Senior Corporate Security Engineer

TL;DR

Senior Corporate Security Engineer (Cybersecurity): Architecting the security fabric for internal SaaS ecosystem and corporate environment with an accent on identity-centric Zero Trust, endpoint and infrastructure protection, SaaS security. Focus on proactive threat hunting, incident response automation, vulnerability management, and compliance controls.

Location: 100% remote work with occasional travels to meet colleagues; Madrid hub

Company

Leader in digital employee experience management software providing IT leaders with insights to optimize employee digital experiences across 1,300+ customers and 18M+ employees worldwide.

What you will do

• Design and implement passwordless authentication, Zero Trust principles, and identity lifecycle management with least-privilege access.
• Enforce security baselines for endpoints (Windows, macOS, mobile) via MDM (Intune/Jamf), manage EDR/XDR, and secure Azure corporate footprint.
• Conduct vulnerability assessments, patch management, and automate compliance checks.
• Assess and secure SaaS integrations, configure CASB/DLP policies, and vet vendors with Legal/Compliance.
• Lead incident response, develop automation scripts (Python/PowerShell), SOAR workflows, threat hunting, and playbooks.
• Support audits, automate evidence collection, and deliver security training to IT and business teams.

Requirements

• 5-8 years in Corporate Security, IT Security Engineering, or SOC in cloud-first environment.
• Experience hardening OS (macOS/Windows), MDM/UEM tools, vulnerability/patch management.
• Proficiency in Python, Terraform for automation; EDR, SIEM log analysis.
• Fluent English to explain risks to non-technical stakeholders; influence security practices across teams.
• Experience with security awareness training and phishing simulations.

Nice to have

• Deep knowledge of Okta, Microsoft Entra ID (policies, CA, SSO, SCIM, OIDC/SAML).
• FIDO2/WebAuthn implementation, PowerShell proficiency.
• Compliance standards (ISO 27001/27701, SOC 2, FedRAMP); securing Azure/AWS corporate workloads.

Culture & Benefits

• Permanent contract, competitive compensation, flexible hours, unlimited vacation + 30 holidays + 3 volunteer days.
• 100% remote with occasional travels, free professional training platforms.
• 16 weeks paid parental leave for primary caregivers (+8 months unpaid), 6 weeks for secondary; 24/7 accident insurance.
• Referral bonuses; diverse team of 75+ nationalities across 5 continents, focus on inclusion and equity.