Vulnerability management: own the program and complete the SAST/DAST pipeline integration into CI/CD, ensuring full coverage and automation.Compliance automation: replace manual checklists with automated controls across firewall reviews, key rotations, audits and policy reviews.Cloud security: harden and evolve AWS and Azure security postures (SCPs, Security Hub, GuardDuty, WAF, network security, Entra ID, Intune and Defender for Endpoint).Data loss prevention: design and execute the DLP strategy across endpoints, email, cloud storage and messaging platforms.Resilience: close identified gaps in SIEM-SOC integration, incident response, BCP and DR planning.Client trust: act as the security point of contact for client audits, questionnaires and compliance certifications (ISO 27001, ENS, NIS2, DORA).Security culture: maintain and evolve corporate security policies and drive security awareness initiatives across the organization.3+ years of cybersecurity experience, ideally in financial services or regulated environments.Hands-on expertise with AWS security services (IAM, SCPs, Security Hub, GuardDuty, WAF, KMS, etc.) and the Microsoft security stack (Entra ID, Intune,



Defender for Endpoint).Proven experience in vulnerability management (OpenVAS, Nessus or equivalent) and integrating security tooling into CI/CD pipelines (SAST, DAST, secrets scanning, container scanning).Familiarity with compliance frameworks: ISO 27001, GDPR, ENS, NIS2 and DORA.Strong ability to communicate security requirements to technical teams and translate compliance obligations into actionable engineering tasks.Fluency in Spanish and EnglishSecurity certifications: CISSP, CISM, AWS Security Specialty, AZ-500, CompTIA Security+ or similar.Experience with SIEM/SOC solutions (Microsoft Sentinel, Splunk or equivalent).Background in penetration testing, red team exercises or bug bounty programmes.Experience with IaC security scanning and policy-as-code (Terraform, OPA, CloudFormation Guard).Experience automating secrets rotation (AWS Secrets Manager, Entra ID certificate lifecycle).Previous experience in a startup or small-team environment with high ownership and autonomy.25 days of vacation (and your birthday off!)Hybrid mode: 2 days in office 3 days in remote#J-18808-Ljbffr

📌 Cybersecurity Engineer (Madrid)
🏢 mscope
📍 Madrid