Senior Corporate Security Engineer

About the role

Nexthink, a provider of digital employee experience management software, is hiring a Senior Corporate Security Engineer in Madrid. You will protect the security of the company's internal environment, architecting the security fabric behind its rapid growth. Working closely with IT, business teams and the Cloud and Application Security teams, you will secure the identity, devices and applications used by employees worldwide, and lead detection and response for the corporate environment.

Key responsibilities

• Identity-centric security: contribute to passwordless authentication and Zero Trust architecture, manage secure provisioning and lifecycle, and streamline onboarding/offboarding with HR and IT
• Endpoint and infrastructure security: define security baselines for Windows and macOS endpoints and mobile devices via MDM (Intune/Jamf), tune EDR/XDR solutions, secure the corporate Azure footprint, run vulnerability scans and coordinate patch management
• Security engineering: support Infrastructure-as-Code, hardening and compliance of endpoints and servers
• SaaS security: assess third-party SaaS integrations, vet new vendors with Legal and Compliance, and configure CASB and DLP policies
• Detection, response and automation: lead incident response, develop Python/PowerShell scripts and SOAR workflows, hunt for threats, and write incident response playbooks
• Audits and compliance: design security controls and support evidence collection for audits
• Culture and collaboration: act as security liaison to IT and business teams, promote DevSecOps, and deliver security awareness training

Required profile

• 5-8 years of hands-on experience in corporate security, IT security engineering or a SOC role in a cloud-first environment
• Fluent English and proven ability to influence security best practices across non-security teams
• Experience with security awareness training platforms and phishing simulation tools

Required skills

• Hardening of macOS/Windows and MDM/UEM management
• Vulnerability and patch management
• EDR tools and SIEM log analysis
• Python and Terraform for automation
• Bonus: Okta and Microsoft Entra ID, FIDO2/WebAuthn, PowerShell, ISO 27001/27701, SOC 2, FedRAMP, and Azure/AWS for internal workloads

What we offer

• Permanent contract with a competitive compensation package
• Private health insurance (Sanitas) and fully covered daily meal vouchers of 11 EUR
• Hybrid work model and flexible hours
• Unlimited vacation plus 3 company-paid volunteer days
• Gym subscription allowance of up to 25 EUR per month