Top Cybersecurity Jobs in Barcelona

Lead security programs to secure enterprise and cloud infrastructure, manage detection and response, run incident response and vulnerability management, liaise with engineering, automate playbooks, and provide technical leadership and training across global teams.

Lead and coordinate product security and privacy projects, maintain roadmap, manage cross-functional delivery on time and on budget, engage stakeholders and vendors, facilitate workshops, support audit remediation and training, and monitor emerging technologies and regulatory impacts.

Lead and operate Okta’s Product Security Incident Response and bug bounty programs: triage and validate vulnerabilities, coordinate remediation with engineering, manage disclosures, report program health, improve workflows, mentor junior staff, and partner with cross-functional teams to drive proactive threat detection and vulnerability management.

Lead implementation and management of security systems, monitor and triage alerts, perform incident response and forensics, manage vulnerability and bug-bounty programs, embed DevSecOps practices, administer IAM and privileged access controls, and produce security metrics and reporting for leadership.

Lead platform security for cloud and Kubernetes across AWS and GCP, build detection and response capabilities (Datadog SIEM), improve logging, identity and secrets management, create runbooks and playbooks, drive cross-functional security initiatives, and participate in security on-call rotations.

Lead end-to-end security analysis and architecture for NXP product solutions, translate regulatory and certification requirements into designs, evaluate security trade-offs, and assess risks from emerging trends (including AI/ML) to secure large-scale embedded and semiconductor products.

Lead hands-on security engineering: harden AWS, Kubernetes, and apps; implement SAST/DAST and dependency scanning; manage vulnerability program and incident response; build security training, policies, endpoint standards, and security champion network to support enterprise sales and protect user data.

Dragonfly is seeking Software Engineers for various portfolio companies, focusing on crypto technologies. Engineers of all experience levels are needed across multiple stacks.

Lead security across applications, services, infrastructure, and developer workflows. Identify, assess, and mitigate risks; run secure code reviews, threat modeling, and architecture discussions; build automation and tooling to prevent issues; harden authentication and access control; investigate incidents and manage disclosures; partner with engineering teams to design secure-by-default APIs and deployments.

Administer and improve EDR and SIEM platforms, tuning detection rules, correlation logic, endpoint policies, alerts, dashboards, and integrations. Maintain log collection, agent health, platform availability, and security visibility across endpoints, servers, cloud, and network systems. Support investigations, onboard new systems, convert security findings into monitoring improvements, track detection coverage, and produce documentation and runbooks.

Leads research and client advisory on emerging AI data security and AI ecosystem data management trends. Develops research reports, presentations, briefings, and tailored recommendations for technology executives and product leaders. Analyzes technologies, vendors, markets, and competitive landscapes; builds expert networks; delivers client inquiries and speaking engagements; and collaborates with analysts and service teams to ensure high-quality research. The role requires deep cybersecurity and AI data expertise, strong writing and presentation skills, executive presence, and up to 25% travel.

Lead and grow a senior Application Security engineering team; define AppSec strategy and roadmap; engage deeply on threat modelling, security architecture, agentic/AI-native tooling, SAST/SCA, vulnerability management and automation; embed security into the SDLC, coordinate with leadership and partner teams, and represent AppSec externally for compliance and customer interactions.

Lead end-to-end application and product security for a Kubernetes-based multi-tenant platform. Perform deep security reviews of Go services, Kubernetes controllers, and frontends; lead threat modeling; integrate automated security checks into CI; manage vulnerability lifecycle; develop security-related features; and train developers on secure coding and attack vectors.

Lead Alan's security governance, risk and compliance: own ISO 27001 ISMS; translate regulations (DORA, HDS, RGPD, NIS2) into controls; run EBIOS RM risk programme; manage audits, third-party risk, incident governance and automated evidence collection; partner with Legal, Internal Audit, Infrastructure and Engineering to embed security across the organization.

Hands-on security engineer responsible for vulnerability triage, bug-bounty management, code-level investigations (Rust/Go/Python), cloud and container security (AWS, Kubernetes), securing CI/CD and GitHub orgs, incident response, security automation, metrics/reporting, and building guardrails across the development lifecycle.

Lead security engineering across web apps, APIs, cloud (AWS/OCI), Kubernetes, and on-prem systems. Build CI/CD security, secure genomic and PHI/PII pipelines (HIPAA), run monitoring and incident response, prepare for HIPAA/SOC2/ISO27001 audits, perform pentesting/vulnerability discovery, improve logging/SIEM, and drive remediation with engineering and DevOps while raising company-wide security awareness.

Embed application security across a large cloud-native, microservices fintech platform: design secure architectures, run threat modeling, integrate SAST/DAST and dependency/secrets scanning into CI/CD, manage vulnerability lifecycle, support pentests and bug bounties, and improve secure coding and AppSec maturity.

Perform protocol-focused security research to prevent vulnerabilities on Ethereum mainnet. Tasks include AI-assisted analysis, fuzzing, manual review, reviewing hardforks and spec changes, improving security tooling and automation, coordinating disclosures, and supporting audits and audit competitions while collaborating with devops, specifications authors, and client implementers.

Lead research and advisory on application security for enterprise applications (ERP/CRM). Produce thought leadership, client-facing insights, presentations, market analysis, and support sales. Mentor analysts, drive research agenda, improve processes, and advise CIOs on security strategy, vendor evaluation, metrics, and vulnerability testing across major vendors (SAP, Salesforce, Workday, Oracle).

Produce thought-leading research and advisory on security operations, threat detection, incident response and automation. Engage clients via written research, inquiries, presentations, and events; mentor practitioners; support sales and media; and maintain expertise across SIEM, SOC ecosystems, cloud/on-prem security, and automation trends.

Define and execute the product roadmap for AI-driven blockchain security monitoring tools. Collaborate with cross-functional teams, analyze market and customer feedback, deliver features on time, and communicate with stakeholders to align expectations and improve product offerings.

Lead identification, mitigation, and prevention of security risks across teams. Architect and manage security solutions, enforce policies, perform penetration testing and purple teaming, monitor and respond to incidents, build automation and security frameworks, and collaborate on secure design and DevSecOps practices for a decentralized exchange.

Own technical customer relationships for API security across onboarding to renewal. Provide demos, technical presentations, map APIs, assess exposure, identify attack patterns and IOCs, and drive value with enterprise customers using cloud and application security solutions.

Lead design and implementation of security tooling, harden cloud and IT infrastructure, detect/investigate/remediate incidents using SIEM/EDR/SOAR, perform cloud and endpoint threat hunting with Zero Trust, administer IAM and security monitoring, evaluate and mitigate AI-enabled risks, automate detection/response, and collaborate with distributed engineering and international teams.

Own and scale Wayflyer’s security program: lead a security team, define strategy, run monitoring, detection and incident response, partner with engineering on cloud and application security, manage third‑party risk, ensure regulatory controls, and report security posture to leadership.