Job Description
As a Senior Corporate Security Engineer at Nexthink, you will be responsible for the security of our internal environment. You won't just be monitoring logs; you will be architecting the security fabric that enables our rapid growth.
Working in close partnership with IT, business teams and partnering with our Cloud and Application Security teams, you will secure the identity, devices, and applications used by "Nexthinkers" worldwide. You will own the security of a complex SaaS ecosystem, and lead detection and response for the corporate environment.
What You Will Do
Identity-Centric Security Architecture

Contribute to the design and support the implementation of passwordless authentication and Zero Trust principles.
Manage secure provisioning and lifecycle management, ensuring least‑privilege access across all business systems.
Partner with HR and IT to streamline onboarding/offboarding workflows, ensuring timely access revocation and auditability.
Define and enforce security baselines for our diverse fleet of endpoints (Windows, macOS)



and mobile devices via MDM (Intune/Jamf).
Manage and tune EDR/XDR solutions to ensure high‑fidelity detection on workstations and servers (Windows, Linux, macOS).
Secure the corporate Azure footprint, ensuring proper configuration of subscriptions, networking, and resources distinct from our production product environment.
Proactively identify and mitigate security risks in our corporate environment, conducting regular security assessments and vulnerability scans.
Coordinate vulnerability management and patch management.
Collaborate with IT to automate endpoint compliance checks and remediation workflows.

Security Engineering

Support the development and maintenance of Infrastructure-as-Code.
Ensure hardening and compliance of endpoints and servers.

SaaS Security & Integration

Collaborate with Legal and Compliance to vet new vendors and tools.
Configure and maintain CASB and DLP policies to safeguard sensitive cor

📌 Engineering (Madrid)
🏢 Nexthink
📍 Madrid