Senior Corporate Security Engineer

Location: Madrid, Spain; hybrid work model with office and remote work.

Base salary: €72,000–€100,000 gross per year; OTE: €79,000–€110,000 including annual performance bonus.

Company

hirify.global provides digital employee experience management software, combining real-time analytics, automation, and employee feedback across enterprise endpoints.

What you will do

• Design and support identity-centric security architecture, including passwordless authentication, Zero Trust, secure provisioning, lifecycle management, and least-privilege access.
• Define endpoint security baselines for Windows, macOS, and mobile devices; manage MDM/UEM, EDR/XDR, vulnerability management, patching, and compliance remediation.
• Secure the corporate Azure environment and support infrastructure hardening, Infrastructure-as-Code, security assessments, and vulnerability scans.
• Assess third-party SaaS integrations and maintain CASB and DLP policies to protect sensitive corporate data.
• Lead corporate incident response, threat hunting, forensic evidence collection, and detection and response automation using Python, PowerShell, and SOAR workflows.
• Implement audit controls, automate evidence collection, and deliver security training and awareness campaigns for IT, engineering, and business teams.

Requirements

• 5–8 years of hands-on experience in Corporate Security, IT Security Engineering, or a SOC role in a cloud-first environment.
• Experience hardening macOS and Windows operating systems and managing endpoint security through MDM/UEM tools.
• Experience supporting IT and business teams with vulnerability management, system patching, and infrastructure remediation.
• Proficiency in Python and Terraform for API automation and security workflows.
• Proven experience with EDR tools and SIEM log analysis.
• Fluent English and the ability to explain complex security risks to non-technical stakeholders.
• Ability to influence and drive security best practices across non-security teams.
• Experience with security awareness training platforms and phishing simulation tools.

Nice to have

• Deep technical knowledge of Okta and Microsoft Entra ID, including authentication policies, Conditional Access, SSO, SCIM, and OIDC/SAML.
• Experience implementing FIDO2/WebAuthn and passwordless authentication.
• Proficiency in PowerShell.
• Familiarity with ISO 27001/27701, SOC 2, or FedRAMP.
• Experience securing Azure or AWS cloud infrastructure for internal or corporate workloads.

Culture & Benefits

• Permanent employment with a competitive compensation package and a hybrid work model.
• Private health insurance, €11 daily meal vouchers, flexible hours, unlimited paid time off, 23 additional holiday days, and three company-paid volunteer days.
• Gym subsidy, flexible compensation for childcare and public transportation, and reimbursement of up to 50% of English and Spanish classes.
• Central Madrid office near the Bernabeu Stadium, with regular company and team events.
• Relocation package for employees coming from another country.
• Security work is positioned as an enabler, with visibility into the CISO organization and support from executive leadership.