* Vulnerability management: own the program and complete the SAST/DAST pipeline integration into CI/CD, ensuring full coverage and automation. * Compliance automation: replace manual checklists with automated controls across firewall reviews, key rotations, audits and policy reviews. * Cloud security: harden and evolve AWS and Azure security postures (SCPs, Security Hub, GuardDuty, WAF, network security, Entra ID, Intune and Defender for Endpoint). * Data loss prevention: design and execute the DLP strategy across endpoints, email, cloud storage and messaging platforms. * Resilience: close identified gaps in SIEM-SOC integration, incident response, BCP and DR planning. * Client trust: act as the security point of contact for client audits, questionnaires and compliance certifications (ISO 27001, ENS, NIS2, DORA). * Security culture: maintain and evolve corporate security policies and drive security awareness initiatives across the organization. * 3+ years of cybersecurity experience, ideally in financial services or regulated environments.



* Hands-on expertise with AWS security services (IAM, SCPs, Security Hub, GuardDuty, WAF, KMS, etc.) and the Microsoft security stack (Entra ID, Intune, Defender for Endpoint). * Proven experience in vulnerability management (OpenVAS, Nessus or equivalent) and integrating security tooling into CI/CD pipelines (SAST, DAST, secrets scanning, container scanning). * Familiarity with compliance frameworks: ISO 27001, GDPR, ENS, NIS2 and DORA. * Strong ability to communicate security requirements to technical teams and translate compliance obligations into actionable engineering tasks. * Fluency in Spanish and English * Security certifications: CISSP, CISM, AWS Security Specialty, AZ-500, CompTIA Security+ or similar. * Experience with SIEM/SOC solutions (Microsoft Sentinel, Splunk or equivalent). * Background in penetration testing, red team exercises or bug bounty programmes. * Experience with IaC security scanning and policy-as-code

📌 Cybersecurity Engineer (Comunidad de Madrid)
🏢 mscope
📍 Comunidad de Madrid