Autonomous Cybersecurity Specialist

Flexible working hours and remote work options to help you balance your professional and personal life.

A flexible compensation package that includes: meal vouchers, childcare vouchers, medical insurance, life insurance, employee discounts, and more. And if you live in Madrid, a company shuttle bus is available to get you to the office.

Access to an attractive pension plan.

Discounts on the products and services offered by our company.

Summer intensive schedule.

You'll be in charge of your own learning journey, with access to thousands of resources to keep advancing your technical expertise. Plus, you'll receive an additional €1,100 per year to further develop your skills.

The opportunity to participate in volunteer projects.

A great place to work! We're ranked among the 50 best companies to work for in Spain according to Forbes magazine.

We are diverse, and that makes us unique!

All selection processes at Mapfre are conducted under the principle of EQUAL OPPORTUNITIES and NON-DISCRIMINATION, with the APTITUDES and PERSONAL AND PROFESSIONAL MERIT of the candidate being the criteria on which the final selection for the position is based.

We create work environments that value diversity and are free from discrimination based on sex, race, ideology, religion, sexual orientation, age, nationality, disability, or any other personal, physical, or social condition.

You can consult our Diversity and Equal Opportunity policy: politica-de-diversidad-e-igualdad-de-oportunidades.pdf (mapfre.com)

By applying to this job offer, you are informed and consent to the processing by Mapfre of the personal data you have voluntarily provided through this platform. If you provide personal data of third parties other than yourself, you guarantee that you have obtained and have their prior consent to share their data and that you have informed them accordingly.

Mapfre, as the data controller, will process your data solely for the purpose of managing your participation in selection processes, for which profiles may be created and automated decisions may result from the processing of your data. In order to manage your participation in various selection processes within Mapfre Group companies, subsidiaries, investees, and Fundación Mapfre, your data may be shared with these entities and may be subject to international transfer.

You can consult additional data protection information at MAPFRE in https://www.mapfre.com/corporativo-es/clausulas/RRHHseleccion.pdf where we indicate where to exercise your rights of access, rectification, erasure, restriction, objection, and portability of your personal data.

Change your life and continue developing your professional career at Mapfre! You will be part of an international environment where you can innovate by participating in global projects focused on the latest technological trends. All this in a flexible and agile environment surrounded by excellent professionals from all over the world... are you ready?

From the Cybersecurity department, we want to recruit an Autonomous Cybersecurity Specialist specialized in software development and operating at the intersection of AI engineering and autonomous cybersecurity offense, evolving traditional ethical hacking reviews towards new pentesting models based on agents and the use of artificial intelligence.

You will collaborate and serve as the reference for ethical hacking in projects that use AI/LLMs, automation, software development pipelines, etc.

• Secure Software Development and AI Agent Review: Design, develop, and implement autonomous AI agents for pentesting (LLM-powered, multi-step workflows). Review code generated by agents, validate decision logic, identify software failure points, and guarantee predictable behavior of architectures. Perform automated reviews of prompt injection, jailbreaks, and reasoning chain manipulation.
• Automated Code Analysis: Implement mechanisms to review pull requests from a security perspective, identify vulnerabilities (injection, authentication, data confidentiality), propose architectural fixes, and guarantee compliance with internal standards. Be able to work with multiple stacks (Python, Java, Nodejs, Go, etc.) and modern frameworks used at Mapfre.
• Guarantee compliance with the European Artificial Intelligence Act (Regulation (EU) 2024/1689) for all elements developed and implemented at Mapfre that use Artificial Intelligence or agentic technology.
• Integrate advanced security laboratory tools for automated use: scanners/vulnerability identification, asset enumeration, vulnerability analysis, image and pipeline inspection, etc.
• Establish, lead, and manage services associated with secure software development, security reviews, etc.
• Participate in project definition meetings, ensuring the correct use of the aforementioned technologies and pursuing the increase in software security and company processes.
• Promote and provide specialized support in terms of security across various technological transformation projects.

In Majadahonda, Community of Madrid.

• Design, develop, and implement autonomous AI agents for pentesting and code review, identifying new vulnerabilities and performing end-to-end exploitation. Validate decision logic and identify failure points to guarantee predictable behavior of AI models.
• Perform automated batteries of prompt injection, jailbreaks, and reasoning chain manipulation, establishing guardrails that limit agent autonomy and prevent unwanted behaviors. Document edge cases and expected behavior against malicious inputs.
• Implement automatic security review mechanisms for code repositories (SCM), validating specific development activities such as pull requests for different languages (Python, Java, Node.js, Go, etc.), with the aim of detecting vulnerabilities or preventing the exposure of sensitive data. Propose solutions at an architectural level and integrate dependency analysis (SCA) to detect libraries with known CVEs, ensuring that false positives do not slow down development.
• Connect advanced security laboratory tools to automated pipelines: vulnerability scanners (DAST, SAST, IAST), asset enumeration, Docker image analysis, CI/CD pipeline inspection, APIs, and secret detection in repositories. Automate the entire flow so that reviews are executed without manual intervention.
• Classify each developed AI system or agent according to its risk level in accordance with EU Regulation 2024/1689 and perform conformity assessments. Generate and maintain required technical documentation (purpose, data, metrics, biases), ensure human oversight in high-risk systems, mark AI-generated content, and establish complaint and correction mechanisms for automated decisions. Stay updated on European Commission guidelines and prepare for internal and external audits.
• Ensure that the technical decisions adopted increase the security of the software and company processes.
• Ensure that stacks, frameworks, and technological tools comply with internal security standards.
• Permanently develop, implement, and evaluate the frameworks, methodologies, procedures, and tools necessary to carry out the analysis and management of the Cyber Risks to which Mapfre is exposed.
• Improve, through the use of automatic tools or AI, the capabilities of identifying and discarding false positives in traditional security tools.
• Understand the latest trends in cyberattacks, information system protection mechanisms, and response methods, as well as perform controlled analysis of the artifacts and techniques used in various cyberattack campaigns.
• Automate the technical checks and tests necessary to discern if Mapfre's assets are vulnerable to such attacks in different technological environments (on-premise, cloud, hybrid, etc.).
• Advise the different areas of the company on Security matters encompassed within their scope of competence.
• Prepare and execute dissemination and internal training activities on Security matters included in their scope of competence, contributing to the establishment of a corporate security culture.

• High level of English to participate in international projects.

Desirable at least 2 years of experience in project management and work team management tasks.

Strong presentation and communication skills to convey information effectively.

Ability to coordinate cross-functional teams and projects.

Ability to work under pressure.