Security Architect

Cloud Security and Architecture

• Security architecture in Azure, AWS, and/or M365 environments.
• Design of secure architectures based on the Zero Trust model.
• Network segmentation and microsegmentation.
• Protection of data in transit and at rest (encryption, DLP, data classification).

Security Technologies

• Identity and access management (IAM, PAM, MFA, SSO, RBAC).
• EDR/XDR solutions and SIEM/SOAR platforms.
• Firewalls, WAF, proxies, and perimeter security solutions.
• Security in containers and Kubernetes environments.
• DevSecOps: integration of security into CI/CD pipelines (SAST, DAST, SCA).

Frameworks, Regulations, and Compliance

• Knowledge of standards: ISO 27001, NIST CSF, CIS Controls, MITRE ATT&CK.
• Familiarity with regulations: GDPR, ENS, PCI-DSS.
• Ability to conduct security audits and maturity assessments.

Management and Communication

• Experience in technology project management (coordination of tasks, risks, dependencies, and stakeholders).
• Ability to produce clear technical documentation and executive presentations.
• Effective communication skills with technical and business audiences.
• Teamwork and cross-functional influencing skills.
• Professional English proficiency (B2 or higher).

• Experience with Infrastructure as Code tools (Terraform, CloudFormation) with a security focus.
• Knowledge of threat modeling (STRIDE, PASTA).
• Experience in pentesting or vulnerability assessments.
• Familiarity with CNAPP / CSPM platforms (Defender for Cloud, Prisma Cloud, Wiz).
• Knowledge of applied cryptography and certificate management (PKI).
• Experience with backup and disaster recovery solutions (DRP/BCP).
• Knowledge of security in OT/IoT environments.

Security certifications such as AZ-500, SC-100/200/900, AWS Security Specialty, Security+, CCSK/CCSP, CISSP, CISM, or CEH will be valued, although they are not mandatory.

DXC helps global companies run their mission-critical systems and operations while modernizing IT, optimizing data architectures, and ensuring security and scalability across public, private and hybrid clouds. The world's largest companies and public sector organizations trust DXC to deploy services that drive new levels of performance, competitiveness, and customer experience across their entire IT environment.

We have over 125,000 people in more than 70 countries, trusted by our clients to deliver transformative technologies that ensure the success, security, and well-being of businesses and people worldwide. We create solutions and generate better results for clients across their entire IT landscape, combining strengths and experience on a global scale. Discover more about how we deliver excellence to clients and colleagues at DXC.com.

In Spain, we are one of the leading IT market players. We have around 8,000 professionals spread across thirteen locations, with centers of excellence in cutting-edge technologies such as Cloud, Business Intelligence, AI, and Automation, among others, serving more than 200 clients across all industries, both in the public and private sectors. We work with the country's leading companies to guide and manage their digital agendas and thus transform their businesses.

At DXC Spain, we are looking for a Security Architect to join our Security team.

We are looking for someone with technical knowledge and organizational skills, capable of leading the successful delivery of security projects. Someone who not only understands technology, but also knows how to communicate risk to the business and translate security requirements into practical solutions.

Requirements

We are looking for a Security Architect with at least 3 years of experience in cybersecurity to join our team. You will be responsible for designing and implementing security solutions aligned with business objectives, actively participating in the management of technology projects from start to finish.

Your mission will be to define secure architectures, assess risks, ensure regulatory compliance, and collaborate closely with technical and business teams to ensure the proper implementation of security controls.

• Design and maintain security architectures for cloud, on-premise, and hybrid environments.
• Conduct risk assessments and propose appropriate mitigation controls.
• Define security policies, standards, and guidelines aligned with reference frameworks (ISO 27001, NIST, CIS).
• Participate in technology project management: coordination of tasks, risks, dependencies, and stakeholders.
• Evaluate and select security tools and technologies.
• Collaborate with development teams to integrate security practices into the software development lifecycle (DevSecOps).
• Prepare technical documentation, risk reports, and executive presentations.
• Advise internal teams and clients on security matters.
• Perform security reviews of infrastructure and application designs.
• Participate in security incident response when necessary.