Senior Security Engineer

Description

**Description:** ---------------- **Join Ciberia and redefine the future of AI-powered cybersecurity!** At Iris, we don’t just build companies—we forge leaders in technological innovation. Our mission is to redefine the future of our clients through the most advanced technologies (Cloud, Cybersecurity, Data, AI). We are driven by ambition, excellence, innovation, transparency, empathy, and trust. We invite you to join Ciberia—the new global benchmark in AI-powered managed cybersecurity services, backed by Google Cloud Security. We are a Google Premier Partner in Cybersecurity for EMEA and LATAM, operating across 5 countries. If you seek an environment where your professional judgment impacts strategic projects and where you work with cutting-edge technology, this is the place for you. We are looking for a Security Engineer with a holistic profile—combining strategic architectural vision with strong operational response and management capabilities. You will be responsible for ensuring technical excellence in the design, integration, securing, and maintenance of complex technological architectures for organizations (Communications, Identity, Cloud/On\-Premise Infrastructure, Applications, and Data). This role balances technological evolution—through Proof-of-Concept (PoC) execution—with day-to-day operational resilience, ensuring business continuity under strict regulatory compliance frameworks and smooth collaboration with client personnel. **Key Responsibilities:** * Technological Evolution and Design: Lead analysis, design, and integration of new security architectures across all organizational levels; validate innovative solutions via Proof-of-Concept (PoC). * Governance and Regulatory Compliance: Ensure that all infrastructure, operations, and projects strictly comply with internal security policies and applicable regulatory frameworks (ENS and ISO 27001\). * Business Continuity and Operations: Oversee critical incident management, change control administration, and operational maintenance of security services. * Risk and Client Management: Proactively identify deviations or risks within projects and directly and professionally manage technical relationships with client personnel. **Specific Role Functions:** * Architecture Analysis and Integration: Evaluate and integrate new architectures for Communications, Identity, Infrastructure, Applications, and Data. * Multi-layer Incident Management: Timely and efficient resolution of operational incidents across Communications, Identity, Infrastructure, Applications, and Data layers. * Critical Change Management: Plan and securely execute production changes involving DNS, SSL VPN, IPSec VPN, PROXY, Firewall rules, IPS, NAC, AAD, Azure infrastructure, Office 365, and licensing. * Network Controls and Administration: Design, implement, and maintain perimeter security controls (firewalls, IPS, VPN), as well as general monitoring and administration of security infrastructure. * Auditing and Remediation: Conduct vulnerability assessments, manage remediation plans, security patches, and updates. * Monitoring and Automation: Use SIEM tools for event analysis and correlation, actively participate in security incident response, and optimize recurring tasks via scripting. **Requirements:** --------------- * Education: Degree in Computer Engineering, Telecommunications, or related field. * Experience: Minimum verifiable experience of over 4 years in designing, integrating, and securing complex technological architectures (Communications, Identity, Cloud/On\-Premise Infrastructure, and Applications). * Essential Technical Knowledge: * Solid networking knowledge: TCP/IP, Routing, Switching, DNS, VPN, segmentation, Firewalls, and Load Balancing. * Perimeter Security and Networking Certifications: Professional- or expert-level vendor certifications from leading manufacturers (e.g., Fortinet NSE 7 or equivalent). * Cloud and Microsoft Certifications (desirable, at least one of the following): Microsoft Certified: Cybersecurity Architect Expert (SC\-100\) or Microsoft Certified: Azure Security Engineer Associate (AZ\-500\). * Regulatory Compliance: In-depth knowledge and demonstrable experience implementing controls aligned with Spain’s National Security Scheme (ENS) and ISO 27001\. **Desirable:** * Familiarity with other frameworks and standards (NIST CSF, CIS Benchmarks). * Experience in automation using Python, Bash, or similar. * Prior involvement in architecture, cloud migration, or SOC transformation projects. **Key Competencies:** * Technical vision and architectural judgment. * Analytical ability and problem-solving orientation. * Commitment to continuous improvement. * Strong communication skills with both technical and non-technical stakeholders. * Ability to prioritize effectively in complex environments. * Teamwork and cross-functional collaboration. * Proactivity and autonomy.