Security Engineer

• Actuar como especialista técnico de referencia del equipo global del CISO para la coordinación y optimización continua del Centro de Operaciones de Seguridad (SOC) de Exolum y de los servicios principales de ciberseguridad, incluyendo SIEM, XDR/XSIAM, gestión de vulnerabilidades y monitorización de la seguridad de red
• Proporcionar apoyo técnico práctico en ciberseguridad al equipo del Global CISO, transformando los conocimientos operativos de seguridad en prioridades prácticas, acciones de mejora y seguimiento de proveedores
• Mantener un conocimiento actualizado y práctico de las posibles amenazas relevantes para Exolum, incluyendo actores de amenazas, campañas, tácticas, técnicas y procedimientos (TTP), y utilizar esta inteligencia para respaldar el ajuste de los casos de uso de detección, las prioridades del SOC y el enfoque de remediación de vulnerabilidades
• Aplicar una sólida experiencia práctica en tecnologías de seguridad de Palo Alto (Cortex XDR, XSIAM, NGFW/Panorama), operaciones SIEM/XDR y monitorización de seguridad de red, asesorando sobre configuración, optimización y buenas prácticas operativas
• Coordinar recursos externos (FTEs), contratistas y proveedores de servicios gestionados que prestan servicios de SOC y ciberseguridad, garantizando prioridades claras, una transferencia eficaz de tareas, calidad del servicio y seguimiento conforme a los SLA/KPI acordados
• Liderar líneas de trabajo técnicas definidas e iniciativas de mejora de servicios de complejidad moderada, elevando las decisiones estratégicas, de alto impacto o de alcance corporativo al Global CISO o al foro de gobierno correspondiente cuando sea necesario

Cybersecurity Specialist

• Engineer the Identity Lifecycle (JML & SoD): Take on our workforce identity and access ecosystem.
• Federation, Zero Trust & Integration: Design and scale our authentication and authorization foundations.
• M&A & Enterprise Transformation: You will lead the identity integration strategy for mergers and acquisitions.
• Zero-Ego Execution: You will get your hands dirty—configure integrations, write RBAC policies.
• Codify Governance & Shift Left: You will design self-service identity workflows and automated controls.
• Be the IAM Diplomat: You will be a key face of our identity transformation.

Principal Security Engineer – Identity & Access

• Lead and perform AI-assisted red team engagements across web applications, APIs, cloud workloads and infrastructure, and deliver prioritized technical reports and executive summaries.
• Manage and develop two direct reports, run regular 1:1s, performance reviews, and development plans; contribute to hiring and team growth.
• Provide clear remediation guidance and validate fixes, prioritizing critical and high findings.
• Configure, tune and maintain offensive tooling and develop automation playbooks that reduce manual triage and false positives.
• Integrate recurring security checks into CI/CD pipelines and platform processes to enable continuous testing and attack-surface reduction.
• Lead remediation workshops and knowledge transfers, and produce reusable runbooks for product and platform teams.
• Coordinate triage and handoff with SOC, IT Ops, product teams and central IT Security, and support governance and compliance mapping (OWASP, API Security Top 10, CVSS).

Lead IT Security, AI Redteamer

• Design, implement, and maintain robust security and compliance controls across Microsoft 365, Microsoft Azure, and hybrid environments.
• Act as a cybersecurity subject-matter expert for Europe and Country IT teams providing clear, practical guidance on secure design and implementation.
• Assist in embedding security into application, infrastructure, identity, endpoint, and integration architectures (including APIs and data flows), ensuring alignment with secure development lifecycle practices and architectural standards.
• Collaborate with architects, engineers, project teams, and business stakeholders to define security requirements as integral part of enterprise initiatives and technology solutions from the outset.
• Work closely with SOC and CSIRT teams to support incident response activities, including investigation, containment, and remediation, and ensure lessons learned are reflected in improved controls and architecture.
• Lead end-to-end vulnerability management activities, including vulnerability scanning, assessments, penetration testing coordination, and remediation tracking with system owners and technical teams.
• Identify, assess, and mitigate security risks across cloud and enterprise environments, driving measurable improvements in the firm’s security posture.
• Provide advanced troubleshooting and technical leadership for complex or high-impact security issues.
• Develop and maintain security documentation, standards, reports, and control frameworks.

Information Security Engineer

• Impulso Comercial y Gestión de Partners
• Fomento del product mind share en el equipo interno y en los partners.
• Realización de call out days, sesiones comerciales y formaciones a equipos internos y externos.
• Presentaciones públicas y sesiones técnicas/comerciales sobre las soluciones del portfolio (Firewall y Endpoint).
• Gestión directa de partners cuando el rol lo requiera.
• Gestión de Pipeline y Reporting
• Construcción y mantenimiento de un pipeline detallado y preciso en el CRM (Compass).
• Seguimiento semanal de la actividad de ventas, promociones y desempeño del área.
• Creación de presupuestos y seguimiento.
• Ejecución de Planes de Negocio y Marketing
• Soporte en la implementación de planes estratégicos definidos por el BDM.
• Acompañamiento en campañas y acciones de marketing específicas para impulsar la venta.
• Identificación de necesidades formativas y organización de sesiones para clientes y equipos internos.
• Soporte Operativo y Comunicación
• Punto de escalado para incidencias relacionadas con partners o ventas.
• Comunicación continua de novedades, precios, promociones y oportunidades a los equipos internos.
• Colaboración en la mejora y mantenimiento de herramientas web y plataformas internas (InTouch, LOL, microsites, configuradores, etc.).

Business Development Manager – Microsoft Security

• Own client tickets end-to-end: Solve problems across chat, email, and occasional video calls for non-VIP clients in the French market.
• Dig into the details: Investigate account activity, company profiles, and transaction history to find the right answer, not just a quick one.
• Go beyond the obvious fix: Proactively recommend products or solutions based on what each client actually needs.
• Partner with Product and Tech: Help resolve bugs and feature requests that need cross-functional problem-solving.
• Fix what's broken around you: Contribute to "broken windows" projects like improving CRM workflows or building better internal databases.

Customer Care Manager – Account Management, Security & Administration

• Plan and execute AI-assisted red team engagements across web applications, APIs, cloud workloads and infrastructure, and deliver prioritized technical reports and executive summaries.
• Provide clear remediation guidance and validate fixes, prioritizing critical and high findings.
• Configure, tune and maintain offensive tooling and develop automation playbooks that reduce manual triage and false positives.
• Integrate recurring security checks into CI/CD pipelines and platform processes to enable continuous testing and attack-surface reduction.
• Run remediation workshops and knowledge transfers, and produce reusable runbooks for product and platform teams.
• Coordinate triage and handoff with SOC, IT Ops, product teams and central IT Security, and support governance and compliance mapping (OWASP, API Security Top 10, CVSS).

IT Security, AI Redteamer

• Design, implement and operate client security solutions for Windows endpoints.
• Build and continuously improve security baselines, hardening standards and compliance policies.
• Operate, configure and optimise Microsoft Defender for Endpoint, Defender Antivirus, Firewall and ASR rules.
• Leverage Microsoft 365 E5 security — Conditional Access, Endpoint Security, Identity Protection.
• Analyse, investigate and remediate endpoint security incidents.
• Create and maintain technical concepts, documentation and operational procedures.
• Own and operate endpoint vulnerability management (identify, monitor, prioritise and remediate vulnerabilities).
• Ensure continuous monitoring and timely remediation of endpoint security weaknesses.
• Work closely with the CISO to align endpoint security with enterprise risk and compliance requirements.

IT Client Security Engineer

• Work closely with clients through a consultative approach
• Support pre-sales activities, designing tailored security solutions, preparing cost models, and presenting recommendations
• Lead cybersecurity sales and collaborate with senior client stakeholders
• Facilitate workshops and strategic discussions to identify risks
• Shape security transformation programs
• Coordinate cross-functional teams to ensure coherent delivery of security capabilities
• Oversee the development of security roadmaps
• Monitor engagement performance, identifying risks and managing dependencies
• Act as a trusted advisor for clients

Cybersecurity Sales

• Join our dynamic team as a Customer Technology Advisor and become an integral part of our cutting-edge Go-To-Market team.
• Take the lead: Coordinate the entire pre-sales process, ensuring quality and compliance verification while adhering to Kyndryl best practices.
• Support the team: You’ll support Consulting, Advisory, and Architecture activities across Sales, Pre-Sales & Delivery, collaborating closely with Customer Partners and Kyndryl Consult Partners.
• Think strategically: Identify the intricate business and technical requirements of our customers, leveraging our vast capabilities to generate winning cross-practice solutions.
• Use your extensive technical knowledge to develop profitable deals.
• Your collaboration with internal and external stakeholders will generate winning responses and create optimal technical solutions.
• Your ability to develop and deliver compelling demonstrations, proof of concepts, and prototypes will clearly demonstrate the tangible value our offerings bring to our customers.

Cybersecurity

• Plan and (help) execute penetration tests against web applications, APIs, and cloud infrastructure, and manage external pentest engagements including scoping, vendor coordination, and remediation tracking.
• Embed security across the full SDLC: leading threat modeling, security assessments, and vulnerability remediation in close collaboration with our engineering and product teams.
• Own and evolve our cloud security posture across our AWS environment, working with Wiz (CSPM, CNS, Code, AI Security) to drive risk prioritization, misconfiguration remediation, and shift-left security workflows.
• Champion security controls within our CI/CD pipelines, from IaC scanning and SAST integration to secure deployment practices, working closely with DevOps and development teams.
• Support security incident response, investigation, containment guidance, and post-incident review and help mature our detection and response workflows over time.
• Translate compliance requirements (SOC2, ISO 42001, GDPR) into concrete technical controls and act as a technical point of contact for customer security discussions, questionnaires, and enterprise onboarding.
• Conduct vendor and third-party security risk assessments to protect our supply chain and advise on emerging AI/ML security risks as these technologies become more deeply embedded in our product.
• Share knowledge and raise the craft, you’ll naturally become a technical anchor for your teammates and a collaborative voice across engineering on what good security looks like in practice.

• Colaborar en un proyecto del sector seguros en modalidad full-remote.
• Coordinar y ejecutar pruebas de penetración.
• Identificar riesgos de ciberseguridad y proponer enfoques de mitigación.
• Estructurar y metodizar múltiples actividades de seguridad concurrentes.

Coordinador/a Pentesting

• Consultor con experiencia en Sailpoint ISC, enfocado en proyectos Cyber IAM
• Incorporación en equipo IAM altamente especializado trabajando para cliente/s directos de la compañía.

Consultor Sailpoint ISC – Identity Security Cloud

• Colaborar en un proyecto del sector bancario en modalidad híbrida.
• Analizar y gestionar riesgos tecnológicos.
• Implementar estándares de ciberseguridad en el equipo de Blue Team.
• Contribuir al mantenimiento de la seguridad en entornos cloud y perimetrales.

Analista de Seguridad – Blue Team

• Work for a company that is going through significant change in becoming the world´s leading travel services provider

Cyber Security Expert – Blue Team

• Lead the implementation of an enterprise Infrastructure Automation Platform (Ansible Automation Platform), including platform design, integration, and operational readiness.
• Drive automation initiatives across infrastructure, virtualization, networking, and approved OT environments.
• Coordinate integration with enterprise platforms including ServiceNow, CMDB, Identity & Access Management (IAM), virtualization, and monitoring solutions.
• Establish governance, automation standards, operational runbooks, and support processes.
• Manage multiple OT security initiatives, including Claroty, Trellix, OT domain onboarding, and OT infrastructure remediation.
• Coordinate cross-functional teams across Infrastructure, OT, Cybersecurity, Engineering, and external vendors.
• Oversee project governance, planning, risks, budgets, dependencies, and executive reporting.
• Ensure project delivery aligns with IT security policies, GxP requirements, and enterprise architecture standards.

Senior Infrastructure Project Manager – Automation, OT Security

• Lead the delivery of a PKI modernization program, replacing legacy certificate management tooling and implementing automated certificate lifecycle management.
• Drive integration of the PKI ecosystem with ServiceNow, CMDB, and enterprise governance processes.
• Lead the rollout of wearable authentication and hardware token solutions for manufacturing and laboratory environments.
• Define a standardized authentication model and implementation roadmap aligned with the corporate IAM strategy.
• Coordinate integration with Azure AD / Microsoft Entra ID and Entra ID B2C.
• Manage vendors, technical teams, and business stakeholders throughout the project lifecycle.
• Oversee project planning, governance, risk management, budget, timelines, and executive reporting.
• Ensure delivery complies with cybersecurity standards and GxP requirements.

Senior Infrastructure Project Manager – IAM, Security

• Lead comprehensive security risk management at facilities by conducting threat and risk assessments and implementing physical, technical, and organizational protection measures aligned with business needs
• Oversee and coordinate security operations including managing external security providers, guiding local Security Coordinators, and ensuring consistent execution of daily security standards
• Manage and investigate security incidents by supporting response actions, leading internal investigations, and ensuring lessons learned are embedded into preventive measures
• Provide travel security support by advising employees before and during international business trips, addressing elevated risk situations and ensuring traveller safety
• Monitor global security developments and support special cases including situation tracking in high-risk regions, event security, expatriate protection, and handling major or sensitive security incidents

Security Expert

• Liderar la estrategia y ejecución de ciberseguridad OT en entornos críticos
• Definir e implementar estrategias de ciberseguridad en entornos OT
• Realizar análisis de riesgos, auditorías técnicas y evaluaciones de madurez
• Diseño de arquitecturas seguras para sistemas industriales y ferroviarios
• Cumplimiento normativo y CRA

Cybersecurity Advisor – OT

• Own and continuously improve our ISMS, policies, and security governance lifecycle.
• Act as a trusted advisor to engineering, product, compliance, and customer‑facing teams.
• Lead security risk assessments, maintain the risk register, and drive quarterly risk cycles.
• Ensure operational compliance with ISO 27001:2022, GSMA SAS, NIS-2 and customer security requirements and support hands-on with configuration tasks.
• Coordinate external and internal audits and assessments, ensuring evidence readiness and smooth execution.
• Lead vendor risk programs that strengthen our supply chain resilience.
• Review product and architectural changes for governance alignment and secure design.
• Collaborate with the Security Architect to connect governance with DevSecOps and cloud practices.
• Own Azure security posture, govern Microsoft Defender for Cloud findings, Entra ID Conditional Access policies, Privileged Identity Management (JIT access), and quarterly access reviews.
• Support on cross-platform governance tasks, policy alignment, and shared risk register entries covering AWS and Azure workloads.
• Enforce Zero Trust controls across cloud environments: continuous verification, least-privilege access, and RBAC/ABAC enforcement.
• Govern IaC and CI/CD pipeline security gates: review IaC templates for secrets management compliance, approve pipeline security controls, and validate rollback procedures.
• Produce structured assurance reporting for management: metrics tied to the risk register, control effectiveness, and remediation tracking for findings from Defender for Cloud and AWS Security Hub.

Security Engineer jobs in Spain

See all jobs on JobTailor