3 days ago
Madrid, SpainSenior
Responsibilities
- Design and support passwordless authentication, Zero Trust principles, secure provisioning, lifecycle management, and least-privilege access across business systems.
- Partner with HR and IT on onboarding, offboarding, access revocation, auditability, and endpoint compliance workflows.
- Define endpoint security baselines and manage MDM/UEM, EDR/XDR, hardening, patching, vulnerability management, and compliance for Windows, macOS, Linux, and mobile devices.
- Secure the corporate Azure environment, including subscriptions, networking, and resources separate from the production product environment.
- Assess and secure third-party SaaS integrations, browser extensions, productivity tools, vendors, CASB policies, and DLP controls.
- Lead corporate security incident response for phishing, malware, and lost-device events; perform threat hunting and develop response playbooks and forensic collection procedures.
- Develop Python and PowerShell automation and SOAR workflows for security tasks, evidence collection, remediation, and response actions.
- Support Infrastructure-as-Code, security control implementation, audits, compliance evidence collection, and security awareness training.
- Serve as the primary security liaison to IT and business teams and promote security best practices across non-security functions.
Requirements
- 5-8 years of hands-on experience in Corporate Security, IT Security Engineering, or a SOC role in a cloud-first environment.
- Experience hardening macOS and Windows operating systems and managing endpoint security through MDM/UEM tools.
- Proven experience with vulnerability management, system and infrastructure patching, EDR tools, and SIEM log analysis.
- Proficiency in Python and Terraform for API and security workflow automation.
- Fluent English communication skills and the ability to explain complex risks to non-technical stakeholders and influence non-security teams.
- Experience with security awareness training platforms and phishing simulation tools.
- Preferred experience with Okta and Microsoft Entra ID, including authentication policies, Conditional Access, SSO, SCIM, OIDC, and SAML.
- Preferred experience implementing FIDO2/WebAuthn passwordless authentication and proficiency in PowerShell.
- Familiarity with ISO 27001, ISO 27701, SOC 2, and FedRAMP compliance standards.
- Experience securing Azure or AWS cloud infrastructure for internal or corporate workloads.
Benefits
- Permanent contract with a competitive compensation package.
- Hybrid work model balancing office and remote work, with a structured onboarding approach for new hires in the Madrid hub.
- Private Sanitas health insurance and daily meal vouchers of €11 covered by the company.
- Flexible hours, unlimited paid time off in addition to 23 holiday days, and three company-paid volunteer days.
- Up to €25 per month toward a gym subscription.
- Flexible compensation plan for childcare and public transportation.
- Reimbursement of up to 50% of English and Spanish class costs.
- Fresh fruit, cookies, soft drinks, and protein shakes at the office.
- Regular company and team events, including team-building activities, Christmas parties, Pizza Talks, and office meetups.
- Bonuses for successful employee referrals after three months of continuous employment.
- Relocation package for employees moving from another country.
About Nexthink
Nexthink builds a digital employee experience (DEX) management platform used by enterprise IT teams to monitor endpoints, analyze performance, capture sentiment, and remediate issues at scale. It sells cloud-based software and services on a subscription model to improve reliability and support across the digital workplace. Founded in 2004 and headquartered in Prilly, Switzerland, the company is privately held and backed by Vista Equity Partners.