ph3Job Description /h3 pAs a Senior Corporate Security Engineer at Nexthink, you will be responsible for the security of our internal environment. You won't just be monitoring logs; you will be architecting the security fabric that enables our rapid growth. /p pWorking in close partnership with IT, business teams and partnering with our Cloud and Application Security teams, you will secure the identity, devices, and applications used by "Nexthinkers" worldwide. You will own the security of a complex SaaS ecosystem, and lead detection and response for the corporate environment. /p h3What You Will Do /h3 h3Identity-Centric Security Architecture /h3 ul liContribute to the design and support the implementation of passwordless authentication and Zero Trust principles. /li liManage secure provisioning and lifecycle management, ensuring least‑privilege access across all business systems. /li liPartner with HR and IT to streamline onboarding/offboarding workflows, ensuring timely access revocation and auditability. /li liDefine and enforce security baselines for our diverse fleet of endpoints (Windows, macOS) and mobile devices via MDM (Intune/Jamf). /li liManage and tune EDR/XDR solutions to ensure high‑fidelity detection on workstations and servers (Windows, Linux, macOS). /li liSecure the corporate Azure footprint, ensuring proper configuration of subscriptions, networking, and resources distinct from our production product environment. /li liProactively identify and mitigate security risks in our corporate environment, conducting regular security assessments and vulnerability scans. /li liCoordinate vulnerability management and patch management. /li liCollaborate with IT to automate endpoint compliance checks and remediation workflows. /li /ul h3Security Engineering /h3 ul liSupport the development and maintenance of Infrastructure-as-Code. /li liEnsure hardening and compliance of endpoints and servers. /li /ul h3SaaS Security Integration /h3 ul liCollaborate with Legal and Compliance to vet new vendors and tools.



/li liConfigure and maintain CASB and DLP policies to safeguard sensitive corporate data without hindering productivity. /li /ul h3Detection, Response Automation /h3 ul liLead incident response activities for corporate security events (phishing, malware, lost devices). /li liDevelop automation scripts (Python/PowerShell) and workflows (SOAR) to automate manual security tasks, evidence collection, and response actions. /li liProactively hunt for threats within the corporate network and identity providers. /li liDevelop incident response playbooks including technology specific procedures and forensics collection. /li /ul h3Audits and Compliance /h3 ul liDesign and implement security controls to safeguard corporate resources, including endpoints, data storage, networking, computing and identity and access management. /li liSupport and automate evidence collection for audits. /li liAct as the primary security liaison to the IT Department and business teams, helping them build security into their operations (DevSecOps for IT). /li liDesign and deliver technical security training and awareness campaigns for engineering and business teams. /li /ul h3Qualifications /h3 ul li5-8 years of hands‑on experience in Corporate Security, IT Security Engineering, or a SOC role in a cloud‑first environment. /li liEndpoint Mastery: Experience hardening operating systems (macOS/Windows) and managing security via MDM/UEM tools. /li liVulnerability management: Proven experience in helping IT and business teams patch systems and infrastructures. /li liCoding Skills:



Proficiency in Python and Terraform for automating APIs and security workflows. /li liSecurity Ops: Proven experience with EDR tools and SIEM log analysis. /li liCommunication: Fluent in English with the ability to explain complex risks to non‑technical stakeholders. /li liProven ability to influence and drive security best practices across non‑security teams. /li liExperience with security awareness training platforms and phishing simulation tools. /li /ul h3Bonus Points /h3 ul liIdentity Expertise: Deep technical knowledge of Okta and Microsoft Entra ID (Authentication policy, Conditional Access, SSO, SCIM, OIDC/SAML). /li liExperience implementing FIDO2/WebAuthn (Passwordless). /li liFamiliarity with compliance standards (ISO 27001/27701, SOC 2, FedRAMP). /li liExperience securing Cloud Infrastructure (Azure/AWS) specifically for internal/corporate workloads. /li /ul h3Benefits /h3 ul liPermanent Contract and a competitive compensation package. /li liAmazing centrally located offices near the Bernabeu Stadium. /li liPrivate Health Insurance (Sanitas) and daily meal vouchers of 11 EUR will be entirely covered by us. /li liHybrid work model balancing office and remote work, with a structured approach for new hires to foster connections and onboarding. /li liFlexible Hours and unlimited vacation (employees have unlimited paid time off on top of the 23 days of holidays we offer) plus 3 company-paid volunteer days. /li liUp to 25 EUR per month for a gym subscription. /li liFlexible compensation plan for childcare public transportation. /li liReimbursement of up to 50% of the cost of English Spanish classes. /li liRegular company and team events like Pizza talks, Team Building activities, Christmas parties, hosting Meetups at the office and more. /li liBonuses for referring successful hires after three months of continuous employment. /li liWe offer a relocation package to people who are coming from another country. /li /ul /p #J-18808-Ljbffr

📌 Engineering (Madrid)
🏢 Nexthink
📍 Madrid