Experteer Overview
Es posible que un gran número de candidatos se presenten a este puesto, así que asegúrese de enviar su CV y su solicitud lo antes posible.
In this role you will engineer and operate security controls across Nexthink’s corporate infrastructure, spanning on-premises and cloud environments. You will work with the Infrastructure Security Lead to harden systems, manage patches, and enforce cloud posture and segmentation. You’ll contribute to AD/Entra ID and policy-as-code initiatives, while ensuring compliance and secure configurations. This is a hands-on role with impact on security across Windows, Linux, VMware, and cloud services, helping Nexthink scale securely as it grows.
Compensaciones / Beneficios
• Contribute to hardening baselines for Windows and Linux VM fleet
• Support security controls for Active Directory, Group Policy, and Microsoft Entra ID
• Drive patch automation to meet SLA for critical CVEs
• Contribute to cloud security posture management across Azure and AWS
• Implement and maintain policy-as-code for cloud baselines and remediate configuration drift
• Help implement micro-segmentation policies and trust-model controls
• Validate east-west traffic and security control compliance against standards
• Maintain patch,



vulnerability, and configuration evidence for audits
• Track and remediate audit findings and exceptions within timelines
• Participate in internal and external security audits, including evidence gathering and coordination
Responsabilidades
• 4+ years in infrastructure or security engineering
• Experience hardening Windows Server, Linux, and VMware vSphere
• Working experience with Active Directory, Group Policy, and Microsoft Entra ID
• Experience with Azure/AWS security controls
• Scripting fluency in Python, PowerShell, or Bash
• Experience with xqbhyrx Infrastructure as Code (Terraform or Ansible)
• Knowledge of GitHub and GitHub Actions for CI/CD pipelines; familiarity with HashiCorp Vault for secrets management
• Familiarity with vulnerability management platforms; cloud security certification (Azure/AWS); ISO/SOC 2 Type 2/FedRAMP exposure is a plus
• Professional level English; Spanish is a plus
Requisitos principales
• Permanent contract
• Hybrid work model
• Private health insurance
• Adaptable hours
• Unlimited vacation plus 3 company-paid volunteer days
• Gym subscription reimbursement

📌 IT Infrastructure Security Engineer (Madrid)
🏢 Nexthink
📍 Madrid