Top Cybersecurity Jobs in Barcelona

Own and improve the security posture of Kestra’s platform, infrastructure, and open-source ecosystem. Responsibilities include penetration testing, threat modeling, vulnerability management, remediation, cloud and Kubernetes hardening, security automation in CI/CD, code reviews, supply-chain risk assessment, incident response, and continuous monitoring.

Own day-to-day security operations across endpoints, identity and access, cloud, and SaaS tools. Administer MDM, patching, encryption, access reviews, and joiner/mover/leaver processes; monitor alerts and investigate incidents; support Vanta evidence collection for SOC 2, ISO 27001, and ISO 42001; assist with vendor and customer security questionnaires; and provide practical desktop and device support.

Conduct attacker-driven security research on Aave protocol changes, smart contracts, integrations, and critical dependencies. Review architecture and code before audits or deployment, identify exploitable protocol risks, contribute to AI-assisted security tooling, and translate findings into invariants, testing, monitoring, and incident-response improvements. Collaborate with engineers, auditors, and monitoring teams while communicating risk, severity, uncertainty, and trade-offs clearly.

Lead and scale strategic partner motions (channels, GSIs, ISVs, OEMs, cloud, silicon) to drive joint go-to-market plans, revenue, and market expansion. Build executive relationships, enable partners technically and commercially, establish pipeline governance, and coordinate product, sales, marketing, and engineering to convert partner potential into measurable customer impact.

Lead research and produce thought-leading insights on application security and AI-enabled development. Advise clients, deliver presentations, mentor analysts, support sales, drive research agenda, and improve processes while providing actionable recommendations and market analysis.

Design and execute manual and automated testing for web applications, APIs, and backend services. Build regression, smoke, and critical-path automation suites; validate functional, integration, end-to-end, and non-functional requirements; identify and track defects; verify fixes; and collaborate with engineering, product, and DevOps teams. Use AI-assisted tools for test generation, flaky-test triage, and log analysis while improving QA processes, tooling, coverage, and release quality.

Design, build, and operate distributed, high-volume transactional backend services in Go. Own scope, architecture, correctness guarantees, production behavior, observability, and automated verification. Collaborate across product, infra, and QA while using agent-driven engineering practices.

Maintains and enhances the organization’s security posture by managing security tools, monitoring and triaging events, conducting incident response and forensic investigations, managing vulnerabilities and bug bounty findings, administering IAM controls, supporting DevSecOps practices, and developing security metrics, policies, and procedures. The role also mentors team members and collaborates with engineering, product, and business stakeholders.

The Lead Golang Software Engineer develops server solutions, leads technical designs and code reviews, mentors colleagues, and ensures the quality of engineering practices in the Commercial Systems unit.

The Enterprise Customer Success Manager enhances customer experience by onboarding clients, managing relationships, and identifying growth opportunities, especially in IT solutions and cloud technology.

Design and evaluate complex network, system, and cloud solutions from a security perspective. Create security architectures and design documents, define and document security requirements, develop secure integration concepts for systems/networks/cloud, and act as security lead and expert on projects.

Lead Donaldson's global product security incident and vulnerability lifecycle: triage, remediation, disclosure, SBOM governance, regulatory reporting (EU CRA), cross-functional coordination, and embedding secure-by-design processes across product development.

Lead and operate Okta’s Product Security Incident Response and bug bounty programs: triage and validate vulnerabilities, coordinate remediation with engineering, manage disclosures, report program health, improve workflows, mentor junior staff, and partner with cross-functional teams to drive proactive threat detection and vulnerability management.

Lead platform security for cloud and Kubernetes across AWS and GCP, build detection and response capabilities (Datadog SIEM), improve logging, identity and secrets management, create runbooks and playbooks, drive cross-functional security initiatives, and participate in security on-call rotations.

Lead end-to-end security analysis and architecture for NXP product solutions, translate regulatory and certification requirements into designs, evaluate security trade-offs, and assess risks from emerging trends (including AI/ML) to secure large-scale embedded and semiconductor products.

Lead hands-on security engineering: harden AWS, Kubernetes, and apps; implement SAST/DAST and dependency scanning; manage vulnerability program and incident response; build security training, policies, endpoint standards, and security champion network to support enterprise sales and protect user data.

Hands-on security engineer responsible for vulnerability triage, bug-bounty management, code-level investigations (Rust/Go/Python), cloud and container security (AWS, Kubernetes), securing CI/CD and GitHub orgs, incident response, security automation, metrics/reporting, and building guardrails across the development lifecycle.

Embed application security across a large cloud-native, microservices fintech platform: design secure architectures, run threat modeling, integrate SAST/DAST and dependency/secrets scanning into CI/CD, manage vulnerability lifecycle, support pentests and bug bounties, and improve secure coding and AppSec maturity.

Lead research and advisory on application security for enterprise applications (ERP/CRM). Produce thought leadership, client-facing insights, presentations, market analysis, and support sales. Mentor analysts, drive research agenda, improve processes, and advise CIOs on security strategy, vendor evaluation, metrics, and vulnerability testing across major vendors (SAP, Salesforce, Workday, Oracle).

Define and execute the product roadmap for AI-driven blockchain security monitoring tools. Collaborate with cross-functional teams, analyze market and customer feedback, deliver features on time, and communicate with stakeholders to align expectations and improve product offerings.

Lead identification, mitigation, and prevention of security risks across teams. Architect and manage security solutions, enforce policies, perform penetration testing and purple teaming, monitor and respond to incidents, build automation and security frameworks, and collaborate on secure design and DevSecOps practices for a decentralized exchange.

Own and evolve cloud infrastructure across AWS/GCP/Azure, build CI/CD and containerized deployments, design multi-tenant environments, implement monitoring and IaC (Terraform/Ansible), lead data protection and threat detection, and support compliance and security audits.

Lead and deliver complex OT security engagements across ICS and embedded industrial devices. Perform hands-on testing, threat modeling, and Purdue-model network reviews, translate technical findings to business risk, mentor junior consultants, contribute OT research and methodology, and support pre-sales. Travel to industrial sites (~30%).

Lead and execute multi-vector red team campaigns including adversarial emulation, post-exploitation, social engineering, and physical testing. Develop tools, exploit vulnerabilities, produce comprehensive technical reports with remediation guidance, present findings to technical and non-technical stakeholders, mentor team members, support business development, and contribute research to the security community. Requires significant travel.

Design and verify secure architectures across infrastructure, applications, blockchain, Rust, and AI projects. Perform in-depth security assessments and audits, recommend mitigations, and embed with engineering teams to improve security posture and operational practices.