Job Description

We are looking for an Infrastructure Security Engineer who will engineer and operate the technical security controls protecting Nexthink's corporate infrastructure, spanning non-cloud, cloud, and internal network environments.

You will report to the Infrastructure Security Lead, executing the hardening, patching, cloud posture, and segmentation.

Your main responsibilities will include:

- Contribute to hardening baselines across the VM fleet (Windows, Linux)
- Support security controls and initiative for Active Directory, Group Policy, and Microsoft Entra ID
- Take part in patch automation, helping drive emergency patching coverage to SLA for critical CVEs
- Contribute to cloud security posture management across Azure and AWS




- Help implement and maintain policy-as-code for cloud configuration baselines, and support remediation of configuration drift
- Help implement micro-segmentation policies and trust-model controls
- Help validate east-west traffic flows and network security control compliance against corporate standards
- Maintain patch, vulnerability, and configuration evidence to support compliance and certification audits
- Track and help remediate assigned exceptions and audit findings within defined timelines
- Take part in internal and external security audits, including evidence gathering, auditor coordination, and control walkthroughs

📌 IT Infrastructure Security Engineer (Madrid)
🏢 Nexthink
📍 Madrid