Security Architect

Description

**Job Description:** DXC helps global enterprises run their critical business systems and operations while modernizing IT, optimizing data architectures, and ensuring security and scalability across public, private, and hybrid clouds. The world’s largest companies and public-sector organizations rely on DXC to deploy services that drive new levels of performance, competitiveness, and customer experience across their entire IT environment. We have more than 125\.000 people in over 70 countries, upon whom our clients rely to deliver transformative technologies that ensure the success, security, and wellbeing of businesses and individuals worldwide. We create solutions and generate better outcomes for clients across their entire IT environment by combining global strengths and expertise. Learn more about how we deliver excellence to clients and colleagues at DXC.com. In Spain, we are one of the leading IT market players. We employ nearly 8\.000 professionals across thirteen locations, with centers of excellence in cutting-edge technologies such as Cloud, Business Intelligence, AI, and Automation, serving more than 200 clients across all industries—both public and private sectors. We work with the country’s top enterprises, which trust us to guide and manage their digital agendas and transform their businesses. We implement active policies promoting diversity and inclusion for people with disabilities and are proud to have approximately 49% female professionals. At DXC Spain, we are seeking a **Security Architect** to join our **Security** team. We seek someone with **technical expertise and organizational capabilities**, capable of successfully leading security project delivery. Someone who not only understands technology but can also communicate risk to the business and translate security requirements into practical solutions. **Requirements:** We seek a Security Architect with at least 3 years of experience in cybersecurity to join our team. You will be responsible for designing and implementing security solutions aligned with business objectives, actively participating in end-to-end management of technology projects. Your mission will be to define secure architectures, assess risks, ensure regulatory compliance, and collaborate closely with technical and business teams to guarantee proper implementation of security controls. **Responsibilities** * Design and maintain security architectures for cloud, on\-premise, and hybrid environments. * Conduct risk analyses and propose appropriate mitigation controls. * Define security policies, standards, and guidelines aligned with industry frameworks (ISO 27001, NIST, CIS). * Participate in technology project management: task coordination, risk management, dependency tracking, and stakeholder engagement. * Evaluate and select security tools and technologies. * Collaborate with development teams to integrate security practices into the software development lifecycle (DevSecOps). * Produce technical documentation, risk reports, and executive presentations. * Advise internal teams and clients on security matters. * Perform security reviews of infrastructure and application designs. * Participate in security incident response when required. **Required Skills** Cloud Security and Architecture * Security architecture in Azure, AWS, and/or M365\. * Design of secure architectures based on the Zero Trust model. * Network segmentation and microsegmentation. * Data protection in transit and at rest (encryption, DLP, data classification). Security Technologies * Identity and access management (IAM, PAM, MFA, SSO, RBAC). * EDR/XDR solutions and SIEM/SOAR platforms. * Firewalls, WAFs, proxies, and perimeter security solutions. * Container and Kubernetes environment security. * DevSecOps: integration of security into CI/CD pipelines (SAST, DAST, SCA). Frameworks, Regulations, and Compliance * Knowledge of standards: ISO 27001, NIST CSF, CIS Controls, MITRE ATT\&CK. * Familiarity with regulations: GDPR, ENS, PCI\-DSS. * Ability to conduct security audits and maturity assessments. Management and Communication * Experience managing technology projects (task coordination, risk management, dependency tracking, stakeholder engagement). * Ability to produce clear technical documentation and executive presentations. * Effective communication skills with both technical and business stakeholders. * Teamwork and cross-functional influence capability. * Professional English proficiency (B2 or higher). **Additional Valued Skills** * Experience with Infrastructure-as-Code tools (Terraform, CloudFormation) applied with a security focus. * Knowledge of threat modeling (STRIDE, PASTA). * Experience in penetration testing or vulnerability assessments. * Familiarity with CNAPP/CSPM platforms (Defender for Cloud, Prisma Cloud, Wiz). * Applied cryptography and certificate management (PKI) knowledge. * Experience with backup and disaster recovery solutions (DRP/BCP). * Knowledge of OT/IoT environment security. **Valued Certifications** Security certifications such as AZ\-500, SC\-100/200/900, AWS Security Specialty, Security\+, CCSK/CCSP, CISSP, CISM, or CEH are valued, though not mandatory. **Why DXC? Life at DXC** At DXC, you’ll join a company recognized for its strong values and a *people\-first* culture rooted in inclusion, belonging, and learning. You’ll find real opportunities for professional growth through impactful work on cutting-edge projects for market-leading clients, using industry-leading IT technologies. We support flexibility and work-life balance, foster an excellent working environment, and invest in continuous learning via DXC University—with unlimited certifications. We act with integrity and a strong commitment to our employees, building an inclusive culture with community impact. Moreover, it is a place to build a long-term career—with stability and a competitive social benefits package—so brilliant people can advance their careers while helping our clients succeed. At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in\-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive. **Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf.**