Cyber Security Engineer
- Compensation
- Not disclosed
- Location
- Tres Cantos, Community of Madrid
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 6+ years
- Category
- Security
- Posted
Skills
Must have
- 6 years of experience in technical cybersecurity, operations, cyber risk, technical audits, or equivalent functions (Required)
- Bachelor's degree or equivalent in Computer Science, Telecommunications, Cybersecurity, or related fields (Required)
- Spanish (Required)
- Knowledge of vulnerability management: identification, validation, prioritization, assignment, follow-up, retesting, and closure. (Required)
- Knowledge of system security, hardening, identities, privileged access, cloud, and networks. (Required)
- Ability to interpret criticality, exposure, CVSS, compensating controls, and residual risk. (Required)
- Experience reviewing configurations, logs, and technical evidence. (Required)
- Proficiency with Jira, ServiceNow, Excel, Power BI, or equivalent tools for tracking and reporting (Required)
- Organization and ability to manage different workstreams. (Required)
- Ability to prioritize based on risk, drive remediation to closure, and validate the sufficiency of actions for risk mitigation. (Required)
- Clear communication with both technical and non-technical profiles. (Required)
- Autonomy, analytical skills, and results orientation. (Required)
Nice to have
- Master's degree in Cybersecurity (Preferred)
- Cybersecurity certifications: CISSP, CISA, CISM, CRISC, Cloud Security (AWS), or equivalent (Preferred)
- Fluent English (Preferred)
- Knowledge of vulnerability identification platforms, EDR, DLP, SIEM, or equivalent solutions. (Preferred)
- Knowledge of automation through scripting: Python, Bash (Preferred)
- Practical knowledge of ISO 27001, ISO 22301, SOC 2, or PCI DSS (Preferred)
Full description
About the role
We are looking for a Cyber Security Assurance professional to join our team in Madrid, with the following requirements and experience:
As a Cyber Security Assurance Specialist these will be some of the key activities in your day-to-day:
- Review, validate, and follow up on vulnerabilities, security findings in SDLC, hardening deviations, pentesting findings, audits, and other security sources.
- Perform periodic reviews of controls related to firewalls, identities, cloud, endpoints, servers, and hardening.
- Prioritize findings based on criticality, exposure, affected asset, business context, and compensating controls.
- Maintain a consolidated backlog with owners, target dates, SLAs, blockers, exceptions, and evidence.
- Follow up on remediation plans with IT and product development.
- Define and maintain KPIs and KRIs
- Collaborate with other areas within the cybersecurity department on the definition of controls, deployment of new solutions, conducting audits, certifications, and follow-up on action plans.
What we're looking for
- 6 years of experience in technical cybersecurity, operations, cyber risk, technical audits, or equivalent functions (Required)
- Bachelor's degree or equivalent in Computer Science, Telecommunications, Cybersecurity, or related fields (Required)
- Spanish (Required)
- Knowledge of vulnerability management: identification, validation, prioritization, assignment, follow-up, retesting, and closure. (Required)
- Knowledge of system security, hardening, identities, privileged access, cloud, and networks. (Required)
- Ability to interpret criticality, exposure, CVSS, compensating controls, and residual risk. (Required)
- Experience reviewing configurations, logs, and technical evidence. (Required)
- Proficiency with Jira, ServiceNow, Excel, Power BI, or equivalent tools for tracking and reporting (Required)
- Organization and ability to manage different workstreams. (Required)
- Ability to prioritize based on risk, drive remediation to closure, and validate the sufficiency of actions for risk mitigation. (Required)
- Clear communication with both technical and non-technical profiles. (Required)
- Autonomy, analytical skills, and results orientation. (Required)
Nice to have
- Master's degree in Cybersecurity (Preferred)
- Cybersecurity certifications: CISSP, CISA, CISM, CRISC, Cloud Security (AWS), or equivalent (Preferred)
- Fluent English (Preferred)
- Knowledge of vulnerability identification platforms, EDR, DLP, SIEM, or equivalent solutions. (Preferred)
- Knowledge of automation through scripting: Python, Bash (Preferred)