Att jobs in VicálvaroCreate job alerts

WTW in Madrid is looking for a Threat-Led Detection Engineer Lead responsible for developing and leading the detection engineering strategy across various environments. This position requires strong leadership, a deep understanding of cyber threats, and hands-on experience with detection frameworks like MITRE ATT&CK.The ideal candidate possesses a solid background in cyber security, with the ability to translate intelligence into effective detections while fostering a security-aware culture. Responsibilities include mentoring teams and maintaining a robust detection library.#J-18808-Ljbffr

We are expanding our Global Corporate Information Security team and are looking for an IGA (Identity Governance and Administration) & PAM (Privileged Access Management) Product Owner (m/f/d) who is responsible for the delivery, prioritization, and operational execution of the Identity Governance & Administration (IGA) and Privileged Access Management (PAM) product backlogs. This role owns the day-to-day responsibility for translating IAM strategy, regulatory requirements, and risk drivers into consumable IGA and PAM services, while overall accountability remains with the Head of IAM Security. The Product Owner ensures close alignment across architecture, engineering, SOC, and business stakeholders to deliver scalable, compliant identity and privileged access capabilities. This role is central to the organization’s Zero Trust and regulatory compliance journey, directly reducing the highest impact cyber risks related to over privileged access and poor identity governance. You will shape how identities, entitlements, and privileged access are governed across 55,000+ users and 2,500 applications, influencing both security posture and operational efficiency at enterprise scale. ¿Tiene lo que se necesita para triunfar? La siguiente información debe ser leída atentamente por todos los candidatos. Responsibilities • Own and manage the IGA & PAM product backlogs, priorities, and sprint objectives., • Act as day to day Product Owner for Global IGA and Global PAM initiatives., • Translate IAM strategy, regulatory obligations (NIS2, ISO 27001), and risk assessments into delivery backlog items., • Coordinate with IAM Architects to ensure architectural intent is correctly implemented by engineering teams., • Drive onboarding of applications, identities, and platforms into IGA lifecycle and PAM controls., • Ensure alignment between IGA, PAM, IAM analytics, and SOC monitoring., • Support tool selection, vendor engagement, and roadmap planning for IGA and PAM platforms., • Drive adoption, communication, and change management with business and IT stakeholders., • Provide clear reporting on delivery progress, risk reduction, and compliance KPIs to the Head of IAM. Immediate Contributions • Delivered a production ready Global IGA service covering JML automation, access governance, and access reviews., • Established a unified Global PAM service enforcing least privilege, MFA, and just in time access., • Implemented governance for non human identities (service accounts, technical IDs, automation)., • Defined and operationalized RBAC / PBAC role models across priority applications., • Achieved measurable reduction in standing privileges and audit findings related to access governance. Qualifications • Bachelor’s degree in IT, Cyber Security, or equivalent experience. Cybersecurity certifications are advantageous: CISSP, CISM, Microsoft Endpoint-related certifications, or comparable alternatives., • Fluency in English is a must. Skills in German and French are a plus., • Knowledge of modern security frameworks (MITRE ATT&CK, NIST CSF, ISO 27001)., • Experience implementing KPIs and running continual service improvement processes. Required skills and/or experience: Strong Product Owner experience in IAM, IGA, or PAM domains., • Deep understanding of Identity Governance concepts: Joiner Mover Leaver (JML); Access reviews & certifications; Role and entitlement modelling (RBAC / PBAC)., • Strong knowledge of Privileged Access Management: Vaulting & credential rotation; Just in time access & MFA enforcement; Privileged session monitoring., • Ability to balance risk, compliance, and delivery pragmatism in complex enterprises. Preferred • Experience with IGA and PAM tooling in large, multi domain environments., • Exposure to non human identity governance (service accounts, automation, APIs)., • Experience operating in regulated environments (ISO 27001, NIS2)., • Strong collaboration experience with SOC and audit teams. Benefits • Competitive compensation and benefits package that recognizes your expertise., • Flexible and hybrid working model., • Creative freedom and responsibility to shape processes and solutions in our global transformation., • Continuous learning and development with tailored training and certification opportunities., • Meal vouchers., • Life and accident insurance., • Option to include a premium private health insurance package as part of the flexible remuneration., • A safe, stable and international workplace within a trusted family business that invests in people. xcskxlj Location Liebherr IT Shared Service Centre Ibérica, S.L. Parque Norte. Alamo building Serrano Galvache, 56 28033 Madrid Spain (ES) Contact Karoliina Rissanen #J-18808-Ljbffr

This job is with Kyndryl, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. Who We Are At Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world's leading businesses. We are at the heart of progress; with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge. For our people-Kyndryls-that means doing purposeful work that powers human progress. Join us and experience a flexible, supportive environment where your well-being is prioritized and your potential can thrive. The Role Senior Cybersecurity Consultant with a strong technical and consulting background, capable of leading and delivering advanced cybersecurity engagements across areas such as security assessments, cyber deception, Continuous Threat Exposure Management (CTEM), threat modeling, and threat intelligence. The ideal candidate combines hands-on cybersecurity expertise with the ability to manage project delivery, coordinate teams, engage with senior client stakeholders, and produce high-quality technical and executive deliverables. They bring solid knowledge of cybersecurity frameworks such as MITRE ATT&CK, NIST, ISO 27001, CIS Controls, OWASP, and related references, and are comfortable translating technical findings, threat scenarios, and exposure risks into actionable remediation plans. This profile requires strong experience assessing complex technology environments, identifying attack paths and security gaps, prioritizing risks, and advising clients on practical improvements to strengthen their security posture. The candidate should be able to operate across multiple domains, including cloud security, identity security, infrastructure security, threat intelligence, detection, vulnerability management, and security operations. The role requires a senior consultant who can lead engagements end to end, from scoping and planning to execution, reporting, presentation, and follow-up. They should demonstrate autonomy, analytical rigor, strong communication skills, and the ability to work effectively with CISOs, security teams, architects, infrastructure teams, cloud teams, SOC teams, and engineering teams. Who You Are EDUCATION AND CERTIFICATIONS: Bachelor's or Master's degree in Computer Engineering, Cybersecurity, Telecommunications, Information Security, or a related technical discipline. Relevant cybersecurity certifications will be positively valued, such as CISSP, CISM, CRISC, CCSP, OSCP, OSWE, GIAC certifications, ISO 27001 Lead Auditor / Lead Implementer, or equivalent certifications. EXPERIENCE: 7+ years of experience in cybersecurity services, security consulting, security assessments, threat management, offensive security, security architecture, or related cybersecurity domains. Experience leading cybersecurity projects, coordinating delivery teams, managing client stakeholders, and ensuring the quality of consulting deliverables. Previous experience in a consulting environment or professional services organization will be highly valued. LANGUAGES: Spanish and English, B2 level or higher. Ability to communicate effectively with both technical and executive stakeholders in written and spoken English. SKILLS AND KNOWLEDGE: Strong experience in the delivery of cybersecurity consulting services, including security assessments, maturity assessments, technical reviews, risk analysis, and security improvement plans. Solid knowledge of cybersecurity frameworks, methodologies, and standards such as NIST Cybersecurity Framework, MITRE ATT&CK, ISO/IEC 27001, CIS Controls, OWASP, ENISA, CCN-STIC, or equivalent references. Experience in identifying, analyzing, and prioritizing security risks, control gaps, vulnerabilities, attack paths, and exposure scenarios across complex technology environments. Knowledge or experience in areas such as: Security assessments across infrastructure, cloud, applications, identity, and security operations environments. Continuous Threat Exposure Management, including exposure discovery, validation, prioritization, remediation governance, and continuous posture improvement. Cyber deception concepts, technologies, and use cases, including decoys, deceptive assets, lures, honeytokens, detection logic, and adversary engagement. Threat modeling methodologies such as STRIDE, attack trees, abuse cases, kill chain-based modeling, or architecture-driven threat analysis. Threat intelligence lifecycle, including collection, analysis, contextualization, dissemination, and operationalization of intelligence. MITRE ATT&CK-based analysis, adversary behavior mapping, detection opportunities, and security control validation. Cloud and hybrid security across AWS, Azure, and/or Google Cloud Platform. Identity and access management, privileged access, secrets management, and attack paths related to identity compromise. Network security, segmentation, perimeter controls, lateral movement analysis, and exposure reduction. Application security principles, secure design, API security, and integration with DevSecOps practices. Vulnerability management, attack surface management, security posture assessment, and risk-based remediation. Logging, monitoring, detection engineering, SOC use cases, and integration of findings into security operations. Security architecture and secure design principles across enterprise technology environments. Executive and technical reporting, including the ability to translate complex technical findings into business-relevant risk narratives. Strong analytical skills and the ability to understand complex environments, identify security priorities, and propose practical, risk-based remediation actions. Ability to lead workshops, interviews, technical sessions, and executive presentations with client stakeholders. Experience coordinating teams, reviewing deliverables, mentoring consultants, and ensuring methodological consistency across projects. Ability to operate effectively between hands-on technical analysis, advisory work, architectural discussions, and senior stakeholder communication. Strong autonomy, ownership, communication skills, and delivery orientation. Ability to contribute to the growth of cybersecurity consulting capabilities through reusable assets, methodologies, service offerings, and knowledge sharing. KEY RESPONSIBILITIES: Lead and deliver cybersecurity consulting engagements focused on security assessments, cyber deception projects, Continuous Threat Exposure Management (CTEM), threat modeling, threat intelligence, and related offensive and defensive security initiatives. Act as the technical and delivery lead for security assessment projects, ensuring quality, consistency, timely execution, and alignment with client expectations and business objectives. Define project approaches, methodologies, work plans, deliverables, and execution models for advanced cybersecurity consulting services. Conduct and oversee security assessments across cloud, hybrid, on-premise, application, infrastructure, identity, and security operations environments. Identify security weaknesses, exposure points, attack paths, control gaps, and areas for improvement, translating findings into actionable remediation plans and prioritized recommendations. Lead CTEM-related initiatives, including exposure identification, validation, prioritization, remediation tracking, and continuous improvement of the client's security posture. Design, implement, and assess cyber deception strategies and capabilities, including deception use cases, decoys, lures, detection logic, and integration with security operations processes. Lead threat modeling activities for applications, platforms, architectures, and critical business processes, supporting technical teams in identifying risks and defining appropriate security controls. Support threat intelligence initiatives by analyzing threat actors, tactics, techniques, and procedures, and translating intelligence into practical security improvements, detection opportunities, and risk reduction actions. Collaborate with client stakeholders, including CISOs, security teams, architecture teams, infrastructure teams, cloud teams, SOC teams, and engineering teams. Coordinate multidisciplinary teams during project execution, providing technical guidance, quality assurance, mentoring, and support to junior and mid-level consultants. Produce high-quality technical and executive deliverables, including assessment reports, maturity evaluations, threat models, CTEM roadmaps, cyber deception strategies, remediation plans, and security recommendations. Support the definition and evolution of cybersecurity methodologies, reusable frameworks, accelerators, templates, and delivery standards. Contribute to pre-sales and business development activities by supporting proposal preparation, scope definition, effort estimation, technical presentations, and client workshops. Stay up to date with emerging threats, attack techniques, security technologies, industry frameworks, and best practices, ensuring their practical application in consulting engagements. Being You The "Kyn" in Kyndryl means kinship, which represents the strong bonds we have with each other, our customers and our communities. We focus on ensuring all Kyndryls feel included and we welcome people of all cultures, backgrounds, and experiences. Even if you don't meet every requirement, we encourage you to apply. We believe in growth, and we're excited to see what you can bring. At Kyndryl, employee feedback has told us that our number one driver of employee engagement is belonging. That sense of belonging - being a valued, respected, trusted member of the team - is fundamental to our culture and fueling great experiences for our customers. This dedication to welcoming everyone into our company means that Kyndryl gives you the ability to thrive and contribute to our culture of empathy and shared success. That's The Kyndryl Way. What You Can Expect Your career with us isn't just a job-it's an adventure with purpose. We offer a dynamic, hybrid-friendly culture that supports your well-being and empowers you to grow. Our Be Well programs are thoughtfully designed to support your financial, mental, physical, and social health-because we know that when you feel your best, you do your best. From your very first day, you'll dive into impactful work that powers the systems our customers rely on every day. You won't just contribute-you'll make a difference, tackling meaningful projects that sharpen your skills and fuel your growth. We're here to champion your journey. With powerful tools to chart your career path, personalized development goals aligned with your ambitions, and continuous feedback to keep you inspired and on track, you'll have everything you need to thrive and evolve. You'll develop in-demand skills to grow your career and achieve your ambitions with access to cutting-edge learning opportunities-from certifications with Microsoft, Google, and Amazon to coaching and hands-on experiences. And through it all, you'll be part of a culture that values empathy, restless learning, and a devotion to shared success. We want you to thrive here-and we're committed to helping you do just that. Ready to make an impact? Join us and help shape what's next. Get Referred! If you know someone that works at Kyndryl, when asked 'How Did You Hear About Us' during the application process, select 'Employee Referral' and enter your contact's Kyndryl email address.

ppAs the world’s leading multidisciplinary service provider, Deluxe underpins the media and entertainment industry, servicing content creators and distributors including Netflix, WarnerMedia, The Walt Disney Company, Amazon, Apple, Viacom, NBCU, Google, ATT and many others by providing Global Content Distribution, Localization, Accessibility and Mastering while leading end-to-end innovation with unparalleled scale and agility across the Streaming, Theatrical, Broadcast and Mobile landscapes. With headquarters in Los Angeles and offices around the globe, the company employs over 3,500 of the most talented and experienced industry individuals worldwide. /ph3Audio Technician /h3pFull-Time, Permanent Position in Madrid. Hours/Shifts: 39. Position Overview: Audio Technician working with dubbing directors and mixing engineers. /ph3Position Responsibilities /h3ulliEnsure high technical quality of audio recordings and edits. /liliOrganize and manage project files and session data. /liliCollaborate with dubbing directors and mixing engineers. /liliTroubleshoot and resolve technical issues during sessions. /liliFollow daily priorities and instructions from the Head of Department. /liliSupport remote recording sessions using tools such as Source‑Connect, SessionLinkPRO, or ZOOM. /liliPerform post‑editing quality control (QC), including lip‑sync accuracy, noise checks, and take validation. /liliDocument technical issues and recurring problems and propose improvements. /liliValidate adapted scripts from a technical perspective. /liliManage backups and ensure data security protocols are followed for sensitive audio files. /liliParticipate in ongoing training to stay updated on new tools, plugins, and industry best practices. /li /ulh3Key Requirements /h3ulliAdvanced skills in audio equipment, software, tools, and DAWs involved in the audio postproduction process (Protools preferred). /liliProficiency in audio recording, editing and mixing skills are a plus. /liliMusic, sound design and creative skills are a plus. /liliAttention to detail. /liliAbility to work under pressure of a deadline. /liliAbility to adapt to new environments, software and technical advances. /liliCommunication skills across all levels (verbal, written). /liliAbility to apply deep critical thinking to solve difficult problems. /liliAbility to adapt to different client preferences and project needs. /liliKnowledge of different types of audio and video formats. /li /ulpDeluxe is committed to inclusivity, fostering an environment where every employee feels comfortable bringing their full selves to work. It is our policy to provide equal employment opportunities to all applicants and employees. Applicants will receive consideration for employment without regard to, and will not be discriminated against, based on race, colour, religion, national origin or ancestry, sex, age, physical or mental disability, sexual orientation, gender identity or expression. /p /p #J-18808-Ljbffr

Allianz Commercial in Madrid is seeking a Threat Intelligence Engineer – Intrusion Analysis & Detection. You will translate real-world attacks into proactive defenses, develop detection content, and drive intelligence that helps defenders move faster. Asegúrese de enviar su solicitud rápidamente para maximizar sus posibilidades de ser considerado para una entrevista. Lea la descripción completa del puesto a continuación. Responsibilities include analyzing attacks, producing detection rules, mapping tactics to MITRE ATT&CK, building automation with Python and SOAR, and briefing leadership to act confidently. xcskxlj #J-18808-Ljbffr Hay opciones de teletrabajo/trabajo desde casa disponibles para este puesto.

About UsIntegrity360 is the largest independent cyber security provider in Europe, with a growing international presence spanning the UK, Ireland, mainland Europe, Africa and the Caribbean. With over 700 employees across 12 locations and six Security Operations Centres (SOCs) – including Dublin, Sofia, Stockholm, Madrid, Rome and Cape Town – we support more than 2,500 clients across a wide range of industries.Over 80% of our team are technical experts, focused on helping clients proactively identify, protect, detect and respond to threats in an ever‑evolving cyber landscape. Our security‑first approach positions cyber resilience as a business enabler, empowering organisations to operate with confidence.At Integrity360, people come first. We invest heavily in learning, development and progression, fostering a dynamic culture where innovation, collaboration and continuous growth are at the heart of what we do. If you’re ready to take your cyber security career to the next level, we’d love to hear from you.Job Role / ResponsibilitiesIn this role you will act as a Level 3 escalation point within the MDR/SOC function, providing advanced technical support to Level 2 analysts during complex or high‑severity investigations. You will bring deep operational knowledge across modern security technologies, including SIEM, EDR, Network Intrusion Detection Systems, SOAR, DLP and related security monitoring platforms. The Principal SOC Analyst will support the investigation, containment and remediation of advanced threats, ensuring incidents are analysed in the correct business and technical context. You will contribute to the continuous improvement of the MDR service by supporting the definition of security monitoring strategies, improving detection logic, tuning security technologies, reviewing investigation processes and advising customers on technical optimisation opportunities. A strong understanding of malware behaviour, adversary tactics, techniques and procedures, and emerging threats will be critical to success.Primary Duties and ResponsibilitiesAct as the Level 3 escalation point for advanced, complex or high‑impact security investigations.Support Level 2 analysts during complex investigations, providing technical guidance, validation and direction.Perform in‑depth analysis of security events, alerts, logs, endpoint telemetry, network traffic and other relevant data sources.Lead advanced incident investigations, including scoping, containment, eradication and remediation recommendations.Analyse malicious activity, suspicious files, attacker behaviour and adversary TTPs.Support customers from a technical perspective in the optimisation, tuning and improvement of their security monitoring capabilities.Review and improve SIEM, EDR, NIDS, SOAR and other security tool configurations to reduce false positives and improve detection quality.Contribute to the development and refinement of detection use cases, correlation rules, alerting logic and investigation playbooks.Support the definition of customer security monitoring strategies based on risk profile, threat landscape and available telemetry.Provide technical recommendations to strengthen customer cyber security posture and improve resilience against current and emerging threats.Conduct threat hunting and proactive analysis based on indicators, behaviours, intelligence and attack patterns.Document investigation findings, evidence, timelines, containment actions and remediation recommendations in a clear and structured manner.Prepare and deliver technical reports to customers, partners and internal stakeholders.Monitor trusted sources for emerging threats, vulnerabilities and adversary activity relevant to customer environments.Contribute to the continuous improvement of SOC processes, procedures, documentation and knowledge base material.Support mentoring and technical development of Level 1 and Level 2 analysts where required.Desired SkillsStrong hands‑on experience in Security Operations Centre or MDR environments.Deep operational knowledge of SIEM, EDR, Network Intrusion Detection Systems, SOAR, DLP and related security monitoring technologies.Strong experience with security event triage, correlation, investigation and escalation.Ability to analyse endpoint, network, identity, cloud and application telemetry in support of complex investigations.Experience with SIEM query languages and detection logic, such as KQL, SPL, Sigma or equivalent.Experience tuning security controls and detection content to improve alert fidelity and reduce false positives.Strong understanding of attacker tactics, techniques and procedures, including MITRE ATT&CK.Ability to perform host‑based and network‑based threat analysis.Experience analysing packet captures, endpoint artefacts, logs, scripts, documents and potentially malicious files.Strong understanding of incident response lifecycle, including preparation, identification, containment, eradication, recovery and lessons learned.Strong understanding of enterprise network architecture, TCP/IP, firewalls, proxies, VPNs, DNS, email security and cloud environments.Understanding of security protocols, encryption technologies and common authentication mechanisms.Experience supporting customer‑facing technical discussions, including investigation reviews, tuning recommendations and posture improvement activities.Ability to manage multiple complex incidents and make effective decisions under pressure.Strong written and verbal communication skills, with the ability to explain technical findings to both technical and non‑technical stakeholders.Experience with Microsoft Sentinel, Microsoft Defender, Splunk, QRadar, CrowdStrike, SentinelOne, Palo Alto, Suricata, Zeek, Snort or similar technologies is highly beneficial.Experience with cloud security monitoring across Microsoft Azure, AWS or Google Cloud is beneficial.Experience with threat hunting, detection engineering or purple team activities is beneficial.Ability to produce clear technical documentation, investigation reports and customer‑facing recommendations.Certifications and QualificationsSecurity industry certifications such as GCIH, GCFA, GCIA, GNFA, GCTI, GSEC, CISSP, CySA+, SC‑200, AZ‑500 or equivalent are highly beneficial.Minimum 2–3 years of experience in a SOC, MDR, incident response, CSIRT or cyber security operations role.Proven experience handling complex security incidents and supporting advanced investigations.Working knowledge of SIEM, EDR, SOAR, NIDS, DLP and threat intelligence platforms.Experience working with threat hunting methodologies and security detection frameworks.Experience supporting customers or internal stakeholders with security optimisation, detection tuning and cyber security posture improvement.#J-18808-Ljbffr

Arbeta mot den svenska marknaden – lev livet i SpanienTänk dig att starta varje morgon i solen, gå till ett centralt kontor fyllt av energi och kollegor som vill åt samma håll som du. Ett jobb där du får utvecklas, tjäna bra och samtidigt bygga en karriär inom försäljning — på riktigt.Hos Nordvera Solutions arbetar du motden svenska marknaden från vårt kontor i Fuengirola, och du får all utbildning och coachning du behöver för att lyckas. Du kommer in i ett team där vi hejar fram varandra, skrattar mycket och alltid har tydliga mål att jobba mot.Föreställ dig aLägga upp din karriärresa precis där du vill ha denJobba med en tydlig modell där du faktiskt ser resultat av ditt arbeteFå dagligt stöd, coaching och utvecklingHa 25 semesterdagar, friskvård och trygg grundlön + provisionArbeta i solen — och bo nära strandenFå hjälp att hitta boende om du flyttar hitÄr du en person som gillar att påverka din egen framtid?Gillar du tanken på en arbetsplats där energi, humor och driv är lika viktigt som själva jobbet?Då kommer du att trivas här.Sök nu och bygg din karriär i Spanien.#J-18808-Ljbffr

VIEWNEXT, parte del Grupo IBM, está buscando profesionales apasionados por la seguridad ofensiva en Salamanca, España. ¿Todo listo para enviar su solicitud? Por favor, lea la descripción al menos una vez antes de hacer clic en "Solicitar". Este puesto implica trabajar en ejercicios de Red Teaming y pentesting, utilizando marcos como MITRE ATT&CK y OWASP para simular amenazas reales y analizar vulnerabilidades. Los beneficios incluyen formación continua, apoyo para certificaciones tecnológicas, un plan de carrera y horarios flexibles. Ofrecemos un ambiente de trabajo innovador y inclusivo, ideal para quienes buscan crecer en su carrera profesional. xcskxlj #J-18808-Ljbffr Hay opciones de teletrabajo/trabajo desde casa disponibles para este puesto.

ContractCompany DescriptionT‑Systems is part of the Deutsche Telekom Group, with around 30.000 employees worldwide. We create technology with purpose to generate a positive impact on society. We are looking for curious talent, eager to learn, take on challenges, and contribute ideas that transform our customers’ experience.We trust people: we offer autonomy, continuous support, and a collaborative environment where you can grow without limits. We are one global team, guided by respect, integrity, and a passion for doing better every day.Job DescriptionLocation: Madrid or Bacelona (only applications from these locations will be considered).Are you passionate about helping clients transform through cloud technologies? AtT-Systems, we are looking for aSenior Presales Cloud Architectto join our growing team of digital transformation experts.In this client-facing, strategic role, you will act as thetechnical lead in the presales phase, helping shape cloud strategies, build trusted customer relationships, designing tailored solutions, and supporting the sales team in delivering compelling value propositions to prospective customers.Key ResponsibilitiesAct as the primary technical advisor during the sales process for cloud-based services and solutions (IaaS, PaaS, SaaS).Analyze customer requirements and translate business needs into technical solutions aligned with cloud capabilities.Prepare and deliver high-impact presentationsand technical proposals.Collaborate with internal teams (sales, architecture, operations, and product) to define optimal solution offerings.Leadin RFP/RFI responses, solution design, and cost estimation.Maintain deep knowledge of market trends, industry standards, and evolving cloud technologies.Develop strong client relationships by building trust and demonstrating cloud solution expertise.Participate in events, workshops, and customer meetings to showcase our capabilities.Why Join Us?Be part of an innovative team driving digital transformation.Access to continuous learning and certification programs.Work with diverse clients across industries and regions.Competitive salary, performance bonuses, and benefits package.QualificationsQualifications (MUST):Minimum of5+ yearsin apresales or solution consultingrole, ideally within a cloud or IT services environment.Proven track record of designing and leadingtechnical cloud projectson platforms such as AWS, Microsoft Azure, or Google Cloud Platform.In-depth knowledge of cloud platforms ( AWS, Azure, GCP ); hands-on experience with hybrid/multi-cloud environments is a plus.Demonstrable ability to build architectures and provide prescriptive guidance across complex IT landscapes including network, storage, operating systems, virtualization, databases (RDBMS & NoSQL), Hadoop, and security.Working knowledge of cloud migration methodologies and processes, along with reference architecture development for web-based applications.Familiarity withDevOpstools, containerization (e.G., Docker, Kubernetes), and automation frameworks.Exposure to tools such as Cloudamize for cloud migration assessments is advantageous.Relevantcloud certifications, such as AWS Certified Solutions Architect, Azure Solutions Architect Expert, or similar credentials, are highly desirable.Languages : advanced/native level of Spanish, high level of English.Nice to have:Excellent verbal and written communication skills, capable of facilitating meetings and engaging effectively with both technical and non-technical stakeholders.Strong problem-solving abilities and a consultative mindset, with the capacity to work both independently and as part of a dynamic team.Proven ability to lead teams in a consultative role and manage project deliverables with high quality.Additional InformationWhatdoweofferyou?T-Social: socialinitiatives(sports,community,health, ...)Hybridworkmodel(remote/on-site)FlexibleworkinghoursGrowth&developmentWeeklylanguageclasses(English & German)InternationalMentoringSessions&ExperienceDaysFlexiblecompensationplan (healthinsurance,mealvouchers,childcare,transport)SocialfundWellbeing& time off26+workingdaysofvacationperyearAnd many more advantages of being part of T-Systems!If you are looking for a new challenge, do not hesitate to send us your CV! Please send CV in English. Join our team!T-Systems Iberia will only process the CVs of candidates who meet the requirements specified for each offer.By clicking the link above or any third-party link within this posting, you are leaving this site and going to a third-party website where the third-party website's terms and privacy policy apply#J-18808-Ljbffr

Celonis is the global leader in Process Intelligence and the pioneer of Process Mining technology. As one of the world’s fastest-growing enterprise Saa S companies, we are changemakers pushing the boundaries of what’s possible. We invest heavily in advanced AI capabilities—specifically our Process Intelligence Graph—to turn data insights into immediate business action. We believe there is a massive opportunity to unlock global productivity and sustainability by placing intelligence at the core of every business process. Join our mission to make processes work for people, companies, and the planet. About The Role Celonis is seeking a Manager of Global Cyber Defense to lead our Security Operations (Sec Ops) and Incident Response teams. In this global leadership position, you will be the primary architect and custodian of the strategies, tools, and policies that safeguard Celonis’s enterprise data, corporate infrastructure, and cloud-native environments. Your team will ensure the security and integrity of our global execution management platform, protecting the critical business processes of our customers. By designing and deploying advanced technical controls, you will ensure that emerging cyber threats are automatically detected, isolated, and neutralized. As a core security leader, you will collaborate across Engineering, Product, and IT to build a resilient, security-first culture, integrating deep threat insights directly into our continuous software development lifecycle. You should be ready to lead by example, bring deep technical mastery of modern security ecosystems, and blend proprietary and open-source tooling into a seamless, next-generation global defense strategy. This position reports VP of Information Security. What You Will Do In This Role Lead and Scale: Recruit, mentor, and develop a high‑performing global team of cyber defense engineers and security analysts. Define Standards: Author and maintain enterprise‑wide cyber defense frameworks, incident response playbooks, and operational blueprints. Drive SOC Evolution: Own the strategic architecture, tooling, and day‑to‑day operations of our modern Security Operations Center (SOC). Threat Mitigation: Oversee the rapid identification, containment, and remediation of advanced cyber attacks and vulnerabilities. Tooling Innovation: Evaluate, select, and integrate cutting‑edge security technologies, focusing on automation (SOAR), telemetry, and SIEM optimization. Proactive Defense: Champion threat modeling, breach simulations, and tabletop exercises across Engineering, Cloud Infrastructure, and IT. Cultivate Enablement: Partner with internal learning teams to institutionalize security playbooks and upskill teams across the organization. Metrics and Accountability: Establish, track, and report on high‑impact cyber defense KPIs to provide visibility to executive leadership. Agile Execution: Manage the Cyber Defense roadmap within an agile engineering framework to ensure predictable, high‑velocity security delivery. What We Are Looking For Threat Combat Experience: A proven track record of successfully mitigating advanced persistent threats (APTs) and sophisticated cyber adversaries. SOC Architecture Mastery: In-depth, foundational knowledge of SOC design, including advanced logging strategies, network segmentation, cloud telemetry, and honeypots. Cloud & Saa S Expertise: Strong technical understanding of securing enterprise Saa S platforms and cloud environments (AWS, Azure, or GCP). Automation-First Mindset: Demonstrated ability to build, automate, and orchestrate effective incident response workflows to minimize blast radiuses. Framework Familiarity: Strong working knowledge of security risk management and threat frameworks (e.G., NIST CSF, MITRE ATT&CK). Academic Foundation: A strong academic background with a Bachelor’s degree in Computer Science, STEM, or a compelling narrative of equivalent real‑world technical experience. Leadership and Drive: Proven capability to manage technical teams, manage high‑pressure situations, and consistently exceed operational goals. Executive Communication: Exceptional English communication skills, with the confidence to deliver transparent, data‑driven security metrics to the CISO and executive board. Preferred Qualifications Hybrid Security Background: Hands‑on experience spanning both offensive (red teaming/penetration testing) and defensive (blue teaming) disciplines. Data-Driven Security: Familiarity with leveraging data analytics, SIEM engineering, or process‑oriented workflows to optimize security operations. Industry Certifications: Relevant elite certifications such as CISSP, CISM, or GIAC. Enterprise Endpoint Security: Experience managing and securing corporate endpoint fleets at a global scale. What Celonis Can Offer You Pioneer Innovation: Work with the global leader in Process Mining and the Process Intelligence Graph to shape the future of AI‑driven business operations. Ownership from Day 1: Every full‑time Celonaut is an owner, receiving Restricted Stock Units (RSUs) and merit‑based refresh grants. Unrivaled Family Support: Benefit from our inclusive parental leave policy—24 weeks of fully paid leave for primary carers and 12 weeks for supporting carers, available from your first day of employment. Work‑Life Integration: Enjoy Unlimited PTO (in applicable regions) and generous PTO globally, as well as a flexible hybrid work model that balances remote focus with vibrant office collaboration. Continuous Growth: Elevate your skills through our 70‑20‑10 learning framework, mentorship programs, and access to a dedicated learning platform. Holistic Well‑being: Prioritize your health with subsidized Wellhub memberships, mental health counseling, and dedicated “Wellness Weeks” that prioritize work/life balance. Drive Sustainability: Participate in annual Impact Days, where you receive paid time off to volunteer for community and environmental causes with your local office, or virtually. Global Inclusion & Belonging: Find community through our Inclusion Think Tank and participate in our annual Inclusion Days, ensuring every voice is heard and valued. Value‑Driven Impact: Join a mission‑led organization where our core values—Live for Customer Value, The Best Team Wins, We Own It, and Earth Is Our Future—drive every decision. #J-18808-Ljbffr

We are expanding our Global Corporate Information Security team and are looking for a Security Monitoring & Incident Response Product Owner (m/f/d) to establish and scale our global security operations. Asegúrese de leer la descripción completa a continuación y, si confía en que cumple todos los requisitos, envíe su solicitud de inmediato. Creating passion: your responsibilitiesSOC Operations & Service Management • Own the end-to-end operations of the global SOC, ensuring effective collaboration between internal analysts and the MSSP (L1/L2)., • Monitor, manage, and optimize processes, including alert triage, escalation flows, and incident response handovers., • Ensure all services related to Security Monitoring and Incident Response perform against defined SLAs and KPIs, and drive actions when service quality deviates., • Implement the SOC "product" roadmap related to Security Monitoring & Incident Response, including implementation of the strategic vision, backlog, and prioritization of improvements.Vendor & MSSP Management, • Act as the primary liaison between the organization and the MSSP to deliver SOC services., • Conduct recurring service governance meetings (operational and tactical)., • Track and validate MSSP deliverables, including detection operations, case handling quality, and runbook adherence., • Coordinate improvements to MSSP workflows, communication channels, and response processes.Incident Response Alignment, • Align with the internal incident response team to ensure seamless escalation., • Support the refinement of incident response procedures, playbooks, and communication guidelines., • Ensure major incidents are appropriately handled, documented, and followed by lessons learned sessions., • Guide the continuous evolution of incident management maturity and readiness.Governance, Compliance & Documentation, • Maintain alignment with internal security frameworks, standards, and regulatory requirements., • Produce regular reports on operational performance, risks, coverage, and incident trends., • Ensure processes, runbooks, service definitions, and operating procedures are consistently documented and kept up to date., • Support audits, assessments, and readiness activities related to detection and response.Contributing your strengths: your qualifications, • Bachelor's/Master's in Cybersecurity, Computer Science, or related field., • 7+ years of operational experience in SOC environments (L2/L3, threat hunting, incident response, service delivery, operational delivery)., • Exposure to global organizations and distributed security functions., • Knowledge of modern security frameworks (MITRE ATT&CK, NIST CSF, ISO 27001)., • Experience implementing KPIs and running continual service improvement processes., • Relevant certifications (e.g., CISSP, GCIH, CCSP, GCIA, GMON) are a plus, but not mandatory., • Fluency in English (written and spoken)., • Willingness and ability to travel to Liebherr sites worldwide up to 10% of the time.Our commitment to you: your benefits, • Competitive compensation and benefits package that recognizes your expertise., • Flexible and hybrid working model., • Creative freedom and responsibility to shape processes and solutions in our global transformation., • Continuous learning and development with tailored training and certification opportunities., • Meal vouchers., • Life and accident insurance., • Option to include a premium private health insurance package as part of the flexible remuneration., • A safe, stable and international workplace within a trusted family business that invests in people. xcskxlj Location Liebherr IT Shared Service Centre Ibérica, S.L. Parque Norte. Alamo building Serrano Galvache, 56 28033 Madrid Spain (ES) #J-18808-Ljbffr

At ING Hubs Spain we are looking for a Senior DevOps EngineerYour role and work environment:We are looking for a talented and enthusiastic SeniorDevOpsEngineer to join our Team at ING Hubs SpainYou will join ING’s Global Threat Management (GTM) team, a central capability within the CISO domain that focuses on intelligence driven, proactive defence.The team works across geographies and disciplines to anticipate emerging threats, investigate advanced attack scenarios, and continuously improve ING’s detection and defensive posture. Collaboration, communication, ownership, and impact are core to how we work.Your key responsibilities:As a DevOps Engineer in Global Threat Management, you will help structure and deploy scalable infrastructure to support GTM workflows, while building automation and integrations that strengthen detection, prioritization, and decision‑making.Design and implement automations to detect, prioritize, and investigate cyber threats.Transform large‑scale security telemetry and threat intelligence data into actionable insights for GTM and executive decision‑making.Automate and accelerate threat analysis using standard and custom‑built tooling.Deploy, operate, and optimize cloud‑based infrastructure (preferred Azure and GCP), ensuring scalability, reliability, cost efficiency, and governance.Enforce and continuously improve security and DevOps best practices within the team.Perform maintenance, monitoring, and resilience testing of owned infrastructure to ensure high availability and operational continuity.Design and integrate intelligence‑driven security solutions across data sources, security tools, and services.Design, develop, and maintain Python-based automation, scripts, integrations, and operational tooling.Design and communicate solutions using clear documentation, diagrams, and visualizations.Troubleshoot and resolve deployment, installation and configuration issues across cloud infrastructure and security tooling, ensuring minimal disruption to operations.Clearly communicate insights and recommendations to both technical and non‑technical stakeholders.Leverage AI and automation technologies to streamline workflows, enrich threat intelligence processes, and improve operational effectiveness.What are we looking for?Do you want to know if this job is made for you? These are some of the qualities that we value the most for this role. And if the shoe fits… don’t hesitate to apply!Ability to translate complex cyber‑threat challenges into robust, scalable, and data‑driven solutions.Strong Python development skills for automation, integrations, and tooling.Experience deploying and supporting cloud-based solutions, preferably in Azure and GCP.Experience with Infrastructure as Code (preferably Terraform) and DevOps practices.Solid understanding of cloud platforms, networking, system administration, infrastructure architecture, and the operating model of CISO organizations in mid‑ to large‑scale enterprises.Design end‑to‑end solutions, translating complex system landscapes into clear, implementable designs.Strong hands-on experience diagnosing and resolving deployment, installation, and integration issues across cloud environments, infrastructure components, and custom-built tools.Experience with containerization technologies such as Docker and Kubernetes.Collaborate proactively with threat intelligence and cybersecurity experts, bringing curiosity, strong problem‑solving skills, and clear communication to drive impact.Experience building and maintaining CI/CD pipelines and working with version control systems such as Git.A degree in Computer Science or related discipline, or equivalent hands-on experience in cloud engineering, DevOps, system administration, or cybersecurity.Relevant Cloud, DevOps, or Cybersecurity certifications are an advantage.English level - B2BONUS:Experience with threat intelligence platforms, security tools, and cyber threat intelligence workflows.Experience with Databricks, data engineering, or large-scale data-processing platforms.Experience building AI/GenAI solutions using LLMs and automation frameworks.Knowledge of cybersecurity concepts, threat actors, TTPs, and frameworks such as MITRE ATT&CK.Experience with security automation and orchestration platforms.Relevant certifications in Threat Intelligence, Security, AI, or Data Engineering.Experience working within a CISO, Security Operations, or Threat Management organization.What do we offer?The time you spend at work, the challenges you face or the lessons you get are very important, but… What about your personal life? At ING we want your work to fulfill you in every way, and that is why we take care of even the smallest details.Check out what is waiting for you!Be flexible my friend.Our model is all about flexibility and accountability. Keeping both our customers and our colleagues needs in mind, you determine together which days you work at home and which you come to ING MAD to offer your best self. Do your thing.Restaurant card.So that thinking about what to have for lunch doesn’t take up your time or your cravings.Our house will be your home.In our offices you can find electric mobility solutions, doctor, hairdresser, gym, The Good Service (to help you with your errands) and much more!Health insurance.For you and all your family (spouse/partner and children).Life insurance.We help you protect what matters most to you.Flexible remuneration.In addition, you will enjoy our flexible remuneration model, through a more tax-advantaged way, you will be able to access other services such as nursery, transport card, training aids…Transport allowance.It doesn't matter where you live, we’ll help you get to the office.Pension plan.You can benefit from our pension plan after 1 month with us!Discover ING Hubs SpainWe’re building something exciting—and we want you to be part of it.ING is launching the new member of ING Hubs in Spain, an integral part of ING in charge of designing and delivering important technological and operational solutions to make banking frictionless for our customers. ING Hubs play a key role in our ‘Growing the difference’ strategy to become the best European bank. This will be our sixth global hub, joining a network of over 13,000 professionals in the Philippines, Poland, Romania, Slovakia, Türkiye and Spain.What makes us different?We have a tech-first mindset: We’re not just a bank—we’re a tech company that happens to do banking. Our new hub will be a center of excellence for scalable, fast, and secure technology.We have global impact: You’ll be working on solutions that serve more than 34 million of customers in over 38 countries.We are agile: ING was the first bank to adopt agile at scale. We continue to evolve with a collaborative, cross-functional way of working.Sustainability at the heart of what we do: We have a role to play in defining new ways of doing business that align economic growth with positive environmental and social impact.At ING, we believe in diversity, inclusion, and belonging. We’re proud of our international teams and are committed to creating an environment where everyone can thrive. We value authenticity, collaboration, and continuous learning.We’re looking for curious minds, bold builders, and passionate problem-solvers. If you’re looking for a place to find new ways to drive efficiency and provide superior customer value, where your ideas matter, and where you can grow with purpose—we’re looking forward to meeting you.#LI-DNI

Location: Madrid, M, ESJoin a team of cybersecurity professionals and help Swiss Re to fulfil its mission in making the world more resilient. As the Senior Incident Coordinator, you'll play a crucial role in our cyber defense strategy, coordinating response activities, facilitating preparedness exercises, and driving important through thorough post‑incident analysis and documentation.What's more, you'll be working in a hybrid setup, perfectly balancing work from home and the office premises.About the teamThe Cyber Incident Management team serves as the frontliner defense against cybersecurity threats across Swiss Re. We provide critical incident leadership and coordination, overseeing the triage, investigation, and containment of security events to minimize business impact. Our team excels in stakeholders' communication and management during incidents, conducts post‑incident reviews to drive continuous improvement, and develops preparedness and resilience strategies. We also establish and monitor KPIs and metrics to enhance our security posture and response capabilities.We're looking for a detail‑oriented professional who excels at coordinating security activities and facilitating effective incident response. Join our team where your organizational expertise will strengthen our security posture through thoughtful planning, clear communication, and continuous improvement initiatives.In your role, you will…- Exercise Planning & Facilitation: Design, organize, and facilitate regular tabletop exercises and simulations to test and enhance the organization's incident response capabilities- Response Coordination: Support incident response efforts by coordinating resources, scheduling meetings, and ensuring proper communication channels are maintained- Documentation Management: Create and maintain comprehensive incident response documentation, playbooks, and procedures- Post‑Incident Reporting: Compile detailed incident reports capturing timeline, actions taken, and impact assessments- Metrics & Analysis: Collect, analyse, and report on key incident metrics to identify trends and improvement opportunities- Lessons Learned: Facilitate post‑incident review sessions and document findings to enhance future response efforts- Stakeholder Communication: Coordinate communications between technical teams and business stakeholders during and after incidents- Training Coordination: Organise and track participation in incident response training programs- Process Improvement: Identify and implement refinements to incident management processes based on lessons learned- Tool Administration: Support the maintenance and optimisation of incident management platforms and documentation repositoriesYour qualificationsNobody is perfect and meets 100 % of our requirements. If you, however, meet some of the criteria below and are curious about the world of cyber defence, we'll be more than happy to meet you!What we need from you- Bachelor's degree in Business Administration, Information Technology, Cybersecurity, or equivalent practical experience- Experience in incident management, business continuity, or security operations- Demonstrated experience planning and facilitating tabletop exercises or simulations- Strong documentation skills with experience creating reports, playbooks, or procedural documentation- Excellent organisational and coordination abilities with attention to detail- Strong communication skills in EnglishNice‑to‑have- Knowledge of cybersecurity frameworks (NIST, ISO 27001, MITRE ATT&CK)- Experience with incident management or ticketing systems- Background in metrics collection, analysis, and reporting- Project or programme management experience or certifications- Facilitation or training certification/experience- Experience in process improvement methodologies- Knowledge of security operations and incident response proceduresFor Spain, the base salary range for this position is between EUR 62,000 and EUR 94,000 (for a full‑time role). The specific salary offered considers:- The requirements, scope, complexity and responsibilities of the role- The applicant's own profile including education/qualifications, expertise, specialisation, skills and experienceIn addition to your base salary, Swiss Re offers an attractive performance‑based variable compensation component, designed to recognise your achievements. Further you will enjoy a variety of global and location‑specific benefits.Eligibility may vary depending on the terms of Swiss Re policies and your employment contract.Our company has a hybrid work model where the expectation is that you will be in the office at least three days per week.#LI‑HybridAbout Swiss ReSwiss Re is one of the world's leading providers of reinsurance, insurance and other forms of insurance‑based risk transfer, working to make the world more resilient. We anticipate and manage a wide variety of risks, from natural catastrophes and climate change to cybercrime. Combining experience with creative thinking and cutting‑edge expertise, we create new opportunities and solutions for our clients. This is possible thanks to the collaboration of more than 14,000 employees across the world.Our success depends on our ability to build an inclusive culture encouraging fresh perspectives and innovative thinking. We embrace a workplace where everyone has equal opportunities to thrive and develop professionally regardless of their age, gender, race, ethnicity, gender identity and/or expression, sexual orientation, physical or mental ability, skillset, thought or other characteristics. In our inclusive and flexible environment everyone can bring their authentic selves to work and their passion for sustainability.If you are an experienced professional returning to the workforce after a career break, we encourage you to apply for open positions that match your skills and experience.Make an impactStart your career journey with Swiss Re.#J-18808-Ljbffr

SIX drives the transformation of financial markets. ¿Está considerando presentar su candidatura para este trabajo? Compruebe todos los detalles en esta descripción del puesto y luego haga clic en "Solicitar". What sets us apart drives us ahead: between local roots and global relevance, we are a unique blend of tradition and future, of foundation and growth. We value bright minds and inspire them to grow with their ideas. Come and shape the future of finance with us. Madrid | Working from home up to 40% | Reference 8095 We are seeking a motivated Cyber Threat Intelligence (CTI) Analyst with a strong technical mindset to support the intelligence collection, automation and maturation of our intelligence capabilities. The focus of this role in Cyber Threat Intelligence is to enhance cyber threat intelligence capabilities through automation, AI-driven analysis, and continuous improvement of telemetry and intelligence workflows. You will work closely with senior team members and partners to enhance the company's intelligence capabilities. This position is available only in Spain due to the restrictions of some of the intelligence sources. What You Will Do • Join an international Cyber Threat Intelligence team operating 24x7, including on‑call availability when required., • Monitor, collect, and analyze intelligence from restricted communities, internal telemetry, and monitoring systems to identify actionable insights and support investigations, incident response, and threat detection activities., • Own and continuously improve weekly intelligence telemetry reporting, dashboards, and visualization capabilities to provide accurate, consistent, and actionable insights to stakeholders., • Contribute to the automation and orchestration of CTI workflows, including data collection, enrichment, analysis, reporting, and the integration of AI-driven capabilities for correlation, prioritization, and analytical output generation., • Work with Threat Intelligence Platforms and security tooling, including OpenCTI, Elastic stack, SIEM, Threat Intelligence Platforms, and malware sandboxes, while applying frameworks such as MITRE ATT&CK to contextualize threats and improve detection effectiveness., • Collaborate with SOC, Detection & Hunting, Vulnerability Management, Corporate Security, and other cross‑functional teams to operationalize intelligence insights, produce threat reports and executive summaries, and support the continuous improvement and scalability of CTI processes. What You Bring • 4 years of experience in Cyber Threat Intelligence, incident response, SOC, or related technical cybersecurity roles., • Strong technical profile with hands‑on experience in automation, scripting, or orchestration., • Familiarity with AI applications in cybersecurity, particularly for automation, data processing, analytics, and intelligence workflow improvement., • Experience with Threat Intelligence Platforms and security monitoring tools, including OpenCTI, Elastic stack, SIEM platforms, or similar technologies., • Solid understanding of the intelligence lifecycle, telemetry analysis, tactical intelligence collection, and frameworks such as MITRE ATT&CK for threat detection and analysis. Diversity is important to us. Therefore, we are looking to receiving applications regardless of any personal background. What We Offer Flexible Work Models We trust our employees and offer a work environment that is well‑balanced, productive and fosters success. Personal Development You will benefit from a culture of continuous learning and feedback. Your personal growth is supported through an extensive learning offering. xcskxlj Agile Working Methods Whether through scrum or design thinking, we solve exciting tasks together in teams. #J-18808-Ljbffr

Incident Response Analyst (AI Training) ¡Inscríbase sin demora! Se espera un gran volumen de solicitantes para el puesto que se detalla a continuación, no espere para enviar su CV. About The Role Your experience triaging alerts and investigating incidents is exactly what's needed to make AI smarter about cybersecurity. At Alignerr, we partner with leading AI research labs to build and evaluate AI systems — and we need seasoned security professionals to ensure those systems reflect how real incident response teams operate. Job Details • Organization: Alignerr, • Type: Hourly Contract, • Location: Remote, • Commitment: 10–40 hours/week What You'll Do • Analyze realistic security events, alerts, and incident cases to evaluate AI-generated responses, • Assess impact, root cause, and appropriate remediation steps for simulated incidents, • Review and validate detection rules, alerting pipelines, and investigative playbooks, • Identify gaps where AI-generated analysis diverges from real-world security operations, • Provide structured, expert feedback that directly improves AI accuracy and reliability, • Work independently and asynchronously on your own schedule Who You Are • 2+ years of experience in SOC, incident response, or security operations, • Hands‑on experience with SIEM platforms, alert queues, and investigation tooling, • Strong ability to triage and prioritize — separating meaningful threats from noise, • Clear written communication skills for structured feedback, • Comfortable working independently on task-based assignments Nice to Have • Experience with threat hunting, digital forensics, or purple team exercises, • Familiarity with frameworks like MITRE ATT&CK, NIST, or similar xcskxlj, • Background in cloud security, endpoint detection, or network forensics, • Prior involvement in playbook development or SOC process improvement Why Join Us • Work on frontier AI systems alongside world‑class research teams, • Fully remote and flexible — work when and where it suits you, • Freelance perks: autonomy, variety, and global collaboration, • Apply your real‑world security expertise to a high‑impact, emerging field, • Potential for ongoing work and contract extension #J-18808-Ljbffr

pul liAtención y seguimiento del estado del paciente /li liAsistencia social al paciente y apoyo emocional /li liFavorecer la autonomía del paciente /li liVelar por la seguridad de los residentes /li /ul h3Requisitos /h3 ul liCertificado de profesionalidad o FP Grado Medio ATT socio sanitaria /li liBuena presencia /li liDisponibilidad total de lunes a domingo /li liValorable experiencia en el sector /li /ul h3Se Ofrece /h3 ul liTrabajo estable en prestigioso geriátrico del sector privado /li liInteresante retribución económica /li liCalidad de trabajo /li /ul /p #J-18808-Ljbffr

We are expanding our Global Corporate Information Security team and are looking for a Security Monitoring & Incident Response Product Owner (m/f/d) to establish and scale our global security operations.Creating passion: your responsibilitiesSOC Operations & Service Management- Own the end-to-end operations of the global SOC, ensuring effective collaboration between internal analysts and the MSSP (L1/L2).- Monitor, manage, and optimize processes, including alert triage, escalation flows, and incident response handovers.- Ensure all services related to Security Monitoring and Incident Response perform against defined SLAs and KPIs, and drive actions when service quality deviates.- Implement the SOC "product" roadmap related to Security Monitoring & Incident Response, including implementation of the strategic vision, backlog, and prioritization of improvements.Vendor & MSSP Management- Act as the primary liaison between the organization and the MSSP to deliver SOC services.- Conduct recurring service governance meetings (operational and tactical).- Track and validate MSSP deliverables, including detection operations, case handling quality, and runbook adherence.- Coordinate improvements to MSSP workflows, communication channels, and response processes.Incident Response Alignment- Align with the internal incident response team to ensure seamless escalation.- Support the refinement of incident response procedures, playbooks, and communication guidelines.- Ensure major incidents are appropriately handled, documented, and followed by lessons learned sessions.- Guide the continuous evolution of incident management maturity and readiness.Governance, Compliance & Documentation- Maintain alignment with internal security frameworks, standards, and regulatory requirements.- Produce regular reports on operational performance, risks, coverage, and incident trends.- Ensure processes, runbooks, service definitions, and operating procedures are consistently documented and kept up to date.- Support audits, assessments, and readiness activities related to detection and response.Contributing your strengths: your qualifications- Bachelor's/Master's in Cybersecurity, Computer Science, or related field.- 7+ years of operational experience in SOC environments (L2/L3, threat hunting, incident response, service delivery, operational delivery).- Exposure to global organizations and distributed security functions.- Knowledge of modern security frameworks (MITRE ATT&CK, NIST CSF, ISO 27001).- Experience implementing KPIs and running continual service improvement processes.- Relevant certifications (e.G., CISSP, GCIH, CCSP, GCIA, GMON) are a plus, but not mandatory.- Fluency in English (written and spoken).- Willingness and ability to travel to Liebherr sites worldwide up to 10% of the time.Our commitment to you: your benefits- Competitive compensation and benefits package that recognizes your expertise.- Flexible and hybrid working model.- Creative freedom and responsibility to shape processes and solutions in our global transformation.- Continuous learning and development with tailored training and certification opportunities.- Meal vouchers.- Life and accident insurance.- Option to include a premium private health insurance package as part of the flexible remuneration.- A safe, stable and international workplace within a trusted family business that invests in people.LocationLiebherr IT Shared Service Centre Ibérica, S.L.Parque Norte. Alamo building Serrano Galvache, 5628033 MadridSpain (ES)#J-18808-Ljbffr

Especialista en Ciberseguridad Por favor, verifique que tiene el nivel de experiencia y las cualificaciones adecuadas leyendo la descripción completa de esta oportunidad a continuación. En Metrica España, estamos en la búsqueda de un Especialista en Ciberseguridad con un mínimo de 1 año de experiencia para unirse a nuestro dinámico equipo. Buscamos a un profesional proactivo, con una gran actitud y un fuerte deseo de aprender y crecer en el campo de la ciberseguridad. Requisitos • Experiencia: Mínimo 1 año de experiencia profesional en ciberseguridad o un campo relacionado., • Conocimientos Técnicos:, • Python: Nivel de análisis, automatización y modelado., • SQL: Capacidad para consulta y manipulación de datos., • Machine Learning: Conocimientos aplicados a clasificación, detección de anomalías y clustering., • Visualización de Datos: Manejo de herramientas como Power BI, Tableau o similares., • SIEM: Conceptos básicos (logs, eventos, correlación de alertas)., • Threat Intelligence: Noción de IOCs, TTPs y marco MITRE ATT&CK., • IA Generativa/LLMs: Experiencia o familiaridad con herramientas de IA. ¿Qué Ofrecemos? • Oportunidad de unirte a una empresa en crecimiento con proyectos desafiantes., • Entorno de trabajo innovador y colaborativo., • Programas de formación continua y desarrollo profesional., • Paquete salarial competitivo acorde a la experiencia y el mercado. xcskxlj, • Oportunidades de crecimiento interno y desarrollo de carrera. #J-18808-Ljbffr

I am looking to speak with Cyber Threat Hunting Managers, looking for a new opportunity in Madrid. Por favor, verifique que tiene el nivel de experiencia y las cualificaciones adecuadas leyendo la descripción completa de esta oportunidad a continuación. Working closely with an external security provider and a small internal team, you will take ownership of detection effectiveness, hunting outcomes, and the continuous improvement of security monitoring capabilities across a global enterprise environment. Responsibilities • Lead the threat detection and threat hunting function, providing technical leadership, strategic direction, and operational oversight, • Manage and coordinate internal resources and external security partners to deliver effective and consistent detection and hunting outcomes, • Assess detection coverage and develop, optimise, and maintain high-quality detection rules to improve visibility and reduce false positives, • Drive advanced, risk-based threat hunting activities to identify sophisticated and previously undetected threats, • Integrate findings from purple team exercises into detection engineering and hunting programmes, • Collaborate with Incident Response, Threat Intelligence, Vulnerability Management, and wider security teams to strengthen security operations and reduce risk, • Continuously improve detection capabilities, helping to reduce attacker dwell time and enhance threat visibility across the organisation Requirements • Degree in Computer Science, Cyber Security, or a related discipline, or equivalent experience, • 5+ years of experience in security monitoring, threat detection, threat hunting, or security operations, • Hands-on experience with SIEM, XDR, EDR, cloud security, identity protection, and network security technologiesStrong understanding of threat actors, attack methodologies, and frameworks such as MITRE ATT&CK, Cyber Kill Chain, and the Diamond Model xcskxlj • Experience working within large, global organisations and hybrid technology environments, • Excellent analytical, problem-solving, communication, and stakeholder management skills, • Demonstrated ability to drive continuous improvement and deliver measurable security outcomes, • Proactive, inquisitive, and solutions-focused approach with a strong sense of ownership and accountability This is an excellent opportunity to play a key role in developing and maturing an enterprise threat detection and hunting capability within a complex international environment. #J-18808-Ljbffr

Bjurfors Real Estate växer och vi söker nu drivna franchisetagare som vill vara med och utveckla vår verksamhet i Spanien. Bjurfors Real Estate är vår verksamhet på den spanska bostadsmarknaden. Vi är strategiskt placerade på orter som lockar svenska och internationella bostadsköpare. Den spanska marknaden har utvecklats positivt de senaste åren och därför gör vi nu en strategiskt satsning att både bredda och fördjupa vår närvaro i landet. Vi söker dig som vill vara en del av vår tillväxtresa. Kanske är du redan verksam på den spanska bostadsmarknaden. Kanske driver du eget, arbetar som mäklare eller har byggt framgångsrika affärer inom försäljning. Oavsett bakgrund delar du vår övertygelse om att långsiktiga relationer, hög service och starkt lokalt entreprenörskap är grunden för framgång. Nu söker vi personer som vill vara med och vidareutveckla befintliga verksamheter eller etablera nya Bjurforskontor på några av Spaniens mest attraktiva orter.Det här erbjuder viSom franchisetagare hos Bjurfors Real Estate får du möjlighet att antingen gå in som delägare i en befintlig verksamhet eller etablera ett nytt Bjurforskontor på den spanska marknaden. Du driver och utvecklar verksamheten lokalt med stöd från Bjurfors centrala organisation. För vissa innebär det att själv vara aktiv i affärerna och bygga marknadsposition från dag ett. För andra handlar det om att rekrytera, leda och utveckla ett team av mäklare och specialister. Gemensamt är att du får en nyckelroll i utvecklingen av både ditt eget kontor och Bjurfors Real Estate som affärsområde.Vi söker dig somhar erfarenhet av försäljning, mäkleri eller affärsutvecklinghar ett starkt eget driv och trivs med att skapa resultatär skicklig på att bygga nätverk och långsiktiga relationerser möjligheter där andra ser hindervill vara operativ och engagerad i verksamhetenhar god förståelse för företagande och affärsmannaskapbehärskar svenska och engelska väl, kunskaper i spanska är meriterande och kunskaper i andra europeiska språk är ett plusVi tror att du antingen redan är verksam på den spanska bostadsmarknaden eller har god kunskap om den.När du bygger verksamhet under Bjurfors varumärke gör du det tillsammans med ett av Sveriges starkaste och mest välrenommerade fastighetsmäklarföretag.Du Får Tillgång Tillett starkt premiumvarumärkeetablerade arbetssätt och processermarknadsföringsstödCRM- och affärssystemcoaching och löpande stöd från organisationenett nätverk av erfarna kollegor i Sverige och SpanienSamtidigt behåller du det som lockar många företagsbyggare mest – möjligheten att påverka, fatta beslut och bygga verksamheten på din lokala marknad.Så ansöker duDu skickar in ditt cv och ditt personliga brev genom att klicka på Skicka ansökan. Urval sker löpande.Affärsområdesansvariga Carolina Klaive svarar gärna på frågor om tjänsten.#J-18808-Ljbffr

OverviewAs a Senior Security Engineer on GitLab’s Security Incident Response Team (SIRT), you will play a critical role in defending GitLab.Com and the broader GitLab environment against evolving security threats.You will lead high‑impact incidents and investigations, drive continuous improvements in defense, detection and response capabilities, and help scale security operations through automation and intelligent workflows.Operating within a 24/7 global environment, you will own incidents end‑to‑end - from detection and triage through containment, eradication, and recovery - while partnering cross‑functionally to strengthen GitLab’s overall security posture.A key aspect of this role is leveraging automation and AI‑driven approaches to improve detection fidelity, accelerate investigations, and reduce response times.This role is ideal for someone who thrives in high‑tempo environments, brings strong DFIR expertise, and is equally passionate about operational excellence and building scalable detection and response systems and workflows.Responsibilities- Lead and coordinate end‑to‑end incident response for high‑severity security events within a 24/7 global on‑call model, operating during EMEA business hours.- Prepare clear executive communications that keep stakeholders informed during incidents.- Investigate complex security incidents across cloud environments, applying strong Digital Forensics and Incident Response (DFIR) methodologies.- Partner with Signals Engineering to design and implement detection capabilities, including SIEM use cases, alerting strategies, and telemetry pipelines.- Build and enhance automation and AI‑assisted workflows to improve triage, investigation speed, and response consistency.- Partner with Threat Intelligence to contextualize threats and improve detection coverage.- Conduct root cause analysis (RCA) and lead post‑incident reviews to drive continuous improvement and risk reduction.- Develop and maintain runbooks, playbooks, and operational documentation.- Collaborate cross‑functionally during incidents and lead proactive initiatives such as tabletop exercises.- Mentor other engineers and help elevate the team’s overall incident response maturity.Qualifications- Strong experience in security incident response and investigations in cloud‑first environments.- Experience using or administering Git/GitLab in a security or engineering context.- Hands‑on experience with SIEM, EDR, and/or detection engineering.- Experience with cloud platforms (AWS, GCP).- Familiarity with threat intelligence and adversary tactics (e.G., MITRE ATT&CK).- Experience building or working with automation (e.G., Python, scripting, SOAR platforms).- Interest or experience in applying AI/ML or data‑driven techniques to detection, triage, or response workflows.- Strong analytical and problem‑solving skills, with the ability to operate effectively during high‑severity incidents.- Excellent written communication skills with a passion for clear, actionable documentation.- Growth mindset with a proactive approach to identifying and mitigating security risks.About the TeamThe Security Incident Response Team (SIRT) is a globally distributed team of engineers spread across AMER, APAC and EMEA. The team leads security investigations, incident response support, and response resolution, as well as cyber‑threat analysis, detection, and response engineering.Despite being a global team, we work cross‑regionally, using automation and processes to facilitate collaboration when resolving incidents and handling general project work.Benefits- Flexible Paid Time Off- Team Member Resource Groups- Equity Compensation- Employee Stock Purchase Plan- Growth and Development Fund- Parental LeaveEqual OpportunityGitLab is proud to be an equal opportunity workplace and an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex, national origin, age, citizenship, marital status, mental or physical disability, genetic information, discharge status from the military, or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. The company complies with applicable EEO laws and encourages individuals from all backgrounds to apply. If you have a disability or special need requiring accommodation, please let us know during the recruiting process.#J-18808-Ljbffr

Acronis is a world leader in cyber protection, delivering natively integrated solutions that monitor, control, and protect the data that businesses and lives depend on. Driven by our passion to protect every workload, we’ve built the industry’s only all-in-one cyber protection platform. We are looking for a Cybersecurity Researcher to join our mission of protecting the digital world.What You'll DoParticipate in design and implementation of detection capabilities of Acronis Security and EDR products.Analyse clean and malicious content: executables, scripts, various document formats, websites, memory dumps, vulnerabilities.Develop, support, and fine-tune threat detection logic and signatures.Conduct online research of the latest cyber threats and ensure those can be detected by existing in-house technologies.Contribute to sharing research results in blog posts and articles.Monitor automated detection pipelines to ensure high detection accuracy.Support scan engine and product development by participating in joint research projects.What You BringUnderstanding of modern cyber-attack techniques, common types of malwares, OS internals (primarily Windows, macOS and Linux is a plus), and network protocols.5+ years' experience in malware analysis (executables, scripts, document formats, exploits): static (e.G. IDA Pro, Ghidra), dynamic (e.G. x64dbg, OllyDBG), and behavioral (e.G. Cuckoo, CAPE).3+ years' experience with proactive Threat Hunting (using multiple EDR/XDR solutions).Network traffic analysis (Wireshark).Extensive experience working with threat intelligence tools and services: VirusTotal, Shodan, Censys, MISP (or similar feed collections), analysis with MITRE ATT&CK framework.3+ years' experience working for a well-established security vendor.Software development experience: Python, REST APIs, SQL, Regular expressions. C/C++ would be considered a plus.Flexibility and proven ability to learn new things and develop skills fast. Analysis, critical thinking, and problem-solving skills. Unbeatable curiosity.Good reading and writing skills in English.Please submit your resume and application in English.Acronis is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, marital status, national origin, physical or mental disability, medical condition, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, gender identity or expression, or any other characteristic protected by applicable laws, regulations and ordinances.#J-18808-Ljbffr

The Threat-Led Detection Engineer Lead will drive WTW’s detection engineering capability within the Global Information and Cyber Security Defence (ICSD) function, owning the strategy, quality, and continuous improvement of how WTW detects threats across its global estate in AI era. This role blends deep technical detection expertise with team leadership, driving a threat-led, intelligence-informed approach to detection that maps directly to real adversary behaviour. The Lead will set the standard for how detections are designed, written, tested, documented, and maintained – championing Detection-as-Code, measurable detection coverage, and a strong engineering culture. Working closely with SOC, Threat Hunting, Cyber Threat Intelligence (CTI), Incident Response, and Vulnerability Management teams, the Lead will ensure WTW’s detection library evolves ahead of the threat landscape. The individual will work as part of a global, multi-disciplined security community with strong support across the business, helping to foster a security-aware culture while ensuring WTW remains a great place to work. With WTW’s large global footprint, this role offers a fascinating range of work, and occasional global travel may be required. The Threat-Led Detection Engineer Lead will grow WTW’s detection engineering function within the Global Cyber Security Defence team. Responsibilities of this role will include: • Drive WTW’s detection engineering strategy, setting the vision, standards, and roadmap for threat-led detection across cloud, endpoint, identity, network, and SaaS environments., • Lead, mentor, and grow a team of detection engineers, establishing engineering best practices, peer review, and a culture of high-quality, well-documented detections., • Drive a threat-led detection approach, prioritising detection development against adversary tradecraft using the MITRE ATT&CK framework, the Cyber Kill Chain, and the Diamond Model of Intrusion Analysis., • Translate Cyber Threat Intelligence and threat-hunting findings into robust, high-fidelity detections with low false-positive rates., • Establish, own, and maintain the central detection library, ensuring detections are version-controlled, tested, documented, and mapped to MITRE ATT&CK coverage., • Champion Detection-as-Code, implementing Git-based workflows, CI/CD pipelines, automated testing, and peer review for all detection content., • Define and track detection coverage, efficacy, and quality metrics (e.g. ATT&CK coverage, detection fidelity, time-to-detect) and report on detection posture to senior leadership., • Lead detection validation and tuning through adversary emulation, purple-team exercises, and breach-and-attack-simulation tooling (e.g. Atomic Red Team, Caldera)., • Support the integration of AI and automation into detection workflows – including AI-assisted detection authoring, enrichment, and triage – and lead detection efforts for AI/GenAI-specific threats., • Partner with SOC, Threat Hunting, CTI, Incident Response, and Vulnerability Management to close detection gaps identified during incidents and hunts., • Govern the full detection lifecycle: intake, development, testing, deployment, monitoring, tuning, retirement, and continuous improvement., • Evaluate and onboard new log sources, telemetry, and tooling to expand detection coverage across the global estate., • Set standards for detection documentation, runbooks, and response guidance so every detection is clear and actionable for the SOC. We are looking for a candidate for the Threat-Led Detection Engineer Lead role who has the following: Must-have • 5+ years in cyber security with detection engineering experience, including a track record of leading, mentoring, or coordinating technical teams., • Strong cyber security mindset with a deep, thorough understanding of adversary behaviour, attacker tradecraft, and the modern threat landscape., • Expert knowledge of the MITRE ATT&CK framework, the Cyber Kill Chain, and the Diamond Model, with proven ability to map and drive detection coverage against them., • Proven expertise writing, testing, and maintaining detection rules across SIEM and EDR/XDR platforms (e.g. Microsoft Sentinel, Splunk, Elastic, CrowdStrike, Microsoft Defender XDR), using query languages such as KQL, SPL, EQL, or Sigma., • Demonstrated ability to develop high-fidelity detections swiftly in response to emerging threats, intelligence, and live incidents., • Experience owning and maturing a detection library, including detection lifecycle governance and ATT&CK coverage mapping., • Hands‑on experience with Detection-as-Code: Git, version control, CI/CD pipelines, and automated testing of detection content., • Understanding of AI/ML in security operations and awareness of AI‑specific threats (prompt injection, model/data poisoning, sensitive‑data exposure via GenAI), with familiarity with the OWASP LLM Top 10 and MITRE ATLAS., • Exceptional written and verbal communication skills, able to convey complex technical concepts to both engineers and non‑technical stakeholders, including executives. Good to have • Strong threat‑hunting mindset and hands‑on hunting experience to proactively surface detection gaps and feed detection development., • Scripting and automation skills (e.g. Python, PowerShell) for tooling, enrichment, and SOAR integration., • Familiarity with detection data pipelines (log routing, parsing, normalisation, data lakes) and how they affect detection quality. We’re committed to equal employment opportunity and provide application, interview and workplace adjustments and accommodations to all applicants. If you foresee any barriers, from the application process through to joining WTW, please email candidate.helpdesk@willistowerswatson.com. • Job Identification 202604211, • Job Category Information and Cyber Security, • Posting Date 06/29/2026, 02:14 PM #J-18808-Ljbffr

This job is with Allianz Commercial, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. Consulte la descripción del puesto a continuación. Si confía en que tiene las habilidades y la experiencia adecuadas, envíe su solicitud hoy mismo. Threat Intelligence Engineer • Madrid, ES You know adversaries by how they operate – and you know how to turn that knowledge into action. As a Threat Intelligence Engineer – Intrusion Analysis & Detection, you will help transform threat actor behavior into concrete defensive value: stronger detections, smarter hunting hypotheses, and intelligence that helps defenders move faster and more effectively. Responsibilities Analyze real‑world attacks, post‑incident findings, and emerging adversary tradecraft to identify relevant threat activity and convert retrospective analysis into forward‑looking intelligence. Translate threat intelligence into actionable detection content by producing detection rules and analytical guidance for deployment by detection engineering teams across platform‑native environments. Track threat actors and map tactics, techniques, and procedures to MITRE ATT&CK, identifying coverage gaps and generating meaningful hunting leads based on relevance to the Allianz environment. Build and maintain automation for repetitive intelligence workflows using SOAR platforms, Power Automate, N8N, Python, scripting, and API integrations to improve speed, quality, and consistency. Apply AI in daily analytical workflows to categorize incoming intelligence, enrich indicators, correlate reporting with tracked topics, and accelerate decision‑making. Communicate findings clearly through dashboards, written intelligence notes, and operational briefings so that detection engineers, incident responders, IT administrators, and leadership can act confidently. Support the full IOC lifecycle and contribute during active security incidents by providing timely analytical input, validation, and triage support as part of on‑call rotations. Qualifications Hands‑on experience in intrusion analysis, including the investigation of real‑world attack patterns, adversary behavior, and post‑incident evidence. Proven ability to turn intelligence into action through detection engineering, including authoring, tuning, or validating detection rules in production environments. Strong knowledge of MITRE ATT&CK, especially at procedure level, and a solid understanding of the telemetry required to detect adversary activity effectively. Practical coding and automation skills, ideally in Python, scripting, and API‑driven workflows, with a builder mindset focused on improving efficiency through automation. Good understanding of the Threat Intelligence Lifecycle and structured analytical techniques, including models such as the Diamond Model and Kill Chain. Experience working with or exposure to tools such as Google SecOps, CrowdStrike Falcon / Intelligence, Google Threat Intelligence / VirusTotal, Recorded Future, MISP, or similar platforms. A proactive, outcome‑driven mindset with the ability to stay composed under pressure, communicate clearly during incidents, and collaborate effectively across technical teams. Benefits Hybrid work model with up to 25 days per year working from abroad. Compensation package includes a company bonus scheme, pension, employee shares program, and multiple employee discounts. Career development and digital learning programs, international career mobility, and a culture that fosters innovation, delivery, and empowerment. Flexible working, health and well‑being offers including healthcare and parental leave benefits. Commitment to Integrity, Fairness & Inclusion: Allianz Technology is proud to be an equal‑opportunity employer dedicated to fostering an inclusive work environment for everyone. xcskxlj We welcome applications regardless of race, ethnicity, cultural background, age, gender, nationality, religion, social class, disability, or sexual orientation, or any other characteristics protected under applicable local laws and regulations. #J-18808-Ljbffr

Ultimate.Ai is looking for a Threat Intelligence Engineer in Madrid to enhance its cybersecurity posture. This role includes analyzing attacks, creating detection content, and applying AI to improve defenses. Ideal candidates will have hands-on experience with intrusion analysis and a strong grasp of MITRE ATT&CK.The position promotes a hybrid work model, offering flexibility while dealing with global cybersecurity challenges. Join a dynamic team aiming to defend against evolving threats effectively.#J-18808-Ljbffr

If you dream of being a spy, but you don’t like Martinis. Your place is with us!We are expanding our teams in the defense sector.WHAT CHALLENGE WILL YOU BE TAKING ON?In our team you will participate in penetration testing projects and technical assessments on web and mobile applications, network infrastructures, Wi‑Fi networks, cloud environments (AWS, Azure, GCP), and emerging components such as artificial intelligence models. In addition, Red Team exercises will be conducted, oriented to simulate real attacks in a controlled manner, as well as Purple Team exercises, working in coordination with defensive teams to strengthen threat detection, response and mitigation.Activities will include:- Running penetration tests on web applications, mobile, network infrastructure, Wi‑Fi networks, cloud environments, artificial intelligence models, etc.- Participate in Red Team exercises, simulating real attacks, and Purple Team exercises, collaborating with defensive teams to improve threat detection and response.- Identify and report vulnerabilities, proposing technical recommendations for effective mitigation.- Collaborate with IT and cybersecurity teams in the implementation of security best practicesWHAT DO WE NEED IN OUR TEAM?For this position, we are looking for cybersecurity or similar graduates with experience in penetration testing in: network infrastructure, web and mobile applications, cloud environments (AWS, Azure, GCP), Active Directory, wireless networks. In addition to experience in Red Team exercises, including planning, execution of simulated attacks, evasion techniques, persistence and exploitation in controlled or real environments.Scripting skills (Python, Bash, PowerShell) for automation of offensive tasks.Understanding of methodologies such as PTES, MITRE ATT&CK, OWASP will also be an asset.WHAT DO WE OFFER?- Hybrid working model and 8 weeks per year of teleworking outside your usual geographical area.- Flexible start and finish times, and intensive working hours Fridays and summer.- Personalized career plan development, training and language learning support.- National and international mobility. Do you come from another country? We can offer you a relocation package.- Competitive compensation with ongoing reviews, flexible compensation and discount on brands.- Wellbeing program: Health, dental and accident insurance; free fruit and coffee, physical, mental and financial health training, and much more!We promote equal opportunities in recruitment, and we are committed to inclusion and diversity.What are you waiting for? Join us#J-18808-Ljbffr

Desde SOTEC Consulting – Grupo Astek buscamos unAnalista SOCcon al menos2 años de experienciaen operaciones de ciberseguridad, especializado en herramientas EDR, para incorporarse a un equipo de seguridad gestionada.El candidato será responsable de ladetección, análisis y respuesta a incidentes de seguridad, trabajando con soluciones como CrowdStrike Falcon y/o SentinelOne.Monitorización y análisis de alertas de seguridad en tiempo realTriage y clasificación de incidentes (priorización)Investigación de amenazas en endpoints mediante EDRRespuesta a incidentes (aislamiento de equipos, contención, remediación)Análisis de logs y correlación de eventosEscalado de incidentes a niveles superiores (L2/L3)Documentación de incidentes y elaboración de informesMejora continua de reglas de detecciónMínimo2 años en SOC o ciberseguridad operativaExperiencia práctica con EDR (CrowdStrike y/o SentinelOne)Conocimientos técnicosAnálisis de eventos en sistemas Windows/LinuxConocimiento de MITRE ATT&CKInvestigación de incidentes de seguridadManejo de SIEM (deseable)Español: fluidoValorableExperiencia en entornos MSSPCertificaciones (Security+, CySA+, etc.)Experiencia en threat hunting¿Te apasiona la tecnología en la nube y quieres formar parte de una empresa en constante evolución digital?SOTEC es una compañía comprometida con la igualdad de oportunidades, sin tener en cuenta raza, sexo, religión, edad, orientación sexual, estado civil, discapacidad, nacionalidad o identidad de género. Nos sentimos orgullosos de esforzarnos cada día en evitar los sesgos de cualquier tipo.#J-18808-Ljbffr

Administrador/a SIEM Threat Hunting Descubra más sobre las tareas diarias, las responsabilidades generales y la experiencia requerida para esta oportunidad desplazándose hacia abajo ahora. Descripción Administrador/a SIEM Threat Hunting ¿Te apasiona la ciberseguridad ofensiva desde el lado defensivo? En GP DIGTAL buscamos un perfil especializado en SIEM y Threat Hunting para diseñar nuevas capacidades de detección y mejorar la protección de entornos tecnológicos complejos e internacionales para trabajar en importante multinacional de ciberseguridad- Trabajarás con múltiples tecnologías y fabricantes, colaborando con equipos especializados en un entorno de mejora continua, innovación y alto impacto. Condiciones Contrato: Indefinido Ubicación: Boadilla del Monte (Madrid) Modalidad: Híbrida (2 días presenciales en cliente y resto en remoto) Qué harás Diseñar, desarrollar e implementar nuevos casos de uso de detección en entornos SIEM agnósticos al fabricante. Realizar actividades de Threat Hunting basadas en el framework MITRE ATT CK. Integrar nuevas fuentes de información y optimizar su explotación. Normalizar campos del Data Lake de forma independiente de la tecnología origen. Mantener y ampliar la cobertura de logs procedentes de tecnologías como Windows, Linux, WAF, Firewalls, IAM, EDR/XDR y otras plataformas de seguridad. Colaborar con equipos SOC y Threat Hunting para identificar brechas de detección y proponer mejoras. Participar en la mejora continua de reglas de correlación, priorización y análisis de alertas. Mantener reuniones con clientes internacionales y elaborar recomendaciones técnicas en inglés. xohynlm Definir hojas de ruta para mejorar las capacidades de detección y monitorización. ciberseguridad,siem,threat hunting,mitre att&ck,data lake,windows,linux,waf,firewalls,iam

SIX Group Services Ltd. Las cualificaciones, habilidades y toda la experiencia relevante necesaria para este puesto se pueden encontrar en la descripción completa a continuación. in Madrid is seeking an experienced SOC professional to advance threat detection, incident response, and threat hunting across endpoints, identity, cloud, and email environments. You will tune detections, build playbooks, and mentor junior analysts while collaborating with cross‑functional teams to strengthen SIX's security posture. Flexible remote work up to 40% is offered. xcskxlj The role emphasizes hands‑on experience with SIEM/EDR/SOAR platforms, MITRE ATT&CK, and automation #J-18808-Ljbffr Hay opciones de teletrabajo/trabajo desde casa disponibles para este puesto.

About Us Aumente sus posibilidades de llegar a la fase de entrevista leyendo la descripción completa del puesto y enviando su solicitud sin demora. Integrity360 is the largest independent cyber security provider in Europe, with a growing international presence spanning the UK, Ireland, mainland Europe, Africa and the Caribbean. With over 700 employees across 12 locations and six Security Operations Centres (SOCs) – including Dublin, Sofia, Stockholm, Madrid, Rome and Cape Town – we support more than 2,500 clients across a wide range of industries. Over 80% of our team are technical experts, focused on helping clients proactively identify, protect, detect and respond to threats in an ever‑evolving cyber landscape. Our security‑first approach positions cyber resilience as a business enabler, empowering organisations to operate with confidence. At Integrity360, people come first. We invest heavily in learning, development and progression, fostering a dynamic culture where innovation, collaboration and continuous growth are at the heart of what we do. If you’re ready to take your cyber security career to the next level, we’d love to hear from you. Job Role / Responsibilities In this role you will act as a Level 3 escalation point within the MDR/SOC function, providing advanced technical support to Level 2 analysts during complex or high‑severity investigations. You will bring deep operational knowledge across modern security technologies, including SIEM, EDR, Network Intrusion Detection Systems, SOAR, DLP and related security monitoring platforms. The Principal SOC Analyst will support the investigation, containment and remediation of advanced threats, ensuring incidents are analysed in the correct business and technical context. You will contribute to the continuous improvement of the MDR service by supporting the definition of security monitoring strategies, improving detection logic, tuning security technologies, reviewing investigation processes and advising customers on technical optimisation opportunities. A strong understanding of malware behaviour, adversary tactics, techniques and procedures, and emerging threats will be critical to success. Primary Duties and Responsibilities • Act as the Level 3 escalation point for advanced, complex or high‑impact security investigations., • Support Level 2 analysts during complex investigations, providing technical guidance, validation and direction., • Perform in‑depth analysis of security events, alerts, logs, endpoint telemetry, network traffic and other relevant data sources., • Lead advanced incident investigations, including scoping, containment, eradication and remediation recommendations., • Analyse malicious activity, suspicious files, attacker behaviour and adversary TTPs., • Support customers from a technical perspective in the optimisation, tuning and improvement of their security monitoring capabilities., • Review and improve SIEM, EDR, NIDS, SOAR and other security tool configurations to reduce false positives and improve detection quality., • Contribute to the development and refinement of detection use cases, correlation rules, alerting logic and investigation playbooks., • Support the definition of customer security monitoring strategies based on risk profile, threat landscape and available telemetry., • Provide technical recommendations to strengthen customer cyber security posture and improve resilience against current and emerging threats., • Conduct threat hunting and proactive analysis based on indicators, behaviours, intelligence and attack patterns., • Document investigation findings, evidence, timelines, containment actions and remediation recommendations in a clear and structured manner., • Prepare and deliver technical reports to customers, partners and internal stakeholders., • Monitor trusted sources for emerging threats, vulnerabilities and adversary activity relevant to customer environments., • Contribute to the continuous improvement of SOC processes, procedures, documentation and knowledge base material., • Support mentoring and technical development of Level 1 and Level 2 analysts where required. Desired Skills • Strong hands‑on experience in Security Operations Centre or MDR environments., • Deep operational knowledge of SIEM, EDR, Network Intrusion Detection Systems, SOAR, DLP and related security monitoring technologies., • Strong experience with security event triage, correlation, investigation and escalation., • Ability to analyse endpoint, network, identity, cloud and application telemetry in support of complex investigations., • Experience with SIEM query languages and detection logic, such as KQL, SPL, Sigma or equivalent., • Experience tuning security controls and detection content to improve alert fidelity and reduce false positives., • Strong understanding of attacker tactics, techniques and procedures, including MITRE ATT&CK., • Ability to perform host‑based and network‑based threat analysis., • Experience analysing packet captures, endpoint artefacts, logs, scripts, documents and potentially malicious files., • Strong understanding of incident response lifecycle, including preparation, identification, containment, eradication, recovery and lessons learned., • Strong understanding of enterprise network architecture, TCP/IP, firewalls, proxies, VPNs, DNS, email security and cloud environments., • Understanding of security protocols, encryption technologies and common authentication mechanisms., • Experience supporting customer‑facing technical discussions, including investigation reviews, tuning recommendations and posture improvement activities., • Ability to manage multiple complex incidents and make effective decisions under pressure., • Strong written and verbal communication skills, with the ability to explain technical findings to both technical and non‑technical stakeholders., • Experience with Microsoft Sentinel, Microsoft Defender, Splunk, QRadar, CrowdStrike, SentinelOne, Palo Alto, Suricata, Zeek, Snort or similar technologies is highly beneficial., • Experience with cloud security monitoring across Microsoft Azure, AWS or Google Cloud is beneficial., • Experience with threat hunting, detection engineering or purple team activities is beneficial., • Ability to produce clear technical documentation, investigation reports and customer‑facing recommendations. Certifications and Qualifications • Security industry certifications such as GCIH, GCFA, GCIA, GNFA, GCTI, GSEC, CISSP, CySA+, SC‑200, AZ‑500 or equivalent are highly beneficial., • Minimum 2–3 years of experience in a SOC, MDR, incident response, CSIRT or cyber security operations role., • Proven experience handling complex security incidents and supporting advanced investigations., • Working knowledge of SIEM, EDR, SOAR, NIDS, DLP and threat intelligence platforms., • Experience working with threat hunting methodologies and security detection frameworks. xcskxlj, • Experience supporting customers or internal stakeholders with security optimisation, detection tuning and cyber security posture improvement. #J-18808-Ljbffr

We are seeking a motivated Cyber Threat Intelligence (CTI) Analyst with a strong technical mindset to support the intelligence collection, automation and maturation of our intelligence capabilities. La siguiente información tiene como objetivo proporcionar a los posibles candidatos una mejor comprensión de los requisitos para este puesto. The focus of this role in Cyber Threat Intelligence is to enhance cyber threat intelligence capabilities through automation, AI-driven analysis, and continuous improvement of telemetry and intelligence workflows. You will work closely with senior team members and partners to enhance the company's intelligence capabilities. This position is available only in Spain due to the restrictions of some of the intelligence sources. What You Will Do • Join an international Cyber Threat Intelligence team operating 24x7, including on-call availability when required., • Monitor, collect, and analyze intelligence from restricted communities, internal telemetry, and monitoring systems to identify actionable insights and support investigations, incident response, and threat detection activities., • Own and continuously improve weekly intelligence telemetry reporting, dashboards, and visualization capabilities to provide accurate, consistent, and actionable insights to stakeholders., • Contribute to the automation and orchestration of CTI workflows, including data collection, enrichment, analysis, reporting, and the integration of AI-driven capabilities for correlation, prioritization, and analytical output generation., • Work with Threat Intelligence Platforms and security tooling, including OpenCTI, Elastic stack, SIEM, Threat Intelligence Platforms, and malware sandboxes, while applying frameworks such as MITRE ATT&CK to contextualize threats and improve detection effectiveness., • Collaborate with SOC, Detection & Hunting, Vulnerability Management, Corporate Security, and other cross-functional teams to operationalize intelligence insights, produce threat reports and executive summaries, and support the continuous improvement and scalability of CTI processes. What You Bring • 4 years of experience in Cyber Threat Intelligence, incident response, SOC, or related technical cybersecurity roles., • Strong technical profile with hands-on experience in automation, scripting, or orchestration, • Familiarity with AI applications in cybersecurity, particularly for automation, data processing, analytics, and intelligence workflow improvement. xcskxlj, • Experience with Threat Intelligence Platforms and security monitoring tools, including OpenCTI, Elastic stack, SIEM platforms, or similar technologies., • Solid understanding of the intelligence lifecycle, telemetry analysis, tactical intelligence collection, and frameworks such as MITRE ATT&CK for threat detection and analysis #J-18808-Ljbffr

Associate SOC AnalystDepartment: Cyber Services and CapabilitiesEmployment Type: Full TimeLocation: ESP MadridDescriptionAs an Associate Security Analyst, you will be the first line of defence in the Event Monitoring Centre, responsible for the initial triage of security alerts, basic vulnerability analysis and data loss prevention. Your primary role will be to monitor, analyse, and assess incoming alerts, identifying potential security incidents based on established criteria. You will elevate confirmed or suspicious threats to the R2 analysts, senior analysts, or the shift lead for further investigation and response. This role requires strong analytical skills, attention to detail, and the ability to follow escalation protocols to ensure swift and effective incident management. Ideal candidates will have a foundational understanding of cybersecurity principles, experience with SIEM tools, and a commitment to continuous learning in a fast‑paced security environment.Due to being the initial contact for triaging alerts, your expertise will directly support analytic development by suggesting customer tuning rules to ensure the efficient running of the SOC. This role requires strong analytical skills, technical proficiency, and a commitment to continuous learning in a dynamic security environment.Key ResponsibilitiesThreat Detection and Monitoring- Monitor the ITSM platform for new alerts, schemas and tickets- Monitor the SIEM Logs, IDS Logs and Managed Intelligence sources- Identify potential threats, vulnerabilities, and indicators of compromise- Initiate escalation procedures to counteract potential threats and vulnerabilitiesIncident Remediation and Documentation- Escalate to R2 analysts, Team Lead or senior analyst should further clarification or four eyes be required- Provide incident remediation and prevention recommendations to customers using established procedures and analyst experience- Document and adhere to security monitoring processes- Suggest process and procedure improvement based on working requirements to streamline processesCustomer Service and Escalation- Exceed customer expectations by always delivering exceptional customer service- Be the initial point of contact for alerts and schemas triaged- Contribute to the creation and maintenance of security documentation, including incident response playbooks, standard operating procedures, and knowledge base articlesReporting and Continuous Improvement- Compile and review service‑focused reports for effective communication- Contribute to the creation and maintenance of security documentation, including incident response playbooks, standard operating procedures, and knowledge base articles- Be susceptible to mentoring from senior analystsThreat Analysis and Collaboration- Contribute practical insights to the analysis of common security incidents- Maintain working relationships with the Analytic Development and Security Engineering teams- Collaborate with shift partners to provide a high quality of serviceGeneral Duties- Perform additional assigned duties as required- Flexibility to quickly learn and adapt to new security tools, technologies, and processes- Process Data Schema Review data loss prevention alerts- Strong analytical and problem‑solving skills- Good communication skills, both written and verbal- Ability to work collaboratively as part of a team- Keep up to date with latest emerging threats and APT groups- Ability to be mentored by senior analystsSkills, Knowledge & ExpertiseMinimum RequirementsNetwork, Cloud and OS Knowledge:- Understanding of common network protocols and tools- Understanding of Linux operating systems- Understanding of Content Delivery Networks- Understanding of the CIA triad and how it interacts with security- Understanding of cloud technologies – AWS, GCP, OCICustomer interaction:- Experience with documenting both high level and technical customer facing information- Confidence providing critical/sensitive information accurately- Contacting key stakeholders during major incidentsIncident Analysis and Response:- Awareness of the MITRE ATT&CK framework- Pedigree in performing in-depth analysis of security alerts- Assess customer impact through investigation and work with senior analysts for resolution- Basic understanding of Personal Identifiable Information- Initiate escalation procedure for potential threats- Ability to interpret threat priority against the cyber kill chain- Provide appropriate mitigation and remediation stepsDesirable RequirementsTooling- Hands‑on experience with Security Information and Event Management (SIEM) platforms preferably Splunk- Knowledge of cloud products and log events such as AWS, OCI, GCP- Knowledge of cloud vulnerability tools such as WizDesirable Certifications- CompTIA Security+- CompTIA Network +- Security Blue Team Level One- AWS Cloud Practitioner- MAD20 Att&ck FundamentalsJob Benefits- Flexible Working: Balance your work and personal life with our flexible working options- Generous Holiday Allowance: Enjoy 25 days of holiday, plus bank holidays, with the option to buy up to 5 additional days of annual leave- Medicash & Critical Illness Scheme- Financial & Investment Benefits: Enjoy peace of mind with our Pension, Life Assurance, and Share Save Scheme- Community & Volunteering Programmes: Make a difference in your community with our volunteering opportunities- Green Car Scheme: Drive green and save money with our eco‑friendly car scheme- Cycle Scheme: Stay fit and healthy with our cycle‑to‑work scheme- Special Time Off: Take time off for the big moments in life, like getting married, entering into a civil partnership, becoming a grandparent, and welcoming home a new pet- Family Planning: Benefit from our generous maternity and paternity leave, as well as time off and support for those undergoing fertility treatments#J-18808-Ljbffr

SIX Group Services Ltd. Si sus habilidades, experiencia y cualificaciones coinciden con las de esta descripción del puesto, no demore su solicitud. is seeking a motivated Cyber Threat Intelligence Analyst to advance intelligence capabilities through automation and AI-driven analysis in Madrid, with up to 40% remote work. You will collaborate with an international CTI team and cross-functional partners to enhance threat detection and incident response. xcskxlj The role emphasizes automation, telemetry maturation, and integration of security tooling like OpenCTI, Elastic Stack, and SIEM, applying MITRE ATT&CK to contextualize #J-18808-Ljbffr Hay opciones de teletrabajo/trabajo desde casa disponibles para este puesto.

As you contemplate your future, you might be asking yourself, ” What’s the next step?’’ Start your journey with us!We’re seeking an experienced Growth Marketing Specialist to join our Marketing Liligo team in Barcelona (Hybrid) to turn anonymous web traffic into high-value, identifiable user cohorts. In this role, you will not just be writing newsletters; you will own the critical intersection of Conversion Rate Optimization (CRO), mobile push architecture, and first-party data capture. Your primary goal is to maximize the conversion rate of anonymous visitors into direct, reachable relationships (via email and device tokens), building a robust data asset that fuels our retention engines and feeds back into our performance advertising models. If you’re ready to soar, we’re ready to take you there.Why eDreams ODIGEOWe’re the world’s leading travel subscription platform.We pioneered Prime, the first and largest travel subscription programme, which has topped over 7.8 million Prime members since launching in 2017.Millions of customers every year across 44 markets – 5 brands: eDreams, GO Voyages, Opodo, Travellink, and the metasearch engine LiligoMore than 100 million searches per day on our websites – more than 6 billion AI daily predictionsOver 1,700 employees – More than 60 different nationalities from all continents – 99% permanent contractsIn this role, you will be working for Liligo, our travel search engine which instantly compares available flights, trains, bus, car rentals and hotel offers; all on the same websiteto help users find the best deals and simplify travel planning. Based in Paris, simple, objective and transparent, it serves over a million unique monthly visitors across seven languages. Unlike traditional e-commerce platforms, Liligo operates on an unauthenticated, zero-login web ecosystem. Our relationship with our users relies entirely on capturing real-time travel intent through high-value hooks like Price Alerts, Newsletters, and our Mobile App.What you will doThe Role’s Key Responsibilities and TasksAs an eDOer, you will have clear objectives, great challenges and a clear overview of how your work contributes to the global company project and its customers. As a Growth Marketing Specialist in the Marketing Liligo team you will be in charge of:1. First-Party Data Capture & Web CRO (Core Priority)Lead Generation Strategy: Own the strategic roadmap and A/B testing framework for our primary web capture points: the Price Alert widget and newsletter pop-ups.Funnel Optimization: Maximize the transition from anonymous user to subscriber across desktop and mobile web without negatively impacting our core click-out revenue.Value Exchange Innovation: Research and deploy new user experiences (e.G., Google One-Tap, alternative sign-ins, or cookie-less session saving) to frictionlessly capture intent.Privacy & Consent Rate Optimization: Take ownership of the cookie consent and privacy compliance frameworks (GDPR) to maximize opt-in rates and maintain high-quality tracking health (such as Google Consent Mode).2. Mobile App CRM & Push ArchitectureApp Activation Cycles: Partner with Product to design and optimize the onboarding sequence for new mobile app downloaders, guiding them to set their first in-app Price Alert within 48 hours.Behavioral Push Notifications: Architect, implement, and maintain real-time, event-triggered push notification loops based on in-app search abandonment and live price drops.Web-to-App Cross-Flows: Develop cross-channel funnels that use web real estate to drive high-intent users to download the app, securing permanent device tokens for cost-free retention.3. Intent-Driven Lifecycle CampaignsTriggered Email Workflows: Move beyond generic weekly newsletters to build automated, contextual email lifecycles based on real-time search signals (e.G., Search Abandonment triggers).Proxy Cross-Selling: Develop “post-click-out” email tracks based on travel routes. (e.G., If a user clicks out to buy a flight to London, trigger an automated car rental or train alternative sequence 3 days later).4. Audience Syncing & Value-Based Performance MarketingData Layer Segmentation: Dynamically segment the subscriber base by value and intent parameters (e.G., frequent long-haul flyers vs. domestic train commuters).Ad Platform Integration: Actively pipe these consented, first-party customer cohorts into Google Ads and Microsoft Ads via automated API integrations (Customer Match) to feed downstream Smart Bidding algorithms.Performance KPIsTraffic-to-Subscriber Conversion Rate (Web visitors to Price Alert/Newsletter sign-ups)Mobile App Push Opt-in & Retention RatesFirst-Party Data Match Rate in performance advertising networksOpen, Click-Through, and Monetization Rates of CRM lifecyclesWhat you need to succeedGood to haveBring your unique perspective, speak up, and offer disruptive solutions. You’ll have the opportunity to learn and grow while making a real impact on our team. Here’s what you need to succeed:Academic Background: Bachelor’s or Master’s degree in Marketing, Business, Statistics, Economics, or a related quantitative field.Experience: 3–5 years of dedicated experience in CRM, Lifecycle Marketing, or Growth Marketing, preferably within the travel, metasearch, or high-volume marketplace industries.Mobile App Expertise: Deep hands-on experience with a major Mobile Marketing Platform (MMP) / CRM automation tool (e.G., Braze, Leanplum, Airship, MoEngage, or Customer.Io). Traditional email-only experience will not suffice.Web Analytics & CRO: Advanced proficiency in web analytics tools (Google Analytics 4, Mixpanel, or Amplitude) and conversion optimization tools (Optimizely, VWO, or similar).MarTech Savvy: Strong understanding of technical marketing infrastructures, including Google Tag Manager (GTM), data layers, APIs, and webhooks.Privacy Knowledge: Strong baseline understanding of GDPR compliance, cookie policies, and modern tracking limitations (ATT, third-party cookie deprecation).Multilingual/International Context: Proficiency in English is mandatory. Fluency in French is highly valued given Liligo’s core market. Knowledge of other European languages (Spanish, Italian, German) is a major asset.Metasearch Knowledge: Understanding of the travel metasearch ecosystem.Analytical Thinker: You look at a marketing funnel through numbers, data distribution, and statistical significance, not just creative aesthetics.UX Empathy: Ability to balance aggressive lead generation strategies with a clean, un-intrusive user experience.Agile Collaborator: Comfortable working cross-functionally at the intersection of Product, Engineering, and Paid Media teams.Preferred QualificationsExperience with Applied AI Tools:Demonstrated comfort using practical AI tools such as Gemini, or other AI-powered assistants.Experimentation Mindset:Curiosity and eagerness to explore, experiment with, and integrate emerging AI-driven solutions into workflows.AI-Enhanced Problem Solving:Ability to effectively leverage AI tools to streamline processes, and enhance productivity.Adaptability and Learning Agility:Enthusiastic about continuously learning and quickly adapting to new AI features and capabilities.What’s in it for youThe best talent deserves the best benefitsAt eDO, we want you to be a part of our success story and great culture.Here’s what we offerA rewarding Compensation package! Prime Plus membership, competitive salary and benefits package, including flexible benefits, performance-based bonuses, birthday day off, discounts and partnerships, relocation support and premium equipment with role-based selection options and device ownership through our equipment lifecycle program when it reaches its refresh cycle.Continuous learning to fuel your growth and explore new horizons! Learn and grow with free Coursera access, soft skills workshops, tech training, leadership development, and more. Plus, enjoy a great onboarding program.Grow opportunities to empower your career and unleash your potential! Personalised career paths and the eVOLVE Program will help you discover, grow, and thrive. Internal mobility opportunities let you pursue horizontal career changes and promotions.Your Well-being is our priority. Embrace Freedom and Flexibility! At eDO, we value flexibility, employee care, and transparency. We offer a hybrid home-office model focused on outcomes. You’ll be able to find the right work-personal life balance that suits you best.Work hard, party hard! We believe in having fun and connecting with colleagues! Join eDO for after-work events, padel tournaments, parties, and more. Create communities based on your passions, like sports and music. Come to work as you are, with no dress code, and enjoy free fruit, coffee, and tea at our offices.Enjoy a dynamic and healthy environment! Be innovative, take risks, and share your ideas. Our diverse and open-minded teams support high performance, learning, and growth. You’ll work in an Agile mindset environment with recognition at our core.Wanna take a peek into what it’s like to work at eDO? Follow us on LinkedIn and discover more about life at eDO!If you are ready for a career opportunity with unmatched benefits, continuous learning, and a supportive work-life balance, look no further! Take your career to new destinations by applying now and help our diverse, inclusive, and passionate team shape the future of travel.Apply nowWe are an equal-opportunity employer and value diversity at our company. We do not discriminate based on race, religion, colour, national origin, gender, sexual orientation, age, marital status or disability status. Our people are the key to our success. Each one of them is unique in their own way and the respect for their uniqueness is and will always be a passion and motivation. Don’t meet every requirement? If you’re excited about this role but do not feel your experience aligns perfectly with all the requirements we strongly encourage you to apply nevertheless.#J-18808-Ljbffr

En GP DIGITAL buscamos para cliente de sector bancaTécnico Ciberseguridad + IA jr¿Quieres iniciar tu carrera en ciberseguridad dentro de un entorno tecnológico de primer nivel y con posibilidades reales de incorporación a cliente a medio plazo?Buscamos perfiles junior con ganas de aprender, desarrollar capacidades analíticas y participar en proyectos reales de ciberseguridad, datos e inteligencia aplicada a la detección de amenazas.CondicionesContrato indefinidoLugar de trabajo: Madrid * varias ubicacionesModalidad: PresencialHorario: Lunes a viernes de 09:00 a 18:00Jornada de verano: SíQué harásParticipar en proyectos de ciberseguridad con visión completa del ciclo de vida.Analizar información de seguridad mediante Python y SQL.Colaborar en iniciativas de automatización y modelado de datos.Aplicar técnicas de Machine Learning para clasificación, detección de anomalías y clustering.Trabajar con herramientas de visualización y cuadros de mando.Analizar logs, eventos y alertas de seguridad.Apoyar tareas relacionadas con Threat Intelligence y análisis de indicadores de compromiso.Utilizar herramientas de IA generativa para mejorar procesos de análisis e investigación.Colaborar con equipos multidisciplinares en la identificación y mitigación de riesgos.ImprescindibleEntre 1 y 2 años de experiencia profesional.Conocimientos de ciberseguridad.Python orientado a análisis, automatización y modelado.SQL para consulta y manipulación de datos.Conocimientos de Machine Learning aplicado a clasificación, clustering y detección de anomalías.Manejo de Power BI, Tableau o herramientas similares.Conocimientos básicos de SIEM: logs, eventos y correlación de alertas.Conocimientos de Threat Intelligence: IOCs, TTPs y MITRE ATT&CK.Experiencia o familiaridad con herramientas de IA generativa y LLMs.Inglés nivel medio.Actitud proactiva, capacidad de aprendizaje y motivación por crecer en ciberseguridad.DeseableConocimientos de QRadar, Splunk o plataformas SIEM similares.Experiencia con Spark, Kafka o entornos Big Data.Certificaciones como CompTIA Security+, SC-900 o equivalentes.Conocimientos de detección de fraude.Experiencia en análisis de grafos.Participación previa en proyectos reales de ciberseguridad.¿Qué ofrecemos?Salario competitivo en función de la experiencia.Contrato indefinido u opción de contrato mercantil.Posibilidad en el medio plazo de incorporarse a plantilla de cliente.22 días laborables de vacaciones.Plan de retribución flexible: Seguro médico, cheques guardería, cheques transporte.Formación en tecnología y soft skills.Programa de referidos: 500 € por candidatos recomendados que se incorporen con nosotros.Acerca de nosotrosSomos una consultora IT, con un equipo de más de 150 profesionales tecnológicos, en el que encontrarás proyectos estables, en los principales clientes nacionales e internacionales, desarrollando soluciones de desarrollo de aplicaciones, arquitectura de sistemas, Inteligencia Artificial, Cloud, Ciberseguridad, Big Data, etc.Amplia información en nuestra web: www.Grupodigital.Eu#J-18808-Ljbffr

Are you passionate about cybersecurity and want to lead projects related to incident detection and response? The GMV cybersecurity team is looking for you!We like to get straight to the point and tell you what you won’t find online. If you want to learn more about us, visit theGMV website.WHAT CHALLENGE WILL YOU FACE?As a SOC-CERT Project Manager, you will lead the management and evolution of security monitoring and incident response services, coordinating technical teams and projects aimed at improving detection and response capabilities against cyber threats.You will work with SOC teams, security analysts, and incident response specialists to strengthen the protection of complex technological infrastructures and improve incident management processes.On a day-to-day basis you will:- Lead projects related to the operation and evolution of SOC and CERT services.- Coordinate technical teams of SOC analysts and cybersecurity specialists.- Oversee the detection, analysis, and management of security incidents.- Track KPIs and SLAs associated with monitoring and incident response services.- Define and improve detection, analysis, and incident response procedures.- Coordinate communication with clients and stakeholders during critical incidents.- Drive continuous improvement initiatives, automation, and SOC maturity.- Prepare technical and executive reports on the status of services and projects.WHAT DO WE NEED IN OUR TEAM?We are looking for someone with experience in cybersecurity and project management, capable of coordinating technical teams and leading monitoring and incident response services in complex technological environments.For this role, it is important to have:- Experience in cybersecurity project management or SOC services.- Knowledge of SOC, CERT or CSIRT environments and security incident management.- Experience coordinating technical cybersecurity teams.- Knowledge of monitoring tools such as SIEM (Splunk, QRadar, ArcSight, Sentinel, or others).- Knowledge of detection and response technologies such as EDR/XDR.- Familiarity with security frameworks and standards such as NIST, MITRE ATT&CK, or ISO 27001.- Experience tracking KPIs, SLAs, and reporting for security services.- Degree in Computer Engineering, Telecommunications, or similar.- Cybersecurity certifications such as CISSP, CISM, CEH, GIAC or equivalent are a plus.WHAT DO WE OFFER?- Hybrid work model with 8 weeks per year of remote work outside your usual geographic area.- Flexible working hours with optional intensive Fridays and summer schedule.- Development of a personalized career plan, training, and language learning support.- National and international mobility. If you come from another country, we offer a relocation package.- Competitive compensation with continuous reviews, flexible benefits, and brand discounts.- Wellbeing program: health, dental, and accident insurance; free fruit and coffee; training in physical, mental, and financial health; and much more!In our selection processes, you will always have personal or phone contact, in person or online, with our talent acquisition team. Transfers or bank card requests are never required. If contacted through another process, please contact the responsible recruitment person.We promote equal opportunities in hiring, committed to inclusion and diversity.WHAT ARE YOU WAITING FOR? JOIN USIf you have any questions, feel free to contact Clara Sánchez Lobato, responsible for this vacancy.#J-18808-Ljbffr

Telefónica, S.A. busca un líder para dirigir el CSIRT/SOC Global, responsable de detección y respuesta 24x7, liderando el equipo de análisis de operaciones y gestionando incidentes en el perímetro corporativo.Contribuirá a la resiliencia y estandarización de procesos de seguridad a nivel global. Se requiere experiencia en gestión de equipos CSIRT/SOC, conocimiento de marcos SIM3 v2, MITRE ATT&CK y NIST, y fluidez en inglés.#J-18808-Ljbffr

Work area: Por favor, asegúrese de leer atentamente los siguientes detalles antes de enviar cualquier solicitud. Information technology / Software Country: ES Entry level: Professionals Type of contract: full time We are expanding our Global Corporate Information Security team and are looking for an IGA (Identity Governance and Administration) & PAM (Privileged Access Management) Product Owner (m/f/d) who is responsible for the delivery, prioritization, and operational execution of the Identity Governance & Administration (IGA) and Privileged Access Management (PAM) product backlogs. This role owns the day to day responsibility for translating IAM strategy, regulatory requirements, and risk drivers into consumable IGA and PAM services, while overall accountability remains with the Head of IAM Security. The Product Owner ensures close alignment across architecture, engineering, SOC, and business stakeholders to deliver scalable, compliant identity and privileged access capabilities. This role is central to the organization’s Zero Trust and regulatory compliance journey, directly reducing the highest impact cyber risks related to over privileged access and poor identity governance. You will shape how identities, entitlements, and privileged access are governed across 55,000+ users and ~2,500 applications, influencing both security posture and operational efficiency at enterprise scale. The working location for this position will be in Madrid city where we operate a hybrid model, requiring at least 40% of the working time on-site. Responsibilities • Own and manage the IGA & PAM product backlogs, priorities, and sprint objectives., • Act as day to day Product Owner for Global IGA and Global PAM initiatives., • Translate IAM strategy, regulatory obligations (NIS2, ISO 27001), and risk assessments into delivery backlog items., • Coordinate with IAM Architects to ensure architectural intent is correctly implemented by engineering teams., • Drive onboarding of applications, identities, and platforms into IGA lifecycle and PAM controls., • Ensure alignment between IGA, PAM, IAM analytics, and SOC monitoring., • Support tool selection, vendor engagement, and roadmap planning for IGA and PAM platforms., • Drive adoption, communication, and change management with business and IT stakeholders., • Provide clear reporting on delivery progress, risk reduction, and compliance KPIs to the Head of IAM. Immediate Contributions • Delivered a production ready Global IGA service covering JML automation, access governance, and access reviews., • Established a unified Global PAM service enforcing least privilege, MFA, and just in time access., • Implemented governance for non human identities (service accounts, technical IDs, automation)., • Defined and operationalized RBAC / PBAC role models across priority applications., • Achieved measurable reduction in standing privileges and audit findings related to access governance., • Bachelor’s degree in IT, Cyber Security, or equivalent experience. Cybersecurity certifications advantageous: CISSP, CISM, Microsoft Endpoint-related certifications, or comparable alternatives., • Fluency in English is a must. Skills in German and French are a plus., • Knowledge of modern security frameworks (MITRE ATT&CK, NIST CSF, ISO 27001)., • Experience implementing KPIs and running continual service improvement processes., • Strong Product Owner experience in IAM, IGA, or PAM domains., • Deep understanding of Identity Governance concepts: Joiner Mover Leaver (JML), Access reviews & certifications, Role and entitlement modelling (RBAC / PBAC)., • Strong knowledge of Privileged Access Management: Vaulting & credential rotation, Just in time access & MFA enforcement, Privileged session monitoring., • Ability to balance risk, compliance, and delivery pragmatism in complex enterprises. Preferred Qualifications • Experience with IGA and PAM tooling in large, multi-domain environments., • Exposure to non human identity governance (service accounts, automation, APIs)., • Experience operating in regulated environments (ISO 27001, NIS2)., • Strong collaboration experience with SOC and audit teams. Benefits • Competitive compensation and benefits package that recognizes your expertise., • Flexible and hybrid working model., • Creative freedom and responsibility to shape processes and solutions in our global transformation., • Continuous learning and development with tailored training and certification opportunities., • Life and accident insurance., • Option to include a premium private health insurance package as part of the flexible remuneration., • A safe, stable and international workplace within a trusted family business that invests in people. Please note that we can only accept applications submitted through our website, using the online application form. xcskxlj Please note that we do not accept applications via recruitment agencies for this position. #J-18808-Ljbffr

Senior DevOps Engineer – Global Threat ManagementWe are looking for a senior DevOps Engineer to join our Global Threat Management (GTM) team at ING Hubs Spain. The GTM team focuses on intelligence‑driven, proactive defense across geographies and disciplines.Key Responsibilities- Structure and deploy scalable infrastructure to support GTM workflows, building automation and integrations that strengthen detection, prioritization, and decision‑making.- Design and implement automations to detect, prioritize, and investigate cyber threats.- Transform large‑scale security telemetry and threat intelligence data into actionable insights for GTM and executive decision‑making.- Automate and accelerate threat analysis using standard and custom‑built tooling.- Deploy, operate, and optimize cloud‑based infrastructure (preferred Azure and GCP), ensuring scalability, reliability, cost efficiency, and governance.- Enforce and continuously improve security and DevOps best practices within the team.- Perform maintenance, monitoring, and resilience testing of owned infrastructure to ensure high availability and operational continuity.- Design and integrate intelligence‑driven security solutions across data sources, security tools, and services.- Design, develop, and maintain Python‑based automation, scripts, integrations, and operational tooling.- Design and communicate solutions using clear documentation, diagrams, and visualizations.- Troubleshoot and resolve deployment, installation and configuration issues across cloud infrastructure and security tooling, ensuring minimal disruption to operations.- Clearly communicate insights and recommendations to both technical and non‑technical stakeholders.- Leverage AI and automation technologies to streamline workflows, enrich threat intelligence processes, and improve operational effectiveness.Qualifications- Ability to translate complex cyber‑threat challenges into robust, scalable, and data‑driven solutions.- Strong Python development skills for automation, integrations, and tooling.- Experience deploying and supporting cloud‑based solutions, preferably in Azure and GCP.- Experience with Infrastructure as Code (preferably Terraform) and DevOps practices.- Solid understanding of cloud platforms, networking, system administration, infrastructure architecture, and the operating model of CISO organizations in mid‑to large‑scale enterprises.- Design end‑to‑end solutions, translating complex system landscapes into clear, implementable designs.- Strong hands‑on experience diagnosing and resolving deployment, installation, and integration issues across cloud environments, infrastructure components, and custom‑built tools.- Experience with containerization technologies such as Docker and Kubernetes.- Collaborate proactively with threat intelligence and cybersecurity experts, bringing curiosity, strong problem‑solving skills, and clear communication to drive impact.- Experience building and maintaining CI/CD pipelines and working with version control systems such as Git.- A degree in Computer Science or related discipline, or equivalent hands‑on experience in cloud engineering, DevOps, system administration, or cybersecurity.- Relevant Cloud, DevOps, or Cybersecurity certifications are an advantage.- English level – B2.- Bonus: Experience with threat intelligence platforms, security tools, and cyber threat intelligence workflows.- Bonus: Experience with Databricks, data engineering, or large‑scale data‑processing platforms.- Bonus: Experience building AI/GenAI solutions using LLMs and automation frameworks.- Knowledge of cybersecurity concepts, threat actors, TTPs, and frameworks such as MITRE ATT&CK.- Experience with security automation and orchestration platforms.- Relevant certifications in Threat Intelligence, Security, AI, or Data Engineering.- Experience working within a CISO, Security Operations, or Threat Management organization.What We Offer- Flexible work model – choose days working from home or at ING MAD.- Restaurant card and onsite facilities: electric mobility, doctor, hairdresser, gym, and more.- Health and life insurance for employees and family.- Flexible remuneration model with tax‑advantaged benefits such as nursery, transport, and training aids.- Transport allowance to help with commuting.- Pension plan available after 1 month of employment.#J-18808-Ljbffr

Work area:Information technology / SoftwareCountry:ESEntry level:ProfessionalsType of contract:full timeWe are expanding our Global Corporate Information Security team and are looking for an IGA (Identity Governance and Administration) & PAM (Privileged Access Management) Product Owner (m/f/d) who is responsible for the delivery, prioritization, and operational execution of the Identity Governance & Administration (IGA) and Privileged Access Management (PAM) product backlogs.This role owns the day to day responsibility for translating IAM strategy, regulatory requirements, and risk drivers into consumable IGA and PAM services, while overall accountability remains with the Head of IAM Security. The Product Owner ensures close alignment across architecture, engineering, SOC, and business stakeholders to deliver scalable, compliant identity and privileged access capabilities.This role is central to the organization’s Zero Trust and regulatory compliance journey, directly reducing the highest impact cyber risks related to over privileged access and poor identity governance. You will shape how identities, entitlements, and privileged access are governed across 55,000+ users and ~2,500 applications, influencing both security posture and operational efficiency at enterprise scale.The working location for this position will be in Madrid city where we operate a hybrid model, requiring at least 40% of the working time on-site.Responsibilities- Own and manage the IGA & PAM product backlogs, priorities, and sprint objectives.- Act as day to day Product Owner for Global IGA and Global PAM initiatives.- Translate IAM strategy, regulatory obligations (NIS2, ISO 27001), and risk assessments into delivery backlog items.- Coordinate with IAM Architects to ensure architectural intent is correctly implemented by engineering teams.- Drive onboarding of applications, identities, and platforms into IGA lifecycle and PAM controls.- Ensure alignment between IGA, PAM, IAM analytics, and SOC monitoring.- Support tool selection, vendor engagement, and roadmap planning for IGA and PAM platforms.- Drive adoption, communication, and change management with business and IT stakeholders.- Provide clear reporting on delivery progress, risk reduction, and compliance KPIs to the Head of IAM.Immediate Contributions- Delivered a production ready Global IGA service covering JML automation, access governance, and access reviews.- Established a unified Global PAM service enforcing least privilege, MFA, and just in time access.- Implemented governance for non human identities (service accounts, technical IDs, automation).- Defined and operationalized RBAC / PBAC role models across priority applications.- Achieved measurable reduction in standing privileges and audit findings related to access governance.- Bachelor’s degree in IT, Cyber Security, or equivalent experience. Cybersecurity certifications advantageous: CISSP, CISM, Microsoft Endpoint-related certifications, or comparable alternatives.- Fluency in English is a must. Skills in German and French are a plus.- Knowledge of modern security frameworks (MITRE ATT&CK, NIST CSF, ISO 27001).- Experience implementing KPIs and running continual service improvement processes.- Strong Product Owner experience in IAM, IGA, or PAM domains.- Deep understanding of Identity Governance concepts: Joiner Mover Leaver (JML), Access reviews & certifications, Role and entitlement modelling (RBAC / PBAC).- Strong knowledge of Privileged Access Management: Vaulting & credential rotation, Just in time access & MFA enforcement, Privileged session monitoring.- Ability to balance risk, compliance, and delivery pragmatism in complex enterprises.Preferred Qualifications- Experience with IGA and PAM tooling in large, multi-domain environments.- Exposure to non human identity governance (service accounts, automation, APIs).- Experience operating in regulated environments (ISO 27001, NIS2).- Strong collaboration experience with SOC and audit teams.Benefits- Competitive compensation and benefits package that recognizes your expertise.- Flexible and hybrid working model.- Creative freedom and responsibility to shape processes and solutions in our global transformation.- Continuous learning and development with tailored training and certification opportunities.- Life and accident insurance.- Option to include a premium private health insurance package as part of the flexible remuneration.- A safe, stable and international workplace within a trusted family business that invests in people.Please note that we can only accept applications submitted through our website, using the online application form.Please note that we do not accept applications via recruitment agencies for this position.#J-18808-Ljbffr

Allianz Commercial in Madrid is seeking a Threat Intelligence Engineer – Intrusion Analysis & Detection. You will translate real-world attacks into proactive defenses, develop detection content, and drive intelligence that helps defenders move faster. Responsibilities include analyzing attacks, producing detection rules, mapping tactics to MITRE ATT&CK, building automation with Python and SOAR, and briefing leadership to act confidently. #J-18808-Ljbffr

SOC Technical Lead – Threat Hunting & Incident Response Applyremote type: Hybridlocations: Madrid Emilio Vargastime type: Full timeposted on: Posted Todayjob requisition id: R0333099 Location: Madrid Emilio Vargas, Spain Thales people architect identity management and data protection solutions at the heart of digital security. Business and governments rely on us to bring trust to the billions of digital interactions they have with people. Our technologies and services help banks exchange funds, people cross borders, energy become smarter and much more. More than 30,000 organizations already rely on us to verify the identities of people and things, grant access to digital services, analyze vast quantities of information and encrypt data to make the connected world more secure. Thales in Spain is a leader in technological solutions applied to Defence, Aeronautics, Security, Transportation and Space and, furthermore, is a global centre for excellence in Space, Security of Critical Infrastructures and Transportation. With a turnover of €320 million and a staff of 1,200, it exports approximately 40% of its total production principally to the Middle East, North Africa and Latin America. At Thales S21sec Spain, we are looking for a SOC Technical Lead – Threat Hunting & Incident Response with 4+ years of experience in cybersecurity to join our central services team. We are seeking a highly motivated professional with strong expertise in cybersecurity infrastructures, capable of supporting and managing complex technological environments across leading security vendors. Join the Team Defending Thales’ Future At Thales, we don't just respond to threats—we anticipate them. We are looking for a visionary SOC Technical Lead who thrives at the intersection of advanced threat hunting, rapid incident response, and team mentorship. If you are passionate about building resilient security architectures and want to lead a team that is defining the next generation of SOC services, this is your opportunity to make a lasting impact.### Key Responsibilities Drive Proactive Defense: You will spearhead our threat hunting strategy, utilizing advanced telemetry and intelligence to uncover sophisticated attacker patterns before they impact our infrastructure. Lead Through Crisis: You will be the technical force behind our Incident Response, guiding the team through high-pressure situations, conducting deep-dive forensics, and refining our defense playbook to stay ahead of the adversary. Mentor and Innovate: You will elevate the talent around you. Through hands-on mentorship, technical workshops, and collaboration, you will cultivate a culture of continuous improvement and technical excellence. Architect the Future: You will partner with our cloud and product teams to integrate security into every stage of the lifecycle. By championing "Security-as-Code" and automation, you will transform how we monitor and protect our global ecosystem.### Requirements ### Experience: Minimum 2–5 years of experience in Cybersecurity, with a strong focus on Security Operations, Incident Response, or Threat Hunting. ### Demonstrated experience in a technical lead or senior-level advisory role, guiding teams through complex technical challenges. ### Proven background in managing security operations within high-scale, distributed environments (Cloud or Hybrid). ### Advanced understanding of attacker TTPs (Tactics, Techniques, and Procedures) and the MITRE ATT&CK framework. ### Deep expertise in SIEM/SOAR platforms, EDR/XDR tools, and network traffic analysis. ### Experience with Cloud security (AWS, Azure, or GCP) and understanding of shared responsibility models. ### Experience leading large-scale incident investigations and performing root-cause analysis. ### Familiarity with forensic analysis tools and procedures.### ### Why Join Thales S21sec Spain?At Thales S21sec, we pride ourselves on being innovative and flexible in how we work. We continuously evolve our policies to ensure a true work-life balance.100% Flexible Hybrid Work Work from home or come to the office whenever you choose.Up to 41 Days Off Per Year 24 vacation days + additional flexible days Option to enjoy one free Friday per month (12 per year)* Choose between summer reduced hours or extra days ofFlexible Compensation PackageOptimize your net salary with benefits such as meal vouchers, transport cards, childcare vouchers, and training support.Continuous Learning & Certifications Access to an annual training plan including technical certifications, languages, and soft skills.Knowledge Sharing Culture Participate in our voluntary Speakers Program and share your expertise.Performance-Based Bonuses Clear and transparent objectives aligned with KPI-based annual bonuses.Career Growth Your Way Choose your path: Leadership and team management Deep technical specialization with top experts### Join UsIf you are passionate about cybersecurity and want to make an impact, we are your company. We’re looking forward to meeting you!At Thales we provide CAREERS and not only jobs. With Thales employing 80,000 employees in 68 countries our mobility policy enables thousands of employees each year to develop their careers at home and abroad, in their existing areas of expertise or by branching out into new fields. Together we believe that embracing flexibility is a smarter way of working. Great journeys start here, apply now!#J-18808-Ljbffr

En Metrica España, estamos en la búsqueda de un Especialista en Ciberseguridad con un mínimo de 1 año de experiencia para unirse a nuestro dinámico equipo. Obtenga más información sobre las tareas generales relacionadas con esta oportunidad a continuación, así como sobre las habilidades requeridas. Buscamos a un profesional proactivo, con una gran actitud y un fuerte deseo de aprender y crecer en el campo de la ciberseguridad. • Experiencia: Mínimo 1 año de experiencia profesional en ciberseguridad o un campo relacionado., • Conocimientos Técnicos:, • Python: Nivel de análisis, automatización y modelado., • SQL: Capacidad para consulta y manipulación de datos., • Machine Learning: Conocimientos aplicados a clasificación, detección de anomalías y clustering., • Visualización de Datos: Manejo de herramientas como Power BI, Tableau o similares., • SIEM: Conceptos básicos (logs, eventos, correlación de alertas)., • Threat Intelligence: Noción de IOCs, TTPs y marco MITRE ATT&CK., • IA Generativa/LLMs: Experiencia o familiaridad con herramientas de IA., • Oportunidad de unirte a una empresa en crecimiento con proyectos desafiantes., • Entorno de trabajo innovador y colaborativo., • Programas de formación continua y desarrollo profesional., • Paquete salarial competitivo acorde a la experiencia y el mercado. xcskxlj, • Oportunidades de crecimiento interno y desarrollo de carrera. #J-18808-Ljbffr

Responsabilidades Desplácese hacia abajo para ver todos los requisitos del puesto y las responsabilidades que pueden esperar los candidatos seleccionados. La persona que se incorpore en esta posición asumirá la responsabilidad del CSIRT/SOC para el CSIRT Global. Tendrá a su cargo el servicio de detección y respuesta 24×7 sobre el perímetro corporativo, liderando el equipo de análisis de operaciones y asumiendo funciones de gestión de incidentes en el ámbito corporativo. Contribuirá activamente a la resiliencia de la compañía, a la estandarización de los procesos esenciales de detección y respuesta y a su adopción progresiva por parte de las unidades de negocio. Este rol es crucial para minimizar el impacto de los incidentes en el perímetro corporativo, garantizar la madurez del servicio y actuar como referencia en la estandarización de procesos para las capacidades CSIRT de las unidades de negocio. Requisitos de la posición • La persona candidata deberá contar con liderazgo, criterio operativo contrastado, capacidad de toma de decisiones bajo presión, habilidades de priorización y comunicación efectiva con audiencias técnicas y ejecutivas. Se espera que asegure la calidad y el cumplimiento dentro de su ámbito de responsabilidad, preste asesoramiento a distintos equipos, influya en la toma de decisiones y gestione riesgos operativos., • Conocimiento de marcos de referencia: SIM3 v2, MITRE ATT&CK® y Marco de Ciberseguridad del NIST., • Experiencia demostrada en gestión de equipos de respuesta a incidentes —CSIRT/SOC— y en gestión de incidentes., • Alto nivel demostrado de integridad y discreción en el manejo de información confidencial., • Sólidas habilidades de comunicación oral y escrita, con capacidad para presentar información compleja a audiencias técnicas y ejecutivas., • Capacidad para construir relaciones de confianza con las áreas y personas interesadas., • Capacidad demostrada para trabajar de forma autónoma y liderar equipos multidisciplinares., • Visión estratégica, sólidas habilidades organizativas y capacidad para equilibrar prioridades contrapuestas en entornos dinámicos y exigentes., • Nivel alto de inglés, oral y escrito (C1 o superior). Contribuciones al rol • Dirección del servicio CSIRT/SOC., • Gestión de incidentes: declaración de incidentes, priorización, ordenación y coordinación de la contención y erradicación en activos corporativos, así como solicitud de actualizaciones a las áreas implicadas., • Responsabilidad sobre la gestión de casos y evidencias, asegurando la calidad de los casos y la realización de revisiones post-incidente., • Responsabilidad sobre el contenido del servicio —base de conocimiento, procedimientos operativos y procesos—: creación, mantenimiento y aprobación de cambios., • Definición, mantenimiento y publicación de líneas base de procesos esenciales de detección y respuesta para las unidades de negocio, con apoyo de perfiles de análisis de mayor experiencia e impulsando su adopción progresiva., • Coordinación operativa con las unidades de negocio en incidentes y amenazas críticas que afecten a varias de ellas., • Activación del protocolo de crisis y soporte a las comunicaciones ejecutivas durante incidentes de alta severidad., • Revisión continua del desempeño del servicio mediante indicadores clave de rendimiento., • Trasladar las necesidades operativas del servicio —visibilidad, detección y automatización— al área de ingeniería de detección y respuesta., • Supervisar la cadencia de revisión y actualización de las líneas base publicadas., • Promover la mejora continua mediante lecciones aprendidas y seguimiento de acciones post-incidente., • Contribuir a la adopción supervisada de capacidades de IA en los procesos de monitorización, clasificación inicial y respuesta. Otros aspectos relevantes • Titulación universitaria (máster) STEM. En su defecto, experiencia profesional equivalente., • Certificaciones Deseables (Valorables para reforzar el perfil), • Experiencia previa en responsabilidad de servicio CSIRT/SOC 24×7 o en funciones de gestión de incidentes., • Experiencia en definición y gobierno de procedimientos operativos, procesos y catálogos de contenidos de detección y respuesta., • Experiencia en cumplimiento normativo aplicable: NIS2, RGPD y SOX., • Experiencia en coordinación de incidentes multientidad o que afecten a varias unidades de negocio., • Familiaridad con la integración de soluciones de IA basadas en asistentes y agentes en operaciones de seguridad con supervisión humana., • Disponibilidad para atender incidentes críticos fuera del horario laboral. Beneficios • Proyectos transformadores. En Telefónica formarás parte de proyectos de alto impacto, que marcan tendencia y responden a los retos de conectividad y transformación digital de nuestra sociedad., • Desarrollo profesional. Tendrás un largo recorrido y aprendizaje a escala global, gracias a nuestra presencia en diferentes geografías. Compartiremos contigo oportunidades de desarrollo, formación y opciones de movilidad. ¡Queremos crecer y construir un futuro contigo!, • Flexibilidad. Apostamos por el equilibrio entre la vida profesional y personal. Desde Telefónica cuidamos la flexibilidad, posicionándonos como referente en nuevas formas de trabajo y medidas de conciliación., • 27 días laborales de vacaciones., • Beneficios sociales. xcskxlj Podrás disfrutar de un amplio paquete de beneficios sociales entre los que destacan:, • Seguro de vida y accidentes, • Seguro médico para ti y tu unidad familiar (cónyuge e hijos), • Plan de retribución flexible con numerosas opciones entre las que elegir., • Plan de pensiones #J-18808-Ljbffr

Job Description La experiencia que se espera de los solicitantes, así como las habilidades y cualificaciones adicionales necesarias para este trabajo, se enumeran a continuación. We are seeking a SecOps Engineer to serve as the operational hub of Guardicore's R&D Security Team, safeguarding our platform. This role involves collaborating with product and platform engineering teams to oversee detection, response, and vulnerability management. Responsibilities • Analyze vulnerabilities by extracting findings from platforms such as Wiz, Vulcan, Grype, and Tenable, quantifying infrastructure impact for prioritization., • Create AI automations that streamline security operations, auto‑triaging and containing SIEM while prioritizing vulnerability data from integrated tools., • Engineer tools for signal quality by designing correlation searches, refining detection rules, and automating SOAR playbooks to reduce false positives., • Ensure remediation governance by creating tickets, assigning owners, enforcing deadlines, and verifying fixes through rescans and evidence collection., • Create visibility and KPIs by managing dashboards tracking vulnerabilities, remediation speed, SLA adherence, MTTR/MTTD, patch age, and risk trends., • Monitor SIEM telemetry, triage alerts, contain and eradicate threats, and lead root‑cause analysis alongside post‑mortem evaluations., • Strengthen controls by mapping emerging TTPs (MITRE ATT&CK) to defenses, recommending detections, and implementing safeguards across cloud, container, and on‑prem environments. Qualifications • 4+ years in Security Operations / SOC / Incident Response with end‑to‑end responsibility for live incidents and vulnerability remediation programs., • Demonstrated expertise with SIEM (e.g., Splunk), SOAR (e.g., XSOAR), and proficiency in scripting with Python, Bash, and Go., • Experience designing vulnerability‑management dashboards and SLA tracking to enhance leadership transparency., • Knowledge of network protocols, Linux/Windows internals, and cloud telemetry (GCP or AWS) for rapid investigations., • Proficiency with contemporary vulnerability‑management tools and implementation of risk‑based prioritization frameworks., • Strong communication skills to present metrics, incident summaries, and remediation roadmaps to engineers and executives with clarity and professionalism. About Akamai Akamai provides the world’s most distributed platform, helping digital leaders accelerate performance, improve security, and deliver a better Internet experience. Benefits Our benefits support health, well‑being, finances, and life beyond work. xcskxlj FlexBase allows employees to work in a way that best suits them. #J-18808-Ljbffr

Madrid | Working from home up to 40% | Reference 8166 Por favor, asegúrese de leer completamente el resumen y los requisitos de esta oportunidad de empleo que se detallan a continuación. The Security Operations Center (SOC) is a critical Line of Defense 1 function at SIX, responsible for detecting, investigating, and responding to cyber threats across endpoint, identity, network, cloud, and email environments. We are looking for a hands‑on security professional with experience in incident response, threat hunting, and security monitoring. In this role, you will investigate complex alerts, develop and tune detection use cases, support containment and remediation efforts, improve automation and playbooks, and proactively identify threats to strengthen SIX's overall security posture. What You Will Do • Develop, tune, and maintain threat detections and SIEM use cases across endpoint, network, identity, cloud, mail, and M365 environments., • Investigate complex security incidents, lead threat analysis, and coordinate containment and remediation activities., • Design and improve detection content, SOC automation, SOAR workflows, and incident response playbooks., • Conduct proactive threat hunting using threat intelligence and the MITRE ATT&CK framework., • Identify detection gaps and continuously enhance SOC capabilities and security posture., • Mentor junior analysts and contribute to SOC process improvements and knowledge sharing. What You Bring • 5+ years of experience in SOC operations, detection engineering, threat hunting, and incident response., • Hands‑on experience with SIEM, EDR, and SOAR platforms (preferably Sentinel, Elastic, Defender for Endpoint, and Cortex XSOAR)., • Strong background in detection rule development, security investigations, and threat hunting across multiple telemetry sources., • Experience with scripting, automation, APIs, and tools such as Python, GitLab, Azure DevOps, and CI/CD practices., • Knowledge of security query languages and frameworks, including MITRE ATT&CK., • Strong analytical, communication, collaboration, and mentoring skills. Diversity is important to us. Therefore, we are looking to receiving applications regardless of any personal background. What We Offer Flexible Work Models We trust our employees and offer a work environment that is well‑balanced, productive and fosters success. Personal Development You will benefit from a culture of continuous learning and feedback. Your personal growth is supported through an extensive learning offering. xcskxlj Agile Working Methods Whether through scrum or design thinking, we solve exciting tasks together in teams. #J-18808-Ljbffr

SOC Analyst Revise detenidamente toda la documentación de la solicitud antes de hacer clic en el botón de solicitar al final de esta descripción. Department: Cyber Services and Capabilities Employment Type: Full Time Location: ESP Madrid Description As a SOC Analyst you will play a crucial role in strengthening the organisation's overall cybersecurity posture. You will be responsible for the monitoring, analysis, and response to security incidents and events. As an escalation point for R1 analysts, you will provide guidance and mentoring on complex security events, assist in tuning detection capabilities, and contribute to process improvements. Your expertise will also support data assurance, threat hunting, and vulnerability management, ensuring proactive defence against evolving cyber threats. This role requires strong analytical skills, technical proficiency, and a commitment to continuous learning in a dynamic security environment. Key Responsibilities Threat Detection and Monitoring: • Monitor the SOAR platform for SIEM Logs and bespoke logs from the customer., • Identify potential threats, vulnerabilities, and indicators of compromise., • Initiate escalation procedures to counteract potential threats and vulnerabilities., • Ability to analyze and interpret threat intelligence feeds and implement protective measures accordingly. Incident Remediation and Documentation: • Act as an escalation point for R1 analysts, providing technical guidance on complex security incidents., • Escalate to Team Lead or senior analyst should further clarification or four eyes be required., • Provide incident remediation and prevention recommendations to customers using established procedures and analyst experience., • Document and adhere to security monitoring processes., • Suggest process and procedure improvement based on working requirements to streamline processes. Customer Service and Escalation: • Exceed customer expectations by always delivering exceptional customer service., • Serve as an escalation point for junior and R1 team members, offering assistance and mentorship as needed., • Contribute to the creation and maintenance of security documentation, including incident response playbooks, standard operating procedures, and knowledge base articles. Reporting and Continuous Improvement: • Compile and review service-focused reports for effective communication., • Contribute to the creation and maintenance of security documentation, including incident response playbooks, standard operating procedures, and knowledge base articles., • Act as a mentor to junior R1 analysts. Threat Analysis and Collaboration: • Contribute practical insights to the analysis of common security incidents., • Maintain working relationships with the Analytic Development and Security Engineering teams., • Collaborate with shift partners to provide a high quality of service. General Duties: • Perform additional assigned duties as required., • Flexibility to quickly learn and adapt to new security tools, technologies, and processes., • Strong analytical and problem-solving skills., • Good communication skills, both written and verbal., • Ability to work collaboratively as part of a team., • Keep up to date with latest emerging threats and APT groups., • Ability to be a mentor to junior analysts. Skills, Knowledge & Expertise Minimum Requirements Network, Cloud and OS Knowledge: • Understanding of common network protocols and tools., • Proficient knowledge of Windows, Linux & MacOS operating systems., • Understanding of Content Delivery Networks Customer interaction: • Experience with documenting both high level and technical customer facing information., • Confidence providing critical/sensitive information accurately., • Contacting key stakeholders during major incidents Incident Analysis and Response: • Awareness of the MITRE ATT&CK framework, • Pedigree in performing in-depth analysis of security alerts., • Assess customer impact through investigation and work with senior analysts for resolution., • Initiate escalation procedure for potential threats, • Ability to interpret threat priority against the cyber kill chain., • Provide appropriate mitigation and remediation steps. Desirable Requirements Tooling • Hands-on experience with Security Information and Event Management (SIEM) platforms (e.g., Splunk, Sentinel, Swimlane) and their use in aggregating and analysing security event data., • Knowledge of cloud products and log events such as Azure, Amazon Web Services, Google Cloud Platform., • Proficiency with network analysis tools (Wireshark) to perform PCAP analysis. Desirable Certifications • CompTIA Security+, • CompTIA CySA +, • Security Blue Team Level One, • AWS Cloud Practitioner, • Azure Fundamentals, • MAD20 Att&ck Fundamentals Job Benefits • Flexible Working: Balance your work and personal life with our flexible working options., • Generous Holiday Allowance: Enjoy 25 days of holiday, plus bank holidays, with the option to buy up to 5 additional days of annual leave differs for SOC shift workers, please speak to your TA partner for more information)., • Medicash & Critical Illness Scheme, • Financial & Investment Benefits: Enjoy peace of mind with our Pension, Life Assurance, and Share Save Scheme., • Community & Volunteering Programmes: Make a difference in your community with our volunteering opportunities., • Green Car Scheme: Drive green and save money with our eco-friendly car scheme., • Cycle Scheme: Stay fit and healthy with our cycle-to-work scheme. xcskxlj, • Special Time Off: Take time off for those big moments in life, like getting married/entering into a civil partnership, becoming a grandparent, and welcoming home a new pet., • Family Planning: Benefit from our generous maternity and paternity leave, as well as time off and support for those undergoing fertility treatments. #J-18808-Ljbffr

Do you enjoy cyber security and taking ownership to get the job done?Are you excited about working with cutting edge security systems?Join our Infosec Threat and Vulnerability ManagementInfoSec TVM Team is responsible for safeguarding the security of Akamai's systems, infrastructure and providing internal advocacy for security practices. Opportunity to work closely with product and platform teams throughout the company.Become a Security Subject Matter ExpertWe're seeking a SecOps Engineer to serve as the operational hub of Guardicore's R&D Security Team, safeguarding our platform. Collaborating with engineers, you'll oversee detection, response, and vulnerability management to ensure risks are mitigated. If reducing noise, identifying threats, and ensuring remediation completion excites you, this role offers an engaging opportunity.As a Security Analyst Senior II, you will be responsible for:- Analyzing vulnerabilities by extracting findings from platforms like Wiz, Vulcan, Grype, and Tenable, while quantifying infrastructure impact for prioritization.- Creating AI automations streamlining security operations: auto‑triaging and containing SIEM while prioritizing vulnerability data from integrated tools effectively.- Engineering tools for signal quality by designing correlation searches, refining detection rules, and automating SOAR playbooks to reduce false positives efficiently.- Ensuring remediation governance by creating tickets, assigning owners, enforcing deadlines, and verifying fixes through rescans and evidence collection thoroughly.- Creating visibility and KPIs by managing dashboards tracking vulnerabilities, remediation speed, SLA adherence, MTTR/MTTD, patch age, and risk trends.- Monitoring SIEM telemetry, triaging alerts, containing and eradicating threats, and leading root‑cause analysis alongside post‑mortem evaluations.- Strengthening controls by mapping emerging TTPs (MITRE ATT&CK) to defenses, recommending detections, and implementing safeguards across cloud, container, and on‑prem environments.Do what you loveTo be successful in this role you will:- 4+ years in Security Operations / SOC / Incident Response, handling live incidents and vulnerability remediation programs end‑to‑end.- Demonstrate expertise with SIEM (e.G., Splunk), SOAR (e.G., XSOAR), and create parsers, analytics, or automation scripts using Python, Bash, Go.- Design vulnerability‑management dashboards and SLA tracking to enhance leadership transparency through proven experience and effective implementation strategies.- Demonstrate expertise in network protocols, Linux/Windows internals, and cloud telemetry (GCP or AWS) to adapt swiftly during investigations.- Demonstrate expertise with contemporary vulnerability‑management tools and implement risk‑based prioritization frameworks effectively.- Present metrics, incident summaries, and remediation roadmaps effectively to engineers and executives with clarity and professionalism.About usAt Akamai, we make life better for billions of people, trillions of times a day.Whether you're streaming live events, scrolling social media, watching your favorite series, or managing your savings, we're the engine behind the scenes. We provide the world's most distributed platform from Cloud to Edge to help the giants of the digital world work faster and stay more secure, making the internet a better experience for everyone.Our focus is simple:Cloud and Edge: Running apps closer to users for instant performance.Security: Neutralizing threats before they ever reach your data.Content Delivery: Scaling the world's biggest moments without a glitch.AI: Enabling our customers to build, secure, and scale AI apps on the world's most distributed cloud platform.At Akamai, we don't just support the internet; we power and protect it, because behind every great digital experience is a massive hidden challenge. And we're the ones who solve it. When millions of people hit play or pay, Akamai ensures it just works.Benefits at AkamaiWe support your health, well‑being, finances, and life beyond work. See our benefits.FlexBase adapts to your job's needsAkamai's FlexBase program is yet another way we show our commitment to providing employees to an exceptional workplace experience. It's not about telling employees where to work; it's about supporting employees to do their best work.We trust our incredible employees to work in ways that suit them best: at home, in an office, or a combination of both.#J-18808-Ljbffr