Andalusia Security Job Listings

Indeed

TECH_SSE Operator

Job Summary: Responsible for the administration and monitoring of security systems, detecting and blocking anomalous behavior to ensure the proper functioning of applications. Key Highlights: 1. Continuous training and cybersecurity certifications. 2. Excellent dynamic and multidisciplinary work environment. 3. Work-life balance measures and flexible working hours. **What is Telefónica Tech?** Telefónica Tech is the leading digital transformation company within the Telefónica Group. We offer a comprehensive portfolio of integrated technological services and solutions in Cybersecurity, Cloud, IoT, Big Data, Artificial Intelligence, and Blockchain, supporting our clients throughout their digital transformation journey. We are a team of over 6,200 bold professionals working daily from various locations worldwide to achieve excellence through leadership grounded in transparency and teamwork. If you identify with our core values, we look forward to meeting you! www.telefonicatech.com **What do we do in the team?** Within Telefónica Cybersecurity & Cloud Tech’s **Deploy Growth** unit, we deliver security services to clients using multiple technologies. **What will your day-to-day be like?** As responsible for administering and monitoring these systems, your objective will be to ensure the proper functioning of applications by detecting and potentially blocking anomalous network behaviors—whether triggered by external attackers attempting to compromise organizational systems or by infected internal teams interacting with their environment. As previously mentioned, capabilities of SSE-related technologies—including proxy, CASB, ZTNA, and DLP—are leveraged for this purpose. Your overall responsibilities will include: * Resolving customer cases (incidents and requests) related to SSE technologies such as Netskope, Zscaler, Prisma Access, Cisco Umbrella, etc. * Opening vendor tickets and leading their resolution. * Following Level 1 operational procedures and proposing improvements to them. * Producing deliverables such as weekly, monthly, and other periodic reports. From a technical standpoint regarding existing platforms: * Configuring/modifying/monitoring required policies in SSE technologies, including those previously mentioned. * Continuously analyzing configured security policies across technology modules without impacting protected assets—either by switching signatures and controls to block mode or identifying potential false positives that could adversely affect products and consequently impair client operational continuity. * Defining and maintaining baseline policies accounting for enhanced security and new functionalities offered by SSE technologies. * Responding to threats posing risks to the organization. * Performing supervision, adjustment, and submission of critical incident reports committed to the client. * Evaluating the deployment of new policies or modules related to the aforementioned technologies. * Participating in incident response, collaborating with the dedicated incident response team. **And for this, we believe it would be ideal if you had…** **Required Technical Knowledge:** * Advanced knowledge of Cybersecurity. * Advanced knowledge of Layer 7 and the HTTP protocol. * Advanced networking knowledge. * Unix system administration experience. * Intermediate programming and scripting skills: bash, Python, HTML, etc. * Intermediate knowledge of the OWASP framework. * Experience with tools such as Wireshark or similar. * Knowledge related to web security attack analysis: SQL injection, XSS, LFI, etc. **Desirable Technical Knowledge:** * Familiarity with SSE protection solutions. * Knowledge of security technologies such as Netskope, Zscaler, Palo Alto Prisma, Cisco Umbrella, Trellix, etc. * Experience monitoring via various consoles. * Advanced security analysis knowledge. **Soft Skills aligned with the team and project requirements:** * Leadership. * Analytical ability. * Crisis management capability. * Initiative. * Autonomy. * Communication skills. * Ability to work and organize under pressure. * Technological proactivity. **Education** Required: * University degree, diploma, or equivalent qualification (completion in progress acceptable). * Education related to the field of cybersecurity. * Highly valued: specific cybersecurity certifications (CEH, CHFI, …). **Languages** * Required: English. **What do we offer?** * Work-life balance measures and flexible working hours. * Continuous training and certifications. * Hybrid remote work model. * Attractive social benefits package. * Excellent dynamic and multidisciplinary work environment. * Volunteering programs. **\#WeAreDiverse \#WePromoteEquality** We firmly believe diverse and inclusive teams are more innovative, transformative, and achieve better results. Therefore, we promote and guarantee inclusion for all individuals regardless of gender, age, sexual orientation or identity, culture, disability, or any other condition. We want to meet you!

Rúa Cuba, 16, Santiago de Vigo, 36204 Vigo, Pontevedra, Spain

Líder de Riesgo y Cumplimiento en Ciberseguridad65070819471233121

Indeed

Líder de Riesgo y Cumplimiento en Ciberseguridad

Líder de Riesgo y Cumplimiento en Ciberseguridad **Ubicación:** Gestamp Corporate Madnum, ES, Gestamp Co **Fecha:** 12 de ene. de 2026 El/la **Líder de Riesgo y Cumplimiento en Ciberseguridad** será responsable de liderar el área global de **Gobernanza, Riesgo y Cumplimiento (GRC)** en materia de ciberseguridad dentro de la organización, garantizando la alineación con estándares internacionales, normativas sectoriales y requisitos internos. Actuará como referente del área GRC de Ciberseguridad en los 24 países donde opera la compañía, coordinando programas globales de gestión de riesgos, cumplimiento y políticas de seguridad, y asegurando un marco de control homogéneo en todas las regiones. Trabajará de forma transversal con áreas de TI, OT, ingeniería, jurídica, privacidad de datos y unidades de negocio. Principales Responsabilidades: * Gestión del área global de GRC y garantizar el cumplimiento de estándares como TISAX, NIST, GDPR, SWIFT, entre otros. * Gestión de las evidencias necesarias para certificaciones y programas de cumplimiento global. * Gestionar el **equipo global de GRC** y supervisar servicios externalizados de seguridad. * Dirigir el programa global de **concienciación y formación en ciberseguridad**. * Diseñar y mantener políticas, procedimientos y estándares corporativos. * Liderar procesos de gestión de riesgos, auditorías y evaluaciones en entornos **TI/OT**. * Priorizar planes de mitigación y supervisar su ejecución. * Gestionar la seguridad en la cadena de suministro y evaluaciones de terceros. * Crear informes ejecutivos y paneles de control de madurez, riesgos y cumplimiento. * Colaborar con unidades globales de TI, OT, ingeniería, RR. HH., jurídica y negocio. * Gestión de personas, servicios y proveedores. Requisitos: * Formación en Ingeniería Informática, Telecomunicaciones, Ciberseguridad o similar. * Certificaciones valoradas: CISM, CISSP, CRISC, ISO 27001, TISAX, NIST. * **7–10 años de experiencia** en ciberseguridad, con al menos **3–5 años en GRC**. * Experiencia liderando **equipos**, **proveedores** y proyectos internacionales. * Experiencia en programas de concienciación y cultura de seguridad. * Conocimiento de ciberseguridad en entornos industriales/OT (muy valorable). * **Inglés fluido** Competencias Claves: * Liderazgo, gestión de equipos y comunicación con partes interesadas globales. * Capacidad analítica, orientación al riesgo y toma de decisiones. * Excelentes habilidades de comunicación y gestión del cambio. * Visión estratégica y capacidad para trabajar en entornos multinacionales. *Todos los candidatos/as calificados/as serán considerados/as para empleo sin tener en cuenta raza, color, religión, sexo, orientación sexual, identidad de género, origen nacional, discapacidad o condición de veterano/a.* *Somos un empleador que ofrece igualdad de oportunidades y buscamos contratar al mejor candidato/a independientemente de su edad, creencias, discapacidad, etnia, género u orientación sexual.* Sobre nosotros Somos una empresa multinacional tecnológica presente en más de 20 países y nuestro equipo de más de 40 000 personas está compuesto por 90 nacionalidades distintas. Son la fuerza impulsora de nuestra empresa, que diseña, desarrolla y produce componentes para más de 900 modelos de los principales fabricantes de vehículos, lo que nos permite ser uno de los principales proveedores mundiales. **¿Tienes lo necesario para construir contigo el futuro de la movilidad?** * Formarás parte de un destacado grupo internacional del sector automotriz con un firme compromiso con la innovación, pionero en la Industria 4.0 y comprometido con los criterios ESG (ambientales, sociales y de gobernanza). * Esta es una oportunidad para desarrollar tu carrera profesional en un entorno global con numerosas posibilidades de crecimiento tanto profesional como personal, participando y liderando proyectos innovadores e internacionales. * Encontrarás un entorno colaborador y amigable donde prima el trabajo en equipo, la mejora continua, la confianza, un espíritu dinámico y el pensamiento creativo, así como la pasión por hacer bien el trabajo. * Trabajarás con profesionales altamente cualificados, ya que Gestamp está comprometida con la formación continua de sus equipos. **¡Únete al equipo de Gestamp!**

Córdoba, Spain

Cybersecurity Risk and Compliance Lead65070819454338122

Indeed

Cybersecurity Risk and Compliance Lead

Cybersecurity Risk and Compliance Lead **Location:** Gestamp Corporate Madnum, ES, Gestamp Co **Date:** 12 Jan 2026 The **Cybersecurity Risk and Compliance Lead** will be responsible for leading the global **Governance, Risk and Compliance (GRC)** function in cybersecurity within the organization, ensuring alignment with international standards, sector-specific regulations and internal requirements. They will act as the reference point for the Cybersecurity GRC area across the 24 countries where the company operates, coordinating global risk management, compliance and security policy programs, and ensuring a consistent control framework across all regions. They will work cross-functionally with IT, OT, engineering, legal, data privacy and business units. Key Responsibilities: * Manage the global GRC function and ensure compliance with standards such as TISAX, NIST, GDPR, SWIFT, among others. * Manage evidence required for certifications and global compliance programs. * Manage the **global GRC team** and oversee outsourced security services. * Lead the global **cybersecurity awareness and training program**. * Design and maintain corporate policies, procedures and standards. * Lead risk management processes, audits and assessments in **IT/OT** environments. * Prioritize mitigation plans and supervise their execution. * Manage supply chain security and third-party assessments. * Develop executive reports and dashboards on maturity, risks and compliance. * Collaborate with global IT, OT, engineering, HR, legal and business units. * Manage people, services and vendors. Requirements: * Degree in Computer Engineering, Telecommunications, Cybersecurity or related field. * Valued certifications: CISM, CISSP, CRISC, ISO 27001, TISAX, NIST. * **7–10 years of experience** in cybersecurity, including at least **3–5 years in GRC**. * Experience leading **teams**, **vendors** and international projects. * Experience in security awareness and security culture programs. * Knowledge of cybersecurity in industrial/OT environments (highly valued). * **Fluent English** Key Competencies: * Leadership, team management and communication with global stakeholders. * Analytical ability, risk orientation and decision-making skills. * Excellent communication and change management skills. * Strategic vision and ability to operate in multinational environments. *We are a company committed to equal opportunities. Therefore, we seek to hire the best candidate regardless of age, beliefs, disability, ethnicity, gender or sexual orientation.* About Us We are a multi-technology company present in over 20 countries and with a team of more than 40,000 people from 90 nationalities — the driving force behind our company and the reason we are one of the world’s most recognized suppliers, designing, developing and manufacturing components for over 900 models from leading vehicle manufacturers. **Are you ready to build the future of mobility with us?** * You will join an international leader in the automotive sector, strongly committed to innovation, a pioneer in Industry 4.0 and aligned with ESG (Environmental, Social and Governance) criteria. * You will develop your career in a global environment full of opportunities, enabling both professional and personal growth through participation in and leadership of international and innovative projects. * You will find a working environment that promotes teamwork, continuous improvement, trust, a dynamic and nonconformist spirit, and passion for doing things well. * You will work alongside highly qualified professionals, as Gestamp invests in the training of its teams. **Join the Gestamp team!** Apply now »

Córdoba, Spain

Software Solutions Architect63839169350147123

Indeed

Software Solutions Architect

#### **Preferred location: Córdoba, Andalucía** #### **Hybrid**  #### **Immediate incorporation** ### **What will you do?** **Analyze and transform** functional requirements into technical solutions. **Design robust, secure, and scalable software architectures.** **Lead the technological definition of projects and supervise implementation.** Define and ensure compliance with development standards and best practices. Collaborate with development, operations, and business teams. **Ensure efficient integration with existing and third-party systems.** ### **What do we offer?** Work mode: On-site / Hybrid in Córdoba Be part of a dynamic team within a growing professional environment. Good working atmosphere and cross-department collaboration. **Participation in continuous improvement and digitalization projects.** ### **Key requirements:** **University degree in Computer Engineering, Telecommunications or similar.** **Proven experience (minimum 4 years)** in software design and architecture. Knowledge and experience with modern development frameworks **(.NET, Java, Node.js, Angular, React, etc.).** Experience in **system integration and use of APIs, web services, and microservices.** **Knowledge of cloud platforms (Azure, AWS, Google Cloud) and hybrid architectures.** Ability to define standards, best practices, and design patterns. Experience in projects involving integration with third-party systems. Technical leadership skills and team coordination. Analytical, communication, and technical documentation skills. **Technical level of English** ### **Valued skills:** Certifications in **software architecture or cloud platforms.** Experience with agile methodologies **(Scrum, Kanban, etc.).** Knowledge of **cybersecurity and DevOps.**

Av. Compositor Rafael Castro, 20, Centro, 14002 Córdoba, Spain

Cybersecurity Specialist (Freelance)64694934051585124

Indeed

Cybersecurity Specialist (Freelance)

About the Position: Cybersecurity Specialist (Freelance) At **PROCESIA**, we specialize in protecting the digital assets of major national public entities. We help strengthen security through services including auditing, incident response, vulnerability analysis, and cybersecurity training. We are currently seeking a freelance **Cybersecurity Consultant** to support us on one of our projects. If you are passionate about ethical hacking, risk management, or offensive and defensive security, we want to meet you. ***️ WHAT WE EXPECT FROM YOU*** Vocational Training (Medium Level) or Technical Vocational Training (FP), Upper Secondary Education (Bachillerato), FP2 (MECES Level 1), or equivalent qualification in Computer Science and/or Telecommunications. At least 3 years of experience within the last 5 years in cybersecurity and regulatory compliance. At least one of the following certifications: * OSCP (Offensive Security Certified Professional) * OSCE (Offensive Security Certified Expert) * OSWE (Offensive Security Web Expert) * CEH (Certified Ethical Hacker) * CRISC (Certified in Risk and Information Systems Control) * CISSP (Certified Information Systems Security Professional) * CPSA (CREST Practitioner Security Analyst) * CRT (CREST Registered Tester) * GREM (GIAC Reverse Engineering Malware) * CompTIA Security+ * CSX (Cybersecurity Nexus) Cybersecurity Fundamentals Certificate * Ethical Hacking + Python ***️ YOUR RESPONSIBILITIES*** Support in Governance, Risk, and Compliance (GRC) tasks: advisory and support activities related to cybersecurity governance, risk management, legal and regulatory compliance (GRC), internal ENS compliance audits, and preparation of reports and dashboards. Support in identifying and assessing assets within the field of Cybersecurity Technical security audits of information systems and their supporting infrastructure. Cybersecurity training and awareness activities. ? * Integration into a motivated team of professionals within a dynamic working environment. * A sustainable management model and effective equality policies fostering open and inclusive workplaces. * Join a pioneering, human-centered, and approachable 100% technology company tackling real-world challenges. * Professional development opportunities. * Remote work arrangement (except for occasional in-person meetings when required). * Flexible working hours adapted to your personal circumstances. * Immediate incorporation for a Public Sector project. * Indefinite contract from day one—because we love working alongside the same people, we’re passionate about stability, and we value trust-based collaboration... * Management 3.0: co-management across the organization and shared leadership in decision-making. * Free coffee and tea for the entire team at our beautiful office. * Company-sponsored English classes and certification exam preparation. * Negotiable salary, based on experience

Andalusia, Spain

Senior Security Operations Analyst63839244401921125

Indeed

Senior Security Operations Analyst

##### **Sportserve****forms part of a remarkable group of B2C sports betting and B2B sportsbook technology companies, focused on delivering first class sports betting experiences and casino products for our users worldwide. Along with Sportion, TechSpirit, Standard Focus and Sportelligent, we are the driving force behind the world renowned sports betting company and our flagship brand, Dafabet.** ##### **Since launching our global hiring initiative, we now employ over 2,000 people worldwide, offering exciting career paths in Technology, Trading, Operations and Media. We pride ourselves on having a diverse and international culture that embraces the global community and acts locally. We offer office based, hybrid and remote work on permanent and consultancy contracts all over the world, making us the true global employer of choice.** We are looking to hire a **Senior Security Operations Analyst** to join our global team in Technology. This is a challenging, fast\-paced and exciting environment with plenty of opportunities to influence and grow the technology area. **The Senior Security Operations Analyst** plays a critical role in detecting and responding to cyber threats, refining alerting systems and leading security investigations. The ideal candidate brings deep expertise in network and infrastructure security, embraces a DevSecOps mindset and excels in collaborative, agile environments. Senior Security Operations Analyst will play a pivotal role across the Technology organization, working closely with the 3rd Line Security Engineering team to enhance threat response and protection, serving as the first line of support in responding to security incidents. The key values that we strive towards in Technology : Ownership, Continuous Improvement Mindset, Trust and Honesty. ##### **W****hat you'll be getting up to:** * Lead threat intelligence operations, collecting, analyzing and contextualizing data from internal and external sources/platforms/tools to identify any possible emerging threats and vulnerabilities. * Track and profile threat actors, malware campaigns and attack techniques relevant to the organization’s industry and assets. Participating in confidential security investigations across the business. * Collaborate closely with incident management, SOC and security engineering team to enrich detections and improve threat response effectiveness. * Produce high\-quality, actionable intelligence reports to inform stakeholders and support proactive security decisions. * Improve the team skill set by increasing and sharing knowledge, thus setting the quality and precision engineering benchmark. * Own and enhance the security posture of our remote access solution. * Develop and maintain threat intelligence feeds, tools and processes to support automated and manual analysis requirements. * Understand the importance of and be a strong advocate for non\-functionals eg. monitoring, alerting, logging. * Promoting excellence in documentation and visibility by proactively equipping ourselves with the right tools like operating procedures (SOPs) and architectural diagrams. * Take ownership of key security platforms, help mentoring and guiding Junior/Mid Engineers in their usage and improvement. * This is a fully hands\-on technical role with active participation in an on\-call ROTA, requiring direct involvement in security operations, tooling and Incident response. ##### **R****equirements:** * 5\+ years of experience in Security Operations oriented roles, including and similar to Security Engineering or any Threat Intelligence teams. * Lead the analysis and tuning of WAF traffic, collaborating with Domain/Product owners to reduce false positives and strengthen protections. * Strong experience with any SIEM solutions such as Splunk or Kibana. * Proficiency in maintaining and troubleshooting IAM platforms including SSO integration. * Practical experience with any vulnerability management and scanning solutions. * Proficient in XDR platforms, providing continuous improvement ensuring proactive detection and response capabilities (like automation playbooks). * Able to plan and drive migration activities from legacy applications to modernized cloud platforms and workloads, like WAF rules between different providers and products. * Experience with Observability tools like Grafana, Prometheus, ELK, OCI Observability. * Extensive experience and in\-depth knowledge of the Linux operating system for effective troubleshooting activities. * Problem\-solving with ability to deep dive into problems to find the underlying issues. * Attention to detail, dig into understanding what is needed rather than what may be requested. * Dealing with changes on a daily basis in a very dynamic work environment. ##### **We warmly invite applications in English.** ##### **Diversity \& Inclusion at Sportserve** At Sportserve, we are deeply committed to fostering a diverse and inclusive workplace. We believe in building a team that reflects a wide array of backgrounds, skills, and perspectives. Embracing diversity not only enriches our work culture but also drives innovation and excellence. We are proud to be an equal opportunity employer, where everyone’s contribution is valued and respected. If you’re a passionate about technology and looking to start your career in an international, forward\-thinking Sports Betting company, we’d love to hear from you. Apply now to become part of our exciting journey!

6JCW+7C Santa Margarita, Spain