Security Engineer

• Administrar, operar y dar soporte a redes empresariales y centros de datos de Capa 3, incluyendo entornos WAN, conectividad entre sedes, borde de Internet e interconexión con terceros
• Diseñar, configurar y optimizar entornos de routing basados en BGP (eBGP e iBGP), garantizando rendimiento, estabilidad y alta disponibilidad
• Gestionar y optimizar protocolos de enrutamiento como OSPF e IS-IS, realizando ajustes de convergencia, redistribución y segmentación de red
• Participar en la definición de políticas de routing, gestión de VRF, control de rutas y revisión de arquitecturas de red
• Colaborar en la administración de infraestructuras redundantes con routers, firewalls y otros elementos críticos de comunicaciones
• Gestionar cambios técnicos, análisis de riesgos, planes de implantación y procedimientos de reversión
• Resolver incidencias complejas relacionadas con routing, conectividad, latencia, pérdida de paquetes, MTU, convergencia y rendimiento de red
• Realizar análisis de causa raíz y proponer acciones de mejora continua para incrementar la resiliencia y eficiencia de los servicios
• Mantener actualizada la documentación técnica, diagramas de red, inventarios IP y procedimientos operativos
• Colaborar en la transferencia de conocimiento y definición de buenas prácticas para los equipos de operación

Administrador/a de Redes y Seguridad

• Liderar talleres de análisis de riesgos con equipos multidisciplinares
• Identificar amenazas, vulnerabilidades e impactos asociados a sistemas críticos
• Realizar y mantener actualizados los análisis de riesgos durante las distintas fases del proyecto
• Definir y realizar el seguimiento de planes de tratamiento y mitigación de riesgos
• Elaborar documentación e informes de riesgos para clientes y organismos involucrados en el proyecto
• Colaborar con equipos de ingeniería, seguridad y gestión para garantizar el cumplimiento de los requisitos de seguridad
• Participar en procesos de evaluación y aseguramiento de la seguridad de sistemas críticos

Security Risk Assessment Manager – EBIOS-RM Lead

• Planificar y ejecutar auditorías internas de ciberseguridad
• Evaluar de manera independiente los controles y procesos de seguridad del proyecto
• Identificar hallazgos, debilidades y posibles incumplimientos
• Elaborar informes formales de auditoría con hallazgos y recomendaciones
• Comunicar los resultados de las auditorías a los equipos implicados
• Realizar el seguimiento de las medidas correctivas hasta el cierre de los hallazgos

Cybersecurity Internal Audit Manager

• Define technical security and privacy requirements for products, medical devices, and healthcare solutions
• Conduct Threat Modeling and Cybersecurity Risk Assessments
• Analyze product security posture and define risk mitigation measures
• Design and maintain security and privacy controls throughout the product lifecycle
• Manage and assess vulnerabilities during pre-market and post-market activities
• Assess vulnerabilities identified through SCA, SAST, DAST, IaC, Penetration Testing, and other security testing activities
• Provide technical input into remediation plans and follow up on remediation activities
• Investigate complex security issues and provide technical recommendations
• Support Security Incident Response and forensic activities
• Technically coordinate external security testing, including penetration testing, validation of findings, and remediation follow-up
• Develop and maintain technical documentation, processes, playbooks, and Product Security tools
• Stay up to date with emerging security threats, technologies, and best practices
• Act as a technical reference for Product Security, sharing knowledge and supporting less experienced security professionals
• Collaborate with Software Development, Cloud, Product Security, and Incident Response teams

Senior Product Security Engineer – Pharma

• Identify and respond to security incidents on a global scale
• Act as an incident commander to drive incidents through the entire response lifecycle
• Design and maintain security alerts, automated actions, playbooks, and escalation workflows for a high-performing 24/7 incident response capability
• Conduct threat hunting activities and anticipate future threats
• Maintain forward-thinking strategies for tools, technology, and processes that combat sophisticated threat actors
• Research threat intelligence reports and triage and manage resulting workflows
• Partner with key stakeholders across preparation, identification, analysis, containment, and post-mortem activities
• Participate in an on-call rotation

Senior Security Engineer – SecOps

• Incorporarse a un equipo multidisciplinar y global de ciberseguridad
• Participar en proyectos para reforzar la seguridad de los clientes, anticiparse a riesgos y cumplir estándares exigentes
• Definir, evaluar y fortalecer modelos de seguridad
• Contribuir a generar confianza en clientes, reguladores e inversores
• Participar en iniciativas de cumplimiento de normativas de seguridad de la información y privacidad
• Definir, desarrollar y ejecutar Planes Directores de Seguridad
• Ejecutar evaluaciones de madurez y auditorías de seguridad basadas en estándares internacionales
• Participar en proyectos de gestión de riesgos de terceros

Consultor Generalista, Ciberseguridad

• Lead AI-powered penetration testing initiatives, combining traditional offensive security techniques with AI-assisted capabilities
• Design and evolve offensive security services, methodologies, assessment frameworks, and delivery models
• Assess web applications, APIs, cloud environments, and AI-enabled systems to identify vulnerabilities and security risks
• Evaluate the security of LLM-based applications and AI agents, including prompt injection, data leakage, excessive permissions, and insecure tool execution
• Help organizations transform their pentesting programs by increasing assessment capacity and reducing delivery times without compromising quality
• Drive Secure SDLC and DevSecOps initiatives, integrating security controls into engineering workflows and CI/CD pipelines
• Build automation, tooling, and prototypes that improve efficiency and can be reused across multiple engagements
• Act as a trusted advisor for CISOs, architects, engineering teams, and security leaders
• Mentor and develop a multidisciplinary team of offensive security, application security, and DevSecOps specialists

AI Security Lead – Offensive

• Define and own JLL's enterprise identity security architecture across IdP services, Active Directory, M365, cloud platforms, and third-party SaaS
• Establish and maintain identity security policies and standards across user, non-person, on-premises, cloud, and SaaS identities
• Partner with identity security, engineering, and operations teams to translate standards into engineering and operational direction
• Lead JLL's zero trust strategy for user and third-party access
• Shape the Customer Identity and Access Management architecture for externally facing digital products
• Extend identity security architecture to machine identities, service accounts, AI, APIs, and modern authentication patterns
• Define identity governance and administration strategies, entitlement models, access certification cadence, and joiner/mover/leaver standards
• Define segregation-of-duties and least-privilege policies and translate them into enforceable entitlement structures
• Architect JLL's Privileged Access Management strategy and provide direction for PAM tooling
• Collaborate with threat management and insider threat teams on identity-aware detection and response
• Partner with Active Directory, authentication, and cloud engineering teams to implement enforceable security controls
• Serve as identity security subject matter expert for major programs, transformations, and acquisitions
• Lead security architecture reviews and design governance processes
• Mentor junior architects, engineers, developers, and security professionals
• Lead cross-functional security initiatives and support secure development training and awareness programs

Senior Identity Security Architect

• Own identity and SSO in Google Workspace, including groups, SCIM provisioning, MFA, and access policies
• Run the macOS fleet through Iru, including enrollment, configuration, patching, and compliance
• Automate joiner, mover, and leaver flows from Rippling
• Own SaaS licensing and application provisioning with lightweight support through automation and self-service
• Own security controls across AWS, GitHub, Kubernetes, and the SaaS environment
• Manage role-based access, IAM hygiene, cloud guardrails, network boundaries, and secrets management
• Run vulnerability management from findings through remediation and verification with owners and SLAs
• Run access reviews and generate audit evidence through Vanta
• Contribute security perspectives to incidents and post-incident reviews
• Use AI-assisted and agentic workflows to reduce manual work and investigate issues faster
• Report to the Senior Manager, Platform Engineering and collaborate across Maze

Senior Security Engineer

• Definir e implementar estrategias de ciberseguridad en entornos OT
• Realizar análisis de riesgos, auditorías técnicas y evaluaciones de madurez
• Diseñar arquitecturas seguras para sistemas industriales y ferroviarios
• Integrar medidas de ciberseguridad en el ciclo de vida de sistemas críticos
• Participar en proyectos de consultoría y adecuación al Cyber Resilience Act (CRA)
• Realizar análisis de impacto regulatorio y evaluaciones de cumplimiento (gap analysis)
• Definir planes de adaptación, políticas, procesos y controles de ciberseguridad
• Revisar controles de seguridad en productos, sistemas y servicios digitales
• Evaluar requisitos de security by design, gestión de vulnerabilidades, actualizaciones y ciclo de vida seguro
• Coordinar y realizar seguimiento de auditorías internas y externas
• Asesorar a clientes en la implantación de requisitos del CRA
• Integrar NIS2 Directive, IEC 62443 e ISO 27001
• Gestionar riesgos y continuidad de negocio
• Elaborar reporting ejecutivo y cuadros de mando
• Liderar equipos de consultores OT, incluyendo formación, mentoring y crecimiento
• Definir metodologías y marcos de trabajo internos
• Gestionar proyectos y mantener relación directa con clientes (CISO, CTO, ingeniería)
• Apoyar preventa y desarrollo de negocio

Security Engineer jobs in Spain