Seguridad jobs in XirivellaCreate job alertsNo experience

Nuestro equipo de ingeniería de mantenimiento y fiabilidad es una pieza clave del compromiso de Amazon con la innovación. Este equipo se asegura de que las herramientas y tecnologías que utilizamos evolucionen y se adapten a los cambios al mismo ritmo que Amazon. Como técnico/a sénior de ingeniería de mantenimiento y fiabilidad, nos ayudarás a ir siempre un paso por delante, adoptando las últimas tecnologías e identificando formas nuevas y más eficientes de trabajar. En este puesto, prestarás especial atención a nuestros procesos de seguridad y salud laboral para ayudar a cumplir los exigentes estándares por los que nos regimos y pondrás en marcha mejoras para continuar avanzando. Key job responsibilities • Aplicar las mejores prácticas en el uso seguro de los equipos y supervisar al personal para garantizar que todos siguen los procedimientos de seguridad y salud laboral correctamente., • Realizar inspecciones de seguridad, evaluaciones de riesgos y auditorías periódicas para identificar y mitigar peligros potenciales en el entorno de trabajo., • Garantizar el rendimiento seguro de los dispositivos mediante comprobaciones visuales, controles de estado y tareas de mantenimiento preventivo, asegurando el cumplimiento de las normativas de prevención de riesgos laborales., • Supervisar al personal técnico que esté de turno para apoyar su desarrollo en materia de seguridad y actuar como primer punto de contacto para las cuestiones de WHS relacionadas con los equipos de mantenimiento y fiabilidad., • Resolver problemas en los equipos para reducir los tiempos en los que las operaciones se detienen, priorizando siempre la seguridad de las personas y el cumplimiento normativo., • Ayudar a encontrar formas de mejorar constantemente los sistemas de gestión de seguridad y salud, homogeneizando los procesos y estándares WHS en toda la red de la UE. A day in the life Serás responsable de la supervisión de los procesos para velar por el cumplimiento de las normativas de seguridad y salud laboral, así como garantizar que se lleva a cabo el mantenimiento preventivo pertinente para aumentar el tiempo de actividad de los equipos de forma segura. A partir de lo que observes en tus turnos, propondrás mejoras destinadas a incrementar la seguridad, la eficiencia y la productividad de nuestros sistemas y, más adelante, implantarás dichos cambios en todos nuestros centros de la UE. • Experiencia relevante en el área de la automatización o con equipos de manipulación de materiales, con enfoque en su operación segura., • Título de bachillerato., • Experiencia previa relevante en un puesto de dirección técnica con responsabilidades en seguridad y salud laboral., • Experiencia relevante en la identificación de riesgos y aplicación de medidas preventivas en entornos industriales o logísticos., • Conocimiento de normativas de prevención de riesgos laborales y procedimientos de seguridad (LOTO, permisos de trabajo, evaluaciones de riesgos)., • Nivel avanzado de español, tanto oral como escrito, y conocimientos básicos del inglés., • Experiencia en la realización de auditorías de seguridad y en la gestión de planes de acción correctivos en entornos con multitud de contratistas y en diferentes ubicaciones., • Conocimiento de los requisitos normativos de seguridad de máquinas (marcado CE, directivas de máquinas)., • Experiencia en el manejo de sistemas informáticos de gestión de seguridad y salud (registro de incidentes, investigación de accidentes, planificación de acciones preventivas)., • Titulación universitaria, preferentemente en una disciplina técnica, de prevención de riesgos laborales o ingeniería de seguridad., • Formación específica en prevención de riesgos laborales (Técnico Superior en PRL o equivalente). Amazon is an equal opportunities employer. We believe passionately that employing a diverse workforce is central to our success. We make recruiting decisions based on your experience and skills. We value your passion to discover, invent, simplify and build. Protecting your privacy and the security of your data is a longstanding top priority for Amazon. Please consult our Privacy Notice (_) to know more about how we collect, use and transfer the personal data of our candidates. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit _ for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

ELISEO PLA RAMÍREZ SL está buscando un/a Encargado/a de Obra para unirse a su equipo en la Provincia de Valencia.Quiere enviar su solicitud? Lea toda la información sobre este puesto a continuación y luego pulse el botón de solicitar.Desde 1958, hemos construido más que edificios, fomentando r

The resource MUST have the following skills and experience: * Strong background and knowledge in cybersecurity risk management processes.Strong understanding of cybersecurity standards such as ISO27001, SOC2, NIST, SWIFT, PCI-DSS.Good experience in technical assessment of applications, IT systems, n

ppHBX Group is a leading independent B2B travel technology marketplace connecting travel businesses globally through advanced technology, data-driven solutions, and a network of interconnected products and services. Our Cyber Security team is responsible for protecting global platforms, cloud infrastructure, corporate environments, data assets, and emerging AI-enabled services. /p h3Role Overview /h3 pThe Red Team Security Expert is responsible for proactively assessing and validating HBX Group's security posture across corporate, cloud, application, and AI-enabled environments. /p pThe role combines penetration testing, adversary emulation, offensive security assessments, Purple Team activities, security research, and AI security testing. The successful candidate will work closely with Blue Team, Security Architecture, DevOps, Engineering, Data, and AI teams to identify weaknesses, validate security controls, and strengthen cyber resilience. /p h3Offensive Security Assessments /h3 ul liConduct penetration testing activities across web applications, APIs, cloud platforms, infrastructure services and corporate environments. /li liIdentify, validate and assess security vulnerabilities, attack paths and exposure risks affecting business services and technology platforms. /li liPerform security assessments throughout the technology lifecycle to support secure development and deployment practices. /li liCollaborate with engineering and infrastructure teams to ensure vulnerabilities are effectively remediated and validated. /li /ul h3AI Security Emerging Threats /h3 ul liAssess risks related to Generative AI, Large Language Models (LLMs), AI agents, and machine learning systems. /li liIdentify and mitigate threats such as: /li liAI supply chain attacks /li liSensitive data leakage through AI platforms /li liShadow AI usage /li liPartner with AI and Data teams to implement secure-by-design AI solutions. /li liContribute to AI governance, monitoring, and security controls. /li liStay up to date on emerging AI security frameworks and industry best practices. /li /ul h3Adversary Emulation Red Team Operations /h3 ul liPlan and execute realistic Red Team engagements that emulate real-world threat actors and attack scenarios. /li liLeverage MITRE ATTCK methodologies to assess detection, prevention and response capabilities. /li liEvaluate security controls across on-premises, cloud and hybrid environments. /li liSupport cyber resilience initiatives through controlled attack simulations and adversary emulation exercises. /li /ul h3Application Security Code Review /h3 ul liPerform web application, API and source code security assessments. /li liIdentify weaknesses associated with authentication, authorisation, session management and secure coding practices. /li liSupport agile delivery teams by providing security findings and remediation guidance during development cycles. /li liHelp improve the organisation's ability to identify and mitigate vulnerabilities early in the software development lifecycle. /li liPerform offensive security assessments across AWS, Azure and GCP environments. /li liAssess Kubernetes clusters, Docker environments and cloud-native architectures. /li liReview Infrastructure-as-Code deployments and cloud configurations for security weaknesses. /li liIdentify privilege escalation opportunities, misconfigurations and potential attack paths. /li liSupport cloud security validation and architecture review activities. /li /ul h3Security Research Automation /h3 ul liResearch emerging attack techniques, exploitation methods and offensive security tools. /li liDevelop and maintain automation, scripts and testing utilities to improve offensive security capabilities. /li liSupport continuous improvement of Red Team methodologies and testing approaches. /li liContribute to knowledge sharing, research initiatives and internal security innovation. /li liCollaborate with Blue Team teams to validate detections and strengthen defensive capabilities. /li liSupport the development and testing of monitoring rules, alerting mechanisms and incident response processes. /li liSimulate realistic attack techniques to improve visibility and detection coverage. /li liPromote continuous improvement through joint Red Team and Blue Team exercises. /li /ul h3What You Will Bring /h3 ul liPrevious experience in a Red Team, Penetration Testing, Offensive Security, Application Security or equivalent security-focused role. /li liStrong understanding of offensive security methodologies, attack techniques and adversary emulation practices. /li liUp-to-date knowledge of cyber security threats, exploitation techniques and offensive tooling.Experience performing vulnerability assessments, penetration testing and security validation activities. /li liKnowledge of application security, secure development practices and source code reviews.Good understanding of DevOps and Agile principles, with the ability to support security activities in fast-moving delivery environments. /li liKnowledge of cloud and container technologies, including Kubernetes, Docker and cloud environments such as AWS, GCP or Azure. /li liExperience using scripting languages and automation tools to improve offensive security capabilities and testing efficiency. /li /ul h3Desired skills /h3 ul liAbility to translate technical security findings into clear risk-based recommendations. /li liStrong analytical mindset, with the ability to investigate complex attack scenarios and identify realistic exploitation paths. /li liGood collaboration skills, with the ability to work effectively with Security, Engineering, DevOps and infrastructure teams. /li liProactive approach to learning and staying current with emerging threats, attack techniques and security technologies. /li liAbility to balance security requirements with business priorities in agile and cloud-based environments. /li /ul h3Personal attributes /h3 ul liOwnership and accountability when managing security findings, assessments and remediation activities. /li liClear communication style, especially when explaining technical risks to non-security stakeholders. /li liContinuous improvement mindset, with a focus on advancing offensive security practices and organisational resilience. /li liTeam-oriented approach and willingness to collaborate across technical and business areas. /li /ul /p #J-18808-Ljbffr

Responsable de Ciberseguridad /h3 pEste rol transversal y con una importancia clave a nivel global es responsable de liderar la seguridad en los próximos años, asumiendo la definición y ejecución del plan director de seguridad. Cultura de Seguridad /b: Promover programas de concienciación y bue

pHotelbeds Group is seeking a Security Expert (Red Team) to proactively assess and validate security posture across corporate, cloud, applications, and AI-enabled environments. You will conduct penetration tests, adversary emulation, and purple team activities to strengthen cyber resilience. /ppResponsibilities include offensive security assessments of web apps, APIs, cloud platforms, and infrastructure; AI security governance; cloud and container security; and collaboration with Blue Team, DevOps, /p #J-18808-Ljbffr

Experteer Overview In this role you join HBX Group as it undertakes a transformation to become the world’s leading travel services provider. You will operate in a dynamic, innovative and multicultural environment. The role emphasizes building strong global relationships and contributing to the company’s growth journey across locations. You’ll work in a team that values tech, data and people, with opportunities to develop your career locally or at global offices. This is a chance to be part of a fast-moving, impactful transformation. Compensaciones / Beneficios • Build strong, lasting business relationships with partners and clients from around the world • Contribute to the company’s transformation journey as it scales to leaders in travel services Responsabilidades • Requisitos principales • attractive benefits package

pS2GRUPO busca un/a Threat Intelligence Analyst en Valencia para fortalecer su equipo de Ciberinteligencia. La misión es analizar y transformar información sobre amenazas en inteligencia útil, contribuyendo a la protección de organizaciones y entornos críticos. /ppSe requiere experiencia en análisis de amenazas, habilidades de redacción y nivel de inglés profesional. Ofrecemos formación continua y un entorno altamente técnico. /p #J-18808-Ljbffr

A global cybersecurity company is seeking a Senior Security Engineer to automate exploit generation and analyze zero-day attacks on WordPress. This role requires a strong background in security engineering and hands-on experience with exploiting PHP applications and WordPress plugins. Candidates should possess strong Python skills to build automation pipelines and tools for analyzing execution traces. The position is fully remote, offering flexible hours and comprehensive benefits, including paid vacation and health insurance.br#J-18808-Ljbffr

pAgileEngine is seeking a Middle Application Security Engineer to drive hands-on DevSecOps across CI/CD security integration and vulnerability management for a large financial services program. /ppYou will write Python scripts to integrate SAST, DAST, and SCA gates, tune scanners, and guide Java and Python teams with code-level remediation. 3–5 years of combined software engineering and AppSec experience is required. /p #J-18808-Ljbffr

EMPRESA ESPECIALIZADA EN SOLUCIONES DE SEGURIDAD A MEDIDA UBICADA EN PATERNA PRECISA LA INCORPORACIÓN DE PERSONAL TÉCNICO EN SEGURIDAD. FUNCIONES: TAREAS PROPIAS PARA EL MANTENIMIENTO E INSTALACIÓN DE SISTEMA DE SEGURIDAD EN PLANTAS SOLARES, SUBESTACIONES Y PARQUES EÓLICOS: - DETECCIÓN Y RESOLU

ppHBX Group is a leading independent B2B travel technology marketplace connecting travel businesses globally through advanced technology, data‑driven solutions, and a network of interconnected products and services. Our Cyber Security team is responsible for protecting global platforms, cloud infrastructure, corporate environments, data assets, and emerging AI‑enabled services. /p h3Role Overview /h3 pThe Blue Team Security Expert is responsible for the continuous protection, monitoring, assessment and improvement of HBX Group’s security posture across corporate, cloud, application, and AI‑enabled environments. /p pThe role combines threat detection, incident response, threat hunting, vulnerability management, security automation, and proactive security engineering. The successful candidate will work closely with Red Team, Security Architecture, DevOps, Engineering, Data, and AI teams to identify, prevent, detect and respond to cyber threats. /p ul liIdentify, investigate and analyse cyber security threats affecting services, platforms and development environments. /li liAssess the potential impact of detected threats and support the definition of effective remediation actions. /li liPerform continuous technology watch to stay up to date with industry trends, emerging attack techniques, best practices and relevant security developments. /li liCollaborate with Red Team activities to validate findings, improve detection capabilities and enhance the overall security posture. /li /ul h3AI Security Emerging Threats /h3 ul liAssess risks related to Generative AI, Large Language Models (LLMs), AI agents, and machine learning systems. /li liIdentify and mitigate threats such as: /li liAI supply chain attacks /li liSensitive data leakage through AI platforms /li liShadow AI usage /li liPartner with AI and Data teams to implement secure‑by‑design AI solutions. /li liContribute to AI governance, monitoring, and security controls. /li liStay up to date on emerging AI security frameworks and industry best practices. /li /ul h3Vulnerability Exposure Management /h3 ul liMonitor, assess and prioritise vulnerabilities across applications, infrastructure, cloud environments and containerised platforms. /li liEvaluate the severity, exploitability and potential business impact of vulnerabilities to support risk‑based remediation planning. /li liWork with technology, infrastructure and development teams to coordinate remediation activities and track progress. /li liContribute to the continuous improvement of vulnerability management processes, reporting and prioritisation criteria. /li liSupport and enhance security controls across AWS, Azure and GCP environments. /li liMonitor cloud‑native security services and investigate cloud security incidents. /li liSecure containerised environments, including Kubernetes and Docker platforms. /li liAssess infrastructure‑as‑code and cloud deployments for security weaknesses. /li liContribute to Zero Trust and cloud security initiatives. /li liParticipate in security incident response activities, including investigation, analysis, containment support and timely response. /li liContribute to the identification of root causes and support the definition of corrective and preventive actions. /li liWork with relevant teams to ensure lessons learned from incidents are translated into security improvements. /li /ul h3DevSecOps Support and Code Security /h3 ul liSupport agile delivery teams by embedding security practices into development and delivery processes. /li liProvide guidance on secure development, code analysis and security testing across different platforms, environments and instances. /li liHelp improve the organisation’s capability to identify and remediate vulnerabilities in source code. /li liPromote the use of security automation tools to improve scalability, consistency and efficiency in security activities. /li /ul h3What You Will Bring /h3 ul liPrevious experience in a cyber security role, technology delivery role or equivalent security‑focused position. /li liStrong understanding of threat modelling, cyber risk assessment and security analysis techniques. /li liUp‑to‑date knowledge of current cyber security threats, best practices, technologies and defensive techniques. /li liExperience with vulnerability management, including vulnerability assessment, prioritisation and remediation coordination. /li liKnowledge of incident response processes, including investigation, analysis and timely response activities. /li liExperience or working knowledge of secure software development practices and source code security analysis. /li liGood understanding of DevOps and Agile principles, with the ability to support security practices in fast‑moving delivery environments. /li liKnowledge of cloud and container technologies, including Kubernetes, Docker and cloud environments such as AWS, GCP or Azure. /li liExperience using programming languages and/or security automation tools to improve security operations and detection capabilities. /li /ul h3Desired skills /h3 ul liAbility to translate technical security findings into clear risk‑based recommendations. /li liStrong analytical mindset, with the ability to investigate complex issues and prioritise actions based on impact. /li liGood collaboration skills, with the ability to work effectively with Security, Engineering, DevOps and infrastructure teams. /li liProactive approach to learning and staying current with emerging threats, attack techniques and security technologies. /li liAbility to balance security requirements with delivery needs in agile and cloud‑based environments. /li /ul h3Personal attributes /h3 ul liOwnership and accountability when managing security findings, incidents or remediation activities. /li liClear communication style, especially when explaining technical risks to non‑security stakeholders. /li liContinuous improvement mindset, with a focus on strengthening security processes and operational efficiency. /li liTeam‑oriented approach and willingness to collaborate across technical and business areas. /li /ul /p #J-18808-Ljbffr

ppAgileEngine is an Inc. 5000 company that creates award-winning software for Fortune 500 brands and trailblazing startups across 17+ industries. We rank among the leaders in areas like application development and AI/ML, and our people-first culture has earned us multiple Best Place to Work awards. /p h3WHY JOIN US /h3 pIf you're looking for a place to grow, make an impact, and work with people who care, we'd love to meet you! /p h3ABOUT THE ROLE /h3 pWe are looking for a bMiddle Application Security Engineer /b to execute hands‑on DevSecOps work across CI/CD pipeline security integration, vulnerability management tooling, and automated hardened baseline deployment within a large‑scale financial services security program. You will write Python scripts to integrate SAST, DAST, and SCA gates into CI/CD pipelines, tune scanning tools to reduce false positives, and provide code‑level remediation guidance to Java and Python development teams. The role requires 3–5 years of combined software engineering and AppSec experience. /p h3WHAT YOU WILL DO /h3 ul liWrite and maintain the scripts necessary to integrate security gates (SAST, DAST, SCA) seamlessly into the CI/CD pipeline; /li liContinuously tune and configure existing security scanning tools to eliminate false positives and deliver high‑confidence alerts; /li liAssist in coding and deploying automated hardened baselines and secure coding patterns; /li liWork directly with product development teams to provide actionable, code‑level remediation guidance in Java and Python. /li /ul h3MUST HAVES /h3 ul li3–5 years of commercial experience blending software engineering and DevSecOps/AppSec; /li liSolid coding proficiency in bPython /b for automation and scripting; /li liWorking knowledge of modern CI/CD orchestration tools and practical experience interacting with vulnerability scoring frameworks; /li liAbility to operate with minimal supervision on day‑to‑day execution, reliably completing complex scripting and integration tasks; /li liUpper‑intermediate English level. /li /ul h3NICE TO HAVES /h3 ul liAbility to comfortably read and navigate Java source code; /li liHands‑on experience with specific CNAPP or ASPM platforms (e.g., Wiz); /li liBasic understanding of application threat modeling. /li /ul h3PERKS AND BENEFITS /h3 ul libProfessional growth /b: Mentorship, TechTalks, and personalized growth roadmaps. /li libCompetitive compensation /b: USD‑based pay with education, fitness, and team activity budgets. /li libExciting projects /b: Modern solutions with Fortune 500 and top product companies. /li libFlextime /b: Flexible schedule with remote and office options. /li /ul /p #J-18808-Ljbffr

Hupp is seeking a Microsoft 365 Consultant based in Valencia, Spain. This role involves migrating clients to Microsoft 365, configuring processes with Power Platform, and advising on security governance. You'll work largely remote, with ongoing support outside hours occasionally. Ideal candidates will have a strong interest in Microsoft 365, Azure, and possess excellent English skills, contributing to international client relations and project success. #J-18808-Ljbffr

ph3Overview /h3 pJoin to apply for the bSecurity Program Manager /b role at bBrainRocket /b. /p pBrainRocket is a global company creating end-to-end tech products for clients across Fintech, iGaming, and Marketing. We offer a full-time job in the office with relocation support as needed. Our team includes 1,300 professionals delivering innovative ideas and products. /p h3Responsibilities /h3 ul liThe bSecurity Program Manager /b is responsible for driving the planning, coordination, and execution of security initiatives and projects across the organization. /li liEnsure alignment between security objectives and business goals; manage cross-functional security projects; establish governance to reduce risk and maintain compliance. /li liAct as the central point of coordination to enable efficient execution and delivery of security projects into production; facilitate communication between stakeholders; ensure security becomes an integral part of business processes. /li liProgram ownership: Lead the planning, execution, and successful delivery of security initiatives and projects, ensuring they reach production and deliver measurable business value. /li liAlignment with business goals: Translate security objectives into actionable programs aligned with organizational strategy and regulatory requirements. /li liCross-functional coordination: Serve as the primary contact between Security, IT, Product, Engineering, Legal, HR, and other units to ensure collaboration. /li liGovernance reporting: Establish governance models, track milestones, define KPIs/metrics, and report status and risks to senior management. /li liRisk management: Identify, assess, and prioritize security risks; drive mitigation plans and escalate critical issues as needed. /li liPolicy compliance enablement: Ensure projects support compliance with standards (ISO 27001, SOC 2, GDPR) and internal policies. /li liChange management: Develop rollout strategies for new security controls with adoption across the organization. /li liStakeholder communication: Maintain clear, timely communication with all stakeholders, including C-level executives. /li liIssue resolution: Anticipate roadblocks, manage dependencies, and resolve conflicts to keep projects on track. /li liContinuous improvement: Identify inefficiencies and propose improvements, frameworks, or automation to enhance scalability. /li liAwareness training support: Coordinate security awareness initiatives and embed program outcomes into practices. /li liBudget resource planning: Work with leadership to estimate costs, allocate resources, and improve delivery efficiency. /li liVendor third-party coordination: Manage external security partners, consultants, or vendors for outsourced projects. /li liDocumentation: Maintain up-to-date documentation of project scope, timelines, ownership, and deliverables for auditability. /li /ul h3Qualifications /h3 ul libMust-Have /b: /li li5+ years of experience in security program / project management or related fields. /li liStrong understanding of information security principles, frameworks (e.g., ISO 27001, NIST, SOC 2) and risk management. /li liProven track record of delivering cross-functional security initiatives from planning to production. /li liExcellent stakeholder management, communication, and presentation skills, including C-level reporting. /li liAbility to build governance processes, track KPIs, and ensure accountability across teams. /li liStrong organizational and prioritization skills in a fast-paced environment. /li liFluency in English (written and spoken). /li libNice-to-Have /b: /li liTechnical background in IT, cloud, or application security. /li liExperience with GRC tools. /li liFamiliarity with DevSecOps practices and CI/CD integration. /li liCertifications such as CISSP, CISM, PMP, or similar. /li liExperience in regulated industries (finance, gaming, healthcare, etc.). /li liPrevious experience in international or distributed teams. /li /ul h3Benefits /h3 ul liRelocation package (tickets, hotel stay for up to 2 weeks, and visa relocation support). /li liLearning and development opportunities; language support with partial compensation for Spanish classes. /li liTime for rest with 23 working days of annual vacation and additional paid sick days. /li liCompetitive remuneration with annual review. /li liPlus, opportunities to work in a fast-paced, impactful environment. /li /ul h3Additional Details /h3 ul liSeniority level: Mid-Senior level /li liEmployment type: Full-time /li liJob function: Other /li liIndustries: Software Development and Gambling Facilities and Casinos /li /ul pBold moves start here. Make yours. Apply today! /p /p #J-18808-Ljbffr

pAgileEngine in Valencia, Spain, seeks a Middle Application Security Engineer to drive hands‑on DevSecOps within a large financial services program. You will write Python scripts to integrate SAST, DAST, and SCA gates into CI/CD pipelines and guide Java and Python teams on secure coding practices. /ppYou will tune scanners to reduce false positives, deploy automated hardened baselines, and collaborate with product teams to deliver high‑confidence security outcomes across the development lifecycle. /p #J-18808-Ljbffr

ph3About us /h3 pAt Auctane, we are united by a passion to help businesses deliver — whatever their size, wherever they are, and however they operate. We make it possible for businesses to meet the ever-changing requirements of their industry and customer expectations. Auctane products enable hundreds of thousands of businesses to annually mail and ship billions of items — over $200 billion worth — to recipients around the globe. /p h3Our values /h3 pWin as One. Delight Customers. Deliver Great Outcomes. /p h3About the role /h3 pThe focus of this role is to bolster Auctane's global engineering and operations within the Information Security Group. This position reports directly to the CISO and entails the leadership of several security programs within the engineering and operations teams. /p pThe successful candidate will be instrumental in defining and developing the technology and processes governing cybersecurity practices to secure Auctane's global infrastructure. The role will specifically concentrate on securing the Enterprise and Cloud Infrastructures, alongside managing security operations responsibilities. This critical role requires a successful candidate to be a key contributor in establishing and evolving the technology and processes that define Auctane's global cybersecurity practices. The primary focus of this position is to secure the Enterprise and Cloud Infrastructures while also managing core security operations. /p pThe Infosec group operates as part of the broader RD Tech function, which utilizes modern architectural patterns and technologies, including AI, at scale and pace. This is a full remote role based in Spain with 10% international travel requirement. /p h3About the team /h3 pWe have a flat and open engineering culture where diverse opinions and perspectives are valued, data and evidence beats opinion and hierarchy, backed by honest and frank discussions. We passionately believe in forming autonomous, cross functional teams who are empowered to deliver our ambitious strategy. Our engineering culture is characterized by its flat and open structure, where diverse opinions and perspectives are highly valued. Decisions are driven by data and evidence, superseding opinion and hierarchy, and are supported by candid and transparent discussions. We are strong advocates for the formation of autonomous, cross-functional teams who are fully empowered to execute our ambitious strategy. We strongly support cross-collaboration and mission driven autonomous teams that are given full authority to implement our ambitious strategy. Our ambitious strategy is implemented by autonomous, mission-driven teams that are fully empowered to act and strongly encouraged to cross-collaborate. /p h3What will you be doing? /h3 ul liDesign, implementation, and maintenance of organizational security systems and solutions /li liDevelopment of controls on security systems, via automation and feature development to support vulnerabilities and incident detection /li liPerforming threat and risk assessments to prioritize remediations and follow through closure /li liDevelop and operate standard Incident Response and Risk Management playbooks and adapt during Incidents /li liLearn and adapt new technologies and processes based on vendor training and market research /li /ul h3What are we looking for? /h3 ul liBachelor's degree or equivalent working experience in the tech field, and bat least 3-4 years of experience in the Cybersecurity field /b /li libAdvanced level experience at least in one or two security domains /b within the Enterprise and Cloud Infrastructures to develop threat detections and mitigation strategies /li liStrong problem-solving and research skillset to hypothesize, test, and learn during troubleshooting process /li liCuriosity and desire to learn new technologies, and quickly adapt /li liAbility to write clear technical documentaions and efficiently explain security issues to both technical and non-technical audience /li /ul h3What will make you stand out? /h3 ul liDirect experience in cybersecurity domains and projects related to engineering and operations /li liFoundational security certifications such as CompTIA Security+, Network+, or AWS Security certifications are highly preferred /li /ul h3The tech stack /h3 ul libAWS, GCP, SaaS, and Enterprise /b /li liArtificial Intelligence Solutions (Gemini, Claude, internal) /li liCNAPP, DSPM, and Cloud Security Solutions /li liApplication Security Technologies (DAST, SAST, SCA, ASM) /li libEmail Security Technologies /b /li libSIEM Solutions and Detection Technologies /b /li libGoogle Workspace /b /li libVulnerability Management Solutions /b /li liApplication Security /li libPython, PowerShell, Bash /b /li /ul h3What do we offer? /h3 ul liClear and transparent compensation plan. Up to 52,000 € gross per year. We will discuss the indicated range with you in the first recruiting call to ensure that we are on the same page. /li liFlexible salary benefits. Save on personal income tax with Cobee for expenses like transport, restaurants, and kindergarten. /li liPrivate health insurance. Free for all employees via Cigna, plus we cover 50% for your family members. /li liGenerous time off. Enjoy 26 days of holiday per year (23 base days + birthday off, Christmas Eve, and New Year's Eve). /li liYour gear, your choice. Whether you prefer Mac or Windows, or need an extra screen, we’ll make sure you’re set up for success from day one. /li liAnnual Salary Review. We’re committed to recognizing your professional growth. Every year, we review salaries to reflect your individual development, achievements, and impact on our business success. /li liGrow your skills. We offer up to 2,000 € per year in training (certifications, conferences, workshops) to boost your growth—both technical and personal. /li liLearning resources. Access internal and external training, including platforms like LinkedIn Learning, completely free. /li liHolistic wellness program. Includes access to Wellhub, Curalinc (psychological support), Rocketlawyer (legal advice), and regular health webinars challenges. /li liVolunteer day. Take two days off a year to volunteer and give back. /li liHealth wellness support. Get up to 55 € per month to cover your gym or fitness classes (yoga, boxing, pilates, etc.). /li liWeekly language classes. Improve or learn a new language (English, Spanish, French, Italian, or German) in small groups with expert instructors—on us. /li liTime for health. Get 8 hours per year for personal medical appointments and 10 hours per year to support your family’s medical needs. /li liWork-life balance. We’re flexible and people-first. We know life happens, and we aim to make work work for you. /li liInclusive, upbeat culture. No suits here—just a welcoming, casual, and respectful space where diversity is celebrated, and you can be your full self. /li liA global, multicultural team. We’re made up of 20+ nationalities, speaking 10+ languages. All communication is in English, so everyone’s included. /li liPacklink Pro discount. Enjoy 99% off your personal shipments using our platform. /li liReferral bonuses. Know someone amazing? Earn €1K–€3K when you refer candidates we hire—depending on the role. /li liCentral Madrid office. When you want a change of scenery, drop by our office in the heart of Madrid—free snacks and drinks included! /li liTeam events. We work hard and play hard with regular team-building activities and meetups. /li /ul /p #J-18808-Ljbffr

ppFounded in 2003, Prosolia Energy is a leading business group in the renewable energy sector, with operations in Spain, Portugal, Italy, France, Germany and Mexico. /p pProsolia Energy is an Independent Power Producer (IPP) specialised in providing decarbonisation services to our customers. We control the entire value chain of the projects through which we provide energy to our customers, developing, constructing, operating and maintaining a range of renewable generation and storage sources. We are committed to leading the transition of the industrial and productive sector towards a decarbonised, sustainable and competitive model. Our strategic objectives for the coming years include growing our asset base and expansion into new markets and products. /p pProsolia Energy now has a project portfolio of more than 4 GW. In order to build and develop this portfolio, as well as to achieve its strategic objectives, we are looking for talented, high potential professionals who wish to join our team and contribute to our continued success. /p pWe are looking for an bOT Cybersecurity Manager /b to lead and implement cybersecurity strategies across our OT environments, ensuring robust risk management and compliance. /p h3Responsibilities: /h3 h31. Cybersecurity strategy /h3 ul liDefine and update the corporate OT cybersecurity strategy, aligned with the objectives of the Prosolia group, the risk strategy and the applicable regulations (IEC 62443, ISO 27001, NIS2, GDPR, etc.). /li liDevelop and maintain the framework of security policies, standards and procedures (remote access, communications, backups, use of accounts, etc.), ensuring their implementation in all countries and assets of the company, according to size and type. /li liCarry out periodic cybersecurity risk assessments in OT infrastructures and control systems (SCADA, PLC, RTU, plant networks), identifying vulnerabilities and prioritizing mitigation actions. /li liDevelop and follow risk management plans, including technical and organizational measures. Prioritize and track remediation plans from OT risk assessments and audits, including deadlines, owners, and completion indicators. /li /ul h33. OT Security Architecture and Operations /h3 ul liDesign and validate OT network security architecture, including network segmentation, secure remote access systems, traffic monitoring, and IT/OT segregation. Align OT architectures and solutions avoiding silos and promoting shared security capabilities. /li liDefine security requirements for new plant projects, SCADA upgrades or communications, reviewing third-party designs and ensuring that deliverables meet defined cybersecurity standards. /li liLead remediation campaigns (patching, hardening, segmentation) in coordination with IT, OT, OM and vendors, ensuring no operational regression. /li liParticipate directly in configuration reviews (firewalls, VPN, remote access, accounts), OT backup restoration tests, and business continuity exercises. /li /ul h34. Monitoring, detection and response to incidents /h3 ul liEstablish and coordinate security monitoring capabilities applied to critical OT networks, defining use cases, alarms, and escalation procedures. /li liLead cybersecurity incident response, from detection to shutdown (containment, eradication, recovery, and lessons learned), including coordination with IT, Insurance, Legal, and Corporate Communication when necessary. Establish structured post-incident processes (Root Cause Analysis, action plans, tracking to closure) integrated into risk/security committees. /li /ul h35. Regulatory compliance, audits and reporting /h3 ul liEnsure compliance with the regulations applicable to critical infrastructure security, data protection and industrial cybersecurity in the countries where the company operates, coordinating internal and external audits. /li liPrepare periodic cybersecurity status reports (KPIs), main incidents, level of maturity and progress of action plans for Management, Risk Committees and others. /li /ul h36. Third-party management and supplier lifecycle /h3 ul liDefine and review cybersecurity clauses in contracts, RFPs, and SLAs with OT, communications, cloud, and OM service providers, including hardening, support, patching, and incident management requirements. /li liAssess and monitor the cybersecurity risk of critical third parties (SCADA integrators, communications providers, SOC services) and coordinate corrective actions when breaches or breaches are identified. /li /ul h37. Awareness, training and safety culture /h3 ul liDesign and execute cybersecurity training and awareness programs, adapted to OT (plant operators, field technicians, OM) and IT groups, promoting good practices in the use of credentials, remote access and mobile devices. /li /ul h38. Remote access and communications management /h3 ul liDesign, implement and supervise the secure architecture of communications between plant assets (SCADA, PLC, inverters, trackers) and control centers, guaranteeing the integrity, confidentiality and availability of operational data at all times. /li liEstablish and maintain secure VPN tunnels (IPSec, OpenVPN) and protected remote connections for technical access, centralized monitoring, and OEM support, applying network segmentation, end-to-end encryption, and multi-factor authentication (MFA). /li liDefine policies and procedures for validated remote access. /li liCoordinate with telecommunications and OT teams the implementation of secure gateways, industrial firewalls and intrusion detection systems (IDS/IPS OT‑aware), validating configurations and performing periodic connectivity and resilience tests. /li liContinuously monitor and audit remote communications traffic by responding to detected incidents and reporting usage and security metrics (access KPIs, response time, detected vulnerabilities). /li liEvaluate and negotiate with providers (telecom, SCADA integrators or similar) security requirements in communications, periodically reviewing their compliance and coordinating corrective actions. /li /ul h39. Governance, KPIs and Roadmap Management /h3 ul liBuild and maintain a multi‑year OT cybersecurity roadmap (maturity levels, investments, NIS2 priorities), updated annually. /li liDefine and track OT security KPIs (open vulnerabilities, remediation progress, incident response times, patching/backup/DR test coverage). /li liGovern remediation action plans through regular steering committees with IT, Asset Management external partners and vendors, ensuring accountability and closure. /li /ul h3Requirements: /h3 ul liUniversity degree in Computer Engineering, Telecommunications, Industrial Engineering or similar. /li liQualifications that are assessed: Master’s Degree in Cybersecurity or similar. /li liLanguages mandatory: Spanish and English. /li liLanguages that are assessed: Portuguese, Italian, French and German. /li liMinimum of 3 5-7 years in OT/ICS/SCADA environments or renewable/industrial infrastructures. (3+ years with demonstrated experience in remediation project management or OT cybersecurity implementation). /li liProven experience defining and implementing security policies, leading security project, managing incidents and piloting multi‑stakeholder action plans. /li /ul h3Other requirements: /h3 ul liProject management and action plan governance. /li liAbility to challenge OT integrators/MSPs on technical/security delivery. /li liCross‑functional coordination (IT/OT/Asset Management) and committee animation. /li liHands‑on OT security operations (configuration reviews, incident leadership). /li /ul h3What’s in for you at Prosolia /h3 ul liInternational and rapidly expanding company /li liOpportunities for professional growth /li liFlexible working hours and hybrid work possibilities /li /ul /p #J-18808-Ljbffr

Security Expert (Red Team)Applylocations: Spain - Valenciatime type: Full timeposted on: Posted Todayjob requisition id: R- HBX Group is the world’s leading technology partner, connecting and empowering the world of travel. We’re game-changers, disruptors, the people who bring together local and global brands in accommodation, transport, activities and payments through our network of 300,000 hotels worldwide, 60,000 hard to reach high value clients such as tour operators, travel agents and loyalty schemes across 140 source markets. We are tech-driven, with a customer-first philosophy, and commercial teams whose knowledge and relationships on the ground are second to none. And of course we have an amazing team! Our people, Team HBX Group, are the beating heart of the company who we encourage to ‘move fast, dream big and make the difference’ every day. In fact, we believe that it is tech + data + people that truly sets us apart in the market, alongside our ‘global approach, local touch’ mentality. We’re headquartered in Palma, Mallorca and employ around 3,500 people worldwide.## JOB DESCRIPTION:The Red Team Security Expert is responsible for proactively assessing and validating HBX Group's security posture across corporate, cloud, application, and AI-enabled environments.The role combines penetration testing, adversary emulation, offensive security assessments, Purple Team activities, security research, and AI security testing. The successful candidate will work closely with Blue Team, Security Architecture, DevOps, Engineering, Data, and AI teams to identify weaknesses, validate security controls, and strengthen cyber resilience.Offensive Security Assessments Conduct penetration testing activities across web applications, APIs, cloud platforms, infrastructure services and corporate environments. Identify, validate and assess security vulnerabilities, attack paths and exposure risks affecting business services and technology platforms. Perform security assessments throughout the technology lifecycle to support secure development and deployment practices. Collaborate with engineering and infrastructure teams to ensure vulnerabilities are effectively remediated and validated.AI Security Emerging Threats Assess risks related to Generative AI, Large Language Models (LLMs), AI agents, and machine learning systems. Identify and mitigate threats such as: Prompt injection attacks Data poisoning Model manipulation AI supply chain attacks Sensitive data leakage through AI platforms Shadow AI usage Partner with AI and Data teams to implement secure-by-design AI solutions. Contribute to AI governance, monitoring, and security controls. Stay up to date on emerging AI security frameworks and industry best practices.Adversary Emulation Red Team Operations Plan and execute realistic Red Team engagements that emulate real-world threat actors and attack scenarios. Leverage MITRE ATTCK methodologies to assess detection, prevention and response capabilities. Evaluate security controls across on-premises, cloud and hybrid environments. Support cyber resilience initiatives through controlled attack simulations and adversary emulation exercises.Application Security Code Review Perform web application, API and source code security assessments. Identify weaknesses associated with authentication, authorisation, session management and secure coding practices. Support agile delivery teams by providing security findings and remediation guidance during development cycles. Help improve the organisation's ability to identify and mitigate vulnerabilities early in the software development lifecycle.Cloud Platform Security Perform offensive security assessments across AWS, Azure and GCP environments. Assess Kubernetes clusters, Docker environments and cloud-native architectures. Review Infrastructure-as-Code deployments and cloud configurations for security weaknesses. Identify privilege escalation opportunities, misconfigurations and potential attack paths. Support cloud security validation and architecture review activities.Security Research Automation Research emerging attack techniques, exploitation methods and offensive security tools. Develop and maintain automation, scripts and testing utilities to improve offensive security capabilities. Support continuous improvement of Red Team methodologies and testing approaches. Contribute to knowledge sharing, research initiatives and internal security innovation.Purple Team Collaboration Collaborate with Blue Team teams to validate detections and strengthen defensive capabilities. Support the development and testing of monitoring rules, alerting mechanisms and incident response processes. Simulate realistic attack techniques to improve visibility and detection coverage. Promote continuous improvement through joint Red Team and Blue Team exercises.What You Will Bring Previous experience in a Red Team, Penetration Testing, Offensive Security, Application Security or equivalent security-focused role. Strong understanding of offensive security methodologies, attack techniques and adversary emulation practices. Up-to-date knowledge of cyber security threats, exploitation techniques and offensive tooling. Experience performing vulnerability assessments, penetration testing and security validation activities. Knowledge of application security, secure development practices and source code reviews. Good understanding of DevOps and Agile principles, with the ability to support security activities in fast-moving delivery environments. Knowledge of cloud and container technologies, including Kubernetes, Docker and cloud environments such as AWS, GCP or Azure. Experience using scripting languages and automation tools to improve offensive security capabilities and testing efficiency.Desired skills Ability to translate technical security findings into clear risk-based recommendations. Strong analytical mindset, with the ability to investigate complex attack scenarios and identify realistic exploitation paths. Good collaboration skills, with the ability to work effectively with Security, Engineering, DevOps and infrastructure teams. Proactive approach to learning and staying current with emerging threats, attack techniques and security technologies. Ability to balance security requirements with business priorities in agile and cloud-based environments.You will have the opportunity to work for a company that is going through significant change in becoming the world ́s leading travel services provider. We are looking for people that are ready to ride the wave in this exciting journey.As well as an attractive benefits package you will be able to work: Within an innovative, engaging and multicultural environment. Have the opportunity to build strong and lasting business relationships and friendships from around the world. Have the opportunity in developing your career locally or within one of our beautiful working locations across the globe.br#J-18808-Ljbffr

En QTH SUTAN queremos incorporar a una persona con experiencia real en oposiciones de bombero que quiera participar en la creación y mejora de una preparación rigurosa, clara y útil para el opositor. Buscamos especialmente perfiles que conozcan en profundidad alguna de estas áreas: la oposición de bombero de Navarra o el temario CEIS Guadalajara. No buscamos únicamente a alguien que haya estudiado estos contenidos, sino a una persona capaz de explicarlos, estructurarlos y convertirlos en clases, materiales de estudio y herramientas de repaso de calidad. Responsabilidades Preparar y actualizar el temario. Grabar clases y explicaciones en vídeo. Elaborar esquemas, resúmenes y materiales de estudio. Crear preguntas tipo test y flashcards. Revisar contenidos, dudas e impugnaciones. Identificar los apartados más importantes y preguntables. Proponer mejoras que ayuden al alumnado a estudiar mejor. Perfil buscado Has preparado o conoces de cerca la oposición de bombero de Navarra. Dominas el temario CEIS Guadalajara. Tienes capacidad para explicar contenidos técnicos de forma clara. Sabes organizar temarios extensos y convertirlos en materiales útiles. Eres una persona ordenada, rigurosa y meticulosa. Te manejas bien con herramientas digitales y grabaciones. Tienes criterio para crear preguntas test claras y bien justificadas. Lo que ofrecemos Formar parte de un proyecto especializado en oposiciones de bombero. Participar directamente en el desarrollo de nuevas preparaciones. Trabajar junto al equipo académico de QTH SUTAN. Autonomía para crear materiales, aportar ideas y mejorar la formación. La oportunidad de que tu trabajo tenga un impacto directo en futuros bomberos y bomberas. Si conoces la oposición de bombero de Navarra o dominas el temario CEIS Guadalajara, queremos conocerte. Puedes enviar tu solicitud a info@. #J-18808-Ljbffr

Buscas trabajo en instaladores? Este mes de julio surgen nuevas oportunidades para seguridad y alarmas en Valencia.

pKumo Networks, empresa de IT proveedora de servicios en la nube perteneciente al grupo El Corte Inglés, te invita a formar parte de su equipo de Comunicaciones. Mantendrás, optimizarás y asegurarás la infraestructura de red para garantizar conectividad fiable y segura en entornos Data Center y cloud. /ppSi te apasiona trabajar con infraestructuras de red complejas y resolver incidencias críticas en entornos tecnológicos, este proyecto te permitirá seguir desarrollándote como profesional en un /p #J-18808-Ljbffr

AgileEngine is seeking a Senior Python Engineer to architect and build automated security layers within the SDLC, engineering AI-enabled secure code scanning, and CI/CD security tooling integration. You will work in Python and Java to deploy and tune SAST, DAST, and SCA tools, provide code-level rem

pAjax Systems is seeking a motivated sales professional to expand partnerships in Spain, particularly in alarm systems and security. With over 3 years of experience in the industry, you will present products to potential partners, close sales deals, and meet sales targets while contributing to business development. /ppThe role offers competitive salary and bonuses within a professional team environment, promising opportunities for career growth and challenges. /p #J-18808-Ljbffr

Inserta Empleo busca un profesional en ciberseguridad para garantizar la seguridad de los clientes mediante el análisis y la mitigación de amenazas.

pInitium Software busca un Ingeniero de Seguridad de Software para proteger ecosistemas web, móvil y en la nube. Liderarás evaluaciones de seguridad, gestionarás vulnerabilidades y coordinarás mitigaciones a lo largo del ciclo de desarrollo, trabajando con equipos de alto rendimiento en Valencia. /ppBuscamos un profesional con experiencia sólida, dominio de OWASP Top 10 y habilidades para integrarse en pipelines CI/CD. Se ofrece empleo presencial en Valencia con horario fijo. /p #J-18808-Ljbffr

ppAgileEngine is an Inc. 5000 company that creates award-winning software for Fortune 500 brands and trailblazing startups across 17+ industries. We rank among the leaders in areas like application development and AI/ML, and our people-first culture has earned us multiple Best Place to Work awards. /p h3Why Join Us /h3 pIf you're looking for a place to grow, make an impact, and work with people who care, we'd love to meet you! /p h3About the Role /h3 pWe are looking for a bTech Lead Application Security Engineer /b to serve as the regional delivery anchor for a follow-the-sun program, leading a cross-functional pod across ASPM integrations and AI-enabled SDLC secure code scanning. You will facilitate clean shift hand-offs with peer leads across timezones, own regional technical escalations, perform secure code reviews, and drive 24-hour delivery velocity in a highly regulated enterprise environment. The role requires 8+ years of engineering experience including 3+ years in technical leadership. /p h3What You Will Do /h3 ul liLead a localized, cross-functional pod of engineers and data scientists, ensuring continuous feature momentum across the 24-hour cycle; /li liFacilitate seamless shift hand-offs with peer SDMs in other timezones to maintain 24/7 delivery velocity; /li liOversee the technical delivery of core workstreams, including Application Security Posture Management (ASPM) integrations and AI-enabled SDLC secure code scanning; /li liAct as the primary escalation point for regional technical challenges, performing secure code reviews and guiding infrastructure architecture. /li /ul h3Must Haves /h3 ul li6+ years of software engineering and architecture experience, with at least 3+ years in a technical leadership or engineering management role; /li liDeep expertise in bPython /b or bJava /b, alongside modern bDevSecOps /b, bCloud Security /b, and bCI/CD /b ecosystems; /li liProven commercial experience managing distributed or follow-the-sun engineering teams in highly regulated enterprise environments (Finance, Healthcare, Defense); /li liComplete technical ownership of the system’s structural integrity, performance, and security, with the ability to provide creative direction and mentorship; /li liUpper-intermediate English level. /li /ul h3Nice to Haves /h3 ul liPrior experience building or implementing AI-assisted developer workflows or intelligent agents. /li /ul h3Perks and Benefits /h3 ul libProfessional growth /b: Mentorship, TechTalks, and personalized growth roadmaps. /li libCompetitive compensation /b: USD-based pay with education, fitness, and team activity budgets. /li libExciting projects /b: Modern solutions with Fortune 500 and top product companies. /li libFlextime /b: Flexible schedule with remote and office options. /li /ul /p #J-18808-Ljbffr

pHBX Group is a leading independent B2B travel technology marketplace. We seek a Red Team Security Expert to proactively assess HBX Group's security posture across corporate, cloud, application and AI-enabled environments. /ppThe role combines penetration testing, adversary emulation, offensive security assessments and AI security testing, working with Blue Team, Security Architecture, DevOps, Engineering, Data and AI teams to strengthen cyber resilience. /p #J-18808-Ljbffr

pNextron Systems is seeking a high‑performing B2B sales professional to own the full sales cycle from discovery to closing. You will develop a healthy pipeline with inbound and outbound efforts and connect prospects with Nextron’s cybersecurity solutions through compelling demonstrations. /ppYou will engage with CISOs, CIOs, and security teams, building trusted relationships and cross‑selling where appropriate. /p #J-18808-Ljbffr

El/la candidato/a supervisará trabajos, organizará equipos, gestionará subcontratas y controlará materiales y maquinaria para garantizar calidad, seguridad y cumplimiento de plazos.

Fundación Adecco busca una persona proactiva para un rol de ciberseguridad en Paterna, Valencia.

Nextpower Inc in Valencia, Spain, is seeking an Embedded Linux Software Engineer to develop new features and maintain Linux-based applications for electrical power devices, including web access and control via a browser.

ppAgileEngine is an Inc. 5000 company that creates award-winning software for Fortune 500 brands and trailblazing startups across 17+ industries. We rank among the leaders in areas like application development and AI/ML, and our people-first culture has earned us multiple Best Place to Work awards. /p h3WHY JOIN US /h3 pIf you're looking for a place to grow, make an impact, and work with people who care, we'd love to meet you! /p h3ABOUT THE ROLE /h3 pWe are looking for a bMiddle Application Security Engineer /b to execute hands‑on DevSecOps work across CI/CD pipeline security integration, vulnerability management tooling, and automated hardened baseline deployment within a large‑scale financial services security program. You will write Python scripts to integrate SAST, DAST, and SCA gates into CI/CD pipelines, tune scanning tools to reduce false positives, and provide code‑level remediation guidance to Java and Python development teams. The role requires 3–5 years of combined software engineering and AppSec experience. /p h3WHAT YOU WILL DO /h3 ul liWrite and maintain the scripts necessary to integrate security gates (SAST, DAST, SCA) seamlessly into the CI/CD pipeline; /li liContinuously tune and configure existing security scanning tools to eliminate false positives and deliver high‑confidence alerts; /li liAssist in coding and deploying automated hardened baselines and secure coding patterns; /li liWork directly with product development teams to provide actionable, code‑level remediation guidance in Java and Python. /li /ul h3MUST HAVES /h3 ul li3–5 years of commercial experience blending software engineering and DevSecOps/AppSec; /li liSolid coding proficiency in bPython /b for automation and scripting; /li liWorking knowledge of modern CI/CD orchestration tools and practical experience interacting with vulnerability scoring frameworks; /li liAbility to operate with minimal supervision on day‑to‑day execution, reliably completing complex scripting and integration tasks; /li liUpper‑intermediate English level. /li /ul h3NICE TO HAVES /h3 ul liAbility to comfortably read and navigate Java source code; /li liHands‑on experience with specific CNAPP or ASPM platforms (e.g., Wiz); /li liBasic understanding of application threat modeling. /li /ul h3PERKS AND BENEFITS /h3 ul libProfessional growth /b: Mentorship, TechTalks, and personalized growth roadmaps. /li libCompetitive compensation /b: USD‑based pay with education, fitness, and team activity budgets. /li libExciting projects /b: Modern solutions with Fortune 500 and top product companies. /li libFlextime /b: Flexible schedule with remote and office options. /li /ul /p #J-18808-Ljbffr

pAgileEngine is seeking a Senior Product Owner to own the strategic vision and backlog prioritization for internal security tools, developer portals, and platform artifacts within a large‑scale enterprise security program. /ppYou will define and prioritize user stories across multiple engineering workstreams, drive developer experience improvements across ASPM and AI‑SDLC scanning products, and bridge executive mandates with Agile delivery pods. /p #J-18808-Ljbffr

Experteer Overview In this role you will work in the Security Operations Center to protect HBX’s systems by monitoring, detecting and responding to security alerts. You will collaborate with cross-functional teams to investigate threats, document incidents and implement response plans, while supporting patching and vulnerability testing. You will also assist with risk management, audits and compliance to uphold security standards. This opportunity sits within a company undergoing a transformative journey to become the world’s leading travel services provider, offering a dynamic, multicultural environment and opportunities to build global relationships. Compensaciones / Beneficios • Review, prioritize and investigate SIEM alerts • Document cyber incidents and implement incident response plans • Follow patch management and vulnerability testing processes • Assist with risk management, audit and compliance requirements • Monitor HBX environment through SIEM; investigate, triage, contain and escalate when needed • Provide support for internal and external security audits and monitor auditing systems Responsabilidades • Requisitos principales • attractive benefits package

pDu Pont in Valencia, Spain, seeks a Senior Endpoint AI Automation Engineer to design and operate advanced endpoint solutions focused on Intune and automation. Candidates should bring 6-8 years in Endpoint Management and strong PowerShell scripting, plus a collaborative mindset to work with Workplace Architects and security teams. /ppThe role emphasizes secure, scalable endpoint engineering with close coordination with Workplace Architects to optimize enterprise-level deployments and automation /p #J-18808-Ljbffr

Te queremos en nuestro equipo como Offensive Security Consultant! /b /p h3Qué vas a hacer aquí con nosotros? /h3 ul liAuditorías de seguridad en modalidad de caja negra a aplicaciones Web (Frontal Web, Webservices, etc).Auditorías de seguridad a aplicaciones móviles (Android e IOS).Reporte de m

Experteer Overview As a Product Security Incident Response Engineer, you address vulnerabilities in ADI products and drive timely, cost-effective remediation. You collaborate with product teams to triage and fix issues within the PSIRT framework, across multiple product lines. You’ll assess security during development and communicate findings to stakeholders, enabling safer, reliable products. This role combines incident response with lifecycle security improvements to support ADI’s mission of secure, innovative solutions. You will join a cross-functional security team and help shape the PSIRT process and product resilience. Compensaciones / Beneficios • Coordinate incident response activities across multiple product lines with emphasis on software • Provide incident response expertise for IoT, hardware, web, and/or software applications • Partner with engineering teams to identify, triage, develop, and test remediations per PSIRT process • Assist with security assessments of products during development to meet standards and best practices • Communicate findings and remediation plans with security researchers and internal stakeholders • Learn new technologies and tooling to effectively apply PSIRT • Drive process improvements for PSIRT and product development lifecycle Responsabilidades • 3+ years of incident response experience in IoT, hardware, web, or software applications • Strong understanding of security fundamentals • Excellent communication with external researchers and internal stakeholders • Willingness to learn new technologies and tools • Bachelor's Degree • Travel up to 10% Requisitos principales •

pVortech PCI Group in Valencia, Spain seeks a Vulnerability Management Engineer focused on Application Security to join an international tech environment. You will identify, validate and track vulnerabilities across web, mobile and cloud apps, collaborating with development and security teams to improve secure SDLC. /ppYou'll use SAST/DAST/SCA tools and Burp Suite, prioritize risks by impact, and coordinate remediation with stakeholders in a hybrid work setup. /p #J-18808-Ljbffr

Requisitos Imprescindibles /h3 pMECES 2 en el sector TI/Informático.JOB DESCRIPTION /h3 h3Tareas /h3 ul liAM: Administración total de la plataforma corporativa, actualización de firmas y monitorización de amenazas.Actualizaciones: Distribución crítica de parches de seguridad mensuales de Micro

pTeladoc Health International busca médico pediatra para atención virtual. El candidato asesorará a pacientes pediátricos, realizará entrevistas y determinará el nivel de atención necesario, manteniendo la calidad según directrices del cliente y Teladoc Health. /ppSe ofrece modalidad 100% remota desde España, con horario de tardes o mañanas algunos días a la semana, y guardia de 24h de fin de semana al mes, distribuida en dos días. /p #J-18808-Ljbffr

Te queremos en nuestro equipo como bOffensive Security Consultant /b! /p h3¿Qué vas a hacer aquí con nosotros? /h3 ul liAuditorías de seguridad en modalidad de caja negra a aplicaciones Web (Frontal Web, Webservices, etc).Auditorías de seguridad a aplicaciones móviles (Android e IOS).Reporte d

ph3Senior Security Engineer – Full remote in Spain /h3 pAbout us /p pAt Auctane, we are united by a passion to help businesses deliver — whatever their size, wherever they are, and however they operate. We make it possible for businesses to meet the ever-changing requirements of their industry and customer expectations. Auctane products enable hundreds of thousands of businesses to annually mail and ship billions of items — over $200 billion worth — to recipients around the globe. /p pThe Auctane family of mailing and shipping software products includes ShipStation, Stamps.com, ShipStation API, Metapack, GlobalPost, and Packlink. Our partners include Amazon, UPS, USPS, eBay, BigCommerce, Shopify, WooCommerce, and Walmart. /p pOur values /p pWin as One. Delight Customers. Deliver Great Outcomes. /p pAbout the role /p pThe focus of this role is to bolster Auctane's global engineering and operations within the Information Security Group. This position reports directly to the CISO and entails the leadership of several security programs within the engineering and operations teams. /p pThe successful candidate will be instrumental in defining and developing the technology and processes governing cybersecurity practices to secure Auctane's global infrastructure. The role will specifically concentrate on securing the Enterprise and Cloud Infrastructures, alongside managing security operations responsibilities. This critical role requires a successful candidate to be a key contributor in establishing and evolving the technology and processes that define Auctane's global cybersecurity practices. The primary focus of this position is to secure the Enterprise and Cloud Infrastructures while also managing core security operations. /p pThe Infosec group operates as part of the broader RD Tech function, which utilizes modern architectural patterns and technologies, including AI, at scale and pace. /p pThis is a full remote position based in Spain with 10% international travel requirements. /p pAbout the team /p pWe have a flat and open engineering culture where diverse opinions and perspectives are valued, data and evidence beats opinion and hierarchy, backed by honest and frank discussions. We passionately believe in forming autonomous, cross functional teams who are empowered to deliver our ambitious strategy. Our engineering culture is characterized by its flat and open structure, where diverse opinions and perspectives are highly valued. Decisions are driven by data and evidence, superseding opinion and hierarchy, and are supported by candid and transparent discussions. We are strong advocates for the formation of autonomous, cross-functional teams who are fully empowered to execute our ambitious strategy. We strongly support cross-collaboration and mission driven autonomous teams that are given full authority to implement our ambitious strategy. Our ambitious strategy is implemented by autonomous, mission-driven teams that are fully empowered to act and strongly encouraged to cross-collaborate. /p pWhat will you be doing? /p ul liReview and enrich playbooks and see opportunities for automation efficiencies in our security detection and response capabilities. /li liLiaise with engineering teams on incident response, vulnerability management and remediation actions. /li liProvide technical expertise in the support of security incidents using leading security tools, coupled with continuous learning and training. /li liWork with AWS GCP cloud-native security tooling such as GuardDuty, Security Hub, and GCP Security Command Center to ensure protection and monitoring of threats in Auctane's public cloud environments. /li liFollow up on regular security reviews, vulnerability, risk assessments and audits utilizing our CSMP tool Wiz and endpoint vulnerability tool Crowdstrike. /li liBuild relationships with all staff to promote “Security by Design” throughout the engineering teams and wider business. /li liBe part of the internal Infosec / cyber security incident process – investigate suspected attacks and help manage security incidents, including providing post-mortem analysis, identifying causes, developing solutions and preventive measures. /li liRespond swiftly to new and emerging security threats and vulnerabilities, investigate suspected attacks and be an integral part of the information security incident process. /li liLearn and train to enhance knowledge of security orchestration and automation. /li /ul pWhat are we looking for? /p ul liBachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related technical field. /li li6+ years of progressive experience in cybersecurity, with at least 3‑5 years in leading large‑scale cyber security implementations. /li liExperience defining and leading several cyber security programs for large‑scale organizations. /li liAdvanced level experience in at least one or two security domains within the enterprise and cloud infrastructures to develop threat detection and mitigation strategies. /li liExperience leading projects and programs while defining the roadmap and milestones, and communicating with technical and non‑technical stakeholders while advising senior management. /li liExperience leading other engineers and analysts while collaborating with external team members. /li liAble to balance the demands of delivering high quality and demanding timescales. /li liRelevant industry certifications (e.g. CISSP, CISM, CRISC, AWS Security, GCP Security). /li /ul pWhat will make you stand out? /p ul liExpert‑level knowledge of AWS, Azure, and/or GCP security. /li liExpertise in vulnerability and risk management across public cloud and enterprise environments. /li liExpertise in leading advanced threats detection and prevention programs in a cross‑functional environment. /li liExpertise in developing security patterns with architectural recommendations. /li liAdvanced experience in software development practices, automation with basic knowledge of AI. /li /ul pThe tech stack /p ul liAWS, GCP, SaaS, and Enterprise. /li liArtificial Intelligence Solutions (Gemini, Claude, internal). /li liCNAPP, DSPM, and cloud security solutions. /li liApplication security technologies (DAST, SAST, SCA, ASM). /li liEmail security technologies. /li liSIEM solutions and detection technologies. /li liGoogle Workspace. /li liVulnerability management solutions. /li liApplication security. /li liPython, PowerShell, Bash. /li /ul pWhat do we offer? /p ul liClear and transparent compensation plan. /li liFlexible salary benefits – save on personal income tax with Cobee for expenses like transport, restaurants, and kindergarten. /li liPrivate health insurance – free for all employees via Cigna, plus we cover 50 % for your family members. /li liGenerous time off – enjoy 26 days of holiday per year (23 base days + birthday off, Christmas Eve, and New Year’s Eve). /li liYour gear, your choice – whether you prefer Mac or Windows, or need an extra screen, we’ll make sure you’re set up for success from day one. /li liAnnual salary review – we’re committed to recognizing your professional growth. Every year, we review salaries to reflect your individual development, achievements, and impact on our business success. /li liGrow your skills – we offer up to €2,000 / year in training (certifications, conferences, workshops) to boost your growth—both technical and personal. /li liLearning resources – access internal and external training, including platforms like LinkedIn Learning, completely free. /li liHolistic wellness program – includes access to Wellhub, Curalinc (psychological support), Rocketlawyer (legal advice), and regular health webinars challenges. /li liVolunteer day – take one day off a year to volunteer and give back. /li liHealth wellness support – get up to €55 / month to cover your gym or fitness classes. /li liWeekly language classes – improve or learn a new language (English, Spanish, French, Italian, or German) in small groups with expert instructors. /li liTime for health – get 8 hours per year for personal medical appointments and 10 hours per year to support your family’s medical needs. /li liWork‑life balance – we’re flexible and people‑first. We know life happens, and we aim to make work work for you. /li liInclusive, upbeat culture – no suits here – just a welcoming, casual, and respectful space where diversity is celebrated, and you can be your full self. /li liA global, multicultural team – we’re made up of 20+ nationalities, speaking 10+ languages. All communication is in English, so everyone’s included. /li liPacklink Pro discount – enjoy 99 % off your personal shipments using our platform. /li liReferral bonuses – know someone amazing? Earn €1K–€3K when you refer candidates we hire—depending on the role. /li liCentral Madrid office – when you want a change of scenery, drop by our office in the heart of Madrid—free snacks and drinks included. /li liTeam events – we work hard and play hard with regular team‑building activities and meetups. /li /ul /p #J-18808-Ljbffr

pAgileEngine, LLC. in Valencia seeks a Senior Data Scientist to develop predictive models and analytics that power risk-based vulnerability prioritization in a large enterprise security program. /ppYou will structure massive security telemetry, build ML algorithms to eliminate noise, and establish unified dashboards to drive data-driven governance. The role requires 5+ years of data science experience with direct commercial application to vulnerability management, and expertise in Python, R, SQL, /p #J-18808-Ljbffr

ppCloudLinux is a global remote‑first company driven by our principles: do the right thing, employees first, we are remote first, and we deliver high‑volume, low‑cost Linux infrastructure and security products that help companies to increase the efficiency of their operations. Every person on our team supports each other and does what we can to ensure we all are successful. /p h3Imunify360 Security Suite /h3 pImunify360 is a product of CloudLinux Inc., the maker of the #1 OS in security and stability for hosting providers. Imunify is an innovative security solution designed specifically for shared and VPS/Dedicated servers. The automated, easy‑to‑use solution with a six‑layer approach to security delivers comprehensive and complete attack prevention. /p pCheck out our website for more information about our Imunify360 Product: /p pWe are building an engineering‑heavy security platform for protecting WordPress and its plugin ecosystem. The core challenge is turning real attacker behavior into automated, repeatable systems that scale. /p pWe are looking for a bSenior Security Engineer /b who understands exploitation deeply but prefers building tooling and automation over one‑off research. You will work on systems that: /p ul liAutomatically generate and validate exploit PoCs for known WordPress / PHP CVEs /li liAnalyze PHP execution traces from real zero‑day attacks against WordPress installations /li /ul pLLMs are a first‑class component of this work—not a novelty—used to accelerate exploit reconstruction, PoC generation, and attack workflow automation. /p pThis is an bengineering role with offensive depth /b, not a traditional pentesting or red‑team position. /p h3What You’ll Build /h3 ul liSystems to ingest, normalize, and analyze PHP execution traces: ul liFunction calls, parameters, control flow, side effects /li liNo native binary reversing—focus is PHP‑level execution and logic /li /ul /li liTooling that infers: ul liVulnerable code paths /li liAuthorization and logic flaws /li liNonce and state‑handling weaknesses /li /ul /li liAutomated pipelines that: ul liConvert CVE descriptions + PHP source code into working PoCs /li liReplay inferred exploit paths deterministically /li /ul /li liLLM‑assisted frameworks for: ul liExploit skeleton generation /li liParameter and payload inference /li liExploit mutation and robustness testing /li /ul /li liHigh‑fidelity exploit simulations targeting: ul liadmin‑ajax.php /li liWordPress REST APIs /li liPlugin‑specific endpoints /li /ul /li liInfrastructure that transforms exploit mechanics into signals usable by detection and prevention systems /li /ul h3Requirements /h3 h3Must Have /h3 ul liStrong background in security engineering or offensive security automation /li liHands‑on experience exploiting WordPress plugins, themes, or PHP applications /li liDeep understanding of: ul liPHP execution model and request lifecycle /li liWordPress internals (nonces, hooks, REST, admin flows) /li liHTTP semantics, sessions, cookies, and authorization /li /ul /li liProven ability to read, reason about, and exploit PHP source code /li liStrong Python engineering skills for building: ul liAutomation pipelines /li liAnalysis tooling /li liExploit frameworks /li /ul /li /ul h3Nice to Have /h3 ul liExploit framework usage experience like MSF, Core Impact, Immunity Canvas /li liPrior experience using LLMs to automate exploit development: ul liPoC generation /li liWorkflow automation /li liPayload mutation or inference /li /ul /li liExperience with: ul liExecution traces or application‑level call graphs /li liFuzzing or vulnerability discovery pipelines /li /ul /li liFamiliarity with tools like WPScan, Nuclei, Metasploit, Burp /li liContributions to exploit tooling, frameworks, or security automation /li liPublic CVEs or PoCs (helpful but not required) /li /ul h3What This Role Is Not /h3 ul li❌ Manual pentesting or report‑driven consulting /li li❌ SOC or alert‑triage work /li li❌ Pure vulnerability research without automation /li /ul h3Why This Role Is Interesting /h3 ul liYou’ll work with real zero‑day attack telemetry, not just public CVEs /li liYou’ll build repeatable systems, not one‑off demos /li liLLMs are used pragmatically, as part of production pipelines /li liYour work directly shapes how real WordPress attacks are detected and stopped /li liHigh autonomy, deep technical ownership /li /ul h3Benefits /h3 h3What’s in it for you? /h3 ul liA focus on professional development /li liInteresting and challenging projects /li liFully remote work with flexible working hours, that allows you to schedule your day and work from any location worldwide /li liPaid 24 days of vacation per year, 10 days of national holidays, and unlimited sick leaves /li liCompensation for private medical insurance /li liCo‑working and gym/sports reimbursement /liliBudget for education /li liThe opportunity to receive a reward for the most innovative idea that the company can patent /li /ul pBy applying for this position, you consent to the processing of your personal data as described in our Privacy Policy ( which provides detailed information on how we maintain and handle your data. /p /p #J-18808-Ljbffr

pAuctane is looking for a Senior Security Engineer to lead cybersecurity initiatives within a remote setting in Spain. The role emphasizes securing enterprise and cloud infrastructures while managing security operations and leading projects. /ppThe ideal candidate should possess extensive experience in cybersecurity, relevant certifications, and be adept at working with teams to ensure robust security practices. Auctane offers competitive benefits including private health insurance, flexible salary plans, and generous vacation time. /p #J-18808-Ljbffr

A global technology company is seeking a Security Program Manager to lead and coordinate security initiatives. The ideal candidate will have over 5 years of experience in security program management, strong stakeholder management skills, and fluency in English. This full-time role is based in Valencia, Spain, and includes a relocation package, competitive remuneration, and opportunities for learning and development.br#J-18808-Ljbffr

TÜV SÜD busca un técnico de vigilancia para infraestructura ferroviaria para un trabajo de campo en la Comunidad Valenciana.El/la candidato/a trabajará en un equipo de asistencia técnica en obra, inspeccionando el montaje y la construcción de elementos de infraestructura, vía y catenaria.Se v