, • Guide and support IT asset owners through vulnerability remediation activities and risk assessments, • Deliver regular, clear reporting on Swiss Re's security posture to stakeholders across the organisation About the Team The Security Team is the focal point for all security activities across Swiss Re. We are responsible for cybersecurity engineering and operations, governance, risk, and compliance defining and continuously advancing the company's security strategy. Within this team, the Vulnerability Management Team's mission is to ensure that Swiss Re's infrastructure components and applications are continuously tested and scanned for all known vulnerabilities and security misconfigurations. We work in close collaboration with red and blue teams to build and maintain continuous resilience against emerging threat actors. We are a passionate, skilled group of professionals who take pride in protecting Swiss Re's global security landscape. About You You are a curious and driven cybersecurity professional who thrives in a collaborative, fast‑paced environment. You bring a sharp analytical mind, a proactive approach to problem‑solving, and the ability to communicate complex security topics clearly and empathetically to a wide range of stakeholders. You are comfortable navigating sophisticated conversations across multiple teams and geographies, and you take ownership of your work with confidence and integrity. Requirements • 3+ years of professional experience in vulnerability management, Security Operations (SOC), or Incident Response, with demonstrable hands‑on expertise in the vulnerability management domain, • Strong knowledge of corporate IT environments and core security principles, including an in‑depth understanding of how vulnerabilities can be identified, exploited, and remediated, • Strong communication skills in English, both verbal and written, with the ability to convey technical findings clearly and concisely to both technical and non‑technical audiences, • University degree in Business IT, Computer Science, or a comparable field or equivalent professional experience, • Understanding of application security practices, including SAST, DAST, SCA, container security, and CI/CD practices. Nice to haves • Experience with coding and automation (e.g., Python, PowerShell, APIs) to streamline vulnerability management workflows., • Proven ability to drive change adoption across cross‑functional teams in a large, complex organisation, • Familiarity with threat intelligence frameworks (e.g., MITRE ATT&CK) and their application in vulnerability prioritisation, • Experience working in a multinational or matrixed organisation, collaborating across multiple locations and time zones, • Relevant cybersecurity certifications (e.g., CEH, OSCP, CISSP, or similar) are a plus, • Demonstrated passion for staying current with emerging cybersecurity threats, industry trends, and technological advancements, including hands‑on exploration of AI and frontier technologies. Salary For Spain, the base salary range for this position is between 42,000 EUR and 70,000 EUR for a full‑time role. The specific salary offered considers the requirements, scope, complexity and responsibilities of the role, as well as the applicant's profile, including education, qualifications, expertise, specialisation, skills and experience. In addition to your base salary, you may be eligible for additional rewards and benefits including an attractive performance‑based annual bonus. Hybrid Work Model Our company has a hybrid work model (50:50) where the expectation is that you will be in the office 2–3 days per week. Equal Opportunity Swiss Re is one of the world’s leading providers of reinsurance, insurance and other forms of insurance‑based risk transfer, working to make the world more resilient. We anticipate and manage a wide variety of risks, from natural catastrophes and climate change to cybercrime. Our success depends on our ability to build an inclusive culture encouraging fresh perspectives and innovative thinking. We embrace a workplace where everyone has equal opportunities to thrive and develop professionally regardless of their age, gender, race, ethnicity, gender identity and/or expression, sexual orientation, physical or mental ability, skillset, thought or other characteristics. In our inclusive and flexible environment everyone can bring their authentic selves to work and their passion for sustainability. If you are an experienced professional returning to the workforce after a career break, we encourage you to apply for open positions that match your skills and experience. xcskxlj #J-18808-Ljbffr Hay opciones de teletrabajo/trabajo desde casa disponibles para este puesto.

Work area: Por favor, asegúrese de leer atentamente los siguientes detalles antes de enviar cualquier solicitud. Information technology / Software Country: ES Entry level: Professionals Type of contract: full time We are expanding our Global Corporate Information Security team and are looking for an IGA (Identity Governance and Administration) & PAM (Privileged Access Management) Product Owner (m/f/d) who is responsible for the delivery, prioritization, and operational execution of the Identity Governance & Administration (IGA) and Privileged Access Management (PAM) product backlogs. This role owns the day to day responsibility for translating IAM strategy, regulatory requirements, and risk drivers into consumable IGA and PAM services, while overall accountability remains with the Head of IAM Security. The Product Owner ensures close alignment across architecture, engineering, SOC, and business stakeholders to deliver scalable, compliant identity and privileged access capabilities. This role is central to the organization’s Zero Trust and regulatory compliance journey, directly reducing the highest impact cyber risks related to over privileged access and poor identity governance. You will shape how identities, entitlements, and privileged access are governed across 55,000+ users and ~2,500 applications, influencing both security posture and operational efficiency at enterprise scale. The working location for this position will be in Madrid city where we operate a hybrid model, requiring at least 40% of the working time on-site. Responsibilities • Own and manage the IGA & PAM product backlogs, priorities, and sprint objectives., • Act as day to day Product Owner for Global IGA and Global PAM initiatives., • Translate IAM strategy, regulatory obligations (NIS2, ISO 27001), and risk assessments into delivery backlog items., • Coordinate with IAM Architects to ensure architectural intent is correctly implemented by engineering teams., • Drive onboarding of applications, identities, and platforms into IGA lifecycle and PAM controls., • Ensure alignment between IGA, PAM, IAM analytics, and SOC monitoring., • Support tool selection, vendor engagement, and roadmap planning for IGA and PAM platforms., • Drive adoption, communication, and change management with business and IT stakeholders., • Provide clear reporting on delivery progress, risk reduction, and compliance KPIs to the Head of IAM. Immediate Contributions • Delivered a production ready Global IGA service covering JML automation, access governance, and access reviews., • Established a unified Global PAM service enforcing least privilege, MFA, and just in time access., • Implemented governance for non human identities (service accounts, technical IDs, automation)., • Defined and operationalized RBAC / PBAC role models across priority applications., • Achieved measurable reduction in standing privileges and audit findings related to access governance., • Bachelor’s degree in IT, Cyber Security, or equivalent experience. Cybersecurity certifications advantageous: CISSP, CISM, Microsoft Endpoint-related certifications, or comparable alternatives., • Fluency in English is a must. Skills in German and French are a plus., • Knowledge of modern security frameworks (MITRE ATT&CK, NIST CSF, ISO 27001)., • Experience implementing KPIs and running continual service improvement processes., • Strong Product Owner experience in IAM, IGA, or PAM domains., • Deep understanding of Identity Governance concepts: Joiner Mover Leaver (JML), Access reviews & certifications, Role and entitlement modelling (RBAC / PBAC)., • Strong knowledge of Privileged Access Management: Vaulting & credential rotation, Just in time access & MFA enforcement, Privileged session monitoring., • Ability to balance risk, compliance, and delivery pragmatism in complex enterprises. Preferred Qualifications • Experience with IGA and PAM tooling in large, multi-domain environments., • Exposure to non human identity governance (service accounts, automation, APIs)., • Experience operating in regulated environments (ISO 27001, NIS2)., • Strong collaboration experience with SOC and audit teams. Benefits • Competitive compensation and benefits package that recognizes your expertise., • Flexible and hybrid working model., • Creative freedom and responsibility to shape processes and solutions in our global transformation., • Continuous learning and development with tailored training and certification opportunities., • Life and accident insurance., • Option to include a premium private health insurance package as part of the flexible remuneration., • A safe, stable and international workplace within a trusted family business that invests in people. Please note that we can only accept applications submitted through our website, using the online application form. xcskxlj Please note that we do not accept applications via recruitment agencies for this position. #J-18808-Ljbffr

SIX drives the transformation of financial markets. ¿Está considerando presentar su candidatura para este trabajo? Compruebe todos los detalles en esta descripción del puesto y luego haga clic en "Solicitar". What sets us apart drives us ahead: between local roots and global relevance, we are a unique blend of tradition and future, of foundation and growth. We value bright minds and inspire them to grow with their ideas. Come and shape the future of finance with us. Madrid | Working from home up to 40% | Reference 8095 We are seeking a motivated Cyber Threat Intelligence (CTI) Analyst with a strong technical mindset to support the intelligence collection, automation and maturation of our intelligence capabilities. The focus of this role in Cyber Threat Intelligence is to enhance cyber threat intelligence capabilities through automation, AI-driven analysis, and continuous improvement of telemetry and intelligence workflows. You will work closely with senior team members and partners to enhance the company's intelligence capabilities. This position is available only in Spain due to the restrictions of some of the intelligence sources. What You Will Do • Join an international Cyber Threat Intelligence team operating 24x7, including on‑call availability when required., • Monitor, collect, and analyze intelligence from restricted communities, internal telemetry, and monitoring systems to identify actionable insights and support investigations, incident response, and threat detection activities., • Own and continuously improve weekly intelligence telemetry reporting, dashboards, and visualization capabilities to provide accurate, consistent, and actionable insights to stakeholders., • Contribute to the automation and orchestration of CTI workflows, including data collection, enrichment, analysis, reporting, and the integration of AI-driven capabilities for correlation, prioritization, and analytical output generation., • Work with Threat Intelligence Platforms and security tooling, including OpenCTI, Elastic stack, SIEM, Threat Intelligence Platforms, and malware sandboxes, while applying frameworks such as MITRE ATT&CK to contextualize threats and improve detection effectiveness., • Collaborate with SOC, Detection & Hunting, Vulnerability Management, Corporate Security, and other cross‑functional teams to operationalize intelligence insights, produce threat reports and executive summaries, and support the continuous improvement and scalability of CTI processes. What You Bring • 4 years of experience in Cyber Threat Intelligence, incident response, SOC, or related technical cybersecurity roles., • Strong technical profile with hands‑on experience in automation, scripting, or orchestration., • Familiarity with AI applications in cybersecurity, particularly for automation, data processing, analytics, and intelligence workflow improvement., • Experience with Threat Intelligence Platforms and security monitoring tools, including OpenCTI, Elastic stack, SIEM platforms, or similar technologies., • Solid understanding of the intelligence lifecycle, telemetry analysis, tactical intelligence collection, and frameworks such as MITRE ATT&CK for threat detection and analysis. Diversity is important to us. Therefore, we are looking to receiving applications regardless of any personal background. What We Offer Flexible Work Models We trust our employees and offer a work environment that is well‑balanced, productive and fosters success. Personal Development You will benefit from a culture of continuous learning and feedback. Your personal growth is supported through an extensive learning offering. xcskxlj Agile Working Methods Whether through scrum or design thinking, we solve exciting tasks together in teams. #J-18808-Ljbffr

Telefónica Tech es la compañía líder en transformación digital del Grupo Telefónica. Contamos con una amplia oferta de servicios y soluciones tecnológicas integradas de Ciberseguridad, Cloud, IoT, Big Data, Inteligencia Artificial y Blockchain, con la que acompañamos a nuestros clientes en su transformación digital. A continuación, encontrará un desglose completo de todo lo que se requiere de los posibles candidatos, así como la forma de presentar su candidatura. ¡Mucha suerte! Somos un grupo de más de 6200 personas valientes que trabajamos a diario desde distintos puntos del mundo para alcanzar la excelencia, a través de un liderazgo basado en la transparencia y en el espíritu de equipo. Si te identificas con nuestros pilares, estamos deseando conocerte. En la unidad de Threat Intelligence de Telefónica Tech analizamos cualquier amenaza que pueda impactar en el negocio de nuestro cliente: desde una fuga de información a una campaña de desprestigio, pero también prevenimos acerca de las acciones de APT o de otros actores que tengan el objetivo de causar daño a nuestros clientes identificando tácticas, técnicas y procedimientos, generando reglas de detección y agilizando los procesos de compartición y entrega de inteligencia de una forma estructurada. Así, proveemos a nuestros clientes la ciberinteligencia necesaria para gestionar su negocio de forma satisfactoria en esta nueva actualidad digital, tanto a través de informes de tendencias o sectoriales como con investigaciones a medida dedicadas. Les ayudamos a entender y prevenir las inminentes amenazas que les acechan y les damos soporte en sus procesos de toma de decisión en aspectos relacionados con el ámbito de la ciberseguridad en todas sus ramas. En este sentido, les dotamos de capacidades de respuesta y mitigación del contenido fraudulento y de comprensión de las ciberamenazas que les afectan. Analizamos distintas fuentes para detectar amenazas tanto en la Surface web como en la Dark y Deep web, ofreciendo una solución modelable estructurada en distintos módulos. Para el servicio de respuesta utilizamos distintas herramientas, propias y de mercado, para la monitorización y la solicitud de baja con los principales ISP del mercado a nivel global. Asimismo, prestamos apoyo a los equipos locales y a los clientes y a la parte operativa para llevar a cabo sus funciones, resolviendo dudas de los clientes finales y manteniendo una comunicación fluida con cada uno de los equipos locales para contar con información de primera mano sobre el impacto de cada una de las acciones de los potenciales adversarios. • Realización de investigaciones proactivas y bajo demanda para proteger los intereses, las personas y las instalaciones del cliente., • Modelado de amenazas y campañas e identificación de comportamientos en estándares de CTI como STIX o Mitre ATT&CK., • Colaboración con los equipos de otras áreas como DFIR, Threat Hunting, Monitorización y analistas para la identificación de nuevas tendencias y difusión de los informes generados., • Manejo de herramientas para la detección de ciberamenazas que puedan llegar a suponer un riesgo de seguridad en cualquiera de las tipologías de los servicios prestados a nuestros clientes., • Realización y difusión de informes técnicos sobre campañas, actores y sets de intrusión., • Apoyo en el diseño de procesos y procedimientos de la unidad y en la compartición de inteligencia de una forma estructurada. Experiencia Necesario: • 4-5 años trabajando en entornos analíticos o de inteligencia relacionados con el ámbito de la vigilancia digital y el perfilado de actores., • Desempeño profesional en el uso de español e inglés., • Experiencia en el uso de técnicas y metodologías de investigación y análisis de información en el ámbito del CTI., • Experiencia en el uso de frameworks de perfilado técnico de adversarios como Mitre ATT&CK y STIX., • Experiencia en la automatización de actividades y el uso de herramientas de IA como apoyo al desarrollo., • Experiencia en el desarrollo y definición de reglas de detección y/o casos de uso empleando reglas Yara, SIGMA o STIX Patterns entre otros, así como lenguajes de consulta de tecnologías SIEM/EDR., • Experiencia en el uso de herramientas de gestión de inteligencia (MISP, OpenCTI, Anomali ThreatStream, ThreatConnect, ThreatQ, etc.)., • Experiencia en la captura de requisitos de informes de clientes y dirección. También valoramos: • Experiencia en el uso de frameworks de desinformación como DISARM y FIMI., • Experiencia en la impartición de cursos y formaciones., • Publicación de artículos académicos y/o científico-técnicos., • Conocimientos acreditados en el uso de otros idiomas diferentes al español e inglés. Necesario: • Grado/Licenciatura en cualquier materia., • Máster/cursos en análisis de inteligencia, ciberseguridad o investigaciones en ámbitos relacionados., • Certificaciones en materia de Threat Intelligence., • Certificaciones o cursos en materia de investigación en fuentes abiertas. También valoramos: • Certificaciones en seguridad defensiva (DFIR, Threat Hunting, etc.)., • Certificaciones en seguridad ofensiva (pentesting, Red Team, etc.)., • Certificaciones y/o cursos en procesamiento de datos., • Certificaciones y/o cursos en desarrollo de software. Conocimientos técnicos Necesario: • Capacidad para comprender y extraer información de noticias e informes técnicos en español e inglés., • Capacidad para redactar informes con objetividad y claridad en español e inglés., • Conocimiento de los tipos de amenazas que afectan a organizaciones públicas y privadas., • Comprensión del funcionamiento de redes y sistemas operativos., • Uso demostrable de herramientas de obtención de fuentes abiertas sobre observables técnicos como dominios, direcciones IP, direcciones URL o hashes., • Comprensión de las limitaciones de las herramientas de vigilancia digital, gestión de vulnerabilidades, sistemas perimetrales, consolas de EDR, SIEM o plataformas de inteligencia y de los tipos de eventos registrables en cada una de ellas., • Uso de frameworks de perfilado de actores de amenazas como MITRE ATT&CK., • Capacidad para trabajar de forma autónoma y con baja supervisión en investigaciones diarias., • Desarrollo de scripts en Python para búsqueda (crawling) y procesado de información., • Conocimientos sobre Threat Hunting, análisis forense y análisis de malware., • Experiencia en equipos de monitorización perimetral o gestión de alertas. También valoramos: • Uso de herramientas de automatización como Power Automate., • Experiencia en difusión de contenidos técnicos (conferencias, eventos, artículos, repositorios de código, etc.)., • Necesario: Trabajo en equipo, ganas de aprender, actitud proactiva, resolución de problemas no procedimentados, visión creativa., • Deseable: Capacidad de comunicación con otras áreas, visión a medio/largo plazo., • Necesario: Español bilingüe o nativo acreditable; inglés mínimo B2., • Medidas de conciliación y flexibilidad horaria., • Formación continua y certificaciones., • Modelo híbrido de teletrabajo., • Atractivo paquete de beneficios sociales., • Excelente ambiente de trabajo dinámico y multidisciplinar. xcskxlj, • Programas de voluntariado. #SomosDiversos#Fomentamosigualdad Por ello promovemos y garantizamos la inclusión de todas las personas sin importar género, edad, orientación e identidad sexual, cultura, discapacidad o cualquier otra condición #J-18808-Ljbffr

Are you passionate about cybersecurity and want to lead projects related to incident detection and response? The GMV cybersecurity team is looking for you! Descubra si esta oportunidad es adecuada para usted leyendo toda la información que sigue a continuación. We like to get straight to the point and tell you what you won’t find online. If you want to learn more about us, visit theGMV website. WHAT CHALLENGE WILL YOU FACE? As a SOC-CERT Project Manager, you will lead the management and evolution of security monitoring and incident response services, coordinating technical teams and projects aimed at improving detection and response capabilities against cyber threats. You will work with SOC teams, security analysts, and incident response specialists to strengthen the protection of complex technological infrastructures and improve incident management processes. On a day-to-day basis you will: • Lead projects related to the operation and evolution of SOC and CERT services., • Coordinate technical teams of SOC analysts and cybersecurity specialists., • Oversee the detection, analysis, and management of security incidents., • Track KPIs and SLAs associated with monitoring and incident response services., • Define and improve detection, analysis, and incident response procedures., • Coordinate communication with clients and stakeholders during critical incidents., • Drive continuous improvement initiatives, automation, and SOC maturity., • Prepare technical and executive reports on the status of services and projects. WHAT DO WE NEED IN OUR TEAM? We are looking for someone with experience in cybersecurity and project management, capable of coordinating technical teams and leading monitoring and incident response services in complex technological environments. For this role, it is important to have: • Experience in cybersecurity project management or SOC services., • Knowledge of SOC, CERT or CSIRT environments and security incident management., • Experience coordinating technical cybersecurity teams., • Knowledge of monitoring tools such as SIEM (Splunk, QRadar, ArcSight, Sentinel, or others)., • Knowledge of detection and response technologies such as EDR/XDR., • Familiarity with security frameworks and standards such as NIST, MITRE ATT&CK, or ISO 27001., • Experience tracking KPIs, SLAs, and reporting for security services., • Degree in Computer Engineering, Telecommunications, or similar., • Cybersecurity certifications such as CISSP, CISM, CEH, GIAC or equivalent are a plus. WHAT DO WE OFFER? • Hybrid work model with 8 weeks per year of remote work outside your usual geographic area., • Flexible working hours with optional intensive Fridays and summer schedule., • Development of a personalized career plan, training, and language learning support., • National and international mobility. If you come from another country, we offer a relocation package., • Competitive compensation with continuous reviews, flexible benefits, and brand discounts., • Wellbeing program: health, dental, and accident insurance; free fruit and coffee; training in physical, mental, and financial health; and much more! In our selection processes, you will always have personal or phone contact, in person or online, with our talent acquisition team. Transfers or bank card requests are never required. If contacted through another process, please contact the responsible recruitment person. We promote equal opportunities in hiring, committed to inclusion and diversity. xcskxlj WHAT ARE YOU WAITING FOR? JOIN US If you have any questions, feel free to contact Clara Sánchez Lobato, responsible for this vacancy. #J-18808-Ljbffr

We are seeking a motivated Cyber Threat Intelligence (CTI) Analyst with a strong technical mindset to support the intelligence collection, automation and maturation of our intelligence capabilities. La siguiente información tiene como objetivo proporcionar a los posibles candidatos una mejor comprensión de los requisitos para este puesto. The focus of this role in Cyber Threat Intelligence is to enhance cyber threat intelligence capabilities through automation, AI-driven analysis, and continuous improvement of telemetry and intelligence workflows. You will work closely with senior team members and partners to enhance the company's intelligence capabilities. This position is available only in Spain due to the restrictions of some of the intelligence sources. What You Will Do • Join an international Cyber Threat Intelligence team operating 24x7, including on-call availability when required., • Monitor, collect, and analyze intelligence from restricted communities, internal telemetry, and monitoring systems to identify actionable insights and support investigations, incident response, and threat detection activities., • Own and continuously improve weekly intelligence telemetry reporting, dashboards, and visualization capabilities to provide accurate, consistent, and actionable insights to stakeholders., • Contribute to the automation and orchestration of CTI workflows, including data collection, enrichment, analysis, reporting, and the integration of AI-driven capabilities for correlation, prioritization, and analytical output generation., • Work with Threat Intelligence Platforms and security tooling, including OpenCTI, Elastic stack, SIEM, Threat Intelligence Platforms, and malware sandboxes, while applying frameworks such as MITRE ATT&CK to contextualize threats and improve detection effectiveness., • Collaborate with SOC, Detection & Hunting, Vulnerability Management, Corporate Security, and other cross-functional teams to operationalize intelligence insights, produce threat reports and executive summaries, and support the continuous improvement and scalability of CTI processes. What You Bring • 4 years of experience in Cyber Threat Intelligence, incident response, SOC, or related technical cybersecurity roles., • Strong technical profile with hands-on experience in automation, scripting, or orchestration, • Familiarity with AI applications in cybersecurity, particularly for automation, data processing, analytics, and intelligence workflow improvement. xcskxlj, • Experience with Threat Intelligence Platforms and security monitoring tools, including OpenCTI, Elastic stack, SIEM platforms, or similar technologies., • Solid understanding of the intelligence lifecycle, telemetry analysis, tactical intelligence collection, and frameworks such as MITRE ATT&CK for threat detection and analysis #J-18808-Ljbffr

Associate SOC Analyst La siguiente información ofrece un resumen de las habilidades, cualidades y cualificaciones necesarias para este puesto. Department: Cyber Services and Capabilities Employment Type: Full Time Location: ESP Madrid Description As an Associate Security Analyst, you will be the first line of defence in the Event Monitoring Centre, responsible for the initial triage of security alerts, basic vulnerability analysis and data loss prevention. Your primary role will be to monitor, analyse, and assess incoming alerts, identifying potential security incidents based on established criteria. You will elevate confirmed or suspicious threats to the R2 analysts, senior analysts, or the shift lead for further investigation and response. This role requires strong analytical skills, attention to detail, and the ability to follow escalation protocols to ensure swift and effective incident management. Ideal candidates will have a foundational understanding of cybersecurity principles, experience with SIEM tools, and a commitment to continuous learning in a fast‑paced security environment. Due to being the initial contact for triaging alerts, your expertise will directly support analytic development by suggesting customer tuning rules to ensure the efficient running of the SOC. This role requires strong analytical skills, technical proficiency, and a commitment to continuous learning in a dynamic security environment. Key Responsibilities Threat Detection and Monitoring • Monitor the ITSM platform for new alerts, schemas and tickets, • Monitor the SIEM Logs, IDS Logs and Managed Intelligence sources, • Identify potential threats, vulnerabilities, and indicators of compromise, • Initiate escalation procedures to counteract potential threats and vulnerabilities Incident Remediation and Documentation • Escalate to R2 analysts, Team Lead or senior analyst should further clarification or four eyes be required, • Provide incident remediation and prevention recommendations to customers using established procedures and analyst experience, • Document and adhere to security monitoring processes, • Suggest process and procedure improvement based on working requirements to streamline processes Customer Service and Escalation • Exceed customer expectations by always delivering exceptional customer service, • Be the initial point of contact for alerts and schemas triaged, • Contribute to the creation and maintenance of security documentation, including incident response playbooks, standard operating procedures, and knowledge base articles Reporting and Continuous Improvement • Compile and review service‑focused reports for effective communication, • Contribute to the creation and maintenance of security documentation, including incident response playbooks, standard operating procedures, and knowledge base articles, • Be susceptible to mentoring from senior analysts Threat Analysis and Collaboration • Contribute practical insights to the analysis of common security incidents, • Maintain working relationships with the Analytic Development and Security Engineering teams, • Collaborate with shift partners to provide a high quality of service General Duties • Perform additional assigned duties as required, • Flexibility to quickly learn and adapt to new security tools, technologies, and processes, • Process Data Schema Review data loss prevention alerts, • Strong analytical and problem‑solving skills, • Good communication skills, both written and verbal, • Ability to work collaboratively as part of a team, • Keep up to date with latest emerging threats and APT groups, • Ability to be mentored by senior analysts Skills, Knowledge & Expertise Minimum Requirements Network, Cloud and OS Knowledge: • Understanding of common network protocols and tools, • Understanding of Linux operating systems, • Understanding of Content Delivery Networks, • Understanding of the CIA triad and how it interacts with security, • Understanding of cloud technologies – AWS, GCP, OCI Customer interaction: • Experience with documenting both high level and technical customer facing information, • Confidence providing critical/sensitive information accurately, • Contacting key stakeholders during major incidents Incident Analysis and Response: • Awareness of the MITRE ATT&CK framework, • Pedigree in performing in-depth analysis of security alerts, • Assess customer impact through investigation and work with senior analysts for resolution, • Basic understanding of Personal Identifiable Information, • Initiate escalation procedure for potential threats, • Ability to interpret threat priority against the cyber kill chain, • Provide appropriate mitigation xcskxlj and remediation steps Desirable Requirements Tooling • Hands‑on experience with Security Information and Event Management (SIEM) platforms preferably Splunk, • Knowledge of cloud products and log events such as AWS, OCI, GCP, • Knowledge of cloud vulnerability tools such as Wiz Desirable Certifications • CompTIA Security+, • CompTIA Network +, • Security Blue Team Level One, • AWS Cloud Practitioner, • MAD20 Att&ck Fundamentals Job Benefits • Flexible Working: Balance your work and personal life with our flexible working options, • Generous Holiday Allowance: Enjoy 25 days of holiday, plus bank holidays, with the option to buy up to 5 additional days of annual leave, • Medicash & Critical Illness Scheme, • Financial & Investment Benefits: Enjoy peace of mind with our Pension, Life Assurance, and Share Save Scheme, • Community & Volunteering Programmes: Make a difference in your community with our volunteering opportunities, • Green Car Scheme: Drive green and save money with our eco‑friendly car scheme, • Cycle Scheme: Stay fit and healthy with our cycle‑to‑work scheme, • Special Time Off: Take time off for the big moments in life, like getting married, entering into a civil partnership, becoming a grandparent, and welcoming home a new pet, • Family Planning: Benefit from our generous maternity and paternity leave, as well as time off and support for those undergoing fertility treatments #J-18808-Ljbffr

Location: Madrid, M, ES Compruebe a continuación si tiene lo necesario para esta oportunidad y, si es así, envíe su solicitud lo antes posible. Join a team of cybersecurity professionals and help Swiss Re to fulfil its mission in making the world more resilient. As the Senior Incident Coordinator, you'll play a crucial role in our cyber defense strategy, coordinating response activities, facilitating preparedness exercises, and driving important through thorough post‑incident analysis and documentation. What's more, you'll be working in a hybrid setup, perfectly balancing work from home and the office premises. About the team The Cyber Incident Management team serves as the frontliner defense against cybersecurity threats across Swiss Re. We provide critical incident leadership and coordination, overseeing the triage, investigation, and containment of security events to minimize business impact. Our team excels in stakeholders' communication and management during incidents, conducts post‑incident reviews to drive continuous improvement, and develops preparedness and resilience strategies. We also establish and monitor KPIs and metrics to enhance our security posture and response capabilities. We're looking for a detail‑oriented professional who excels at coordinating security activities and facilitating effective incident response. Join our team where your organizational expertise will strengthen our security posture through thoughtful planning, clear communication, and continuous improvement initiatives. In your role, you will… • Exercise Planning & Facilitation: Design, organize, and facilitate regular tabletop exercises and simulations to test and enhance the organization's incident response capabilities, • Response Coordination: Support incident response efforts by coordinating resources, scheduling meetings, and ensuring proper communication channels are maintained, • Documentation Management: Create and maintain comprehensive incident response documentation, playbooks, and procedures, • Post‑Incident Reporting: Compile detailed incident reports capturing timeline, actions taken, and impact assessments, • Metrics & Analysis: Collect, analyse, and report on key incident metrics to identify trends and improvement opportunities, • Lessons Learned: Facilitate post‑incident review sessions and document findings to enhance future response efforts, • Stakeholder Communication: Coordinate communications between technical teams and business stakeholders during and after incidents, • Training Coordination: Organise and track participation in incident response training programs, • Process Improvement: Identify and implement refinements to incident management processes based on lessons learned, • Tool Administration: Support the maintenance and optimisation of incident management platforms and documentation repositories Your qualifications Nobody is perfect and meets 100 % of our requirements. If you, however, meet some of the criteria below and are curious about the world of cyber defence, we'll be more than happy to meet you! What we need from you • Bachelor's degree in Business Administration, Information Technology, Cybersecurity, or equivalent practical experience, • Experience in incident management, business continuity, or security operations, • Demonstrated experience planning and facilitating tabletop exercises or simulations, • Strong documentation skills with experience creating reports, playbooks, or procedural documentation, • Excellent organisational and coordination abilities with attention to detail, • Strong communication skills in English Nice‑to‑have • Knowledge of cybersecurity frameworks (NIST, ISO 27001, MITRE ATT&CK), • Experience with incident management or ticketing systems, • Background in metrics collection, analysis, and reporting, • Project or programme management experience or certifications, • Facilitation or training certification/experience, • Experience in process improvement methodologies, • Knowledge of security operations and incident response procedures For Spain, the base salary range for this position is between EUR 62,000 and EUR 94,000 (for a full‑time role). The specific salary offered considers: • The requirements, scope, complexity and responsibilities of the role, • The applicant's own profile including education/qualifications, expertise, specialisation, skills and experience In addition to your base salary, Swiss Re offers an attractive performance‑based variable compensation component, designed to recognise your achievements. Further you will enjoy a variety of global and location‑specific benefits. Eligibility may vary depending on the terms of Swiss Re policies and your employment contract. Our company has a hybrid work model where the expectation is that you will be in the office at least three days per week. #LI‑Hybrid About Swiss Re Swiss Re is one of the world's leading providers of reinsurance, insurance and other forms of insurance‑based risk transfer, working to make the world more resilient. We anticipate and manage a wide variety of risks, from natural catastrophes and climate change to cybercrime. Combining experience with creative thinking and cutting‑edge expertise, we create new opportunities and solutions for our clients. This is possible thanks to the collaboration of more than 14,000 employees across the world. Our success depends on our ability to build an inclusive culture encouraging fresh perspectives and innovative thinking. We embrace a workplace where everyone has equal opportunities to thrive and develop professionally regardless of their age, gender, race, ethnicity, gender identity and/or expression, sexual orientation, physical or mental ability, skillset, thought or other characteristics. In our inclusive and flexible environment everyone can bring their authentic selves to work and their passion for sustainability. If you are an experienced professional returning to the workforce after a career break, we encourage you to apply for open positions that match your skills and experience. xcskxlj Make an impact Start your career journey with Swiss Re. #J-18808-Ljbffr Hay opciones de teletrabajo/trabajo desde casa disponibles para este puesto.

Senior DevOps Engineer – Global Threat Management Por favor, presente su candidatura sin demora si su perfil encaja bien con este puesto, debido al alto nivel de interés. We are looking for a senior DevOps Engineer to join our Global Threat Management (GTM) team at ING Hubs Spain. The GTM team focuses on intelligence‑driven, proactive defense across geographies and disciplines. Key Responsibilities Structure and deploy scalable infrastructure to support GTM workflows, building automation and integrations that strengthen detection, prioritization, and decision‑making. Design and implement automations to detect, prioritize, and investigate cyber threats. Transform large‑scale security telemetry and threat intelligence data into actionable insights for GTM and executive decision‑making. Automate and accelerate threat analysis using standard and custom‑built tooling. Deploy, operate, and optimize cloud‑based infrastructure (preferred Azure and GCP), ensuring scalability, reliability, cost efficiency, and governance. Enforce and continuously improve security and DevOps best practices within the team. Perform maintenance, monitoring, and resilience testing of owned infrastructure to ensure high availability and operational continuity. Design and integrate intelligence‑driven security solutions across data sources, security tools, and services. Design, develop, and maintain Python‑based automation, scripts, integrations, and operational tooling. Design and communicate solutions using clear documentation, diagrams, and visualizations. Troubleshoot and resolve deployment, installation and configuration issues across cloud infrastructure and security tooling, ensuring minimal disruption to operations. Clearly communicate insights and recommendations to both technical and non‑technical stakeholders. Leverage AI and automation technologies to streamline workflows, enrich threat intelligence processes, and improve operational effectiveness. Qualifications Ability to translate complex cyber‑threat challenges into robust, scalable, and data‑driven solutions. Strong Python development skills for automation, integrations, and tooling. Experience deploying and supporting cloud‑based solutions, preferably in Azure and GCP. Experience with Infrastructure as Code (preferably Terraform) and DevOps practices. Solid understanding of cloud platforms, networking, system administration, infrastructure architecture, and the operating model of CISO organizations in mid‑to large‑scale enterprises. Design end‑to‑end solutions, translating complex system landscapes into clear, implementable designs. Strong hands‑on experience diagnosing and resolving deployment, installation, and integration issues across cloud environments, infrastructure components, and custom‑built tools. Experience with containerization technologies such as Docker and Kubernetes. Collaborate proactively with threat intelligence and cybersecurity experts, bringing curiosity, strong problem‑solving skills, and clear communication to drive impact. Experience building and maintaining CI/CD pipelines and working with version control systems such as Git. A degree in Computer Science or related discipline, or equivalent hands‑on experience in cloud engineering, DevOps, system administration, or cybersecurity. Relevant Cloud, DevOps, or Cybersecurity certifications are an advantage. English level – B2. Bonus: Experience with threat intelligence platforms, security tools, and cyber threat intelligence workflows. Bonus: Experience with Databricks, data engineering, or large‑scale data‑processing platforms. Bonus: Experience building AI/GenAI solutions using LLMs and automation frameworks. Knowledge of cybersecurity concepts, threat actors, TTPs, and frameworks such as MITRE ATT&CK. Experience with security automation and orchestration platforms. Relevant certifications in Threat Intelligence, Security, AI, or Data Engineering. Experience working within a CISO, Security Operations, or Threat Management organization. What We Offer Flexible work model – choose days working from home or at ING MAD. Restaurant card and onsite facilities: electric mobility, doctor, hairdresser, gym, and more. Health and life insurance for employees and family. Flexible remuneration model with tax‑advantaged benefits such as nursery, transport, and training aids. Transport allowance to help with commuting. xcskxlj Pension plan available after 1 month of employment. #J-18808-Ljbffr

Who We Are ¿Posee las habilidades y la experiencia adecuadas para este puesto? Siga leyendo para descubrirlo y envíe su solicitud. At Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world’s leading businesses. We are at the heart of progress; with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge. For our people—Kyndryls—that means doing purposeful work that powers human progress. Join us and experience a flexible, supportive environment where your well-being is prioritized and your potential can thrive. The Role Senior Cybersecurity Consultant with a strong technical and consulting background, capable of leading and delivering advanced cybersecurity engagements across areas such as security assessments, cyber deception, Continuous Threat Exposure Management (CTEM), threat modeling, and threat intelligence. The ideal candidate combines hands-on cybersecurity expertise with the ability to manage project delivery, coordinate teams, engage with senior client stakeholders, and produce high-quality technical and executive deliverables. They bring solid knowledge of cybersecurity frameworks such as MITRE ATT&CK, NIST, ISO 27001, CIS Controls, OWASP, and related references, and are comfortable translating technical findings, threat scenarios, and exposure risks into actionable remediation plans. This profile requires strong experience assessing complex technology environments, identifying attack paths and security gaps, prioritizing risks, and advising clients on practical improvements to strengthen their security posture. The candidate should be able to operate across multiple domains, including cloud security, identity security, infrastructure security, threat intelligence, detection, vulnerability management, and security operations. The role requires a senior consultant who can lead engagements end to end, from scoping and planning to execution, reporting, presentation, and follow-up. They should demonstrate autonomy, analytical rigor, strong communication skills, and the ability to work effectively with CISOs, security teams, architects, infrastructure teams, cloud teams, SOC teams, and engineering teams. Who You Are EDUCATION AND CERTIFICATIONS: Bachelor’s or Master’s degree in Computer Engineering, Cybersecurity, Telecommunications, Information Security, or a related technical discipline. Relevant cybersecurity certifications will be positively valued, such as CISSP, CISM, CRISC, CCSP, OSCP, OSWE, GIAC certifications, ISO 27001 Lead Auditor / Lead Implementer, or equivalent certifications. EXPERIENCE: 7+ years of experience in cybersecurity services, security consulting, security assessments, threat management, offensive security, security architecture, or related cybersecurity domains. Experience leading cybersecurity projects, coordinating delivery teams, managing client stakeholders, and ensuring the quality of consulting deliverables. Previous experience in a consulting environment or professional services organization will be highly valued. LANGUAGES: Spanish and English, B2 level or higher. Ability to communicate effectively with both technical and executive stakeholders in written and spoken English. SKILLS AND KNOWLEDGE: Strong experience in the delivery of cybersecurity consulting services, including security assessments, maturity assessments, technical reviews, risk analysis, and security improvement plans. Solid knowledge of cybersecurity frameworks, methodologies, and standards such as NIST Cybersecurity Framework, MITRE ATT&CK, ISO/IEC 27001, CIS Controls, OWASP, ENISA, CCN-STIC, or equivalent references. Experience in identifying, analyzing, and prioritizing security risks, control gaps, vulnerabilities, attack paths, and exposure scenarios across complex technology environments. Knowledge or experience in areas such as: • Security assessments across infrastructure, cloud, applications, identity, and security operations environments., • Continuous Threat Exposure Management, including exposure discovery, validation, prioritization, remediation governance, and continuous posture improvement., • Cyber deception concepts, technologies, and use cases, including decoys, deceptive assets, lures, honeytokens, detection logic, and adversary engagement., • Threat modeling methodologies such as STRIDE, attack trees, abuse cases, kill chain-based modeling, or architecture-driven threat analysis., • Threat intelligence lifecycle, including collection, analysis, contextualization, dissemination, and operationalization of intelligence., • MITRE ATT&CK-based analysis, adversary behavior mapping, detection opportunities, and security control validation., • Cloud and hybrid security across AWS, Azure, and/or Google Cloud Platform., • Identity and access management, privileged access, secrets management, and attack paths related to identity compromise., • Network security, segmentation, perimeter controls, lateral movement analysis, and exposure reduction., • Application security principles, secure design, API security, and integration with DevSecOps practices., • Vulnerability management, attack surface management, security posture assessment, and risk-based remediation., • Logging, monitoring, detection engineering, SOC use cases, and integration of findings into security operations., • Security architecture and secure design principles across enterprise technology environments., • Executive and technical reporting, including the ability to translate complex technical findings into business-relevant risk narratives. Strong analytical skills and the ability to understand complex environments, identify security priorities, and propose practical, risk-based remediation actions. Ability to lead workshops, interviews, technical sessions, and executive presentations with client stakeholders. Experience coordinating teams, reviewing deliverables, mentoring consultants, and ensuring methodological consistency across projects. Ability to operate effectively between hands-on technical analysis, advisory work, architectural discussions, and senior stakeholder communication. Strong autonomy, ownership, communication skills, and delivery orientation. Ability to contribute to the growth of cybersecurity consulting capabilities through reusable assets, methodologies, service offerings, and knowledge sharing. KEY RESPONSIBILITIES: Lead and deliver cybersecurity consulting engagements focused on security assessments, cyber deception projects, Continuous Threat Exposure Management (CTEM), threat modeling, threat intelligence, and related offensive and defensive security initiatives. Act as the technical and delivery lead for security assessment projects, ensuring quality, consistency, timely execution, and alignment with client expectations and business objectives. Define project approaches, methodologies, work plans, deliverables, and execution models for advanced cybersecurity consulting services. Conduct and oversee security assessments across cloud, hybrid, on-premise, application, infrastructure, identity, and security operations environments. Identify security weaknesses, exposure points, attack paths, control gaps, and areas for improvement, translating findings into actionable remediation plans and prioritized recommendations. Lead CTEM-related initiatives, including exposure identification, validation, prioritization, remediation tracking, and continuous improvement of the client’s security posture. Design, implement, and assess cyber deception strategies and capabilities, including deception use cases, decoys, lures, detection logic, and integration with security operations processes. Lead threat modeling activities for applications, platforms, architectures, and critical business processes, supporting technical teams in identifying risks and defining appropriate security controls. Support threat intelligence initiatives by analyzing threat actors, tactics, techniques, and procedures, and translating intelligence into practical security improvements, detection opportunities, and risk reduction actions. Collaborate with client stakeholders, including CISOs, security teams, architecture teams, infrastructure teams, cloud teams, SOC teams, and engineering teams. Coordinate multidisciplinary teams during project execution, providing technical guidance, quality assurance, mentoring, and support to junior and mid-level consultants. Produce high-quality technical and executive deliverables, including assessment reports, maturity evaluations, threat models, CTEM roadmaps, cyber deception strategies, remediation plans, and security recommendations. Support the definition and evolution of cybersecurity methodologies, reusable frameworks, accelerators, templates, and delivery standards. Contribute to pre-sales and business development activities by supporting proposal preparation, scope definition, effort estimation, technical presentations, and client workshops. Stay up to date with emerging threats, attack techniques, security technologies, industry frameworks, and best practices, ensuring their practical application in consulting engagements. Being You The “Kyn” in Kyndryl means kinship, which represents the strong bonds we have with each other, our customers and our communities. We focus on ensuring all Kyndryls feel included and we welcome people of all cultures, backgrounds, and experiences. Even if you don’t meet every requirement, we encourage you to apply. We believe in growth, and we’re excited to see what you can bring. At Kyndryl, employee feedback has told us that our number one driver of employee engagement is belonging. That sense of belonging — being a valued, respected, trusted member of the team — is fundamental to our culture and fueling great experiences for our customers. This dedication to welcoming everyone into our company means that Kyndryl gives you the ability to thrive and contribute to our culture of empathy and shared success. That’s The Kyndryl Way. What You Can Expect Your career with us isn’t just a job—it’s an adventure with purpose. We offer a dynamic, hybrid-friendly culture that supports your well-being and empowers you to grow. Our Be Well programs are thoughtfully designed to support your financial, mental, physical, and social health—because we know that when you feel your best, you do your best. From your very first day, you’ll dive into impactful work that powers the systems our customers rely on every day. You won’t just contribute—you’ll make a difference, tackling meaningful projects that sharpen your skills and fuel your growth. We’re here to champion your journey. With powerful tools to chart your career path, personalized development goals aligned with your ambitions, and continuous feedback to keep you inspired and on track, you’ll have everything you need to thrive and evolve. You’ll develop in-demand skills to grow your career and achieve your ambitions with access to cutting-edge learning opportunities—from certifications with Microsoft, Google, and Amazon to coaching and hands-on experiences. And through it all, you’ll be part of a culture that values empathy, restless learning, and a devotion to shared success. We want you to thrive here—and we’re committed to helping you do just that. Ready to make an impact? Join us and help shape what’s next. Get Referred! xcskxlj If you know someone that works at Kyndryl, when asked ‘How Did You Hear About Us’ during the application process, select ‘Employee Referral’ and enter your contact's Kyndryl email address.

Desde SOTEC Consulting – Grupo Astek buscamos unAnalista SOCcon al menos2 años de experienciaen operaciones de ciberseguridad, especializado en herramientas EDR, para incorporarse a un equipo de seguridad gestionada.El candidato será responsable de ladetección, análisis y respuesta a incidentes de seguridad, trabajando con soluciones como CrowdStrike Falcon y/o SentinelOne.Monitorización y análisis de alertas de seguridad en tiempo realTriage y clasificación de incidentes (priorización)Investigación de amenazas en endpoints mediante EDRRespuesta a incidentes (aislamiento de equipos, contención, remediación)Análisis de logs y correlación de eventosEscalado de incidentes a niveles superiores (L2/L3)Documentación de incidentes y elaboración de informesMejora continua de reglas de detecciónMínimo2 años en SOC o ciberseguridad operativaExperiencia práctica con EDR (CrowdStrike y/o SentinelOne)Conocimientos técnicosAnálisis de eventos en sistemas Windows/LinuxConocimiento de MITRE ATT&CKInvestigación de incidentes de seguridadManejo de SIEM (deseable)Español: fluidoValorableExperiencia en entornos MSSPCertificaciones (Security+, CySA+, etc.)Experiencia en threat hunting¿Te apasiona la tecnología en la nube y quieres formar parte de una empresa en constante evolución digital?SOTEC es una compañía comprometida con la igualdad de oportunidades, sin tener en cuenta raza, sexo, religión, edad, orientación sexual, estado civil, discapacidad, nacionalidad o identidad de género. Nos sentimos orgullosos de esforzarnos cada día en evitar los sesgos de cualquier tipo.#J-18808-Ljbffr

Telefónica, S.A. La descripción completa del puesto cubre todas las habilidades asociadas, la experiencia previa y cualquier cualificación que se espera que tengan los solicitantes. busca un líder para dirigir el CSIRT/SOC Global, responsable de detección y respuesta 24x7, liderando el equipo de análisis de operaciones y gestionando incidentes en el perímetro corporativo. Contribuirá a la resiliencia y estandarización de procesos de seguridad a nivel global. xcskxlj Se requiere experiencia en gestión de equipos CSIRT/SOC, conocimiento de marcos SIM3 v2, MITRE ATT&CK y NIST, y fluidez en inglés. #J-18808-Ljbffr