Senior Corporate Security Engineer

Nexthink

Senior Corporate Security Engineer responsible for securing Nexthink's internal environment while collaborating on identity, devices, and application security.

Posted 4/22/2026full-timeRemote • Madrid • 🇪🇸 SpainSeniorWebsite

Tech Stack

Tools & technologies

CloudJamfLinuxMacOSPythonTerraform

About the role

Key responsibilities & impact

Identity-Centric Security Architecture: Contribute to the design and support the implementation of passwordless authentication and Zero Trust principles.
Manage secure provisioning and lifecycle management, ensuring least-privilege access across all business systems.
Partner with HR and IT to streamline onboarding/offboarding workflows, ensuring timely access revocation and auditability.
Define and enforce security baselines for our diverse fleet of endpoints (Windows, macOS) and mobile devices via MDM (Intune/Jamf).
Manage and tune EDR/XDR solutions to ensure high-fidelity detection on workstations and servers (Windows, Linux, macOS).
Proactively identify and mitigate security risks in our corporate environment, conducting regular security assessments & vulnerability scans.
Lead incident response activities for corporate security events (phishing, malware, lost devices).
Develop automation scripts (Python/PowerShell) and workflows (SOAR) to automate manual security tasks, evidence collection, and response actions.

Requirements

What you’ll need

5-8 years of hands-on experience in Corporate Security, IT Security Engineering, or a SOC role in a cloud-first environment.
Endpoint Mastery: Experience hardening operating systems (macOS/Windows) and managing security via MDM/UEM tools.
Vulnerability management: Proven experience in helping IT and business teams patching systems and infrastructures.
Coding Skills: Proficiency in Python and Terraform for automating APIs and security workflows.
Security Ops: Proven experience with EDR tools and SIEM log analysis.
Communication: Fluent in English with the ability to explain complex risks to non-technical stakeholders.
Proven ability to influence and drive security best practices across non-security teams.
Experience with security awareness training platforms and phishing simulation tools.

Benefits

Comp & perks

Private Health Insurance (Sanitas) and daily meal vouchers of 11 EUR will be entirely covered by us.
Flexible Hours and unlimited vacation (employees have unlimited paid time off on top of the 23 days of holidays we offer) plus 3 company-paid volunteer days.
Up to 25 EUR per month for a gym subscription.
Flexible compensation plan for childcare & public transportation.
Reimbursement of up to 50% of the cost of English & Spanish classes.
Fresh fruit, cookies, soft drinks and protein shakes at the office.
Regular company and team events like Pizza talks, Team Building activities, Christmas parties, hosting Meetups at the office and more!
Bonuses for referring successful hires after three months of continuous employment.
We offer a relocation package to people who are coming from another country.

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

passwordless authenticationZero Trust principlessecure provisioninglifecycle managementendpoint hardeningvulnerability managementautomation scriptingPythonPowerShellTerraform

Soft Skills

communicationinfluencerisk explanationcollaboration