Cybersecurity Consultant (German & English Speaking) – Hybrid

About the role

EY GDS Spain is expanding its Cybersecurity team and is looking for professionals with experience across different cybersecurity disciplines who are excited by complex security challenges. The role suits candidates with strong German and English skills who enjoy multicultural environments and international collaboration. You will work on cybersecurity projects with teams covering Security Operations, Threat Detection & Response, Cloud Security, IAM, Vulnerability Management, Security Architecture, GRC and Cyber Transformation.

Key responsibilities

• Support clients in designing, implementing and improving cybersecurity processes, controls and technologies.
• Take part in projects across Security Operations, Cloud Security, IAM, Threat Detection & Response, Vulnerability Management and GRC.
• Analyze security risks, incidents, vulnerabilities and emerging threats and give actionable recommendations.
• Help implement and run security tools and platforms.
• Work with technical and business stakeholders so security needs match organizational goals.
• Support security assessments, audits, compliance activities and remediation.
• Prepare documentation, reports, presentations and recommendations for clients and project teams.
• Keep improving security processes and stay up to date with trends and new technologies.

Required profile

• At least 1 year of experience in one or more cybersecurity domains (Security Operations, SIEM, Incident Response, Cloud Security, IAM, Vulnerability Management, Security Architecture, GRC or Cyber Risk).
• Experience with cybersecurity technologies, frameworks or processes.
• Knowledge of cybersecurity principles, threat landscapes and best practices.
• Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Systems, Engineering or a related field.
• Professional proficiency in German and English, written and spoken.

Required skills

• Ideally: experience with Microsoft Security Solutions, Splunk, Elastic, CrowdStrike, Palo Alto, SailPoint, CyberArk, ServiceNow or similar.
• Ideally: knowledge of Azure, AWS or Google Cloud.
• Ideally: scripting or automation (Python, PowerShell, Bash).
• Ideally: understanding of NIST, ISO 27001, CIS Controls, MITRE ATT&CK or GDPR.
• Ideally: certifications such as Security+, SC-200, AZ-500, CISSP, CISM, CCSP, CEH or GIAC.

What we offer

• Tailored training and development programs.
• Hybrid work model.
• Wellness initiatives, including psychological support sessions.
• Volunteering opportunities and recognition programs.

To apply, send your CV in English to the EY GDS Spain careers page.