Experteer Overview
In this role you design and secure Nexthink’s internal environment while supporting rapid growth. You’ll shape the security fabric alongside IT and cloud/security teams to protect identities, devices, and applications used by Nexthinkers worldwide. You lead detection, response, and risk mitigation for a complex SaaS ecosystem and collaborate across HR, IT, and legal to align security with business needs. This is a hands-on, architecture-focused role in a cloud-native, zero-trust context with strong impact on everyday security for the company.

Compensaciones / Ventajas
• Contribute to identity-centric security architecture, including passwordless authentication and zero-trust initiatives
• Manage secure provisioning and least-privilege access across systems; streamline onboarding/offboarding workflows
• Define security baselines for endpoints (Windows/macOS) and mobile devices via MDM (Intune/Jamf)
• Tune EDR/XDR for high-fidelity detection across workstations and servers
• Secure and configure the corporate Azure footprint distinct from production environments
• Conduct regular vulnerability assessments and coordinate patch management
• Automate endpoint compliance checks and remediation with IT
• Support Infrastructure-as-Code, hardening, and compliance of endpoints/servers




• Assess and secure third-party SaaS integrations; configure CASB and DLP policies
• Lead incident response for corporate security events; develop automation and SOAR workflows
• Harden security controls across endpoints, data storage, networking, computing, and IAM
• Collaborate with Legal/Compliance on vendor Vetting; act as security liaison to IT and business teams
• Deliver security training and awareness programs for engineering and business teams

Responsabilidades
• 5-8 years in Corporate Security, IT Security Engineering, or SOC in cloud-first environments
• Experience hardening macOS/Windows and managing security via MDM/UEM
• Proven vulnerability management and patching experience
• Proficiency in Python and Terraform for automating security workflows
• Experience with EDR tools and SIEM log analysis
• Excellent English communication; ability to explain risks to non-technical stakeholders
• Proven ability to influence security best practices across non-security teams
• Experience with security awareness training and phishing simulation tools

Requisitos principales
• Permanent contract
• Private health insurance
• Hybrid work model
• Flexible hours and unlimited vacation
• Gym subsidy
• Relocation package

📌 Senior Corporate Security Engineer (Madrid)
🏢 Nexthink
📍 Madrid