Nexthink is the leader in digital employee experience management software. The company provides IT leaders with unprecedented insight allowing them to see, diagnose and fix issues at scale impacting employees anywhere, with any applicationor network, before employees notice the issue. As the first solutionto allow IT to progress from reactive problem solving to proactive optimization, Nexthink enables its more than 1,500 customers to provide better digital experiences to more than 25+ millionemployees.

Dual headquartered in Lausanne, Switzerland and Boston, Massachusetts, Nexthink has 9 offices worldwide. We are looking for an Infrastructure Security Engineer who will engineer and operate the technical security controls protecting Nexthink's corporate infrastructure, spanning non-cloud, cloud, and internal network environments. You will report to the Infrastructure Security Lead, executing the hardening, patching, cloud posture, and segmentation.

Contribute to hardening baselines across the VM fleet (Windows, Linux) Support security controls and initiative for Active Directory, Group Policy, and Microsoft Entra ID Contribute to cloud security posture management across Azure and AWS Help implement and maintain policy-as-code for cloud configuration baselines, and support remediation of configuration drift Help implement micro-segmentation policies and trust-model controls Help validate east-west traffic flows and network security control compliance against corporate standards Maintain patch, vulnerability, and configuration evidence to support compliance and certification audits Take part in internal and external security audits, including evidence gathering, auditor coordination, and control walkthroughs 4+ years in infrastructure or security engineering, with exposure to both non-cloud and cloud environments ~ Experience hardening Windows Server, Linux,



and VMware vSphere ~ Working experience with Active Directory, Group Policy, and Microsoft Entra ID ~ Experience with Azure/AWS security controls ~ Scripting fluency in Python, PowerShell, or Bash ~ Experience with Infrastructure as Code, such as Terraform or Ansible ~ Knowledge of GitHub and GitHub Actions for CI/CD pipelines, with a notion of HashiCorp Vault for secrets management ~ Familiarity with vulnerability management platforms, cloud security certification (Azure/AWS), and ISO/SOC 2 Type 2/FedRAMP exposure are a plus ~ Professional level of spoken and written English, Spanish is a plus We are the pioneers and trailblazers of a integral IT Market Category (DEX) that is shaping the future of how the world works, giving our customers' IT Teams total digital visibility across their enterprise. This enables our IT teams to solve complex technical challenges, create ever more productive workplaces, and deliver happy, satisfied employees in the digital workplace.

Permanent

Contract and a competitive compensation package. Amazing centrally located offices near the Bernabeu Stadium.

Private Health

Insurance (Sanitas) and daily meal vouchers of 11 EUR. Hybrid work model balancing office and remote work.

Flexible

Hours and unlimited vacation (employees have unlimited paid time off on top of the 23 days of holidays we offer)plus 3 company-paid volunteer days. Reimbursement of up to 50% of the cost of English & Spanish classes. Regular company and team events like Pizza talks, Team Building activities, Christmas parties, hosting Meetups at the office and more!

The base salary for this is €33,000- €49,000 gross per year, with a total on-target earnings (OTE) range of €36,000- €54,000 including an annual performance bonus.

We set our pay ranges using objective criteria: the scope and level of the role, the skills it takes to do it well, and the relevant market data. What matters to us is what this role is worth and whether it works for you.

📌 It Infrastructure Security Engineer (Madrid)
🏢 Nexthink
📍 Madrid