Experteer Overview
In this Senior Corporate Security Engineer role, you will architect and secure Nexthink’s internal environment to support rapid growth. You’ll collaborate with IT, HR, and security teams to design identity-centric controls, enforce least-privilege access, and automate onboarding and offboarding. You’ll own detection and response for the corporate SaaS ecosystem, balancing strong security with productivity. You will work hands-on to harden endpoints, manage EDR/XDR, and lead risk mitigation across cloud and on-prem resources. This is a mission-driven opportunity to shape Nexthink’s security fabric in a cloud-first, high-growth context.

Compensaciones / Incentivos
• Contribute to passwordless authentication design and Zero Trust implementation
• Manage secure provisioning and lifecycle management with least-privilege access
• Streamline onboarding/offboarding workflows with HR/IT and ensure auditability
• Define security baselines for Windows/macOS endpoints and mobile devices via MDM (Intune/Jamf)
• Tune and manage EDR/XDR for workstations and servers (Windows/Linux/macOS)
• Secure corporate Azure footprint, including subscriptions, networking, and resources
• Conduct regular security assessments and vulnerability scans; coordinate patch management
• Automate endpoint compliance checks and remediation workflows with IT




• Develop and maintain Infrastructure-as-Code; ensure endpoint and server hardening
• Assess and secure third-party SaaS integrations; configure CASB/DLP policies
• Lead incident response for corporate security events; develop automation and SOAR workflows
• Proactively hunt threats; develop incident response playbooks and forensics procedures
• Design and implement security controls for endpoints, data storage, networking, computing, and IAM
• Support automated evidence collection for audits
• Act as security liaison to IT and business teams; deliver security training and awareness campaigns

Responsabilidades
• 5-8 years of hands-on experience in Corporate Security, IT Security Engineering, or SOC in a cloud-first environment
• Endpoint mastery with OS hardening and MDM/UEM tools
• Vulnerability management and patching experience
• Proficiency in Python and Terraform for automating security workflows
• Experience with EDR tools and SIEM log analysis
• Fluent English and ability to explain risks to non-technical stakeholders
• Proven ability to influence security best practices across non-security teams
• Experience with security awareness training platforms and phishing simulations

Requisitos principales
• Permanent contract
• Private health insurance
• Hybrid work model
• Unlimited vacation
• Gym subscription subsidy
• Relocation package

📌 Senior Corporate Security Engineer (Madrid)
🏢 Nexthink
📍 Madrid