Incident Manager

Madrid, Andalusia

We are still looking for the very Top Talent...and we would be delighted if you were to join our team! More in details, UST is a multinational company based in North America, certified as a Top Employer and Great Place to Work company with over 35.000 employees all over the world and presence in more than 35 countries. We are leaders on digital technology services, and we provide large-scale technologic solutions to big companies. What we look for? We are looking for a Security Architect to join our team and work on exciting projects for one of our clients in the banking sector. More than 15 years of experience in IT, and at least 10 years of experience in a similar position. AWS Certifications Recognized Cyber Security certifications (at least one is a must) as ISACA, NIST, ISO, CompTIA Security+, CISSP+... etc. Vendors certifications (desired) as PaloAlto, Checkpoint, Cisco. Location: Hybrid (Madrid or Málaga) Key Responsibilities: As a Cyber Security Engineer your main objective will be to ensure compliance with security standards and principles: Evaluation and review of security architectures of the projects ensuring compliance with internal policies and principles. Support for the implementation of reference architectures, facilitating the adoption of the technologies and products of each project. Ensure compliance with Corporate Security policies, generating compliance standards for architectures. Ensure compliance with security reference standards, considering the recommendations of the Cyber Global architecture teams. Identify the best practices and trends applicable in security architectures. Alignment with the Global Cyber Security architecture teams, with active participation in global initiatives. Work closely with the CTO Architecture team. Engagement with CISO for alignment and priority definitions. Provide general advice in security topics. Mandatory requirements: Advanced English and Spanish level. Operational and analytical Cybersecurity: Digital Identity and Access Management: mastering the SAML and OpenID Connect standards. API security access: mastered in OAuth 2.0 JWT Bearer Grant and Auth Code with PKCE is a must. Good understanding of OSI Model in Network Layer. Secrets management. 5. PKI environments, cryptography, CMEK/BYOK. 6. Risk assessment / Impact analysis. AWS architecture practitioner. Threat modeling methodologies (STRIDE). Networking, security and high availability of telecommunications systems and services in each network layer. Experience in designing security solutions and architectures. More extensive knowledge of cybersecurity: cyber-attack, cyber defense, secure architecture, security management and administration. Knowledge of microservices architecture: Docker, Kubernetes, etc. ¿What can we offer? 23 days of Annual Leave plus the 24th and 31st of December as discretionary days! Numerous benefits (Heath Care Plan, Internet Connectivity, Life and Accident Insurances). Retribución Flexible´ Program: (Meals, Kinder Garden, Transport, online English lessons, Heath Care Plan...) Free access to several training platforms Professional stability and career plans UST also, compensates referrals from which you could benefit when you refer professionals. The option to pick between 12 or 14 payments along the year. Real Work Life Balance measures (flexibility, WFH or remote work policy, compacted hours during summertime...) UST Club Platform discounts and gym Access discounts If you would like to know more, do not hesitate to apply and we'll get in touch to fill you in details. UST is waiting for you! In UST we are committed to equal opportunities in our selection processes and do not discriminate based on race, gender, disability, age, religion, sexual orientation or nationality. We have a special commitment to Disability & Inclusion, so we are interested in hiring people with disability certificate.

Andalusia, Aragon, Asturias, Basque Country, Cantabria, Castile and Leon, Castile-La Mancha, Catalonia, Extremadura, Galicia, La Rioja, Madrid, Murcia, Navarra, Valencian Community, Non-peninsular

SEEKING: GCP Cloud Lead Security We are looking for a GCP Cloud Lead Security The GCP Cloud Lead Security will be responsible for defining low level strategy and configurations and supporting in the deployment of security solutions as part of GCP Cloud Strategy (Data Migration, Endpoint protection including server protection, Cloud App Security, Identity Protection, CSPM, CIEM, Workload protection) and security for GCP-based projects. TASKS & RESPONSABILITIES (Role) He/she will oversee and define technical strategy (low level design) and configurations for the following among other security solutions associated with GCP environment/s: Endpoints protection against real-time malware by identifying and blocking threats and attack surface reduction including endpoint data loss prevention. Implement strict IAM policies to ensure that only authorized users access cloud resources. Anomaly Behaviour. Apps adaptive access, device compliance and access control. Infrastructure security (serverless, containers, IaaS, PaaS, Databases). Cloud App Security (SaaS). GCP Policies and Security Governance. Security Posture Management (Cloud Compliance). WAF/DDoS Privilege access Management. File Integrity Monitoring. Integration of Logs with SIEM for monitorization Definition of use case scenarios for monitorization of GCP apps together with SOC. Strategy for AI in GCP Cloud. He/she is an operational partner and will report to the client´s Global CISO EXPERIENCE, KNOWLEDGE & SKILLS Proven work experience as a Security Engineer or GCP Platform Security Expert or similar role, with strong technical background in various IT security technologies, including infrastructure, applications, data, cloud, and network communications. Strong experience working in complex multi-country, multi-cultural, environments. Extensive experience in migration projects, moving high volume databases from legacy to cloud native solutions. An enthusiasm for staying up to date with the very latest updates about security threats and solutions. Strong time management and organizational skills Previous exposure to Linux and/or Windows Operating Systems, coding languages, and/or Networks. Strong experience on major's ERPs (SAP) with a wide experience rolling out them. Strong experience on GCP and other cloud vendors technologies (Microsoft and AWS). Strong data-oriented mindset. Excellent technical, analytical and project management skills to manage large-scale IT projects. Good leadership and interpersonal skills and be able to build strong relationships with key stakeholders. Good understanding how the different technology components in the organization support its business operations. Excellent communication skills and ability to effectively communicate the IT architecture & data strategy and plans to stakeholders and IT team members. Strong problem-solving skills to identify and manage IT architecture security risks and issues. Strong analytical and critical thinking skills, ability to work under pressure. Be an effective team player working both within and outside the IS/IT organisation. Work to bring stakeholders along with decisions. Ability to work independently and pro-actively contribute to a global team environment. Excellent interpersonal, communication and presenting skills; able to concisely communicate security risks to both technical and business audiences. Industry certification from vendors: ISC2, ISACA, GIAC, EC-Council, CompTIA, ITIL, Comptia Security Strong written and verbal communication skills in English Experience in some of the following areas: o Security products including firewalls, URL filtering, information security and EDR/XDR/NDR including Microsoft E5 license stack products and GCP security. o Emerging technologies and trends (ICS&OT, IIOT, Network, Infra, Cloud, data encryption, automotive industry technologies and vehicle security, etc.) o Identify and understand the most common application security vulnerabilities (OWASP Top 10). o Relevant laws, regulation and industry standards and frameworks related to security (NIST, SANS, CIS, ENISA, UNE, GDPR, PCI-DSS, SOC2, etc.). o Implement security controls to improve system/platform overall security. o Identity and Access Management. o Application Security, cryptography and protocols. o Secure System Development Live Cycle o Security Incident Management and monitoring o Security Operations, and Cyber Security o Vulnerability management and penetration testing o Information Security Management, Risk Management, and Asset Security o Endpoints and Server Security, MDM/MAM, Network Security, and Cloud Security o Security standards, laws, and compliance. o Business continuity and disaster recovery continuity of operations plans. Language : Fluent in English with exceptional communication skills.( minimum C1) WE OFFER: · Full-time Freelance contract · Rate: EUR320/EUR360 per day + VAT (According to proven experience) · Long Term Project. Recurrence in Projects · Location: Madrid - (Alcobendas) Hybrid 50% in person 50% teleworking per week

Madrid

Security Consultant Description: ¿Te apasiona la ciberseguridad en entornos cloud y quieres participar en proyectos de alto impacto con tecnologías punteras como Netskope y Microsoft 365?Este reto es para ti. Tenemos una vacante de SECURITY Consultant para cliente del sector publico Condiciones Contrato: indefinido Modalidad: híbrido (oficina en Madrid, zona 12 de Octubre - 2-3 días presenciales) Horario: entrada flexible 7:30-9:00; L-X 8h, M-J 9h, V 6h Salario: En función de la experiencia Qué Harás Administrar y operar herramientas de Cloud Access Security Broker (CASB) Netskope y Microsoft O365 Security Monitorizar actividad de usuarios y rendimiento en aplicaciones cloud Detectar incidencias, proponer remediación y realizar investigación forense Definir políticas y reglas de clasificación de información y accesos Gestionar confidencialidad de la información en MS 365 Participar en proyectos bajo metodología Agile Imprescindible Titulación universitaria en IT o similar 5+ años de experiencia en ciberseguridad y administración de herramientas de confidencialidad Experiencia en Netskope (CASB) y Microsoft 365 Security Conocimientos en clasificación de la información y DLP Deseable Experiencia en gestión de proyectos de seguridad Conocimientos en arquitecturas de seguridad e integración de nuevas tecnologías Habilidades de comunicación, planificación y orientación a resultados Experiencia con SecuPi Data Security Platform Qué Ofrecemos Salario competitivo en función de la experiencia Contrato indefinido u opción de Contrato Mercantil 22 días laborables de vacaciones Plan de retribución flexible: Seguro médico, cheques guardería, cheques transporte Formación en Tecnología y Soft Skills Programa de referidos: 500 EUR por candidatos recomendados que se incorporen con nosotros Sobre Grupo Digital Somos una consultora tecnológica con sede en Madrid. Especialistas en outsourcing de perfiles IT, selección y modelos Talent-as-a-Service, con foco en grandes integradores y empresas del sector financiero y digital. Apostamos por un servicio excelente, equipos autónomos y resultados medibles. Si te gusta trabajar con tecnologías punteras y en entornos que suman, aquí tendrás recorrido. amplia informacion en nuestra web www.grupodigital.eu Minimum requirements: #SECURITY #Solución de Cloud Access Security Broker (CASB) Netskope #OS365 Security

Basque Country

Aplican únicamente residentes de España Descripción del proyecto: Te incorporarás a un proyecto de alto nivel en el área de Infraestructura Cloud, enfocado en comunicaciones y seguridad, con participación activa en diseño, implantación y resolución de incidencias críticas. Responsabilidades: Diseño y definición de arquitecturas de comunicaciones para nuevos proyectos. Instalación e implantación técnica de soluciones de red y seguridad. Resolución de incidencias de nivel senior, escaladas por otros niveles técnicos. Coordinación de equipos técnicos en la ejecución de proyectos Telco. Apoyo al cliente en la gestión técnica y funcional de soluciones. Configuración, mantenimiento y cambios sobre entornos existentes. Requisitos: Ser residente de País Vasco. Titulación: Ingeniería Técnica en Telecomunicaciones Experiencia: 5 años en funciones similares Idiomas: Inglés alto Conocimientos técnicos clave: Networking: Cisco ACI Seguridad: Fortinet (Fortigate), Palo Alto Cloud: Experiencia con hiperescalares (AWS, Azure) Virtualización de redes: VMware NSX-T Coordinación técnica y trato con cliente ✨ Beneficios de ser un Happener Contrato indefinido Modalidad híbrida Rango salarial de 45K a 50K. 23 días de vacaciones hábiles por año laborado Apiux Academy: formación, entrenamientos técnicos e interacción con la comunidad tech para desarrollar tu talento al máximo Convenios con Open English Convenios con Coderhouse Certificaciones patrocinadas con Google Cloud, AWS, ISTQB Día de cumpleaños libre Bonos por nacimiento, matrimonio y referidos Happy Points: sistema de puntos canjeables por días libres Proyectos de larga duración y, en algunos casos, de alcance internacional Y-Share: posibilidad de ser dueño de una parte de la compañía 💡 En Apiux nos identificamos como una fábrica de talento con fuerte orientación al negocio Continuamente brindamos espacios a las nuevas generaciones para mostrar y desarrollar ideas, conocimientos y exponer modelos de negocios innovadores enfocados en cubrir, siempre con una propuesta de valor, las necesidades de nuestros clientes. 🔍 ¿Qué hacemos? Posicionamos el mejor talento con un enfoque estratégico, y nos esforzamos por entender a cabalidad la cultura y valores de cada uno de nuestros clientes, con el fin de hacer el match perfecto entre cliente y talento. Velamos, además, por brindar una candidate experience y employee experience ejemplar para nuestros futuros Happener. 🐝 Ser un Happener Significa pertenecer a una familia con principios integrales, donde el espíritu ágil, colaborador e innovador son el combustible que día tras día le inyectamos a nuestro corazón para hacer las cosas cada vez mejor. 🚀 Nuestros principios: We Care: Nos importa la gente, sus valores, principios, aprendizajes y creencias. We are not comfortable by being comfortable: No nos conformamos con la comodidad, queremos cambio, retos y tomar riesgos. We create and develop: Nuestro ADN está el crear oportunidades, servicios y productos para impactar al mundo. Desarrollamos talento y código. Crecimiento: Todos los happeners tenemos mentalidad de fundadores y dueños de Apiux. ¡Si Apiux crece, todos crecen! We embrace diversity: Incentivamos una cultura que hace que todos, sin importar las diferencias, sientan un ambiente de equidad, oportunidad e inclusión. 🌍 Compromiso con la diversidad e Inclusión En Apiux promovemos entornos de trabajo diversos, inclusivos y respetuosos 🤝. Garantizamos la igualdad de oportunidades sin distinción de género, edad, origen, orientación sexual, identidad de género, discapacidad u otra condición personal o social. En cumplimiento de la Ley Orgánica 3/2007, el Real Decreto Legislativo 1/2013 y la Ley 15/2022, animamos especialmente a postular a personas con discapacidad, en situación de pensión por incapacidad, y a colectivos históricamente subrepresentados. ¿Quieres ser un Happener e impactar el futuro con la Tecnología y tu Talento? ¡Esperamos tu postulación! Sé parte de la colmena, sé parte del cambio. 🐝🚀