Top Cybersecurity Jobs in Barcelona

Plan and execute AI-assisted red team engagements across web apps, APIs, cloud and infrastructure. Deliver prioritized reports, validate fixes, tune offensive tooling, automate playbooks, integrate security into CI/CD, run remediation workshops, and coordinate triage with SOC and product teams.

Lead and execute AI-assisted red team engagements across web apps, APIs, cloud workloads and infrastructure. Manage two direct reports, integrate security into CI/CD, tune offensive tooling, run remediation workshops, coordinate with SOC/IT Ops, and deliver prioritized technical and executive reports.

Lead and execute multi-vector red team campaigns including adversarial emulation, post-exploitation, social engineering, and physical testing. Develop tools, exploit vulnerabilities, produce comprehensive technical reports with remediation guidance, present findings to technical and non-technical stakeholders, mentor team members, support business development, and contribute research to the security community. Requires significant travel.

Owner of offensive security testing and continuous perimeter monitoring across external domains, IPs, DNS, VPS, and office infrastructure. Conduct adversary emulation against endpoints/EDR/XDR, scoped web/API tests, and document exploitation chains. Translate findings into defensive controls, support Purple Teaming, and improve asset tracking and remediation metrics.

Drive full‑stack and platform reliability work for the Firefox Add‑ons ecosystem: build features and automated moderation pipelines, improve observability, deployments and incident response, and maintain platform security and trust. Collaborate with engineers, reviewers, product, and community contributors to modernize DevHub, Reviewer tools, and moderation systems, and contribute openly via code reviews and pull requests.

Lead and deliver information security strategy for a domain, embed secure practices across teams, manage incidents and security operations, implement ISMS, reduce risk and attack surface, report KPIs, and drive stakeholder engagement and continuous improvement.

Design and implement secure Linux-based product, network, and server architectures with automation. Lead cloud infrastructure and application deployment projects, support regulatory and product security management, and advise on APIs (REST, MQTT, OPC-UA). Work in a cross-functional team using containerization, CI/CD, and infrastructure-as-code tools.

Own and execute end-to-end collaboration-platform integrations for acquisitions: scope and migrate Google Workspace, Slack, Zoom, mailboxes, channels, and domains. Maintain platform governance, email/domain security, DLP, archiving, eDiscovery/legal holds, and incident response. Build repeatable playbooks, automation, and tooling; coordinate cross-functionally with Legal, Compliance, IT, Security, and Corporate Development.

Design and verify secure architectures across infrastructure, applications, blockchain, Rust, and AI projects. Perform in-depth security assessments and audits, recommend mitigations, and embed with engineering teams to improve security posture and operational practices.

Lead and manage SOC 1/SOC 2 examinations and SOX 404 IT control activities; assess ITGCs/ITACs, perform gap and impact assessments, drive remediation, collect auditor-ready evidence, and partner cross-functionally to design scalable controls for cloud and hybrid environments.

Manage a portfolio of customers post-sale to drive onboarding, adoption, value realization, renewals, and expansion. Provide strategic cybersecurity guidance, lead business reviews, translate customer goals into measurable outcomes, and coordinate cross-functional teams to mitigate risks and improve security validation programs.

Provide strategic procurement and contract advice across major public and private projects, lead end-to-end procurement processes, support post-contract management under NEC4, develop procurement services and supply-chain intelligence, contribute to business development, and mentor/manage teams while supporting CIPS/MCIPS accreditation.

Design, build, and harden Chromium-based browser components in C++ to power Menlo's AI/agent initiatives; apply networking and HTTP security expertise; integrate AI agents and MCP servers; build tooling in Python or Rust; deploy and operate cloud infrastructure (AWS/GCP, Kubernetes, Terraform); debug and optimize performance-critical systems; collaborate cross-functionally.

Design, build, and operate Threat Protection and ShadowAI services: scalable distributed systems and APIs that detect and control risky web and generative AI usage. Own features end-to-end, maintain availability and latency SLOs, write tests, perform code reviews, use AI-assisted tools, and collaborate with cross-functional teams to improve detection accuracy and production reliability.

Own the Nordics & Benelux region, build and manage strategic account pipelines, run consultative sales processes with CISOs and security leaders, deliver outcome-based demos with Solutions Engineers, collaborate with partners and internal teams, and accurately forecast revenue to close high-impact deals.

Own a UK region and build a pipeline of strategic, high-value accounts. Execute consultative account plans from prospecting through close, engage CISOs and security leaders, deliver outcome-based demos with Solutions Engineers, collaborate with partners and internal teams, accurately forecast revenue, and contribute go-to-market feedback.

Design, build, and operate multi-region VM and Kubernetes infrastructure on GCP and AWS. Lead IaC standards with Terraform/Spacelift, implement observability (Grafana/Prometheus/OTel), manage core platform services (DNS, certs, ingress, service mesh), drive automation and CI/CD, mentor engineers, and participate in 24x7 on-call incident response and post-incident reviews.

Develop and extend Menlo Security's web isolation remote browser technology across desktop and mobile. Work on Chromium internals, networking, video/audio, HTML5 features (WebGL/WebRTC), containerization, scaling and load balancing with a strong systems-level Linux and security focus.

The GTM - Senior HRBP will partner with various departments to drive strategic HR initiatives, enhance performance management, and oversee employee lifecycle processes within the organization.

Senior Sales Engineer for META region: lead technical strategy, architect and deliver PoVs/PoCs, run deep architectural workshops with CISOs, enable channel partners and GSIs, translate isolation and zero-trust concepts into business value, and relay regional compliance needs to product and engineering teams.

Build, operate, and automate Menlo Security's global cloud-native platform across GCP and AWS. Manage VM fleets and Kubernetes clusters, author Terraform IaC and Spacelift workflows, implement observability with Grafana/Prometheus/OTel, handle networking, DNS, certificates, and service mesh, and reduce operational toil through automation while participating in 24x7 on-call rotation and cross-team architecture and DR planning.

Owner of post-sale technical relationship for EMEA customers: lead onboarding and deployments of the Upwind platform, drive feature adoption and roadmap discussions, support renewals and expansions, and advocate customer needs cross-functionally to ensure value realization and satisfaction.

Lead the development of Proton's products in the B2B market, driving innovation, strategy, and cross-functional team collaboration.

Lead Proton's product security initiatives, define security vision, collaborate with teams, and ensure secure product development while empowering engineers and managing the bug bounty program.