Security and Technological Risk Consultant

Location: Madrid / other locations

Work Model: Hybrid

Experience: 2+ years

Salary: Up to €38,000 gross/year

English: High level

• Stable contract.
• Salary: up to €38,000 gross/year, depending on experience and suitability for the position.
• Hybrid modality.
• For professionals located in Madrid: minimum on-site presence of approximately 1 day per week.
• For professionals in other locations: on-site presence approximately 1 time per month, depending on client requirements.
• Participation in technological and security projects for top-tier clients.

We are looking to hire a Security and Technological Risk Consultant to participate in projects within the Security area, collaborating on risk analysis, architecture design, and the definition of security measures across different technological environments.

We are looking for a person with a global vision of security, capable of understanding both functional and technical aspects and interested in participating in high-impact technological projects.

• Carrying out security and technological risk analysis and management.
• Identification of vulnerabilities, threats, and risks associated with different solutions and architectures.
• Design and definition of security architectures and controls from a functional and technical perspective.
• Participation in projects related to Cloud, APIs, microservices, Big Data, and hybrid/multicloud environments.
• Security evaluation during the Software Development Life Cycle (SDLC).
• Analysis of access control mechanisms and application of Zero Trust principles.
• Evaluation of infrastructure and communications security: Firewall, IDS, IPS, etc.
• Analysis of data security and associated risks.
• Participation in monitoring, traceability, and event analysis systems, especially with tools such as Splunk.
• Application of security methodologies and best practices based on recognized standards and frameworks.
• Collaboration with technical and business teams to identify risks and propose mitigation measures.

• At least 2 years of experience in positions related to Security, Technological Risk, Cybersecurity, or Security Architecture.
• Experience in security risk analysis and management.
• Knowledge of standards and frameworks such as ISO, OWASP, NIST, DORA or similar.
• Knowledge of technological risk analysis and management methodologies.
• Global vision of security and technological risk, both functional and technical.
• Experience or knowledge in security architecture.
• Knowledge of SaaS, Hosting, IaaS, PaaS, and Big Data technological environments.
• Knowledge of API and microservices security.
• Experience/knowledge in Cloud, Hybrid Cloud, and Multicloud security.
• Knowledge of access control and Zero Trust architecture.
• Knowledge of perimeter security: Firewalls, IDS, and IPS.
• Knowledge of security in the Software Development Life Cycle (SDLC).
• Basic knowledge of cryptography and its main techniques and methodologies.
• Knowledge of data security and associated risk analysis.
• Knowledge of monitoring and traceability tools, especially Splunk.
• Basic knowledge of Hacking and offensive cybersecurity.
• Interest or knowledge in security applied to Artificial Intelligence and Machine Learning.
• Advanced English, both spoken and written.

We are looking for a person with analytical capacity, a transversal vision of security, and project orientation, who can interact with both technical teams and functional and business areas.

If you are interested in developing your career in Cybersecurity, Technological Risk, and Security Architecture, we want to meet you!