Trabajos att en UseraCrear alertas

WTW in Madrid is looking for a Threat-Led Detection Engineer Lead responsible for developing and leading the detection engineering strategy across various environments. This position requires strong leadership, a deep understanding of cyber threats, and hands-on experience with detection frameworks like MITRE ATT&CK.The ideal candidate possesses a solid background in cyber security, with the ability to translate intelligence into effective detections while fostering a security-aware culture. Responsibilities include mentoring teams and maintaining a robust detection library.#J-18808-Ljbffr

Allianz Commercial in Madrid is seeking a Threat Intelligence Engineer – Intrusion Analysis & Detection. You will translate real-world attacks into proactive defenses, develop detection content, and drive intelligence that helps defenders move faster. Asegúrese de enviar su solicitud rápidamente para maximizar sus posibilidades de ser considerado para una entrevista. Lea la descripción completa del puesto a continuación. Responsibilities include analyzing attacks, producing detection rules, mapping tactics to MITRE ATT&CK, building automation with Python and SOAR, and briefing leadership to act confidently. xcskxlj #J-18808-Ljbffr Hay opciones de teletrabajo/trabajo desde casa disponibles para este puesto.

About UsIntegrity360 is the largest independent cyber security provider in Europe, with a growing international presence spanning the UK, Ireland, mainland Europe, Africa and the Caribbean. With over 700 employees across 12 locations and six Security Operations Centres (SOCs) – including Dublin, Sofia, Stockholm, Madrid, Rome and Cape Town – we support more than 2,500 clients across a wide range of industries.Over 80% of our team are technical experts, focused on helping clients proactively identify, protect, detect and respond to threats in an ever‑evolving cyber landscape. Our security‑first approach positions cyber resilience as a business enabler, empowering organisations to operate with confidence.At Integrity360, people come first. We invest heavily in learning, development and progression, fostering a dynamic culture where innovation, collaboration and continuous growth are at the heart of what we do. If you’re ready to take your cyber security career to the next level, we’d love to hear from you.Job Role / ResponsibilitiesIn this role you will act as a Level 3 escalation point within the MDR/SOC function, providing advanced technical support to Level 2 analysts during complex or high‑severity investigations. You will bring deep operational knowledge across modern security technologies, including SIEM, EDR, Network Intrusion Detection Systems, SOAR, DLP and related security monitoring platforms. The Principal SOC Analyst will support the investigation, containment and remediation of advanced threats, ensuring incidents are analysed in the correct business and technical context. You will contribute to the continuous improvement of the MDR service by supporting the definition of security monitoring strategies, improving detection logic, tuning security technologies, reviewing investigation processes and advising customers on technical optimisation opportunities. A strong understanding of malware behaviour, adversary tactics, techniques and procedures, and emerging threats will be critical to success.Primary Duties and ResponsibilitiesAct as the Level 3 escalation point for advanced, complex or high‑impact security investigations.Support Level 2 analysts during complex investigations, providing technical guidance, validation and direction.Perform in‑depth analysis of security events, alerts, logs, endpoint telemetry, network traffic and other relevant data sources.Lead advanced incident investigations, including scoping, containment, eradication and remediation recommendations.Analyse malicious activity, suspicious files, attacker behaviour and adversary TTPs.Support customers from a technical perspective in the optimisation, tuning and improvement of their security monitoring capabilities.Review and improve SIEM, EDR, NIDS, SOAR and other security tool configurations to reduce false positives and improve detection quality.Contribute to the development and refinement of detection use cases, correlation rules, alerting logic and investigation playbooks.Support the definition of customer security monitoring strategies based on risk profile, threat landscape and available telemetry.Provide technical recommendations to strengthen customer cyber security posture and improve resilience against current and emerging threats.Conduct threat hunting and proactive analysis based on indicators, behaviours, intelligence and attack patterns.Document investigation findings, evidence, timelines, containment actions and remediation recommendations in a clear and structured manner.Prepare and deliver technical reports to customers, partners and internal stakeholders.Monitor trusted sources for emerging threats, vulnerabilities and adversary activity relevant to customer environments.Contribute to the continuous improvement of SOC processes, procedures, documentation and knowledge base material.Support mentoring and technical development of Level 1 and Level 2 analysts where required.Desired SkillsStrong hands‑on experience in Security Operations Centre or MDR environments.Deep operational knowledge of SIEM, EDR, Network Intrusion Detection Systems, SOAR, DLP and related security monitoring technologies.Strong experience with security event triage, correlation, investigation and escalation.Ability to analyse endpoint, network, identity, cloud and application telemetry in support of complex investigations.Experience with SIEM query languages and detection logic, such as KQL, SPL, Sigma or equivalent.Experience tuning security controls and detection content to improve alert fidelity and reduce false positives.Strong understanding of attacker tactics, techniques and procedures, including MITRE ATT&CK.Ability to perform host‑based and network‑based threat analysis.Experience analysing packet captures, endpoint artefacts, logs, scripts, documents and potentially malicious files.Strong understanding of incident response lifecycle, including preparation, identification, containment, eradication, recovery and lessons learned.Strong understanding of enterprise network architecture, TCP/IP, firewalls, proxies, VPNs, DNS, email security and cloud environments.Understanding of security protocols, encryption technologies and common authentication mechanisms.Experience supporting customer‑facing technical discussions, including investigation reviews, tuning recommendations and posture improvement activities.Ability to manage multiple complex incidents and make effective decisions under pressure.Strong written and verbal communication skills, with the ability to explain technical findings to both technical and non‑technical stakeholders.Experience with Microsoft Sentinel, Microsoft Defender, Splunk, QRadar, CrowdStrike, SentinelOne, Palo Alto, Suricata, Zeek, Snort or similar technologies is highly beneficial.Experience with cloud security monitoring across Microsoft Azure, AWS or Google Cloud is beneficial.Experience with threat hunting, detection engineering or purple team activities is beneficial.Ability to produce clear technical documentation, investigation reports and customer‑facing recommendations.Certifications and QualificationsSecurity industry certifications such as GCIH, GCFA, GCIA, GNFA, GCTI, GSEC, CISSP, CySA+, SC‑200, AZ‑500 or equivalent are highly beneficial.Minimum 2–3 years of experience in a SOC, MDR, incident response, CSIRT or cyber security operations role.Proven experience handling complex security incidents and supporting advanced investigations.Working knowledge of SIEM, EDR, SOAR, NIDS, DLP and threat intelligence platforms.Experience working with threat hunting methodologies and security detection frameworks.Experience supporting customers or internal stakeholders with security optimisation, detection tuning and cyber security posture improvement.#J-18808-Ljbffr

VIEWNEXT, parte del Grupo IBM, está buscando profesionales apasionados por la seguridad ofensiva en Salamanca, España. ¿Todo listo para enviar su solicitud? Por favor, lea la descripción al menos una vez antes de hacer clic en "Solicitar". Este puesto implica trabajar en ejercicios de Red Teaming y pentesting, utilizando marcos como MITRE ATT&CK y OWASP para simular amenazas reales y analizar vulnerabilidades. Los beneficios incluyen formación continua, apoyo para certificaciones tecnológicas, un plan de carrera y horarios flexibles. Ofrecemos un ambiente de trabajo innovador y inclusivo, ideal para quienes buscan crecer en su carrera profesional. xcskxlj #J-18808-Ljbffr Hay opciones de teletrabajo/trabajo desde casa disponibles para este puesto.

ContractCompany DescriptionT‑Systems is part of the Deutsche Telekom Group, with around 30.000 employees worldwide. We create technology with purpose to generate a positive impact on society. We are looking for curious talent, eager to learn, take on challenges, and contribute ideas that transform our customers’ experience.We trust people: we offer autonomy, continuous support, and a collaborative environment where you can grow without limits. We are one global team, guided by respect, integrity, and a passion for doing better every day.Job DescriptionLocation: Madrid or Bacelona (only applications from these locations will be considered).Are you passionate about helping clients transform through cloud technologies? AtT-Systems, we are looking for aSenior Presales Cloud Architectto join our growing team of digital transformation experts.In this client-facing, strategic role, you will act as thetechnical lead in the presales phase, helping shape cloud strategies, build trusted customer relationships, designing tailored solutions, and supporting the sales team in delivering compelling value propositions to prospective customers.Key ResponsibilitiesAct as the primary technical advisor during the sales process for cloud-based services and solutions (IaaS, PaaS, SaaS).Analyze customer requirements and translate business needs into technical solutions aligned with cloud capabilities.Prepare and deliver high-impact presentationsand technical proposals.Collaborate with internal teams (sales, architecture, operations, and product) to define optimal solution offerings.Leadin RFP/RFI responses, solution design, and cost estimation.Maintain deep knowledge of market trends, industry standards, and evolving cloud technologies.Develop strong client relationships by building trust and demonstrating cloud solution expertise.Participate in events, workshops, and customer meetings to showcase our capabilities.Why Join Us?Be part of an innovative team driving digital transformation.Access to continuous learning and certification programs.Work with diverse clients across industries and regions.Competitive salary, performance bonuses, and benefits package.QualificationsQualifications (MUST):Minimum of5+ yearsin apresales or solution consultingrole, ideally within a cloud or IT services environment.Proven track record of designing and leadingtechnical cloud projectson platforms such as AWS, Microsoft Azure, or Google Cloud Platform.In-depth knowledge of cloud platforms ( AWS, Azure, GCP ); hands-on experience with hybrid/multi-cloud environments is a plus.Demonstrable ability to build architectures and provide prescriptive guidance across complex IT landscapes including network, storage, operating systems, virtualization, databases (RDBMS & NoSQL), Hadoop, and security.Working knowledge of cloud migration methodologies and processes, along with reference architecture development for web-based applications.Familiarity withDevOpstools, containerization (e.G., Docker, Kubernetes), and automation frameworks.Exposure to tools such as Cloudamize for cloud migration assessments is advantageous.Relevantcloud certifications, such as AWS Certified Solutions Architect, Azure Solutions Architect Expert, or similar credentials, are highly desirable.Languages : advanced/native level of Spanish, high level of English.Nice to have:Excellent verbal and written communication skills, capable of facilitating meetings and engaging effectively with both technical and non-technical stakeholders.Strong problem-solving abilities and a consultative mindset, with the capacity to work both independently and as part of a dynamic team.Proven ability to lead teams in a consultative role and manage project deliverables with high quality.Additional InformationWhatdoweofferyou?T-Social: socialinitiatives(sports,community,health, ...)Hybridworkmodel(remote/on-site)FlexibleworkinghoursGrowth&developmentWeeklylanguageclasses(English & German)InternationalMentoringSessions&ExperienceDaysFlexiblecompensationplan (healthinsurance,mealvouchers,childcare,transport)SocialfundWellbeing& time off26+workingdaysofvacationperyearAnd many more advantages of being part of T-Systems!If you are looking for a new challenge, do not hesitate to send us your CV! Please send CV in English. Join our team!T-Systems Iberia will only process the CVs of candidates who meet the requirements specified for each offer.By clicking the link above or any third-party link within this posting, you are leaving this site and going to a third-party website where the third-party website's terms and privacy policy apply#J-18808-Ljbffr

Celonis is the global leader in Process Intelligence and the pioneer of Process Mining technology. As one of the world’s fastest-growing enterprise Saa S companies, we are changemakers pushing the boundaries of what’s possible. We invest heavily in advanced AI capabilities—specifically our Process Intelligence Graph—to turn data insights into immediate business action. We believe there is a massive opportunity to unlock global productivity and sustainability by placing intelligence at the core of every business process. Join our mission to make processes work for people, companies, and the planet. About The Role Celonis is seeking a Manager of Global Cyber Defense to lead our Security Operations (Sec Ops) and Incident Response teams. In this global leadership position, you will be the primary architect and custodian of the strategies, tools, and policies that safeguard Celonis’s enterprise data, corporate infrastructure, and cloud-native environments. Your team will ensure the security and integrity of our global execution management platform, protecting the critical business processes of our customers. By designing and deploying advanced technical controls, you will ensure that emerging cyber threats are automatically detected, isolated, and neutralized. As a core security leader, you will collaborate across Engineering, Product, and IT to build a resilient, security-first culture, integrating deep threat insights directly into our continuous software development lifecycle. You should be ready to lead by example, bring deep technical mastery of modern security ecosystems, and blend proprietary and open-source tooling into a seamless, next-generation global defense strategy. This position reports VP of Information Security. What You Will Do In This Role Lead and Scale: Recruit, mentor, and develop a high‑performing global team of cyber defense engineers and security analysts. Define Standards: Author and maintain enterprise‑wide cyber defense frameworks, incident response playbooks, and operational blueprints. Drive SOC Evolution: Own the strategic architecture, tooling, and day‑to‑day operations of our modern Security Operations Center (SOC). Threat Mitigation: Oversee the rapid identification, containment, and remediation of advanced cyber attacks and vulnerabilities. Tooling Innovation: Evaluate, select, and integrate cutting‑edge security technologies, focusing on automation (SOAR), telemetry, and SIEM optimization. Proactive Defense: Champion threat modeling, breach simulations, and tabletop exercises across Engineering, Cloud Infrastructure, and IT. Cultivate Enablement: Partner with internal learning teams to institutionalize security playbooks and upskill teams across the organization. Metrics and Accountability: Establish, track, and report on high‑impact cyber defense KPIs to provide visibility to executive leadership. Agile Execution: Manage the Cyber Defense roadmap within an agile engineering framework to ensure predictable, high‑velocity security delivery. What We Are Looking For Threat Combat Experience: A proven track record of successfully mitigating advanced persistent threats (APTs) and sophisticated cyber adversaries. SOC Architecture Mastery: In-depth, foundational knowledge of SOC design, including advanced logging strategies, network segmentation, cloud telemetry, and honeypots. Cloud & Saa S Expertise: Strong technical understanding of securing enterprise Saa S platforms and cloud environments (AWS, Azure, or GCP). Automation-First Mindset: Demonstrated ability to build, automate, and orchestrate effective incident response workflows to minimize blast radiuses. Framework Familiarity: Strong working knowledge of security risk management and threat frameworks (e.G., NIST CSF, MITRE ATT&CK). Academic Foundation: A strong academic background with a Bachelor’s degree in Computer Science, STEM, or a compelling narrative of equivalent real‑world technical experience. Leadership and Drive: Proven capability to manage technical teams, manage high‑pressure situations, and consistently exceed operational goals. Executive Communication: Exceptional English communication skills, with the confidence to deliver transparent, data‑driven security metrics to the CISO and executive board. Preferred Qualifications Hybrid Security Background: Hands‑on experience spanning both offensive (red teaming/penetration testing) and defensive (blue teaming) disciplines. Data-Driven Security: Familiarity with leveraging data analytics, SIEM engineering, or process‑oriented workflows to optimize security operations. Industry Certifications: Relevant elite certifications such as CISSP, CISM, or GIAC. Enterprise Endpoint Security: Experience managing and securing corporate endpoint fleets at a global scale. What Celonis Can Offer You Pioneer Innovation: Work with the global leader in Process Mining and the Process Intelligence Graph to shape the future of AI‑driven business operations. Ownership from Day 1: Every full‑time Celonaut is an owner, receiving Restricted Stock Units (RSUs) and merit‑based refresh grants. Unrivaled Family Support: Benefit from our inclusive parental leave policy—24 weeks of fully paid leave for primary carers and 12 weeks for supporting carers, available from your first day of employment. Work‑Life Integration: Enjoy Unlimited PTO (in applicable regions) and generous PTO globally, as well as a flexible hybrid work model that balances remote focus with vibrant office collaboration. Continuous Growth: Elevate your skills through our 70‑20‑10 learning framework, mentorship programs, and access to a dedicated learning platform. Holistic Well‑being: Prioritize your health with subsidized Wellhub memberships, mental health counseling, and dedicated “Wellness Weeks” that prioritize work/life balance. Drive Sustainability: Participate in annual Impact Days, where you receive paid time off to volunteer for community and environmental causes with your local office, or virtually. Global Inclusion & Belonging: Find community through our Inclusion Think Tank and participate in our annual Inclusion Days, ensuring every voice is heard and valued. Value‑Driven Impact: Join a mission‑led organization where our core values—Live for Customer Value, The Best Team Wins, We Own It, and Earth Is Our Future—drive every decision. #J-18808-Ljbffr

SIX drives the transformation of financial markets. ¿Está considerando presentar su candidatura para este trabajo? Compruebe todos los detalles en esta descripción del puesto y luego haga clic en "Solicitar". What sets us apart drives us ahead: between local roots and global relevance, we are a unique blend of tradition and future, of foundation and growth. We value bright minds and inspire them to grow with their ideas. Come and shape the future of finance with us. Madrid | Working from home up to 40% | Reference 8095 We are seeking a motivated Cyber Threat Intelligence (CTI) Analyst with a strong technical mindset to support the intelligence collection, automation and maturation of our intelligence capabilities. The focus of this role in Cyber Threat Intelligence is to enhance cyber threat intelligence capabilities through automation, AI-driven analysis, and continuous improvement of telemetry and intelligence workflows. You will work closely with senior team members and partners to enhance the company's intelligence capabilities. This position is available only in Spain due to the restrictions of some of the intelligence sources. What You Will Do • Join an international Cyber Threat Intelligence team operating 24x7, including on‑call availability when required., • Monitor, collect, and analyze intelligence from restricted communities, internal telemetry, and monitoring systems to identify actionable insights and support investigations, incident response, and threat detection activities., • Own and continuously improve weekly intelligence telemetry reporting, dashboards, and visualization capabilities to provide accurate, consistent, and actionable insights to stakeholders., • Contribute to the automation and orchestration of CTI workflows, including data collection, enrichment, analysis, reporting, and the integration of AI-driven capabilities for correlation, prioritization, and analytical output generation., • Work with Threat Intelligence Platforms and security tooling, including OpenCTI, Elastic stack, SIEM, Threat Intelligence Platforms, and malware sandboxes, while applying frameworks such as MITRE ATT&CK to contextualize threats and improve detection effectiveness., • Collaborate with SOC, Detection & Hunting, Vulnerability Management, Corporate Security, and other cross‑functional teams to operationalize intelligence insights, produce threat reports and executive summaries, and support the continuous improvement and scalability of CTI processes. What You Bring • 4 years of experience in Cyber Threat Intelligence, incident response, SOC, or related technical cybersecurity roles., • Strong technical profile with hands‑on experience in automation, scripting, or orchestration., • Familiarity with AI applications in cybersecurity, particularly for automation, data processing, analytics, and intelligence workflow improvement., • Experience with Threat Intelligence Platforms and security monitoring tools, including OpenCTI, Elastic stack, SIEM platforms, or similar technologies., • Solid understanding of the intelligence lifecycle, telemetry analysis, tactical intelligence collection, and frameworks such as MITRE ATT&CK for threat detection and analysis. Diversity is important to us. Therefore, we are looking to receiving applications regardless of any personal background. What We Offer Flexible Work Models We trust our employees and offer a work environment that is well‑balanced, productive and fosters success. Personal Development You will benefit from a culture of continuous learning and feedback. Your personal growth is supported through an extensive learning offering. xcskxlj Agile Working Methods Whether through scrum or design thinking, we solve exciting tasks together in teams. #J-18808-Ljbffr

I am looking to speak with Cyber Threat Hunting Managers, looking for a new opportunity in Madrid. Por favor, verifique que tiene el nivel de experiencia y las cualificaciones adecuadas leyendo la descripción completa de esta oportunidad a continuación. Working closely with an external security provider and a small internal team, you will take ownership of detection effectiveness, hunting outcomes, and the continuous improvement of security monitoring capabilities across a global enterprise environment. Responsibilities • Lead the threat detection and threat hunting function, providing technical leadership, strategic direction, and operational oversight, • Manage and coordinate internal resources and external security partners to deliver effective and consistent detection and hunting outcomes, • Assess detection coverage and develop, optimise, and maintain high-quality detection rules to improve visibility and reduce false positives, • Drive advanced, risk-based threat hunting activities to identify sophisticated and previously undetected threats, • Integrate findings from purple team exercises into detection engineering and hunting programmes, • Collaborate with Incident Response, Threat Intelligence, Vulnerability Management, and wider security teams to strengthen security operations and reduce risk, • Continuously improve detection capabilities, helping to reduce attacker dwell time and enhance threat visibility across the organisation Requirements • Degree in Computer Science, Cyber Security, or a related discipline, or equivalent experience, • 5+ years of experience in security monitoring, threat detection, threat hunting, or security operations, • Hands-on experience with SIEM, XDR, EDR, cloud security, identity protection, and network security technologiesStrong understanding of threat actors, attack methodologies, and frameworks such as MITRE ATT&CK, Cyber Kill Chain, and the Diamond Model xcskxlj • Experience working within large, global organisations and hybrid technology environments, • Excellent analytical, problem-solving, communication, and stakeholder management skills, • Demonstrated ability to drive continuous improvement and deliver measurable security outcomes, • Proactive, inquisitive, and solutions-focused approach with a strong sense of ownership and accountability This is an excellent opportunity to play a key role in developing and maturing an enterprise threat detection and hunting capability within a complex international environment. #J-18808-Ljbffr

Acronis is a world leader in cyber protection, delivering natively integrated solutions that monitor, control, and protect the data that businesses and lives depend on. Driven by our passion to protect every workload, we’ve built the industry’s only all-in-one cyber protection platform. We are looking for a Cybersecurity Researcher to join our mission of protecting the digital world.What You'll DoParticipate in design and implementation of detection capabilities of Acronis Security and EDR products.Analyse clean and malicious content: executables, scripts, various document formats, websites, memory dumps, vulnerabilities.Develop, support, and fine-tune threat detection logic and signatures.Conduct online research of the latest cyber threats and ensure those can be detected by existing in-house technologies.Contribute to sharing research results in blog posts and articles.Monitor automated detection pipelines to ensure high detection accuracy.Support scan engine and product development by participating in joint research projects.What You BringUnderstanding of modern cyber-attack techniques, common types of malwares, OS internals (primarily Windows, macOS and Linux is a plus), and network protocols.5+ years' experience in malware analysis (executables, scripts, document formats, exploits): static (e.G. IDA Pro, Ghidra), dynamic (e.G. x64dbg, OllyDBG), and behavioral (e.G. Cuckoo, CAPE).3+ years' experience with proactive Threat Hunting (using multiple EDR/XDR solutions).Network traffic analysis (Wireshark).Extensive experience working with threat intelligence tools and services: VirusTotal, Shodan, Censys, MISP (or similar feed collections), analysis with MITRE ATT&CK framework.3+ years' experience working for a well-established security vendor.Software development experience: Python, REST APIs, SQL, Regular expressions. C/C++ would be considered a plus.Flexibility and proven ability to learn new things and develop skills fast. Analysis, critical thinking, and problem-solving skills. Unbeatable curiosity.Good reading and writing skills in English.Please submit your resume and application in English.Acronis is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, marital status, national origin, physical or mental disability, medical condition, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, gender identity or expression, or any other characteristic protected by applicable laws, regulations and ordinances.#J-18808-Ljbffr

This job is with Allianz Commercial, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. Consulte la descripción del puesto a continuación. Si confía en que tiene las habilidades y la experiencia adecuadas, envíe su solicitud hoy mismo. Threat Intelligence Engineer • Madrid, ES You know adversaries by how they operate – and you know how to turn that knowledge into action. As a Threat Intelligence Engineer – Intrusion Analysis & Detection, you will help transform threat actor behavior into concrete defensive value: stronger detections, smarter hunting hypotheses, and intelligence that helps defenders move faster and more effectively. Responsibilities Analyze real‑world attacks, post‑incident findings, and emerging adversary tradecraft to identify relevant threat activity and convert retrospective analysis into forward‑looking intelligence. Translate threat intelligence into actionable detection content by producing detection rules and analytical guidance for deployment by detection engineering teams across platform‑native environments. Track threat actors and map tactics, techniques, and procedures to MITRE ATT&CK, identifying coverage gaps and generating meaningful hunting leads based on relevance to the Allianz environment. Build and maintain automation for repetitive intelligence workflows using SOAR platforms, Power Automate, N8N, Python, scripting, and API integrations to improve speed, quality, and consistency. Apply AI in daily analytical workflows to categorize incoming intelligence, enrich indicators, correlate reporting with tracked topics, and accelerate decision‑making. Communicate findings clearly through dashboards, written intelligence notes, and operational briefings so that detection engineers, incident responders, IT administrators, and leadership can act confidently. Support the full IOC lifecycle and contribute during active security incidents by providing timely analytical input, validation, and triage support as part of on‑call rotations. Qualifications Hands‑on experience in intrusion analysis, including the investigation of real‑world attack patterns, adversary behavior, and post‑incident evidence. Proven ability to turn intelligence into action through detection engineering, including authoring, tuning, or validating detection rules in production environments. Strong knowledge of MITRE ATT&CK, especially at procedure level, and a solid understanding of the telemetry required to detect adversary activity effectively. Practical coding and automation skills, ideally in Python, scripting, and API‑driven workflows, with a builder mindset focused on improving efficiency through automation. Good understanding of the Threat Intelligence Lifecycle and structured analytical techniques, including models such as the Diamond Model and Kill Chain. Experience working with or exposure to tools such as Google SecOps, CrowdStrike Falcon / Intelligence, Google Threat Intelligence / VirusTotal, Recorded Future, MISP, or similar platforms. A proactive, outcome‑driven mindset with the ability to stay composed under pressure, communicate clearly during incidents, and collaborate effectively across technical teams. Benefits Hybrid work model with up to 25 days per year working from abroad. Compensation package includes a company bonus scheme, pension, employee shares program, and multiple employee discounts. Career development and digital learning programs, international career mobility, and a culture that fosters innovation, delivery, and empowerment. Flexible working, health and well‑being offers including healthcare and parental leave benefits. Commitment to Integrity, Fairness & Inclusion: Allianz Technology is proud to be an equal‑opportunity employer dedicated to fostering an inclusive work environment for everyone. xcskxlj We welcome applications regardless of race, ethnicity, cultural background, age, gender, nationality, religion, social class, disability, or sexual orientation, or any other characteristics protected under applicable local laws and regulations. #J-18808-Ljbffr

Ultimate.Ai is looking for a Threat Intelligence Engineer in Madrid to enhance its cybersecurity posture. This role includes analyzing attacks, creating detection content, and applying AI to improve defenses. Ideal candidates will have hands-on experience with intrusion analysis and a strong grasp of MITRE ATT&CK.The position promotes a hybrid work model, offering flexibility while dealing with global cybersecurity challenges. Join a dynamic team aiming to defend against evolving threats effectively.#J-18808-Ljbffr

If you dream of being a spy, but you don’t like Martinis. Your place is with us!We are expanding our teams in the defense sector.WHAT CHALLENGE WILL YOU BE TAKING ON?In our team you will participate in penetration testing projects and technical assessments on web and mobile applications, network infrastructures, Wi‑Fi networks, cloud environments (AWS, Azure, GCP), and emerging components such as artificial intelligence models. In addition, Red Team exercises will be conducted, oriented to simulate real attacks in a controlled manner, as well as Purple Team exercises, working in coordination with defensive teams to strengthen threat detection, response and mitigation.Activities will include:- Running penetration tests on web applications, mobile, network infrastructure, Wi‑Fi networks, cloud environments, artificial intelligence models, etc.- Participate in Red Team exercises, simulating real attacks, and Purple Team exercises, collaborating with defensive teams to improve threat detection and response.- Identify and report vulnerabilities, proposing technical recommendations for effective mitigation.- Collaborate with IT and cybersecurity teams in the implementation of security best practicesWHAT DO WE NEED IN OUR TEAM?For this position, we are looking for cybersecurity or similar graduates with experience in penetration testing in: network infrastructure, web and mobile applications, cloud environments (AWS, Azure, GCP), Active Directory, wireless networks. In addition to experience in Red Team exercises, including planning, execution of simulated attacks, evasion techniques, persistence and exploitation in controlled or real environments.Scripting skills (Python, Bash, PowerShell) for automation of offensive tasks.Understanding of methodologies such as PTES, MITRE ATT&CK, OWASP will also be an asset.WHAT DO WE OFFER?- Hybrid working model and 8 weeks per year of teleworking outside your usual geographical area.- Flexible start and finish times, and intensive working hours Fridays and summer.- Personalized career plan development, training and language learning support.- National and international mobility. Do you come from another country? We can offer you a relocation package.- Competitive compensation with ongoing reviews, flexible compensation and discount on brands.- Wellbeing program: Health, dental and accident insurance; free fruit and coffee, physical, mental and financial health training, and much more!We promote equal opportunities in recruitment, and we are committed to inclusion and diversity.What are you waiting for? Join us#J-18808-Ljbffr

About Us Aumente sus posibilidades de llegar a la fase de entrevista leyendo la descripción completa del puesto y enviando su solicitud sin demora. Integrity360 is the largest independent cyber security provider in Europe, with a growing international presence spanning the UK, Ireland, mainland Europe, Africa and the Caribbean. With over 700 employees across 12 locations and six Security Operations Centres (SOCs) – including Dublin, Sofia, Stockholm, Madrid, Rome and Cape Town – we support more than 2,500 clients across a wide range of industries. Over 80% of our team are technical experts, focused on helping clients proactively identify, protect, detect and respond to threats in an ever‑evolving cyber landscape. Our security‑first approach positions cyber resilience as a business enabler, empowering organisations to operate with confidence. At Integrity360, people come first. We invest heavily in learning, development and progression, fostering a dynamic culture where innovation, collaboration and continuous growth are at the heart of what we do. If you’re ready to take your cyber security career to the next level, we’d love to hear from you. Job Role / Responsibilities In this role you will act as a Level 3 escalation point within the MDR/SOC function, providing advanced technical support to Level 2 analysts during complex or high‑severity investigations. You will bring deep operational knowledge across modern security technologies, including SIEM, EDR, Network Intrusion Detection Systems, SOAR, DLP and related security monitoring platforms. The Principal SOC Analyst will support the investigation, containment and remediation of advanced threats, ensuring incidents are analysed in the correct business and technical context. You will contribute to the continuous improvement of the MDR service by supporting the definition of security monitoring strategies, improving detection logic, tuning security technologies, reviewing investigation processes and advising customers on technical optimisation opportunities. A strong understanding of malware behaviour, adversary tactics, techniques and procedures, and emerging threats will be critical to success. Primary Duties and Responsibilities • Act as the Level 3 escalation point for advanced, complex or high‑impact security investigations., • Support Level 2 analysts during complex investigations, providing technical guidance, validation and direction., • Perform in‑depth analysis of security events, alerts, logs, endpoint telemetry, network traffic and other relevant data sources., • Lead advanced incident investigations, including scoping, containment, eradication and remediation recommendations., • Analyse malicious activity, suspicious files, attacker behaviour and adversary TTPs., • Support customers from a technical perspective in the optimisation, tuning and improvement of their security monitoring capabilities., • Review and improve SIEM, EDR, NIDS, SOAR and other security tool configurations to reduce false positives and improve detection quality., • Contribute to the development and refinement of detection use cases, correlation rules, alerting logic and investigation playbooks., • Support the definition of customer security monitoring strategies based on risk profile, threat landscape and available telemetry., • Provide technical recommendations to strengthen customer cyber security posture and improve resilience against current and emerging threats., • Conduct threat hunting and proactive analysis based on indicators, behaviours, intelligence and attack patterns., • Document investigation findings, evidence, timelines, containment actions and remediation recommendations in a clear and structured manner., • Prepare and deliver technical reports to customers, partners and internal stakeholders., • Monitor trusted sources for emerging threats, vulnerabilities and adversary activity relevant to customer environments., • Contribute to the continuous improvement of SOC processes, procedures, documentation and knowledge base material., • Support mentoring and technical development of Level 1 and Level 2 analysts where required. Desired Skills • Strong hands‑on experience in Security Operations Centre or MDR environments., • Deep operational knowledge of SIEM, EDR, Network Intrusion Detection Systems, SOAR, DLP and related security monitoring technologies., • Strong experience with security event triage, correlation, investigation and escalation., • Ability to analyse endpoint, network, identity, cloud and application telemetry in support of complex investigations., • Experience with SIEM query languages and detection logic, such as KQL, SPL, Sigma or equivalent., • Experience tuning security controls and detection content to improve alert fidelity and reduce false positives., • Strong understanding of attacker tactics, techniques and procedures, including MITRE ATT&CK., • Ability to perform host‑based and network‑based threat analysis., • Experience analysing packet captures, endpoint artefacts, logs, scripts, documents and potentially malicious files., • Strong understanding of incident response lifecycle, including preparation, identification, containment, eradication, recovery and lessons learned., • Strong understanding of enterprise network architecture, TCP/IP, firewalls, proxies, VPNs, DNS, email security and cloud environments., • Understanding of security protocols, encryption technologies and common authentication mechanisms., • Experience supporting customer‑facing technical discussions, including investigation reviews, tuning recommendations and posture improvement activities., • Ability to manage multiple complex incidents and make effective decisions under pressure., • Strong written and verbal communication skills, with the ability to explain technical findings to both technical and non‑technical stakeholders., • Experience with Microsoft Sentinel, Microsoft Defender, Splunk, QRadar, CrowdStrike, SentinelOne, Palo Alto, Suricata, Zeek, Snort or similar technologies is highly beneficial., • Experience with cloud security monitoring across Microsoft Azure, AWS or Google Cloud is beneficial., • Experience with threat hunting, detection engineering or purple team activities is beneficial., • Ability to produce clear technical documentation, investigation reports and customer‑facing recommendations. Certifications and Qualifications • Security industry certifications such as GCIH, GCFA, GCIA, GNFA, GCTI, GSEC, CISSP, CySA+, SC‑200, AZ‑500 or equivalent are highly beneficial., • Minimum 2–3 years of experience in a SOC, MDR, incident response, CSIRT or cyber security operations role., • Proven experience handling complex security incidents and supporting advanced investigations., • Working knowledge of SIEM, EDR, SOAR, NIDS, DLP and threat intelligence platforms., • Experience working with threat hunting methodologies and security detection frameworks. xcskxlj, • Experience supporting customers or internal stakeholders with security optimisation, detection tuning and cyber security posture improvement. #J-18808-Ljbffr

We are seeking a motivated Cyber Threat Intelligence (CTI) Analyst with a strong technical mindset to support the intelligence collection, automation and maturation of our intelligence capabilities. La siguiente información tiene como objetivo proporcionar a los posibles candidatos una mejor comprensión de los requisitos para este puesto. The focus of this role in Cyber Threat Intelligence is to enhance cyber threat intelligence capabilities through automation, AI-driven analysis, and continuous improvement of telemetry and intelligence workflows. You will work closely with senior team members and partners to enhance the company's intelligence capabilities. This position is available only in Spain due to the restrictions of some of the intelligence sources. What You Will Do • Join an international Cyber Threat Intelligence team operating 24x7, including on-call availability when required., • Monitor, collect, and analyze intelligence from restricted communities, internal telemetry, and monitoring systems to identify actionable insights and support investigations, incident response, and threat detection activities., • Own and continuously improve weekly intelligence telemetry reporting, dashboards, and visualization capabilities to provide accurate, consistent, and actionable insights to stakeholders., • Contribute to the automation and orchestration of CTI workflows, including data collection, enrichment, analysis, reporting, and the integration of AI-driven capabilities for correlation, prioritization, and analytical output generation., • Work with Threat Intelligence Platforms and security tooling, including OpenCTI, Elastic stack, SIEM, Threat Intelligence Platforms, and malware sandboxes, while applying frameworks such as MITRE ATT&CK to contextualize threats and improve detection effectiveness., • Collaborate with SOC, Detection & Hunting, Vulnerability Management, Corporate Security, and other cross-functional teams to operationalize intelligence insights, produce threat reports and executive summaries, and support the continuous improvement and scalability of CTI processes. What You Bring • 4 years of experience in Cyber Threat Intelligence, incident response, SOC, or related technical cybersecurity roles., • Strong technical profile with hands-on experience in automation, scripting, or orchestration, • Familiarity with AI applications in cybersecurity, particularly for automation, data processing, analytics, and intelligence workflow improvement. xcskxlj, • Experience with Threat Intelligence Platforms and security monitoring tools, including OpenCTI, Elastic stack, SIEM platforms, or similar technologies., • Solid understanding of the intelligence lifecycle, telemetry analysis, tactical intelligence collection, and frameworks such as MITRE ATT&CK for threat detection and analysis #J-18808-Ljbffr

Associate SOC AnalystDepartment: Cyber Services and CapabilitiesEmployment Type: Full TimeLocation: ESP MadridDescriptionAs an Associate Security Analyst, you will be the first line of defence in the Event Monitoring Centre, responsible for the initial triage of security alerts, basic vulnerability analysis and data loss prevention. Your primary role will be to monitor, analyse, and assess incoming alerts, identifying potential security incidents based on established criteria. You will elevate confirmed or suspicious threats to the R2 analysts, senior analysts, or the shift lead for further investigation and response. This role requires strong analytical skills, attention to detail, and the ability to follow escalation protocols to ensure swift and effective incident management. Ideal candidates will have a foundational understanding of cybersecurity principles, experience with SIEM tools, and a commitment to continuous learning in a fast‑paced security environment.Due to being the initial contact for triaging alerts, your expertise will directly support analytic development by suggesting customer tuning rules to ensure the efficient running of the SOC. This role requires strong analytical skills, technical proficiency, and a commitment to continuous learning in a dynamic security environment.Key ResponsibilitiesThreat Detection and Monitoring- Monitor the ITSM platform for new alerts, schemas and tickets- Monitor the SIEM Logs, IDS Logs and Managed Intelligence sources- Identify potential threats, vulnerabilities, and indicators of compromise- Initiate escalation procedures to counteract potential threats and vulnerabilitiesIncident Remediation and Documentation- Escalate to R2 analysts, Team Lead or senior analyst should further clarification or four eyes be required- Provide incident remediation and prevention recommendations to customers using established procedures and analyst experience- Document and adhere to security monitoring processes- Suggest process and procedure improvement based on working requirements to streamline processesCustomer Service and Escalation- Exceed customer expectations by always delivering exceptional customer service- Be the initial point of contact for alerts and schemas triaged- Contribute to the creation and maintenance of security documentation, including incident response playbooks, standard operating procedures, and knowledge base articlesReporting and Continuous Improvement- Compile and review service‑focused reports for effective communication- Contribute to the creation and maintenance of security documentation, including incident response playbooks, standard operating procedures, and knowledge base articles- Be susceptible to mentoring from senior analystsThreat Analysis and Collaboration- Contribute practical insights to the analysis of common security incidents- Maintain working relationships with the Analytic Development and Security Engineering teams- Collaborate with shift partners to provide a high quality of serviceGeneral Duties- Perform additional assigned duties as required- Flexibility to quickly learn and adapt to new security tools, technologies, and processes- Process Data Schema Review data loss prevention alerts- Strong analytical and problem‑solving skills- Good communication skills, both written and verbal- Ability to work collaboratively as part of a team- Keep up to date with latest emerging threats and APT groups- Ability to be mentored by senior analystsSkills, Knowledge & ExpertiseMinimum RequirementsNetwork, Cloud and OS Knowledge:- Understanding of common network protocols and tools- Understanding of Linux operating systems- Understanding of Content Delivery Networks- Understanding of the CIA triad and how it interacts with security- Understanding of cloud technologies – AWS, GCP, OCICustomer interaction:- Experience with documenting both high level and technical customer facing information- Confidence providing critical/sensitive information accurately- Contacting key stakeholders during major incidentsIncident Analysis and Response:- Awareness of the MITRE ATT&CK framework- Pedigree in performing in-depth analysis of security alerts- Assess customer impact through investigation and work with senior analysts for resolution- Basic understanding of Personal Identifiable Information- Initiate escalation procedure for potential threats- Ability to interpret threat priority against the cyber kill chain- Provide appropriate mitigation and remediation stepsDesirable RequirementsTooling- Hands‑on experience with Security Information and Event Management (SIEM) platforms preferably Splunk- Knowledge of cloud products and log events such as AWS, OCI, GCP- Knowledge of cloud vulnerability tools such as WizDesirable Certifications- CompTIA Security+- CompTIA Network +- Security Blue Team Level One- AWS Cloud Practitioner- MAD20 Att&ck FundamentalsJob Benefits- Flexible Working: Balance your work and personal life with our flexible working options- Generous Holiday Allowance: Enjoy 25 days of holiday, plus bank holidays, with the option to buy up to 5 additional days of annual leave- Medicash & Critical Illness Scheme- Financial & Investment Benefits: Enjoy peace of mind with our Pension, Life Assurance, and Share Save Scheme- Community & Volunteering Programmes: Make a difference in your community with our volunteering opportunities- Green Car Scheme: Drive green and save money with our eco‑friendly car scheme- Cycle Scheme: Stay fit and healthy with our cycle‑to‑work scheme- Special Time Off: Take time off for the big moments in life, like getting married, entering into a civil partnership, becoming a grandparent, and welcoming home a new pet- Family Planning: Benefit from our generous maternity and paternity leave, as well as time off and support for those undergoing fertility treatments#J-18808-Ljbffr

SIX Group Services Ltd. in Madrid is seeking an experienced SOC professional to advance threat detection, incident response, and threat hunting across endpoints, identity, cloud, and email environments. You will tune detections, build playbooks, and mentor junior analysts while collaborating with cross‑functional teams to strengthen SIX's security posture.Flexible remote work up to 40% is offered. The role emphasizes hands‑on experience with SIEM/EDR/SOAR platforms, MITRE ATT&CK, and automation#J-18808-Ljbffr

SIX Group Services Ltd. Si sus habilidades, experiencia y cualificaciones coinciden con las de esta descripción del puesto, no demore su solicitud. is seeking a motivated Cyber Threat Intelligence Analyst to advance intelligence capabilities through automation and AI-driven analysis in Madrid, with up to 40% remote work. You will collaborate with an international CTI team and cross-functional partners to enhance threat detection and incident response. xcskxlj The role emphasizes automation, telemetry maturation, and integration of security tooling like OpenCTI, Elastic Stack, and SIEM, applying MITRE ATT&CK to contextualize #J-18808-Ljbffr Hay opciones de teletrabajo/trabajo desde casa disponibles para este puesto.

Are you passionate about cybersecurity and want to lead projects related to incident detection and response? The GMV cybersecurity team is looking for you!We like to get straight to the point and tell you what you won’t find online. If you want to learn more about us, visit theGMV website.WHAT CHALLENGE WILL YOU FACE?As a SOC-CERT Project Manager, you will lead the management and evolution of security monitoring and incident response services, coordinating technical teams and projects aimed at improving detection and response capabilities against cyber threats.You will work with SOC teams, security analysts, and incident response specialists to strengthen the protection of complex technological infrastructures and improve incident management processes.On a day-to-day basis you will:- Lead projects related to the operation and evolution of SOC and CERT services.- Coordinate technical teams of SOC analysts and cybersecurity specialists.- Oversee the detection, analysis, and management of security incidents.- Track KPIs and SLAs associated with monitoring and incident response services.- Define and improve detection, analysis, and incident response procedures.- Coordinate communication with clients and stakeholders during critical incidents.- Drive continuous improvement initiatives, automation, and SOC maturity.- Prepare technical and executive reports on the status of services and projects.WHAT DO WE NEED IN OUR TEAM?We are looking for someone with experience in cybersecurity and project management, capable of coordinating technical teams and leading monitoring and incident response services in complex technological environments.For this role, it is important to have:- Experience in cybersecurity project management or SOC services.- Knowledge of SOC, CERT or CSIRT environments and security incident management.- Experience coordinating technical cybersecurity teams.- Knowledge of monitoring tools such as SIEM (Splunk, QRadar, ArcSight, Sentinel, or others).- Knowledge of detection and response technologies such as EDR/XDR.- Familiarity with security frameworks and standards such as NIST, MITRE ATT&CK, or ISO 27001.- Experience tracking KPIs, SLAs, and reporting for security services.- Degree in Computer Engineering, Telecommunications, or similar.- Cybersecurity certifications such as CISSP, CISM, CEH, GIAC or equivalent are a plus.WHAT DO WE OFFER?- Hybrid work model with 8 weeks per year of remote work outside your usual geographic area.- Flexible working hours with optional intensive Fridays and summer schedule.- Development of a personalized career plan, training, and language learning support.- National and international mobility. If you come from another country, we offer a relocation package.- Competitive compensation with continuous reviews, flexible benefits, and brand discounts.- Wellbeing program: health, dental, and accident insurance; free fruit and coffee; training in physical, mental, and financial health; and much more!In our selection processes, you will always have personal or phone contact, in person or online, with our talent acquisition team. Transfers or bank card requests are never required. If contacted through another process, please contact the responsible recruitment person.We promote equal opportunities in hiring, committed to inclusion and diversity.WHAT ARE YOU WAITING FOR? JOIN USIf you have any questions, feel free to contact Clara Sánchez Lobato, responsible for this vacancy.#J-18808-Ljbffr

Work area: Por favor, asegúrese de leer atentamente los siguientes detalles antes de enviar cualquier solicitud. Information technology / Software Country: ES Entry level: Professionals Type of contract: full time We are expanding our Global Corporate Information Security team and are looking for an IGA (Identity Governance and Administration) & PAM (Privileged Access Management) Product Owner (m/f/d) who is responsible for the delivery, prioritization, and operational execution of the Identity Governance & Administration (IGA) and Privileged Access Management (PAM) product backlogs. This role owns the day to day responsibility for translating IAM strategy, regulatory requirements, and risk drivers into consumable IGA and PAM services, while overall accountability remains with the Head of IAM Security. The Product Owner ensures close alignment across architecture, engineering, SOC, and business stakeholders to deliver scalable, compliant identity and privileged access capabilities. This role is central to the organization’s Zero Trust and regulatory compliance journey, directly reducing the highest impact cyber risks related to over privileged access and poor identity governance. You will shape how identities, entitlements, and privileged access are governed across 55,000+ users and ~2,500 applications, influencing both security posture and operational efficiency at enterprise scale. The working location for this position will be in Madrid city where we operate a hybrid model, requiring at least 40% of the working time on-site. Responsibilities • Own and manage the IGA & PAM product backlogs, priorities, and sprint objectives., • Act as day to day Product Owner for Global IGA and Global PAM initiatives., • Translate IAM strategy, regulatory obligations (NIS2, ISO 27001), and risk assessments into delivery backlog items., • Coordinate with IAM Architects to ensure architectural intent is correctly implemented by engineering teams., • Drive onboarding of applications, identities, and platforms into IGA lifecycle and PAM controls., • Ensure alignment between IGA, PAM, IAM analytics, and SOC monitoring., • Support tool selection, vendor engagement, and roadmap planning for IGA and PAM platforms., • Drive adoption, communication, and change management with business and IT stakeholders., • Provide clear reporting on delivery progress, risk reduction, and compliance KPIs to the Head of IAM. Immediate Contributions • Delivered a production ready Global IGA service covering JML automation, access governance, and access reviews., • Established a unified Global PAM service enforcing least privilege, MFA, and just in time access., • Implemented governance for non human identities (service accounts, technical IDs, automation)., • Defined and operationalized RBAC / PBAC role models across priority applications., • Achieved measurable reduction in standing privileges and audit findings related to access governance., • Bachelor’s degree in IT, Cyber Security, or equivalent experience. Cybersecurity certifications advantageous: CISSP, CISM, Microsoft Endpoint-related certifications, or comparable alternatives., • Fluency in English is a must. Skills in German and French are a plus., • Knowledge of modern security frameworks (MITRE ATT&CK, NIST CSF, ISO 27001)., • Experience implementing KPIs and running continual service improvement processes., • Strong Product Owner experience in IAM, IGA, or PAM domains., • Deep understanding of Identity Governance concepts: Joiner Mover Leaver (JML), Access reviews & certifications, Role and entitlement modelling (RBAC / PBAC)., • Strong knowledge of Privileged Access Management: Vaulting & credential rotation, Just in time access & MFA enforcement, Privileged session monitoring., • Ability to balance risk, compliance, and delivery pragmatism in complex enterprises. Preferred Qualifications • Experience with IGA and PAM tooling in large, multi-domain environments., • Exposure to non human identity governance (service accounts, automation, APIs)., • Experience operating in regulated environments (ISO 27001, NIS2)., • Strong collaboration experience with SOC and audit teams. Benefits • Competitive compensation and benefits package that recognizes your expertise., • Flexible and hybrid working model., • Creative freedom and responsibility to shape processes and solutions in our global transformation., • Continuous learning and development with tailored training and certification opportunities., • Life and accident insurance., • Option to include a premium private health insurance package as part of the flexible remuneration., • A safe, stable and international workplace within a trusted family business that invests in people. Please note that we can only accept applications submitted through our website, using the online application form. xcskxlj Please note that we do not accept applications via recruitment agencies for this position. #J-18808-Ljbffr

Senior DevOps Engineer – Global Threat ManagementWe are looking for a senior DevOps Engineer to join our Global Threat Management (GTM) team at ING Hubs Spain. The GTM team focuses on intelligence‑driven, proactive defense across geographies and disciplines.Key Responsibilities- Structure and deploy scalable infrastructure to support GTM workflows, building automation and integrations that strengthen detection, prioritization, and decision‑making.- Design and implement automations to detect, prioritize, and investigate cyber threats.- Transform large‑scale security telemetry and threat intelligence data into actionable insights for GTM and executive decision‑making.- Automate and accelerate threat analysis using standard and custom‑built tooling.- Deploy, operate, and optimize cloud‑based infrastructure (preferred Azure and GCP), ensuring scalability, reliability, cost efficiency, and governance.- Enforce and continuously improve security and DevOps best practices within the team.- Perform maintenance, monitoring, and resilience testing of owned infrastructure to ensure high availability and operational continuity.- Design and integrate intelligence‑driven security solutions across data sources, security tools, and services.- Design, develop, and maintain Python‑based automation, scripts, integrations, and operational tooling.- Design and communicate solutions using clear documentation, diagrams, and visualizations.- Troubleshoot and resolve deployment, installation and configuration issues across cloud infrastructure and security tooling, ensuring minimal disruption to operations.- Clearly communicate insights and recommendations to both technical and non‑technical stakeholders.- Leverage AI and automation technologies to streamline workflows, enrich threat intelligence processes, and improve operational effectiveness.Qualifications- Ability to translate complex cyber‑threat challenges into robust, scalable, and data‑driven solutions.- Strong Python development skills for automation, integrations, and tooling.- Experience deploying and supporting cloud‑based solutions, preferably in Azure and GCP.- Experience with Infrastructure as Code (preferably Terraform) and DevOps practices.- Solid understanding of cloud platforms, networking, system administration, infrastructure architecture, and the operating model of CISO organizations in mid‑to large‑scale enterprises.- Design end‑to‑end solutions, translating complex system landscapes into clear, implementable designs.- Strong hands‑on experience diagnosing and resolving deployment, installation, and integration issues across cloud environments, infrastructure components, and custom‑built tools.- Experience with containerization technologies such as Docker and Kubernetes.- Collaborate proactively with threat intelligence and cybersecurity experts, bringing curiosity, strong problem‑solving skills, and clear communication to drive impact.- Experience building and maintaining CI/CD pipelines and working with version control systems such as Git.- A degree in Computer Science or related discipline, or equivalent hands‑on experience in cloud engineering, DevOps, system administration, or cybersecurity.- Relevant Cloud, DevOps, or Cybersecurity certifications are an advantage.- English level – B2.- Bonus: Experience with threat intelligence platforms, security tools, and cyber threat intelligence workflows.- Bonus: Experience with Databricks, data engineering, or large‑scale data‑processing platforms.- Bonus: Experience building AI/GenAI solutions using LLMs and automation frameworks.- Knowledge of cybersecurity concepts, threat actors, TTPs, and frameworks such as MITRE ATT&CK.- Experience with security automation and orchestration platforms.- Relevant certifications in Threat Intelligence, Security, AI, or Data Engineering.- Experience working within a CISO, Security Operations, or Threat Management organization.What We Offer- Flexible work model – choose days working from home or at ING MAD.- Restaurant card and onsite facilities: electric mobility, doctor, hairdresser, gym, and more.- Health and life insurance for employees and family.- Flexible remuneration model with tax‑advantaged benefits such as nursery, transport, and training aids.- Transport allowance to help with commuting.- Pension plan available after 1 month of employment.#J-18808-Ljbffr

Work area:Information technology / SoftwareCountry:ESEntry level:ProfessionalsType of contract:full timeWe are expanding our Global Corporate Information Security team and are looking for an IGA (Identity Governance and Administration) & PAM (Privileged Access Management) Product Owner (m/f/d) who is responsible for the delivery, prioritization, and operational execution of the Identity Governance & Administration (IGA) and Privileged Access Management (PAM) product backlogs.This role owns the day to day responsibility for translating IAM strategy, regulatory requirements, and risk drivers into consumable IGA and PAM services, while overall accountability remains with the Head of IAM Security. The Product Owner ensures close alignment across architecture, engineering, SOC, and business stakeholders to deliver scalable, compliant identity and privileged access capabilities.This role is central to the organization’s Zero Trust and regulatory compliance journey, directly reducing the highest impact cyber risks related to over privileged access and poor identity governance. You will shape how identities, entitlements, and privileged access are governed across 55,000+ users and ~2,500 applications, influencing both security posture and operational efficiency at enterprise scale.The working location for this position will be in Madrid city where we operate a hybrid model, requiring at least 40% of the working time on-site.Responsibilities- Own and manage the IGA & PAM product backlogs, priorities, and sprint objectives.- Act as day to day Product Owner for Global IGA and Global PAM initiatives.- Translate IAM strategy, regulatory obligations (NIS2, ISO 27001), and risk assessments into delivery backlog items.- Coordinate with IAM Architects to ensure architectural intent is correctly implemented by engineering teams.- Drive onboarding of applications, identities, and platforms into IGA lifecycle and PAM controls.- Ensure alignment between IGA, PAM, IAM analytics, and SOC monitoring.- Support tool selection, vendor engagement, and roadmap planning for IGA and PAM platforms.- Drive adoption, communication, and change management with business and IT stakeholders.- Provide clear reporting on delivery progress, risk reduction, and compliance KPIs to the Head of IAM.Immediate Contributions- Delivered a production ready Global IGA service covering JML automation, access governance, and access reviews.- Established a unified Global PAM service enforcing least privilege, MFA, and just in time access.- Implemented governance for non human identities (service accounts, technical IDs, automation).- Defined and operationalized RBAC / PBAC role models across priority applications.- Achieved measurable reduction in standing privileges and audit findings related to access governance.- Bachelor’s degree in IT, Cyber Security, or equivalent experience. Cybersecurity certifications advantageous: CISSP, CISM, Microsoft Endpoint-related certifications, or comparable alternatives.- Fluency in English is a must. Skills in German and French are a plus.- Knowledge of modern security frameworks (MITRE ATT&CK, NIST CSF, ISO 27001).- Experience implementing KPIs and running continual service improvement processes.- Strong Product Owner experience in IAM, IGA, or PAM domains.- Deep understanding of Identity Governance concepts: Joiner Mover Leaver (JML), Access reviews & certifications, Role and entitlement modelling (RBAC / PBAC).- Strong knowledge of Privileged Access Management: Vaulting & credential rotation, Just in time access & MFA enforcement, Privileged session monitoring.- Ability to balance risk, compliance, and delivery pragmatism in complex enterprises.Preferred Qualifications- Experience with IGA and PAM tooling in large, multi-domain environments.- Exposure to non human identity governance (service accounts, automation, APIs).- Experience operating in regulated environments (ISO 27001, NIS2).- Strong collaboration experience with SOC and audit teams.Benefits- Competitive compensation and benefits package that recognizes your expertise.- Flexible and hybrid working model.- Creative freedom and responsibility to shape processes and solutions in our global transformation.- Continuous learning and development with tailored training and certification opportunities.- Life and accident insurance.- Option to include a premium private health insurance package as part of the flexible remuneration.- A safe, stable and international workplace within a trusted family business that invests in people.Please note that we can only accept applications submitted through our website, using the online application form.Please note that we do not accept applications via recruitment agencies for this position.#J-18808-Ljbffr

En Metrica España, estamos en la búsqueda de un Especialista en Ciberseguridad con un mínimo de 1 año de experiencia para unirse a nuestro dinámico equipo. Obtenga más información sobre las tareas generales relacionadas con esta oportunidad a continuación, así como sobre las habilidades requeridas. Buscamos a un profesional proactivo, con una gran actitud y un fuerte deseo de aprender y crecer en el campo de la ciberseguridad. • Experiencia: Mínimo 1 año de experiencia profesional en ciberseguridad o un campo relacionado., • Conocimientos Técnicos:, • Python: Nivel de análisis, automatización y modelado., • SQL: Capacidad para consulta y manipulación de datos., • Machine Learning: Conocimientos aplicados a clasificación, detección de anomalías y clustering., • Visualización de Datos: Manejo de herramientas como Power BI, Tableau o similares., • SIEM: Conceptos básicos (logs, eventos, correlación de alertas)., • Threat Intelligence: Noción de IOCs, TTPs y marco MITRE ATT&CK., • IA Generativa/LLMs: Experiencia o familiaridad con herramientas de IA., • Oportunidad de unirte a una empresa en crecimiento con proyectos desafiantes., • Entorno de trabajo innovador y colaborativo., • Programas de formación continua y desarrollo profesional., • Paquete salarial competitivo acorde a la experiencia y el mercado. xcskxlj, • Oportunidades de crecimiento interno y desarrollo de carrera. #J-18808-Ljbffr

SOC Analyst Revise detenidamente toda la documentación de la solicitud antes de hacer clic en el botón de solicitar al final de esta descripción. Department: Cyber Services and Capabilities Employment Type: Full Time Location: ESP Madrid Description As a SOC Analyst you will play a crucial role in strengthening the organisation's overall cybersecurity posture. You will be responsible for the monitoring, analysis, and response to security incidents and events. As an escalation point for R1 analysts, you will provide guidance and mentoring on complex security events, assist in tuning detection capabilities, and contribute to process improvements. Your expertise will also support data assurance, threat hunting, and vulnerability management, ensuring proactive defence against evolving cyber threats. This role requires strong analytical skills, technical proficiency, and a commitment to continuous learning in a dynamic security environment. Key Responsibilities Threat Detection and Monitoring: • Monitor the SOAR platform for SIEM Logs and bespoke logs from the customer., • Identify potential threats, vulnerabilities, and indicators of compromise., • Initiate escalation procedures to counteract potential threats and vulnerabilities., • Ability to analyze and interpret threat intelligence feeds and implement protective measures accordingly. Incident Remediation and Documentation: • Act as an escalation point for R1 analysts, providing technical guidance on complex security incidents., • Escalate to Team Lead or senior analyst should further clarification or four eyes be required., • Provide incident remediation and prevention recommendations to customers using established procedures and analyst experience., • Document and adhere to security monitoring processes., • Suggest process and procedure improvement based on working requirements to streamline processes. Customer Service and Escalation: • Exceed customer expectations by always delivering exceptional customer service., • Serve as an escalation point for junior and R1 team members, offering assistance and mentorship as needed., • Contribute to the creation and maintenance of security documentation, including incident response playbooks, standard operating procedures, and knowledge base articles. Reporting and Continuous Improvement: • Compile and review service-focused reports for effective communication., • Contribute to the creation and maintenance of security documentation, including incident response playbooks, standard operating procedures, and knowledge base articles., • Act as a mentor to junior R1 analysts. Threat Analysis and Collaboration: • Contribute practical insights to the analysis of common security incidents., • Maintain working relationships with the Analytic Development and Security Engineering teams., • Collaborate with shift partners to provide a high quality of service. General Duties: • Perform additional assigned duties as required., • Flexibility to quickly learn and adapt to new security tools, technologies, and processes., • Strong analytical and problem-solving skills., • Good communication skills, both written and verbal., • Ability to work collaboratively as part of a team., • Keep up to date with latest emerging threats and APT groups., • Ability to be a mentor to junior analysts. Skills, Knowledge & Expertise Minimum Requirements Network, Cloud and OS Knowledge: • Understanding of common network protocols and tools., • Proficient knowledge of Windows, Linux & MacOS operating systems., • Understanding of Content Delivery Networks Customer interaction: • Experience with documenting both high level and technical customer facing information., • Confidence providing critical/sensitive information accurately., • Contacting key stakeholders during major incidents Incident Analysis and Response: • Awareness of the MITRE ATT&CK framework, • Pedigree in performing in-depth analysis of security alerts., • Assess customer impact through investigation and work with senior analysts for resolution., • Initiate escalation procedure for potential threats, • Ability to interpret threat priority against the cyber kill chain., • Provide appropriate mitigation and remediation steps. Desirable Requirements Tooling • Hands-on experience with Security Information and Event Management (SIEM) platforms (e.g., Splunk, Sentinel, Swimlane) and their use in aggregating and analysing security event data., • Knowledge of cloud products and log events such as Azure, Amazon Web Services, Google Cloud Platform., • Proficiency with network analysis tools (Wireshark) to perform PCAP analysis. Desirable Certifications • CompTIA Security+, • CompTIA CySA +, • Security Blue Team Level One, • AWS Cloud Practitioner, • Azure Fundamentals, • MAD20 Att&ck Fundamentals Job Benefits • Flexible Working: Balance your work and personal life with our flexible working options., • Generous Holiday Allowance: Enjoy 25 days of holiday, plus bank holidays, with the option to buy up to 5 additional days of annual leave differs for SOC shift workers, please speak to your TA partner for more information)., • Medicash & Critical Illness Scheme, • Financial & Investment Benefits: Enjoy peace of mind with our Pension, Life Assurance, and Share Save Scheme., • Community & Volunteering Programmes: Make a difference in your community with our volunteering opportunities., • Green Car Scheme: Drive green and save money with our eco-friendly car scheme., • Cycle Scheme: Stay fit and healthy with our cycle-to-work scheme. xcskxlj, • Special Time Off: Take time off for those big moments in life, like getting married/entering into a civil partnership, becoming a grandparent, and welcoming home a new pet., • Family Planning: Benefit from our generous maternity and paternity leave, as well as time off and support for those undergoing fertility treatments. #J-18808-Ljbffr

Are you passionate about cybersecurity and ready to make a real impact in protecting one of the world's leading reinsurance companies? Join Swiss Re's Security Team in Madrid and play a pivotal role in keeping our global infrastructure safe, resilient, and ahead of emerging threats. This is your opportunity to bring your vulnerability management expertise to a collaborative, forward-thinking environment where your work genuinely matters.About The RoleAs a Vulnerability Management Analyst, you will be at the heart of Swiss Re's cyber defence strategy. Working closely with Incident Response, Threat Intelligence, and Engineering teams, you will help identify, prioritise, and remediate vulnerabilities across our complex global landscape. From responding to zero-day threats to refining operational processes, your contributions will directly strengthen Swiss Re's security posture every single day.Key ResponsibilitiesMonitor Swiss Re's attack surface to identify vulnerabilities and faulty internal processes, continuously improving our overall security postureCollaborate with the blue team to respond swiftly and effectively to zero-day vulnerabilities and severe threats impacting our system landscapeMaintain and optimise an end-to-end vulnerability management process, including associated Service Level Indicators and Objectives (SLIs & SLOs)Partner with the Vulnerability Management Engineering team on vulnerability identification and the optimisation of scanning tools and technologiesAnalyse how current and emerging vulnerabilities can be exploited within our system landscape and translate findings into actionable insightsPrioritise vulnerability remediation based on contextual risk ratings, ensuring the most critical risks are addressed firstSupport the development and improvement of vulnerability management processes in collaboration with the Team LeadGuide and support IT asset owners through vulnerability remediation activities and risk assessmentsDeliver regular, clear reporting on Swiss Re's security posture to stakeholders across the organisationAbout The TeamThe Security Team is the focal point for all security activities across Swiss Re. We are responsible for cybersecurity engineering and operations, governance, risk, and compliance defining and continuously advancing the company's security strategy. Within this team, the Vulnerability Management Team's mission is to ensure that Swiss Re's infrastructure components and applications are continuously tested and scanned for all known vulnerabilities and security misconfigurations. We work in close collaboration with red and blue teams to build and maintain continuous resilience against emerging threat actors. We are a passionate, skilled group of professionals who take pride in protecting Swiss Re's global security landscape.About YouYou are a curious and driven cybersecurity professional who thrives in a collaborative, fast‑paced environment. You bring a sharp analytical mind, a proactive approach to problem‑solving, and the ability to communicate complex security topics clearly and empathetically to a wide range of stakeholders. You are comfortable navigating sophisticated conversations across multiple teams and geographies, and you take ownership of your work with confidence and integrity.We Are Looking For Candidates Who Meet These Requirements3+ years of professional experience in vulnerability management, Security Operations (SOC), or Incident Response, with demonstrable hands‑on expertise in the vulnerability management domainStrong knowledge of corporate IT environments and core security principles, including an in‑depth understanding of how vulnerabilities can be identified, exploited, and remediatedStrong communication skills in English, both verbal and written, with the ability to convey technical findings clearly and concisely to both technical and non‑technical audiencesUniversity degree in Business IT, Computer Science, or a comparable field or equivalent professional experienceUnderstanding of application security practices, including SAST, DAST, SCA, container security, and CI/CD practicesThese Are Additional Nice To HavesExperience with coding and automation (e.G., Python, PowerShell, APIs) to streamline vulnerability management workflows.Proven ability to drive change adoption across cross‑functional teams in a large, complex organisationFamiliarity with threat intelligence frameworks (e.G., MITRE ATT&CK) and their application in vulnerability prioritizationExperience working in a multinational or matrixed organisation, collaborating across multiple locations and time zonesRelevant cybersecurity certifications (e.G., CEH, OSCP, CISSP, or similar) are a plusDemonstrated passion for staying current with emerging cybersecurity threats, industry trends, and technological advancements, including hands‑on exploration of AI and frontier technologies.For Spain, the base salary range for this position is between 42,000 EUR and 70,000 EUR for a full‑time role.The Specific Salary Offered ConsidersThe requirements, scope, complexity and responsibilities of the roleThe applicant's own profile including education/qualifications, expertise, specialisation, skills and experienceIn the situation where you do not meet all the requirements or you significantly exceed these, the offered salary may be below or above the advertised range. In addition to your base salary, you may be eligible for additional rewards and benefits including an attractive performance‑based annual bonus.Our company has a hybrid work model (50:50) where the expectation is that you will be in the office 2‑3 days per week.About Swiss ReSwiss Re is one of the world’s leading providers of reinsurance, insurance and other forms of insurance‑based risk transfer, working to make the world more resilient. We anticipate and manage a wide variety of risks, from natural catastrophes and climate change to cybercrime. Combining experience with creative thinking and cutting‑edge expertise, we create new opportunities and solutions for our clients. This is possible thanks to the collaboration of more than 15,000 employees across the world.Our success depends on our ability to build an inclusive culture encouraging fresh perspectives and innovative thinking. We embrace a workplace where everyone has equal opportunities to thrive and develop professionally regardless of their age, gender, race, ethnicity, gender identity and/or expression, sexual orientation, physical or mental ability, skillset, thought or other characteristics. In our inclusive and flexible environment everyone can bring their authentic selves to work and their passion for sustainability.If you are an experienced professional returning to the workforce after a career break, we encourage you to apply for open positions that match your skills and experience.We may use AI‑powered tools to support the review and evaluation of applications for this position. These tools provide additional insights to our recruitment teams, but all hiring decisions are carefully reviewed and made by people. To learn more about how we use AI in recruitment and how we handle your personal data, please review our Data Privacy Statement before applying.KeywordsRule reference code: 138369#J-18808-Ljbffr

Senior DevOps Engineer – Global Threat Management Por favor, presente su candidatura sin demora si su perfil encaja bien con este puesto, debido al alto nivel de interés. We are looking for a senior DevOps Engineer to join our Global Threat Management (GTM) team at ING Hubs Spain. The GTM team focuses on intelligence‑driven, proactive defense across geographies and disciplines. Key Responsibilities Structure and deploy scalable infrastructure to support GTM workflows, building automation and integrations that strengthen detection, prioritization, and decision‑making. Design and implement automations to detect, prioritize, and investigate cyber threats. Transform large‑scale security telemetry and threat intelligence data into actionable insights for GTM and executive decision‑making. Automate and accelerate threat analysis using standard and custom‑built tooling. Deploy, operate, and optimize cloud‑based infrastructure (preferred Azure and GCP), ensuring scalability, reliability, cost efficiency, and governance. Enforce and continuously improve security and DevOps best practices within the team. Perform maintenance, monitoring, and resilience testing of owned infrastructure to ensure high availability and operational continuity. Design and integrate intelligence‑driven security solutions across data sources, security tools, and services. Design, develop, and maintain Python‑based automation, scripts, integrations, and operational tooling. Design and communicate solutions using clear documentation, diagrams, and visualizations. Troubleshoot and resolve deployment, installation and configuration issues across cloud infrastructure and security tooling, ensuring minimal disruption to operations. Clearly communicate insights and recommendations to both technical and non‑technical stakeholders. Leverage AI and automation technologies to streamline workflows, enrich threat intelligence processes, and improve operational effectiveness. Qualifications Ability to translate complex cyber‑threat challenges into robust, scalable, and data‑driven solutions. Strong Python development skills for automation, integrations, and tooling. Experience deploying and supporting cloud‑based solutions, preferably in Azure and GCP. Experience with Infrastructure as Code (preferably Terraform) and DevOps practices. Solid understanding of cloud platforms, networking, system administration, infrastructure architecture, and the operating model of CISO organizations in mid‑to large‑scale enterprises. Design end‑to‑end solutions, translating complex system landscapes into clear, implementable designs. Strong hands‑on experience diagnosing and resolving deployment, installation, and integration issues across cloud environments, infrastructure components, and custom‑built tools. Experience with containerization technologies such as Docker and Kubernetes. Collaborate proactively with threat intelligence and cybersecurity experts, bringing curiosity, strong problem‑solving skills, and clear communication to drive impact. Experience building and maintaining CI/CD pipelines and working with version control systems such as Git. A degree in Computer Science or related discipline, or equivalent hands‑on experience in cloud engineering, DevOps, system administration, or cybersecurity. Relevant Cloud, DevOps, or Cybersecurity certifications are an advantage. English level – B2. Bonus: Experience with threat intelligence platforms, security tools, and cyber threat intelligence workflows. Bonus: Experience with Databricks, data engineering, or large‑scale data‑processing platforms. Bonus: Experience building AI/GenAI solutions using LLMs and automation frameworks. Knowledge of cybersecurity concepts, threat actors, TTPs, and frameworks such as MITRE ATT&CK. Experience with security automation and orchestration platforms. Relevant certifications in Threat Intelligence, Security, AI, or Data Engineering. Experience working within a CISO, Security Operations, or Threat Management organization. What We Offer Flexible work model – choose days working from home or at ING MAD. Restaurant card and onsite facilities: electric mobility, doctor, hairdresser, gym, and more. Health and life insurance for employees and family. Flexible remuneration model with tax‑advantaged benefits such as nursery, transport, and training aids. Transport allowance to help with commuting. xcskxlj Pension plan available after 1 month of employment. #J-18808-Ljbffr

Join a team of cybersecurity professionals and help Swiss Re to fulfil its mission in making the world more resilient. As the Senior Incident Coordinator, you'll play a crucial role in our cyber defense strategy, coordinating response activities, facilitating preparedness exercises, and driving improvement through thorough post‑incident analysis and documentation. You'll work in a hybrid setup, balancing work from home and the office premises. Descubra si esta oportunidad es adecuada para usted leyendo toda la información que sigue a continuación. About the Team The Cyber Incident Management team serves as the front‑line defense against cybersecurity threats across Swiss Re. We provide critical incident leadership and coordination, overseeing the triage, investigation, and containment of security events to minimize business impact. Our team excels in stakeholder communication and management during incidents, conducts post‑incident reviews to drive continuous improvement, and develops preparedness and resilience strategies. We also establish and monitor KPIs and metrics to enhance our security posture and response capabilities. Your Role • Exercise Planning & Facilitation: Design, organize, and facilitate regular tabletop exercises and simulations to test and enhance the organization's incident response capabilities., • Response Coordination: Support incident response efforts by coordinating resources, scheduling meetings, and ensuring proper communication channels are maintained., • Documentation Management: Create and maintain comprehensive incident response documentation, playbooks, and procedures., • Post‑Incident Reporting: Compile detailed incident reports capturing timeline, actions taken, and impact assessments., • Metrics & Analysis: Collect, analyse, and report on key incident metrics to identify trends and improvement opportunities., • Lessons Learned: Facilitate post‑incident review sessions and document findings to enhance future response efforts., • Stakeholder Communication: Coordinate communications between technical teams and business stakeholders during and after incidents., • Training Coordination: Organize and track participation in incident response training programs., • Process Improvement: Identify and implement refinements to incident management processes based on lessons learned., • Tool Administration: Support the maintenance and optimisation of incident management platforms and documentation repositories. Your Qualifications • Bachelor's degree in Business Administration, Information Technology, Cybersecurity, or equivalent practical experience., • Experience in incident management, business continuity, or security operations., • Demonstrated experience planning and facilitating tabletop exercises or simulations., • Strong documentation skills with experience creating reports, playbooks, or procedural documentation., • Excellent organisational and coordination abilities with attention to detail., • Strong communication skills in English. Nice‑to‑Have • Knowledge of cybersecurity frameworks (NIST, ISO 27001, MITRE ATT&CK)., • Experience with incident management or ticketing systems., • Background in metrics collection, analysis, and reporting., • Project or programme management experience or certifications., • Facilitation or training certification/experience., • Experience in process improvement methodologies., • Knowledge of security operations and incident response procedures. Role For Spain, the base salary range for this position is between EUR 62,000 and EUR 94,000 (for a full‑time role). The specific salary offered considers: • the requirements, scope, complexity and responsibilities of the role,, • the applicant's own profile including education, qualifications, specialisation, skills and experience. In addition to your base salary, Swiss Re offers an attractive performance‑based variable compensation component, designed to recognise your achievements. Further you will enjoy a variety of global and location‑specific benefits. Eligibility may vary depending on the terms of Swiss Re policies and your employment contract. Working Model Our company has a hybrid work model where the expectation is that you will be in the office at least three days per week. Equal Opportunity Our success depends on our ability to build an inclusive culture encouraging fresh perspectives and innovative thinking. We embrace a workplace where everyone can bring their authentic selves to work and their passion for sustainability. xcskxlj Reference Code 137235 #J-18808-Ljbffr Hay opciones de teletrabajo/trabajo desde casa disponibles para este puesto.

Si disfrutas encontrando lo que otros no ven, rompiendo barreras y pensando como un atacante, queremos conocerte. En VIEWNEXT (Grupo IBM) estamos creciendo y buscamos nuevos profesionales con inquietud en seguridad ofensiva, participando en proyectos desafiantes con alto impacto técnico. Inscríbase rápido, consulte la descripción completa desplazándose hacia abajo para conocer todos los requisitos de este puesto. Tu día a día: • Ejercicios de Red Teaming y pentesting sobre aplicaciones, APIs e infraestructuras., • Uso de marcos como MITRE ATT&CK y OWASP para simular amenazas reales., • Análisis y explotación de vulnerabilidades, elaboración de informes y propuestas de mejora., • Mínimo 3 años de experiencia en Red Team / Ethical Hacking., • Certificación técnica (OSCP, eCPPT, eWPTX o similar)., • Curiosidad, precisión y ganas de seguir aprendiendo. Beneficios • Formación en Tecnología y también en Soft Skills., • Acceso a las certificaciones tecnológicas más importantes del mercado., • Plan de carrera, seguimiento y evaluación anual de tu desarrollo profesional., • Plan de retribución flexible (seguro médico, transporte, formación y guardería)., • Tarjeta Restaurante para trabajadores presenciales., • Ofrecemos modalidades de teletrabajo flexibles., • Horario: 09:00 a 18:00h - con flexibilidad horaria de entrada y salida. xcskxlj, • Buen ambiente de trabajo, innovador, abiertos e inclusivos. #J-18808-Ljbffr

¿Te apasiona analizar amenazas, comprender las tácticas de los adversarios y transformar información en inteligencia accionable? Buscamos un/a Threat Intelligence Analyst para incorporarse a nuestro equipo de Ciberinteligencia y contribuir a la identificación, análisis y seguimiento de amenazas que afectan a organizaciones, infraestructuras críticas y entornos digitales complejos. Consulte la descripción del puesto a continuación. Si confía en que tiene las habilidades y la experiencia adecuadas, envíe su solicitud hoy mismo. Formarás parte de un equipo especializado que trabaja en la generación de inteligencia estratégica, operativa y táctica para anticipar riesgos, apoyar operaciones de ciberseguridad y fortalecer la capacidad de detección y respuesta frente a amenazas emergentes. Tu misión Recopilar, analizar y contextualizar información sobre amenazas cibernéticas para generar inteligencia útil que permita mejorar la toma de decisiones, fortalecer las capacidades defensivas y anticipar la actividad de actores maliciosos. Qué harás • Investigar amenazas, campañas maliciosas, actores de amenazas y tendencias del panorama de ciberseguridad., • Analizar indicadores de compromiso (IoCs), tácticas, técnicas y procedimientos (TTPs) utilizando marcos como MITRE ATT&CK., • Realizar actividades de recopilación, correlación y enriquecimiento de información procedente de múltiples fuentes., • Elaborar informes de inteligencia adaptados a diferentes audiencias, tanto técnicas como ejecutivas., • Monitorizar fuentes abiertas, comerciales y especializadas para identificar amenazas emergentes., • Colaborar con equipos SOC, DFIR, Red Team y otros equipos de ciberoperaciones para mejorar las capacidades de detección y respuesta., • Participar en ejercicios de análisis de campañas, atribución y evaluación del riesgo asociado a amenazas específicas., • Contribuir a la mejora continua de procesos, metodologías y capacidades de inteligencia de amenazas. Qué buscamos • Experiencia en Threat Intelligence, Cyber Threat Intelligence (CTI), análisis de amenazas o áreas relacionadas de ciberseguridad., • Conocimiento del ciclo de vida de la inteligencia y metodologías de análisis., • Conocimiento de actores de amenazas, malware, campañas de ciberataques y ecosistema de amenazas actual., • Familiaridad con MITRE ATT&CK, Cyber Kill Chain y otros marcos de referencia., • Capacidad analítica y pensamiento crítico para identificar patrones y extraer conclusiones relevantes., • Habilidades de redacción y elaboración de informes., • Inglés profesional. Valoraremos especialmente • Experiencia con plataformas de Threat Intelligence (TIP)., • Conocimientos de OSINT, Dark Web Monitoring y análisis de fuentes abiertas., • Experiencia en análisis de malware o investigación de incidentes., • Conocimientos de SIEM, EDR, DFIR o Threat Hunting., • Certificaciones relacionadas con inteligencia o ciberseguridad., • Experiencia en automatización de procesos mediante Python u otros lenguajes de scripting. Qué ofrecemos • Participación en proyectos de inteligencia de amenazas de alto impacto., • Acceso a tecnologías, fuentes y herramientas especializadas del sector., • Entorno altamente técnico y colaborativo., • Formación continua y desarrollo profesional., • Oportunidad de trabajar junto a expertos en ciberinteligencia, ciberoperaciones y análisis avanzado de amenazas. ¿Por qué unirte? La inteligencia de amenazas es una de las capacidades más estratégicas dentro de la ciberseguridad moderna. En esta posición contribuirás directamente a anticipar riesgos, proteger organizaciones y transformar datos en conocimiento útil para la toma de decisiones. xcskxlj Si te apasiona investigar, analizar y comprender cómo evolucionan las amenazas digitales, queremos conocerte. #J-18808-Ljbffr

Vulnerability Management Analyst (Hybrid set up) Envíe su CV y cualquier información adicional requerida después de haber leído esta descripción, haciendo clic en el botón de solicitud. Are you passionate about cybersecurity and ready to make a real impact in protecting one of the world's leading reinsurance companies? Join Swiss Re's Security Team in Madrid and play a pivotal role in keeping our global infrastructure safe, resilient, and ahead of emerging threats. This is your opportunity to bring your vulnerability management expertise to a collaborative, forward‑thinking environment where your work genuinely matters. About the Role As a Vulnerability Management Analyst, you will be at the heart of Swiss Re's cyber defence strategy. Working closely with Incident Response, Threat Intelligence, and Engineering teams, you will help identify, prioritise, and remediate vulnerabilities across our complex global landscape. From responding to zero‑day threats to refining operational processes, your contributions will directly strengthen Swiss Re's security posture every single day. Key Responsibilities • Monitor Swiss Re's attack surface to identify vulnerabilities and faulty internal processes, continuously improving our overall security posture, • Collaborate with the blue team to respond swiftly and effectively to zero‑day vulnerabilities and severe threats impacting our system landscape, • Maintain and optimise an end‑to‑end vulnerability management process, including associated Service Level Indicators and Objectives (SLIs & SLOs), • Partner with the Vulnerability Management Engineering team on vulnerability identification and the optimisation of scanning tools and technologies, • Analyse how current and emerging vulnerabilities can be exploited within our system landscape and translate findings into actionable insights, • Prioritise vulnerability remediation based on contextual risk ratings, ensuring the most critical risks are addressed first, • Support the development and improvement of vulnerability management processes in collaboration with the Team Lead, • Guide and support IT asset owners through vulnerability remediation activities and risk assessments, • Deliver regular, clear reporting on Swiss Re's security posture to stakeholders across the organisation About the Team The Security Team is the focal point for all security activities across Swiss Re. We are responsible for cybersecurity engineering and operations, governance, risk, and compliance defining and continuously advancing the company's security strategy. Within this team, the Vulnerability Management Team's mission is to ensure that Swiss Re's infrastructure components and applications are continuously tested and scanned for all known vulnerabilities and security misconfigurations. We work in close collaboration with red and blue teams to build and maintain continuous resilience against emerging threat actors. We are a passionate, skilled group of professionals who take pride in protecting Swiss Re's global security landscape. About You You are a curious and driven cybersecurity professional who thrives in a collaborative, fast‑paced environment. You bring a sharp analytical mind, a proactive approach to problem‑solving, and the ability to communicate complex security topics clearly and empathetically to a wide range of stakeholders. You are comfortable navigating sophisticated conversations across multiple teams and geographies, and you take ownership of your work with confidence and integrity. Requirements • 3+ years of professional experience in vulnerability management, Security Operations (SOC), or Incident Response, with demonstrable hands‑on expertise in the vulnerability management domain, • Strong knowledge of corporate IT environments and core security principles, including an in‑depth understanding of how vulnerabilities can be identified, exploited, and remediated, • Strong communication skills in English, both verbal and written, with the ability to convey technical findings clearly and concisely to both technical and non‑technical audiences, • University degree in Business IT, Computer Science, or a comparable field or equivalent professional experience, • Understanding of application security practices, including SAST, DAST, SCA, container security, and CI/CD practices. Nice to haves • Experience with coding and automation (e.g., Python, PowerShell, APIs) to streamline vulnerability management workflows., • Proven ability to drive change adoption across cross‑functional teams in a large, complex organisation, • Familiarity with threat intelligence frameworks (e.g., MITRE ATT&CK) and their application in vulnerability prioritisation, • Experience working in a multinational or matrixed organisation, collaborating across multiple locations and time zones, • Relevant cybersecurity certifications (e.g., CEH, OSCP, CISSP, or similar) are a plus, • Demonstrated passion for staying current with emerging cybersecurity threats, industry trends, and technological advancements, including hands‑on exploration of AI and frontier technologies. Salary For Spain, the base salary range for this position is between 42,000 EUR and 70,000 EUR for a full‑time role. The specific salary offered considers the requirements, scope, complexity and responsibilities of the role, as well as the applicant's profile, including education, qualifications, expertise, specialisation, skills and experience. In addition to your base salary, you may be eligible for additional rewards and benefits including an attractive performance‑based annual bonus. Hybrid Work Model Our company has a hybrid work model (50:50) where the expectation is that you will be in the office 2–3 days per week. Equal Opportunity Swiss Re is one of the world’s leading providers of reinsurance, insurance and other forms of insurance‑based risk transfer, working to make the world more resilient. We anticipate and manage a wide variety of risks, from natural catastrophes and climate change to cybercrime. Our success depends on our ability to build an inclusive culture encouraging fresh perspectives and innovative thinking. We embrace a workplace where everyone has equal opportunities to thrive and develop professionally regardless of their age, gender, race, ethnicity, gender identity and/or expression, sexual orientation, physical or mental ability, skillset, thought or other characteristics. In our inclusive and flexible environment everyone can bring their authentic selves to work and their passion for sustainability. If you are an experienced professional returning to the workforce after a career break, we encourage you to apply for open positions that match your skills and experience. xcskxlj #J-18808-Ljbffr Hay opciones de teletrabajo/trabajo desde casa disponibles para este puesto.

Location: Madrid, M, ES Compruebe a continuación si tiene lo necesario para esta oportunidad y, si es así, envíe su solicitud lo antes posible. Join a team of cybersecurity professionals and help Swiss Re to fulfil its mission in making the world more resilient. As the Senior Incident Coordinator, you'll play a crucial role in our cyber defense strategy, coordinating response activities, facilitating preparedness exercises, and driving important through thorough post‑incident analysis and documentation. What's more, you'll be working in a hybrid setup, perfectly balancing work from home and the office premises. About the team The Cyber Incident Management team serves as the frontliner defense against cybersecurity threats across Swiss Re. We provide critical incident leadership and coordination, overseeing the triage, investigation, and containment of security events to minimize business impact. Our team excels in stakeholders' communication and management during incidents, conducts post‑incident reviews to drive continuous improvement, and develops preparedness and resilience strategies. We also establish and monitor KPIs and metrics to enhance our security posture and response capabilities. We're looking for a detail‑oriented professional who excels at coordinating security activities and facilitating effective incident response. Join our team where your organizational expertise will strengthen our security posture through thoughtful planning, clear communication, and continuous improvement initiatives. In your role, you will… • Exercise Planning & Facilitation: Design, organize, and facilitate regular tabletop exercises and simulations to test and enhance the organization's incident response capabilities, • Response Coordination: Support incident response efforts by coordinating resources, scheduling meetings, and ensuring proper communication channels are maintained, • Documentation Management: Create and maintain comprehensive incident response documentation, playbooks, and procedures, • Post‑Incident Reporting: Compile detailed incident reports capturing timeline, actions taken, and impact assessments, • Metrics & Analysis: Collect, analyse, and report on key incident metrics to identify trends and improvement opportunities, • Lessons Learned: Facilitate post‑incident review sessions and document findings to enhance future response efforts, • Stakeholder Communication: Coordinate communications between technical teams and business stakeholders during and after incidents, • Training Coordination: Organise and track participation in incident response training programs, • Process Improvement: Identify and implement refinements to incident management processes based on lessons learned, • Tool Administration: Support the maintenance and optimisation of incident management platforms and documentation repositories Your qualifications Nobody is perfect and meets 100 % of our requirements. If you, however, meet some of the criteria below and are curious about the world of cyber defence, we'll be more than happy to meet you! What we need from you • Bachelor's degree in Business Administration, Information Technology, Cybersecurity, or equivalent practical experience, • Experience in incident management, business continuity, or security operations, • Demonstrated experience planning and facilitating tabletop exercises or simulations, • Strong documentation skills with experience creating reports, playbooks, or procedural documentation, • Excellent organisational and coordination abilities with attention to detail, • Strong communication skills in English Nice‑to‑have • Knowledge of cybersecurity frameworks (NIST, ISO 27001, MITRE ATT&CK), • Experience with incident management or ticketing systems, • Background in metrics collection, analysis, and reporting, • Project or programme management experience or certifications, • Facilitation or training certification/experience, • Experience in process improvement methodologies, • Knowledge of security operations and incident response procedures For Spain, the base salary range for this position is between EUR 62,000 and EUR 94,000 (for a full‑time role). The specific salary offered considers: • The requirements, scope, complexity and responsibilities of the role, • The applicant's own profile including education/qualifications, expertise, specialisation, skills and experience In addition to your base salary, Swiss Re offers an attractive performance‑based variable compensation component, designed to recognise your achievements. Further you will enjoy a variety of global and location‑specific benefits. Eligibility may vary depending on the terms of Swiss Re policies and your employment contract. Our company has a hybrid work model where the expectation is that you will be in the office at least three days per week. #LI‑Hybrid About Swiss Re Swiss Re is one of the world's leading providers of reinsurance, insurance and other forms of insurance‑based risk transfer, working to make the world more resilient. We anticipate and manage a wide variety of risks, from natural catastrophes and climate change to cybercrime. Combining experience with creative thinking and cutting‑edge expertise, we create new opportunities and solutions for our clients. This is possible thanks to the collaboration of more than 14,000 employees across the world. Our success depends on our ability to build an inclusive culture encouraging fresh perspectives and innovative thinking. We embrace a workplace where everyone has equal opportunities to thrive and develop professionally regardless of their age, gender, race, ethnicity, gender identity and/or expression, sexual orientation, physical or mental ability, skillset, thought or other characteristics. In our inclusive and flexible environment everyone can bring their authentic selves to work and their passion for sustainability. If you are an experienced professional returning to the workforce after a career break, we encourage you to apply for open positions that match your skills and experience. xcskxlj Make an impact Start your career journey with Swiss Re. #J-18808-Ljbffr Hay opciones de teletrabajo/trabajo desde casa disponibles para este puesto.

Telefónica, S.A. La descripción completa del puesto cubre todas las habilidades asociadas, la experiencia previa y cualquier cualificación que se espera que tengan los solicitantes. busca un líder para dirigir el CSIRT/SOC Global, responsable de detección y respuesta 24x7, liderando el equipo de análisis de operaciones y gestionando incidentes en el perímetro corporativo. Contribuirá a la resiliencia y estandarización de procesos de seguridad a nivel global. xcskxlj Se requiere experiencia en gestión de equipos CSIRT/SOC, conocimiento de marcos SIM3 v2, MITRE ATT&CK y NIST, y fluidez en inglés. #J-18808-Ljbffr

The Threat-Led Detection Engineer Lead will drive WTW's detection engineering capability within the Global Information and Cyber Security Defence (ICSD) function, owning the strategy, quality, and continuous improvement of how WTW detects threats across its global estate in AI era. This role blends deep technical detection expertise with team leadership, driving a threat-led, intelligence-informed approach to detection that maps directly to real adversary behaviour. The Lead will set the standard for how detections are designed, written, tested, documented, and maintained – championing Detection-as-Code, measurable detection coverage, and a strong engineering culture. Working closely with SOC, Threat Hunting, Cyber Threat Intelligence (CTI), Incident Response, and Vulnerability Management teams, the Lead will ensure WTW's detection library evolves ahead of the threat landscape. The individual will work as part of a global, multi-disciplined security community with strong support across the business, helping to foster a security-aware culture while ensuring WTW remains a great place to work. With WTW's large global footprint, this role offers a fascinating range of work, and occasional global travel may be required. The Threat-Led Detection Engineer Lead will grow WTW's detection engineering function within the Global Cyber Security Defence team. Responsibilities of this role will include: • Drive WTW's detection engineering strategy, setting the vision, standards, and roadmap for threat-led detection across cloud, endpoint, identity, network, and SaaS environments., • Lead, mentor, and grow a team of detection engineers, establishing engineering best practices, peer review, and a culture of high-quality, well-documented detections., • Drive a threat-led detection approach, prioritising detection development against adversary tradecraft using the MITRE ATT&CK framework, the Cyber Kill Chain, and the Diamond Model of Intrusion Analysis., • Translate Cyber Threat Intelligence and threat-hunting findings into robust, high-fidelity detections with low false-positive rates., • Establish, own, and maintain the central detection library, ensuring detections are version-controlled, tested, documented, and mapped to MITRE ATT&CK coverage., • Champion Detection-as-Code, implementing Git-based workflows, CI/CD pipelines, automated testing, and peer review for all detection content., • Define and track detection coverage, efficacy, and quality metrics (e.g. ATT&CK coverage, detection fidelity, time-to-detect) and report on detection posture to senior leadership., • Lead detection validation and tuning through adversary emulation, purple-team exercises, and breach-and-attack-simulation tooling (e.g. Atomic Red Team, Caldera)., • Support the integration of AI and automation into detection workflows – including AI-assisted detection authoring, enrichment, and triage – and lead detection efforts for AI/GenAI-specific threats., • Partner with SOC, Threat Hunting, CTI, Incident Response, and Vulnerability Management to close detection gaps identified during incidents and hunts., • Govern the full detection lifecycle: intake, development, testing, deployment, monitoring, tuning, retirement, and continuous improvement., • Evaluate and onboard new log sources, telemetry, and tooling to expand detection coverage across the global estate., • Set standards for detection documentation, runbooks, and response guidance so every detection is clear and actionable for the SOC. Qualifications We are looking for a candidate for the Threat-Led Detection Engineer Lead role who has the following: Must-have • 5+ years in cyber security with detection engineering experience, including a track record of leading, mentoring, or coordinating technical teams., • Strong cyber security mindset with a deep, thorough understanding of adversary behaviour, attacker tradecraft, and the modern threat landscape., • Expert knowledge of the MITRE ATT&CK framework, the Cyber Kill Chain, and the Diamond Model, with proven ability to map and drive detection coverage against them., • Proven expertise writing, testing, and maintaining detection rules across SIEM and EDR/XDR platforms (e.g. Microsoft Sentinel, Splunk, Elastic, CrowdStrike, Microsoft Defender XDR), using query languages such as KQL, SPL, EQL, or Sigma., • Demonstrated ability to develop high-fidelity detections swiftly in response to emerging threats, intelligence, and live incidents., • Experience owning and maturing a detection library, including detection lifecycle governance and ATT&CK coverage mapping., • Hands‐on experience with Detection-as-Code: Git, version control, CI/CD pipelines, and automated testing of detection content., • Understanding of AI/ML in security operations and awareness of AI‐specific threats (prompt injection, model/data poisoning, sensitive‐data exposure via GenAI), with familiarity with the OWASP LLM Top 10 and MITRE ATLAS., • Exceptional written and verbal communication skills, able to convey complex technical concepts to both engineers and non‐technical stakeholders, including executives. Good to have • Strong threat‐hunting mindset and hands‐on hunting experience to proactively surface detection gaps and feed detection development., • Scripting and automation skills (e.g. Python, PowerShell) for tooling, enrichment, and SOAR integration., • Familiarity with detection data pipelines (log routing, parsing, normalisation, data lakes) and how they affect detection quality. We're committed to equal employment opportunity and provide application, interview and workplace adjustments and accommodations to all applicants. If you foresee any barriers, from the application process through to joining WTW, please email candidate.helpdesk@willistowerswatson.com. Job Info • Job Identification 202604211, • Job Category Information and Cyber Security, • Posting Date 06/29/2026, 02:14 PM #J-18808-Ljbffr

Location: Madrid, M, ESJoin a team of cybersecurity professionals and help Swiss Re to fulfil its mission in making the world more resilient. As the Senior Incident Coordinator, you'll play a crucial role in our cyber defense strategy, coordinating response activities, facilitating preparedness exercises, and driving important through thorough post‑incident analysis and documentation.What's more, you'll be working in a hybrid setup, perfectly balancing work from home and the office premises.About the teamThe Cyber Incident Management team serves as the frontliner defense against cybersecurity threats across Swiss Re. We provide critical incident leadership and coordination, overseeing the triage, investigation, and containment of security events to minimize business impact. Our team excels in stakeholders' communication and management during incidents, conducts post‑incident reviews to drive continuous improvement, and develops preparedness and resilience strategies. We also establish and monitor KPIs and metrics to enhance our security posture and response capabilities.We're looking for a detail‑oriented professional who excels at coordinating security activities and facilitating effective incident response. Join our team where your organizational expertise will strengthen our security posture through thoughtful planning, clear communication, and continuous improvement initiatives.In your role, you will…- Exercise Planning & Facilitation: Design, organize, and facilitate regular tabletop exercises and simulations to test and enhance the organization's incident response capabilities- Response Coordination: Support incident response efforts by coordinating resources, scheduling meetings, and ensuring proper communication channels are maintained- Documentation Management: Create and maintain comprehensive incident response documentation, playbooks, and procedures- Post‑Incident Reporting: Compile detailed incident reports capturing timeline, actions taken, and impact assessments- Metrics & Analysis: Collect, analyse, and report on key incident metrics to identify trends and improvement opportunities- Lessons Learned: Facilitate post‑incident review sessions and document findings to enhance future response efforts- Stakeholder Communication: Coordinate communications between technical teams and business stakeholders during and after incidents- Training Coordination: Organise and track participation in incident response training programs- Process Improvement: Identify and implement refinements to incident management processes based on lessons learned- Tool Administration: Support the maintenance and optimisation of incident management platforms and documentation repositoriesYour qualificationsNobody is perfect and meets 100 % of our requirements. If you, however, meet some of the criteria below and are curious about the world of cyber defence, we'll be more than happy to meet you!What we need from you- Bachelor's degree in Business Administration, Information Technology, Cybersecurity, or equivalent practical experience- Experience in incident management, business continuity, or security operations- Demonstrated experience planning and facilitating tabletop exercises or simulations- Strong documentation skills with experience creating reports, playbooks, or procedural documentation- Excellent organisational and coordination abilities with attention to detail- Strong communication skills in EnglishNice‑to‑have- Knowledge of cybersecurity frameworks (NIST, ISO 27001, MITRE ATT&CK)- Experience with incident management or ticketing systems- Background in metrics collection, analysis, and reporting- Project or programme management experience or certifications- Facilitation or training certification/experience- Experience in process improvement methodologies- Knowledge of security operations and incident response proceduresFor Spain, the base salary range for this position is between EUR 62,000 and EUR 94,000 (for a full‑time role). The specific salary offered considers:- The requirements, scope, complexity and responsibilities of the role- The applicant's own profile including education/qualifications, expertise, specialisation, skills and experienceIn addition to your base salary, Swiss Re offers an attractive performance‑based variable compensation component, designed to recognise your achievements. Further you will enjoy a variety of global and location‑specific benefits.Eligibility may vary depending on the terms of Swiss Re policies and your employment contract.Our company has a hybrid work model where the expectation is that you will be in the office at least three days per week.#LI‑HybridAbout Swiss ReSwiss Re is one of the world's leading providers of reinsurance, insurance and other forms of insurance‑based risk transfer, working to make the world more resilient. We anticipate and manage a wide variety of risks, from natural catastrophes and climate change to cybercrime. Combining experience with creative thinking and cutting‑edge expertise, we create new opportunities and solutions for our clients. This is possible thanks to the collaboration of more than 14,000 employees across the world.Our success depends on our ability to build an inclusive culture encouraging fresh perspectives and innovative thinking. We embrace a workplace where everyone has equal opportunities to thrive and develop professionally regardless of their age, gender, race, ethnicity, gender identity and/or expression, sexual orientation, physical or mental ability, skillset, thought or other characteristics. In our inclusive and flexible environment everyone can bring their authentic selves to work and their passion for sustainability.If you are an experienced professional returning to the workforce after a career break, we encourage you to apply for open positions that match your skills and experience.Make an impactStart your career journey with Swiss Re.#J-18808-Ljbffr

Telefónica, S.A. busca un líder para dirigir el CSIRT/SOC Global, responsable de detección y respuesta 24x7, liderando el equipo de análisis de operaciones y gestionando incidentes en el perímetro corporativo.Contribuirá a la resiliencia y estandarización de procesos de seguridad a nivel global. Se requiere experiencia en gestión de equipos CSIRT/SOC, conocimiento de marcos SIM3 v2, MITRE ATT&CK y NIST, y fluidez en inglés.#J-18808-Ljbffr

SOC Technical Lead – Threat Hunting & Incident Response Applyremote type: Hybridlocations: Madrid Emilio Vargastime type: Full timeposted on: Posted Todayjob requisition id: R0333099 Location: Madrid Emilio Vargas, Spain Thales people architect identity management and data protection solutions at the heart of digital security. Business and governments rely on us to bring trust to the billions of digital interactions they have with people. Our technologies and services help banks exchange funds, people cross borders, energy become smarter and much more. More than 30,000 organizations already rely on us to verify the identities of people and things, grant access to digital services, analyze vast quantities of information and encrypt data to make the connected world more secure. Thales in Spain is a leader in technological solutions applied to Defence, Aeronautics, Security, Transportation and Space and, furthermore, is a global centre for excellence in Space, Security of Critical Infrastructures and Transportation. With a turnover of €320 million and a staff of 1,200, it exports approximately 40% of its total production principally to the Middle East, North Africa and Latin America. At Thales S21sec Spain, we are looking for a SOC Technical Lead – Threat Hunting & Incident Response with 4+ years of experience in cybersecurity to join our central services team. We are seeking a highly motivated professional with strong expertise in cybersecurity infrastructures, capable of supporting and managing complex technological environments across leading security vendors. Join the Team Defending Thales’ Future At Thales, we don't just respond to threats—we anticipate them. We are looking for a visionary SOC Technical Lead who thrives at the intersection of advanced threat hunting, rapid incident response, and team mentorship. If you are passionate about building resilient security architectures and want to lead a team that is defining the next generation of SOC services, this is your opportunity to make a lasting impact.### Key Responsibilities Drive Proactive Defense: You will spearhead our threat hunting strategy, utilizing advanced telemetry and intelligence to uncover sophisticated attacker patterns before they impact our infrastructure. Lead Through Crisis: You will be the technical force behind our Incident Response, guiding the team through high-pressure situations, conducting deep-dive forensics, and refining our defense playbook to stay ahead of the adversary. Mentor and Innovate: You will elevate the talent around you. Through hands-on mentorship, technical workshops, and collaboration, you will cultivate a culture of continuous improvement and technical excellence. Architect the Future: You will partner with our cloud and product teams to integrate security into every stage of the lifecycle. By championing "Security-as-Code" and automation, you will transform how we monitor and protect our global ecosystem.### Requirements ### Experience: Minimum 2–5 years of experience in Cybersecurity, with a strong focus on Security Operations, Incident Response, or Threat Hunting. ### Demonstrated experience in a technical lead or senior-level advisory role, guiding teams through complex technical challenges. ### Proven background in managing security operations within high-scale, distributed environments (Cloud or Hybrid). ### Advanced understanding of attacker TTPs (Tactics, Techniques, and Procedures) and the MITRE ATT&CK framework. ### Deep expertise in SIEM/SOAR platforms, EDR/XDR tools, and network traffic analysis. ### Experience with Cloud security (AWS, Azure, or GCP) and understanding of shared responsibility models. ### Experience leading large-scale incident investigations and performing root-cause analysis. ### Familiarity with forensic analysis tools and procedures.### ### Why Join Thales S21sec Spain?At Thales S21sec, we pride ourselves on being innovative and flexible in how we work. We continuously evolve our policies to ensure a true work-life balance.100% Flexible Hybrid Work Work from home or come to the office whenever you choose.Up to 41 Days Off Per Year 24 vacation days + additional flexible days Option to enjoy one free Friday per month (12 per year)* Choose between summer reduced hours or extra days ofFlexible Compensation PackageOptimize your net salary with benefits such as meal vouchers, transport cards, childcare vouchers, and training support.Continuous Learning & Certifications Access to an annual training plan including technical certifications, languages, and soft skills.Knowledge Sharing Culture Participate in our voluntary Speakers Program and share your expertise.Performance-Based Bonuses Clear and transparent objectives aligned with KPI-based annual bonuses.Career Growth Your Way Choose your path: Leadership and team management Deep technical specialization with top experts### Join UsIf you are passionate about cybersecurity and want to make an impact, we are your company. We’re looking forward to meeting you!At Thales we provide CAREERS and not only jobs. With Thales employing 80,000 employees in 68 countries our mobility policy enables thousands of employees each year to develop their careers at home and abroad, in their existing areas of expertise or by branching out into new fields. Together we believe that embracing flexibility is a smarter way of working. Great journeys start here, apply now!#J-18808-Ljbffr

Arbeta mot den svenska marknaden – lev livet i SpanienTänk dig att starta varje morgon i solen, gå till ett centralt kontor fyllt av energi och kollegor som vill åt samma håll som du. Ett jobb där du får utvecklas, tjäna bra och samtidigt bygga en karriär inom försäljning — på riktigt.Hos Nordvera Solutions arbetar du motden svenska marknaden från vårt kontor i Fuengirola, och du får all utbildning och coachning du behöver för att lyckas. Du kommer in i ett team där vi hejar fram varandra, skrattar mycket och alltid har tydliga mål att jobba mot.Föreställ dig aLägga upp din karriärresa precis där du vill ha denJobba med en tydlig modell där du faktiskt ser resultat av ditt arbeteFå dagligt stöd, coaching och utvecklingHa 25 semesterdagar, friskvård och trygg grundlön + provisionArbeta i solen — och bo nära strandenFå hjälp att hitta boende om du flyttar hitÄr du en person som gillar att påverka din egen framtid?Gillar du tanken på en arbetsplats där energi, humor och driv är lika viktigt som själva jobbet?Då kommer du att trivas här.Sök nu och bygg din karriär i Spanien.#J-18808-Ljbffr

Desde SOTEC Consulting – Grupo Astek buscamos unAnalista SOCcon al menos2 años de experienciaen operaciones de ciberseguridad, especializado en herramientas EDR, para incorporarse a un equipo de seguridad gestionada.El candidato será responsable de ladetección, análisis y respuesta a incidentes de seguridad, trabajando con soluciones como CrowdStrike Falcon y/o SentinelOne.Monitorización y análisis de alertas de seguridad en tiempo realTriage y clasificación de incidentes (priorización)Investigación de amenazas en endpoints mediante EDRRespuesta a incidentes (aislamiento de equipos, contención, remediación)Análisis de logs y correlación de eventosEscalado de incidentes a niveles superiores (L2/L3)Documentación de incidentes y elaboración de informesMejora continua de reglas de detecciónMínimo2 años en SOC o ciberseguridad operativaExperiencia práctica con EDR (CrowdStrike y/o SentinelOne)Conocimientos técnicosAnálisis de eventos en sistemas Windows/LinuxConocimiento de MITRE ATT&CKInvestigación de incidentes de seguridadManejo de SIEM (deseable)Español: fluidoValorableExperiencia en entornos MSSPCertificaciones (Security+, CySA+, etc.)Experiencia en threat hunting¿Te apasiona la tecnología en la nube y quieres formar parte de una empresa en constante evolución digital?SOTEC es una compañía comprometida con la igualdad de oportunidades, sin tener en cuenta raza, sexo, religión, edad, orientación sexual, estado civil, discapacidad, nacionalidad o identidad de género. Nos sentimos orgullosos de esforzarnos cada día en evitar los sesgos de cualquier tipo.#J-18808-Ljbffr

pAnteriad söker en Business Development Representative (BDR) som primärt ringer IT-chefer i Norden, särskilt Sverige, för att samla information och skapa leads som bokar möten mellan IT-chefen och vår kunds säljteam. Ingen telefonförsäljning sker i rollen. /ppVi erbjuder en fyra veckors onboarding och ett taklöst provisionssystem där insats och resultat ökar din intjäningspotential samt möjlighet till professionell tillväxt i organisationen. /p #J-18808-Ljbffr

About RevolutPeople deserve more from their money. More visibility, more control, and more freedom. Since 2015, Revolut has been on a mission to deliver just that. Our powerhouse of products – including spending, saving, investing, exchanging, travelling, and more – help our 75+ million customers get more from their money every day.About the RoleGrowth Marketing Manager – support mobile acquisition efforts, manage campaigns across key platforms, analyse performance to improve efficiency and growth, and work on attribution and tracking in a privacy‑first ecosystem.What You'll Be DoingManaging and optimising mobile campaigns across Google UAC, Meta, TikTok, and Apple Search AdsAnalysing campaign performance data to improve ROAS and scale efficientlySupporting attribution setup and troubleshooting using AppsFlyer or AdjustWorking with SKAN and ATT frameworks to ensure accurate trackingCollaborating with Product, Data, and Engineering teams on measurement challengesMonitoring KPIs and contributing to reporting and performance insightsRunning experiments (A/B tests, bidding, creatives) to improve resultsIdentifying trends and opportunities within mobile marketing and attributionWhat You'll Need1+ years of experience managing performance marketing campaigns or academic exposureA degree in mathematics, computer science, economics, engineering, or related fieldExperience with mobile ad platforms (Google Ads, Meta, TikTok, Apple Search Ads)Expertise in analysing data and solving quantitative problemsA solid understanding of mobile attribution tools (AppsFlyer, Adjust, SKAN, ATT)The ability to work with large datasets and extract actionable insightsA KPI‑driven mindset with a focus on measurable outcomesThe ability to manage priorities in a fast‑paced environmentImpeccable communication skills to collaborate with cross‑functional teamsFluency in EnglishNice to HaveExperience with SQL or PythonA background in computer science or quantitative disciplinesFamiliarity with automating reports or bid strategiesAn understanding of marketing in a regulated industry#J-18808-Ljbffr

Administrador/a SIEM Threat Hunting Descubra más sobre las tareas diarias, las responsabilidades generales y la experiencia requerida para esta oportunidad desplazándose hacia abajo ahora. Descripción Administrador/a SIEM Threat Hunting ¿Te apasiona la ciberseguridad ofensiva desde el lado defensivo? En GP DIGTAL buscamos un perfil especializado en SIEM y Threat Hunting para diseñar nuevas capacidades de detección y mejorar la protección de entornos tecnológicos complejos e internacionales para trabajar en importante multinacional de ciberseguridad- Trabajarás con múltiples tecnologías y fabricantes, colaborando con equipos especializados en un entorno de mejora continua, innovación y alto impacto. Condiciones Contrato: Indefinido Ubicación: Boadilla del Monte (Madrid) Modalidad: Híbrida (2 días presenciales en cliente y resto en remoto) Qué harás Diseñar, desarrollar e implementar nuevos casos de uso de detección en entornos SIEM agnósticos al fabricante. Realizar actividades de Threat Hunting basadas en el framework MITRE ATT CK. Integrar nuevas fuentes de información y optimizar su explotación. Normalizar campos del Data Lake de forma independiente de la tecnología origen. Mantener y ampliar la cobertura de logs procedentes de tecnologías como Windows, Linux, WAF, Firewalls, IAM, EDR/XDR y otras plataformas de seguridad. Colaborar con equipos SOC y Threat Hunting para identificar brechas de detección y proponer mejoras. Participar en la mejora continua de reglas de correlación, priorización y análisis de alertas. Mantener reuniones con clientes internacionales y elaborar recomendaciones técnicas en inglés. xohynlm Definir hojas de ruta para mejorar las capacidades de detección y monitorización. ciberseguridad,siem,threat hunting,mitre att&ck,data lake,windows,linux,waf,firewalls,iam

We are expanding our Global Corporate Information Security team and are looking for an IGA (Identity Governance and Administration) & PAM (Privileged Access Management) Product Owner (m/f/d) who is responsible for the delivery, prioritization, and operational execution of the Identity Governance & Administration (IGA) and Privileged Access Management (PAM) product backlogs. This role owns the day-to-day responsibility for translating IAM strategy, regulatory requirements, and risk drivers into consumable IGA and PAM services, while overall accountability remains with the Head of IAM Security. The Product Owner ensures close alignment across architecture, engineering, SOC, and business stakeholders to deliver scalable, compliant identity and privileged access capabilities. This role is central to the organization’s Zero Trust and regulatory compliance journey, directly reducing the highest impact cyber risks related to over privileged access and poor identity governance. You will shape how identities, entitlements, and privileged access are governed across 55,000+ users and 2,500 applications, influencing both security posture and operational efficiency at enterprise scale. ¿Tiene lo que se necesita para triunfar? La siguiente información debe ser leída atentamente por todos los candidatos. Responsibilities • Own and manage the IGA & PAM product backlogs, priorities, and sprint objectives., • Act as day to day Product Owner for Global IGA and Global PAM initiatives., • Translate IAM strategy, regulatory obligations (NIS2, ISO 27001), and risk assessments into delivery backlog items., • Coordinate with IAM Architects to ensure architectural intent is correctly implemented by engineering teams., • Drive onboarding of applications, identities, and platforms into IGA lifecycle and PAM controls., • Ensure alignment between IGA, PAM, IAM analytics, and SOC monitoring., • Support tool selection, vendor engagement, and roadmap planning for IGA and PAM platforms., • Drive adoption, communication, and change management with business and IT stakeholders., • Provide clear reporting on delivery progress, risk reduction, and compliance KPIs to the Head of IAM. Immediate Contributions • Delivered a production ready Global IGA service covering JML automation, access governance, and access reviews., • Established a unified Global PAM service enforcing least privilege, MFA, and just in time access., • Implemented governance for non human identities (service accounts, technical IDs, automation)., • Defined and operationalized RBAC / PBAC role models across priority applications., • Achieved measurable reduction in standing privileges and audit findings related to access governance. Qualifications • Bachelor’s degree in IT, Cyber Security, or equivalent experience. Cybersecurity certifications are advantageous: CISSP, CISM, Microsoft Endpoint-related certifications, or comparable alternatives., • Fluency in English is a must. Skills in German and French are a plus., • Knowledge of modern security frameworks (MITRE ATT&CK, NIST CSF, ISO 27001)., • Experience implementing KPIs and running continual service improvement processes. Required skills and/or experience: Strong Product Owner experience in IAM, IGA, or PAM domains., • Deep understanding of Identity Governance concepts: Joiner Mover Leaver (JML); Access reviews & certifications; Role and entitlement modelling (RBAC / PBAC)., • Strong knowledge of Privileged Access Management: Vaulting & credential rotation; Just in time access & MFA enforcement; Privileged session monitoring., • Ability to balance risk, compliance, and delivery pragmatism in complex enterprises. Preferred • Experience with IGA and PAM tooling in large, multi domain environments., • Exposure to non human identity governance (service accounts, automation, APIs)., • Experience operating in regulated environments (ISO 27001, NIS2)., • Strong collaboration experience with SOC and audit teams. Benefits • Competitive compensation and benefits package that recognizes your expertise., • Flexible and hybrid working model., • Creative freedom and responsibility to shape processes and solutions in our global transformation., • Continuous learning and development with tailored training and certification opportunities., • Meal vouchers., • Life and accident insurance., • Option to include a premium private health insurance package as part of the flexible remuneration., • A safe, stable and international workplace within a trusted family business that invests in people. xcskxlj Location Liebherr IT Shared Service Centre Ibérica, S.L. Parque Norte. Alamo building Serrano Galvache, 56 28033 Madrid Spain (ES) Contact Karoliina Rissanen #J-18808-Ljbffr

We are expanding our Global Corporate Information Security team and are looking for a Security Monitoring & Incident Response Product Owner (m/f/d) to establish and scale our global security operations. Asegúrese de leer la descripción completa a continuación y, si confía en que cumple todos los requisitos, envíe su solicitud de inmediato. Creating passion: your responsibilitiesSOC Operations & Service Management • Own the end-to-end operations of the global SOC, ensuring effective collaboration between internal analysts and the MSSP (L1/L2)., • Monitor, manage, and optimize processes, including alert triage, escalation flows, and incident response handovers., • Ensure all services related to Security Monitoring and Incident Response perform against defined SLAs and KPIs, and drive actions when service quality deviates., • Implement the SOC "product" roadmap related to Security Monitoring & Incident Response, including implementation of the strategic vision, backlog, and prioritization of improvements.Vendor & MSSP Management, • Act as the primary liaison between the organization and the MSSP to deliver SOC services., • Conduct recurring service governance meetings (operational and tactical)., • Track and validate MSSP deliverables, including detection operations, case handling quality, and runbook adherence., • Coordinate improvements to MSSP workflows, communication channels, and response processes.Incident Response Alignment, • Align with the internal incident response team to ensure seamless escalation., • Support the refinement of incident response procedures, playbooks, and communication guidelines., • Ensure major incidents are appropriately handled, documented, and followed by lessons learned sessions., • Guide the continuous evolution of incident management maturity and readiness.Governance, Compliance & Documentation, • Maintain alignment with internal security frameworks, standards, and regulatory requirements., • Produce regular reports on operational performance, risks, coverage, and incident trends., • Ensure processes, runbooks, service definitions, and operating procedures are consistently documented and kept up to date., • Support audits, assessments, and readiness activities related to detection and response.Contributing your strengths: your qualifications, • Bachelor's/Master's in Cybersecurity, Computer Science, or related field., • 7+ years of operational experience in SOC environments (L2/L3, threat hunting, incident response, service delivery, operational delivery)., • Exposure to global organizations and distributed security functions., • Knowledge of modern security frameworks (MITRE ATT&CK, NIST CSF, ISO 27001)., • Experience implementing KPIs and running continual service improvement processes., • Relevant certifications (e.g., CISSP, GCIH, CCSP, GCIA, GMON) are a plus, but not mandatory., • Fluency in English (written and spoken)., • Willingness and ability to travel to Liebherr sites worldwide up to 10% of the time.Our commitment to you: your benefits, • Competitive compensation and benefits package that recognizes your expertise., • Flexible and hybrid working model., • Creative freedom and responsibility to shape processes and solutions in our global transformation., • Continuous learning and development with tailored training and certification opportunities., • Meal vouchers., • Life and accident insurance., • Option to include a premium private health insurance package as part of the flexible remuneration., • A safe, stable and international workplace within a trusted family business that invests in people. xcskxlj Location Liebherr IT Shared Service Centre Ibérica, S.L. Parque Norte. Alamo building Serrano Galvache, 56 28033 Madrid Spain (ES) #J-18808-Ljbffr

We are expanding our Global Corporate Information Security team and are looking for a Security Monitoring & Incident Response Product Owner (m/f/d) to establish and scale our global security operations.Creating passion: your responsibilitiesSOC Operations & Service Management- Own the end-to-end operations of the global SOC, ensuring effective collaboration between internal analysts and the MSSP (L1/L2).- Monitor, manage, and optimize processes, including alert triage, escalation flows, and incident response handovers.- Ensure all services related to Security Monitoring and Incident Response perform against defined SLAs and KPIs, and drive actions when service quality deviates.- Implement the SOC "product" roadmap related to Security Monitoring & Incident Response, including implementation of the strategic vision, backlog, and prioritization of improvements.Vendor & MSSP Management- Act as the primary liaison between the organization and the MSSP to deliver SOC services.- Conduct recurring service governance meetings (operational and tactical).- Track and validate MSSP deliverables, including detection operations, case handling quality, and runbook adherence.- Coordinate improvements to MSSP workflows, communication channels, and response processes.Incident Response Alignment- Align with the internal incident response team to ensure seamless escalation.- Support the refinement of incident response procedures, playbooks, and communication guidelines.- Ensure major incidents are appropriately handled, documented, and followed by lessons learned sessions.- Guide the continuous evolution of incident management maturity and readiness.Governance, Compliance & Documentation- Maintain alignment with internal security frameworks, standards, and regulatory requirements.- Produce regular reports on operational performance, risks, coverage, and incident trends.- Ensure processes, runbooks, service definitions, and operating procedures are consistently documented and kept up to date.- Support audits, assessments, and readiness activities related to detection and response.Contributing your strengths: your qualifications- Bachelor's/Master's in Cybersecurity, Computer Science, or related field.- 7+ years of operational experience in SOC environments (L2/L3, threat hunting, incident response, service delivery, operational delivery).- Exposure to global organizations and distributed security functions.- Knowledge of modern security frameworks (MITRE ATT&CK, NIST CSF, ISO 27001).- Experience implementing KPIs and running continual service improvement processes.- Relevant certifications (e.G., CISSP, GCIH, CCSP, GCIA, GMON) are a plus, but not mandatory.- Fluency in English (written and spoken).- Willingness and ability to travel to Liebherr sites worldwide up to 10% of the time.Our commitment to you: your benefits- Competitive compensation and benefits package that recognizes your expertise.- Flexible and hybrid working model.- Creative freedom and responsibility to shape processes and solutions in our global transformation.- Continuous learning and development with tailored training and certification opportunities.- Meal vouchers.- Life and accident insurance.- Option to include a premium private health insurance package as part of the flexible remuneration.- A safe, stable and international workplace within a trusted family business that invests in people.LocationLiebherr IT Shared Service Centre Ibérica, S.L.Parque Norte. Alamo building Serrano Galvache, 5628033 MadridSpain (ES)#J-18808-Ljbffr

ppAs the world’s leading multidisciplinary service provider, Deluxe underpins the media and entertainment industry, servicing content creators and distributors including Netflix, WarnerMedia, The Walt Disney Company, Amazon, Apple, Viacom, NBCU, Google, ATT and many others by providing Global Content Distribution, Localization, Accessibility and Mastering while leading end-to-end innovation with unparalleled scale and agility across the Streaming, Theatrical, Broadcast and Mobile landscapes. With headquarters in Los Angeles and offices around the globe, the company employs over 3,500 of the most talented and experienced industry individuals worldwide. /ph3Audio Technician /h3pFull-Time, Permanent Position in Madrid. Hours/Shifts: 39. Position Overview: Audio Technician working with dubbing directors and mixing engineers. /ph3Position Responsibilities /h3ulliEnsure high technical quality of audio recordings and edits. /liliOrganize and manage project files and session data. /liliCollaborate with dubbing directors and mixing engineers. /liliTroubleshoot and resolve technical issues during sessions. /liliFollow daily priorities and instructions from the Head of Department. /liliSupport remote recording sessions using tools such as Source‑Connect, SessionLinkPRO, or ZOOM. /liliPerform post‑editing quality control (QC), including lip‑sync accuracy, noise checks, and take validation. /liliDocument technical issues and recurring problems and propose improvements. /liliValidate adapted scripts from a technical perspective. /liliManage backups and ensure data security protocols are followed for sensitive audio files. /liliParticipate in ongoing training to stay updated on new tools, plugins, and industry best practices. /li /ulh3Key Requirements /h3ulliAdvanced skills in audio equipment, software, tools, and DAWs involved in the audio postproduction process (Protools preferred). /liliProficiency in audio recording, editing and mixing skills are a plus. /liliMusic, sound design and creative skills are a plus. /liliAttention to detail. /liliAbility to work under pressure of a deadline. /liliAbility to adapt to new environments, software and technical advances. /liliCommunication skills across all levels (verbal, written). /liliAbility to apply deep critical thinking to solve difficult problems. /liliAbility to adapt to different client preferences and project needs. /liliKnowledge of different types of audio and video formats. /li /ulpDeluxe is committed to inclusivity, fostering an environment where every employee feels comfortable bringing their full selves to work. It is our policy to provide equal employment opportunities to all applicants and employees. Applicants will receive consideration for employment without regard to, and will not be discriminated against, based on race, colour, religion, national origin or ancestry, sex, age, physical or mental disability, sexual orientation, gender identity or expression. /p /p #J-18808-Ljbffr

At ING Hubs Spain we are looking for a Senior DevOps EngineerYour role and work environment:We are looking for a talented and enthusiastic SeniorDevOpsEngineer to join our Team at ING Hubs SpainYou will join ING’s Global Threat Management (GTM) team, a central capability within the CISO domain that focuses on intelligence driven, proactive defence.The team works across geographies and disciplines to anticipate emerging threats, investigate advanced attack scenarios, and continuously improve ING’s detection and defensive posture. Collaboration, communication, ownership, and impact are core to how we work.Your key responsibilities:As a DevOps Engineer in Global Threat Management, you will help structure and deploy scalable infrastructure to support GTM workflows, while building automation and integrations that strengthen detection, prioritization, and decision‑making.Design and implement automations to detect, prioritize, and investigate cyber threats.Transform large‑scale security telemetry and threat intelligence data into actionable insights for GTM and executive decision‑making.Automate and accelerate threat analysis using standard and custom‑built tooling.Deploy, operate, and optimize cloud‑based infrastructure (preferred Azure and GCP), ensuring scalability, reliability, cost efficiency, and governance.Enforce and continuously improve security and DevOps best practices within the team.Perform maintenance, monitoring, and resilience testing of owned infrastructure to ensure high availability and operational continuity.Design and integrate intelligence‑driven security solutions across data sources, security tools, and services.Design, develop, and maintain Python-based automation, scripts, integrations, and operational tooling.Design and communicate solutions using clear documentation, diagrams, and visualizations.Troubleshoot and resolve deployment, installation and configuration issues across cloud infrastructure and security tooling, ensuring minimal disruption to operations.Clearly communicate insights and recommendations to both technical and non‑technical stakeholders.Leverage AI and automation technologies to streamline workflows, enrich threat intelligence processes, and improve operational effectiveness.What are we looking for?Do you want to know if this job is made for you? These are some of the qualities that we value the most for this role. And if the shoe fits… don’t hesitate to apply!Ability to translate complex cyber‑threat challenges into robust, scalable, and data‑driven solutions.Strong Python development skills for automation, integrations, and tooling.Experience deploying and supporting cloud-based solutions, preferably in Azure and GCP.Experience with Infrastructure as Code (preferably Terraform) and DevOps practices.Solid understanding of cloud platforms, networking, system administration, infrastructure architecture, and the operating model of CISO organizations in mid‑ to large‑scale enterprises.Design end‑to‑end solutions, translating complex system landscapes into clear, implementable designs.Strong hands-on experience diagnosing and resolving deployment, installation, and integration issues across cloud environments, infrastructure components, and custom-built tools.Experience with containerization technologies such as Docker and Kubernetes.Collaborate proactively with threat intelligence and cybersecurity experts, bringing curiosity, strong problem‑solving skills, and clear communication to drive impact.Experience building and maintaining CI/CD pipelines and working with version control systems such as Git.A degree in Computer Science or related discipline, or equivalent hands-on experience in cloud engineering, DevOps, system administration, or cybersecurity.Relevant Cloud, DevOps, or Cybersecurity certifications are an advantage.English level - B2BONUS:Experience with threat intelligence platforms, security tools, and cyber threat intelligence workflows.Experience with Databricks, data engineering, or large-scale data-processing platforms.Experience building AI/GenAI solutions using LLMs and automation frameworks.Knowledge of cybersecurity concepts, threat actors, TTPs, and frameworks such as MITRE ATT&CK.Experience with security automation and orchestration platforms.Relevant certifications in Threat Intelligence, Security, AI, or Data Engineering.Experience working within a CISO, Security Operations, or Threat Management organization.What do we offer?The time you spend at work, the challenges you face or the lessons you get are very important, but… What about your personal life? At ING we want your work to fulfill you in every way, and that is why we take care of even the smallest details.Check out what is waiting for you!Be flexible my friend.Our model is all about flexibility and accountability. Keeping both our customers and our colleagues needs in mind, you determine together which days you work at home and which you come to ING MAD to offer your best self. Do your thing.Restaurant card.So that thinking about what to have for lunch doesn’t take up your time or your cravings.Our house will be your home.In our offices you can find electric mobility solutions, doctor, hairdresser, gym, The Good Service (to help you with your errands) and much more!Health insurance.For you and all your family (spouse/partner and children).Life insurance.We help you protect what matters most to you.Flexible remuneration.In addition, you will enjoy our flexible remuneration model, through a more tax-advantaged way, you will be able to access other services such as nursery, transport card, training aids…Transport allowance.It doesn't matter where you live, we’ll help you get to the office.Pension plan.You can benefit from our pension plan after 1 month with us!Discover ING Hubs SpainWe’re building something exciting—and we want you to be part of it.ING is launching the new member of ING Hubs in Spain, an integral part of ING in charge of designing and delivering important technological and operational solutions to make banking frictionless for our customers. ING Hubs play a key role in our ‘Growing the difference’ strategy to become the best European bank. This will be our sixth global hub, joining a network of over 13,000 professionals in the Philippines, Poland, Romania, Slovakia, Türkiye and Spain.What makes us different?We have a tech-first mindset: We’re not just a bank—we’re a tech company that happens to do banking. Our new hub will be a center of excellence for scalable, fast, and secure technology.We have global impact: You’ll be working on solutions that serve more than 34 million of customers in over 38 countries.We are agile: ING was the first bank to adopt agile at scale. We continue to evolve with a collaborative, cross-functional way of working.Sustainability at the heart of what we do: We have a role to play in defining new ways of doing business that align economic growth with positive environmental and social impact.At ING, we believe in diversity, inclusion, and belonging. We’re proud of our international teams and are committed to creating an environment where everyone can thrive. We value authenticity, collaboration, and continuous learning.We’re looking for curious minds, bold builders, and passionate problem-solvers. If you’re looking for a place to find new ways to drive efficiency and provide superior customer value, where your ideas matter, and where you can grow with purpose—we’re looking forward to meeting you.#LI-DNI

Responsabilidades Desplácese hacia abajo para ver todos los requisitos del puesto y las responsabilidades que pueden esperar los candidatos seleccionados. La persona que se incorpore en esta posición asumirá la responsabilidad del CSIRT/SOC para el CSIRT Global. Tendrá a su cargo el servicio de detección y respuesta 24×7 sobre el perímetro corporativo, liderando el equipo de análisis de operaciones y asumiendo funciones de gestión de incidentes en el ámbito corporativo. Contribuirá activamente a la resiliencia de la compañía, a la estandarización de los procesos esenciales de detección y respuesta y a su adopción progresiva por parte de las unidades de negocio. Este rol es crucial para minimizar el impacto de los incidentes en el perímetro corporativo, garantizar la madurez del servicio y actuar como referencia en la estandarización de procesos para las capacidades CSIRT de las unidades de negocio. Requisitos de la posición • La persona candidata deberá contar con liderazgo, criterio operativo contrastado, capacidad de toma de decisiones bajo presión, habilidades de priorización y comunicación efectiva con audiencias técnicas y ejecutivas. Se espera que asegure la calidad y el cumplimiento dentro de su ámbito de responsabilidad, preste asesoramiento a distintos equipos, influya en la toma de decisiones y gestione riesgos operativos., • Conocimiento de marcos de referencia: SIM3 v2, MITRE ATT&CK® y Marco de Ciberseguridad del NIST., • Experiencia demostrada en gestión de equipos de respuesta a incidentes —CSIRT/SOC— y en gestión de incidentes., • Alto nivel demostrado de integridad y discreción en el manejo de información confidencial., • Sólidas habilidades de comunicación oral y escrita, con capacidad para presentar información compleja a audiencias técnicas y ejecutivas., • Capacidad para construir relaciones de confianza con las áreas y personas interesadas., • Capacidad demostrada para trabajar de forma autónoma y liderar equipos multidisciplinares., • Visión estratégica, sólidas habilidades organizativas y capacidad para equilibrar prioridades contrapuestas en entornos dinámicos y exigentes., • Nivel alto de inglés, oral y escrito (C1 o superior). Contribuciones al rol • Dirección del servicio CSIRT/SOC., • Gestión de incidentes: declaración de incidentes, priorización, ordenación y coordinación de la contención y erradicación en activos corporativos, así como solicitud de actualizaciones a las áreas implicadas., • Responsabilidad sobre la gestión de casos y evidencias, asegurando la calidad de los casos y la realización de revisiones post-incidente., • Responsabilidad sobre el contenido del servicio —base de conocimiento, procedimientos operativos y procesos—: creación, mantenimiento y aprobación de cambios., • Definición, mantenimiento y publicación de líneas base de procesos esenciales de detección y respuesta para las unidades de negocio, con apoyo de perfiles de análisis de mayor experiencia e impulsando su adopción progresiva., • Coordinación operativa con las unidades de negocio en incidentes y amenazas críticas que afecten a varias de ellas., • Activación del protocolo de crisis y soporte a las comunicaciones ejecutivas durante incidentes de alta severidad., • Revisión continua del desempeño del servicio mediante indicadores clave de rendimiento., • Trasladar las necesidades operativas del servicio —visibilidad, detección y automatización— al área de ingeniería de detección y respuesta., • Supervisar la cadencia de revisión y actualización de las líneas base publicadas., • Promover la mejora continua mediante lecciones aprendidas y seguimiento de acciones post-incidente., • Contribuir a la adopción supervisada de capacidades de IA en los procesos de monitorización, clasificación inicial y respuesta. Otros aspectos relevantes • Titulación universitaria (máster) STEM. En su defecto, experiencia profesional equivalente., • Certificaciones Deseables (Valorables para reforzar el perfil), • Experiencia previa en responsabilidad de servicio CSIRT/SOC 24×7 o en funciones de gestión de incidentes., • Experiencia en definición y gobierno de procedimientos operativos, procesos y catálogos de contenidos de detección y respuesta., • Experiencia en cumplimiento normativo aplicable: NIS2, RGPD y SOX., • Experiencia en coordinación de incidentes multientidad o que afecten a varias unidades de negocio., • Familiaridad con la integración de soluciones de IA basadas en asistentes y agentes en operaciones de seguridad con supervisión humana., • Disponibilidad para atender incidentes críticos fuera del horario laboral. Beneficios • Proyectos transformadores. En Telefónica formarás parte de proyectos de alto impacto, que marcan tendencia y responden a los retos de conectividad y transformación digital de nuestra sociedad., • Desarrollo profesional. Tendrás un largo recorrido y aprendizaje a escala global, gracias a nuestra presencia en diferentes geografías. Compartiremos contigo oportunidades de desarrollo, formación y opciones de movilidad. ¡Queremos crecer y construir un futuro contigo!, • Flexibilidad. Apostamos por el equilibrio entre la vida profesional y personal. Desde Telefónica cuidamos la flexibilidad, posicionándonos como referente en nuevas formas de trabajo y medidas de conciliación., • 27 días laborales de vacaciones., • Beneficios sociales. xcskxlj Podrás disfrutar de un amplio paquete de beneficios sociales entre los que destacan:, • Seguro de vida y accidentes, • Seguro médico para ti y tu unidad familiar (cónyuge e hijos), • Plan de retribución flexible con numerosas opciones entre las que elegir., • Plan de pensiones #J-18808-Ljbffr

Incident Response Analyst (AI Training) ¡Inscríbase sin demora! Se espera un gran volumen de solicitantes para el puesto que se detalla a continuación, no espere para enviar su CV. About The Role Your experience triaging alerts and investigating incidents is exactly what's needed to make AI smarter about cybersecurity. At Alignerr, we partner with leading AI research labs to build and evaluate AI systems — and we need seasoned security professionals to ensure those systems reflect how real incident response teams operate. Job Details • Organization: Alignerr, • Type: Hourly Contract, • Location: Remote, • Commitment: 10–40 hours/week What You'll Do • Analyze realistic security events, alerts, and incident cases to evaluate AI-generated responses, • Assess impact, root cause, and appropriate remediation steps for simulated incidents, • Review and validate detection rules, alerting pipelines, and investigative playbooks, • Identify gaps where AI-generated analysis diverges from real-world security operations, • Provide structured, expert feedback that directly improves AI accuracy and reliability, • Work independently and asynchronously on your own schedule Who You Are • 2+ years of experience in SOC, incident response, or security operations, • Hands‑on experience with SIEM platforms, alert queues, and investigation tooling, • Strong ability to triage and prioritize — separating meaningful threats from noise, • Clear written communication skills for structured feedback, • Comfortable working independently on task-based assignments Nice to Have • Experience with threat hunting, digital forensics, or purple team exercises, • Familiarity with frameworks like MITRE ATT&CK, NIST, or similar xcskxlj, • Background in cloud security, endpoint detection, or network forensics, • Prior involvement in playbook development or SOC process improvement Why Join Us • Work on frontier AI systems alongside world‑class research teams, • Fully remote and flexible — work when and where it suits you, • Freelance perks: autonomy, variety, and global collaboration, • Apply your real‑world security expertise to a high‑impact, emerging field, • Potential for ongoing work and contract extension #J-18808-Ljbffr

En GP DIGITAL buscamos para cliente de sector bancaTécnico Ciberseguridad + IA jr¿Quieres iniciar tu carrera en ciberseguridad dentro de un entorno tecnológico de primer nivel y con posibilidades reales de incorporación a cliente a medio plazo?Buscamos perfiles junior con ganas de aprender, desarrollar capacidades analíticas y participar en proyectos reales de ciberseguridad, datos e inteligencia aplicada a la detección de amenazas.CondicionesContrato indefinidoLugar de trabajo: Madrid * varias ubicacionesModalidad: PresencialHorario: Lunes a viernes de 09:00 a 18:00Jornada de verano: SíQué harásParticipar en proyectos de ciberseguridad con visión completa del ciclo de vida.Analizar información de seguridad mediante Python y SQL.Colaborar en iniciativas de automatización y modelado de datos.Aplicar técnicas de Machine Learning para clasificación, detección de anomalías y clustering.Trabajar con herramientas de visualización y cuadros de mando.Analizar logs, eventos y alertas de seguridad.Apoyar tareas relacionadas con Threat Intelligence y análisis de indicadores de compromiso.Utilizar herramientas de IA generativa para mejorar procesos de análisis e investigación.Colaborar con equipos multidisciplinares en la identificación y mitigación de riesgos.ImprescindibleEntre 1 y 2 años de experiencia profesional.Conocimientos de ciberseguridad.Python orientado a análisis, automatización y modelado.SQL para consulta y manipulación de datos.Conocimientos de Machine Learning aplicado a clasificación, clustering y detección de anomalías.Manejo de Power BI, Tableau o herramientas similares.Conocimientos básicos de SIEM: logs, eventos y correlación de alertas.Conocimientos de Threat Intelligence: IOCs, TTPs y MITRE ATT&CK.Experiencia o familiaridad con herramientas de IA generativa y LLMs.Inglés nivel medio.Actitud proactiva, capacidad de aprendizaje y motivación por crecer en ciberseguridad.DeseableConocimientos de QRadar, Splunk o plataformas SIEM similares.Experiencia con Spark, Kafka o entornos Big Data.Certificaciones como CompTIA Security+, SC-900 o equivalentes.Conocimientos de detección de fraude.Experiencia en análisis de grafos.Participación previa en proyectos reales de ciberseguridad.¿Qué ofrecemos?Salario competitivo en función de la experiencia.Contrato indefinido u opción de contrato mercantil.Posibilidad en el medio plazo de incorporarse a plantilla de cliente.22 días laborables de vacaciones.Plan de retribución flexible: Seguro médico, cheques guardería, cheques transporte.Formación en tecnología y soft skills.Programa de referidos: 500 € por candidatos recomendados que se incorporen con nosotros.Acerca de nosotrosSomos una consultora IT, con un equipo de más de 150 profesionales tecnológicos, en el que encontrarás proyectos estables, en los principales clientes nacionales e internacionales, desarrollando soluciones de desarrollo de aplicaciones, arquitectura de sistemas, Inteligencia Artificial, Cloud, Ciberseguridad, Big Data, etc.Amplia información en nuestra web: www.Grupodigital.Eu#J-18808-Ljbffr