ph3Position /h3 pWe're looking for a bCyber Security Lead /b – a technical security leader who can both run a team and stay hands‑on. This role owns the full technical security operations function at Manychat: Application Security, Infrastructure Security, and Endpoint Security. You'll manage a team of security engineers, define the operational roadmap across these three domains, and report to the Head of Security. You will be a key player in keeping our infrastructure and product protected and resilient. /p h3Responsibilities /h3 ul liLead and grow a team of AppSec, Infra Sec, and Endpoint Security engineers (currently 3 engineers). /li liOwn the end‑to‑end security operations function: detection, monitoring, incident response, and remediation across cloud, application, and endpoint layers. /li liDefine and execute operational roadmaps for Application Security, Infrastructure Security, and Endpoint/Office Security. /li liDrive adoption and administration of security tooling: EDR, SIEM, DAST/SAST, WAF, VPN, DNS security, and Okta. /li liOversee cloud security posture across AWS environments. /li liRun and coordinate security incident investigations: root cause analysis, containment, remediation, and post‑mortems. /li liPartner with Infrastructure, IT Operations, and Engineering teams to implement and improve security controls. /li liMaintain security documentation: runbooks, configurations, playbooks, and operational procedures. /li liSupport compliance requirements (SOC 2, ISO 27001) from the technical security side. /li liRepresent cyber operations in cross‑functional initiatives and contribute to strategic planning with the Head of Security.



/li /ul h3Qualifications /h3 ul li7+ years in technical security roles across AppSec, Infra Sec, or Endpoint Security. /li li3+ years in a lead or management role with direct reports. /li liExperience with developer security tooling: SAST, SCA, secrets scanning, and DAST integration into CI/CD pipelines. /li liHands‑on experience operating and administering security tooling: EDR, SIEM, DAST/SAST, WAF, VPN, and DNS security platforms. /li liStrong AWS cloud security knowledge: IAM/SSO, Security Hub, GuardDuty, CloudTrail, and AWS Config. /li liSolid understanding of application security fundamentals: OWASP Top 10, SDLC security integration, and threat modelling. /li liExperience with endpoint security: macOS and Windows hardening, MDM (Jamf or Microsoft Intune). /li liAbility to lead security incident response: coordinating teams, driving root cause analysis, and communicating findings clearly. /li liStrong communication skills — able to translate security risk into business terms for non‑technical stakeholders. /li liFluent English communication skills, both written and verbal. /li /ul h3Preferred /h3 ul liExperience operating within SOC 2 and/or ISO 27001 compliance frameworks in a SaaS environment.



/li liExperience managing identity and access using Okta or a comparable IAM platform. /li liBackground in detection engineering and SIEM log analysis. /li liDigital forensics experience. /li /ul h3Benefits /h3 ul liHybrid onboarding to start work remotely and relocation support for you and your family. /li liComprehensive health insurance for both you and your family. /li liProfessional development budget for conference tickets, online courses, and other relevant resources to help you grow. /li liFlexible benefits package to tailor perks that matter most for you. /li liHybrid work and generous leave options to prioritize your work‑life balance. /li liIn‑office perks, including free meals and snacks. /li liCompany‑funded sport activities, annual offsites and team‑building events. /li /ul h3Equal Opportunity Employer /h3 pManychat is an Equal Opportunity Employer. We're committed to building a diverse and inclusive team. We do not discriminate against qualified employees or applicants because of race, color, religion, gender identity, sex, sexual preference, sexual identity, pregnancy, national origin, ancestry, citizenship, age, marital status, physical disability, mental disability, medical condition, military status, or any other characteristic protected by local law or ordinance. /p pThis commitment is also reflected through our candidate experience. If you have individual needs that may require an accommodation during the interview process, please indicate this in your application. We will do our best to provide assistance throughout your interview process to ensure you're set up for success. /p /p #J-18808-Ljbffr

📌 Cyber Security Lead (Barcelona)
🏢 Manychat
📍 Barcelona