Top Cybersecurity Jobs in Madrid

Lead research and advisory on application security for enterprise applications (ERP/CRM). Produce thought leadership, client-facing insights, presentations, market analysis, and support sales. Mentor analysts, drive research agenda, improve processes, and advise CIOs on security strategy, vendor evaluation, metrics, and vulnerability testing across major vendors (SAP, Salesforce, Workday, Oracle).

Produce thought-leading research and advisory on security operations, threat detection, incident response and automation. Engage clients via written research, inquiries, presentations, and events; mentor practitioners; support sales and media; and maintain expertise across SIEM, SOC ecosystems, cloud/on-prem security, and automation trends.

Define and execute the product roadmap for AI-driven blockchain security monitoring tools. Collaborate with cross-functional teams, analyze market and customer feedback, deliver features on time, and communicate with stakeholders to align expectations and improve product offerings.

Lead identification, mitigation, and prevention of security risks across teams. Architect and manage security solutions, enforce policies, perform penetration testing and purple teaming, monitor and respond to incidents, build automation and security frameworks, and collaborate on secure design and DevSecOps practices for a decentralized exchange.

Own technical customer relationships for API security across onboarding to renewal. Provide demos, technical presentations, map APIs, assess exposure, identify attack patterns and IOCs, and drive value with enterprise customers using cloud and application security solutions.

Lead design and implementation of security tooling, harden cloud and IT infrastructure, detect/investigate/remediate incidents using SIEM/EDR/SOAR, perform cloud and endpoint threat hunting with Zero Trust, administer IAM and security monitoring, evaluate and mitigate AI-enabled risks, automate detection/response, and collaborate with distributed engineering and international teams.

Own and scale Wayflyer’s security program: lead a security team, define strategy, run monitoring, detection and incident response, partner with engineering on cloud and application security, manage third‑party risk, ensure regulatory controls, and report security posture to leadership.

Own and evolve cloud infrastructure across AWS/GCP/Azure, build CI/CD and containerized deployments, design multi-tenant environments, implement monitoring and IaC (Terraform/Ansible), lead data protection and threat detection, and support compliance and security audits.

Design, implement, and maintain Firefox security and cryptography systems (WebPKI, cryptographic protocols, security-sensitive web APIs). Ship standards-based web platform features, diagnose and fix stability/performance/memory issues in a multi-threaded browser, and collaborate across teams on security design, debugging, and long-term solutions.

Lead and deliver complex OT security engagements across ICS and embedded industrial devices. Perform hands-on testing, threat modeling, and Purdue-model network reviews, translate technical findings to business risk, mentor junior consultants, contribute OT research and methodology, and support pre-sales. Travel to industrial sites (~30%).

Plan and execute AI-assisted red team engagements across web apps, APIs, cloud and infrastructure. Deliver prioritized reports, validate fixes, tune offensive tooling, automate playbooks, integrate security into CI/CD, run remediation workshops, and coordinate triage with SOC and product teams.

Lead and execute AI-assisted red team engagements across web apps, APIs, cloud workloads and infrastructure. Manage two direct reports, integrate security into CI/CD, tune offensive tooling, run remediation workshops, coordinate with SOC/IT Ops, and deliver prioritized technical and executive reports.

Lead and execute multi-vector red team campaigns including adversarial emulation, post-exploitation, social engineering, and physical testing. Develop tools, exploit vulnerabilities, produce comprehensive technical reports with remediation guidance, present findings to technical and non-technical stakeholders, mentor team members, support business development, and contribute research to the security community. Requires significant travel.

Owner of offensive security testing and continuous perimeter monitoring across external domains, IPs, DNS, VPS, and office infrastructure. Conduct adversary emulation against endpoints/EDR/XDR, scoped web/API tests, and document exploitation chains. Translate findings into defensive controls, support Purple Teaming, and improve asset tracking and remediation metrics.

Drive full‑stack and platform reliability work for the Firefox Add‑ons ecosystem: build features and automated moderation pipelines, improve observability, deployments and incident response, and maintain platform security and trust. Collaborate with engineers, reviewers, product, and community contributors to modernize DevHub, Reviewer tools, and moderation systems, and contribute openly via code reviews and pull requests.

Lead and deliver information security strategy for a domain, embed secure practices across teams, manage incidents and security operations, implement ISMS, reduce risk and attack surface, report KPIs, and drive stakeholder engagement and continuous improvement.

Design and implement secure Linux-based product, network, and server architectures with automation. Lead cloud infrastructure and application deployment projects, support regulatory and product security management, and advise on APIs (REST, MQTT, OPC-UA). Work in a cross-functional team using containerization, CI/CD, and infrastructure-as-code tools.

Own and execute end-to-end collaboration-platform integrations for acquisitions: scope and migrate Google Workspace, Slack, Zoom, mailboxes, channels, and domains. Maintain platform governance, email/domain security, DLP, archiving, eDiscovery/legal holds, and incident response. Build repeatable playbooks, automation, and tooling; coordinate cross-functionally with Legal, Compliance, IT, Security, and Corporate Development.

Design and verify secure architectures across infrastructure, applications, blockchain, Rust, and AI projects. Perform in-depth security assessments and audits, recommend mitigations, and embed with engineering teams to improve security posture and operational practices.

Lead and manage SOC 1/SOC 2 examinations and SOX 404 IT control activities; assess ITGCs/ITACs, perform gap and impact assessments, drive remediation, collect auditor-ready evidence, and partner cross-functionally to design scalable controls for cloud and hybrid environments.

Manage a portfolio of customers post-sale to drive onboarding, adoption, value realization, renewals, and expansion. Provide strategic cybersecurity guidance, lead business reviews, translate customer goals into measurable outcomes, and coordinate cross-functional teams to mitigate risks and improve security validation programs.

Provide strategic procurement and contract advice across major public and private projects, lead end-to-end procurement processes, support post-contract management under NEC4, develop procurement services and supply-chain intelligence, contribute to business development, and mentor/manage teams while supporting CIPS/MCIPS accreditation.

Design, build, and harden Chromium-based browser components in C++ to power Menlo's AI/agent initiatives; apply networking and HTTP security expertise; integrate AI agents and MCP servers; build tooling in Python or Rust; deploy and operate cloud infrastructure (AWS/GCP, Kubernetes, Terraform); debug and optimize performance-critical systems; collaborate cross-functionally.

Design, build, and operate Threat Protection and ShadowAI services: scalable distributed systems and APIs that detect and control risky web and generative AI usage. Own features end-to-end, maintain availability and latency SLOs, write tests, perform code reviews, use AI-assisted tools, and collaborate with cross-functional teams to improve detection accuracy and production reliability.

Own the Nordics & Benelux region, build and manage strategic account pipelines, run consultative sales processes with CISOs and security leaders, deliver outcome-based demos with Solutions Engineers, collaborate with partners and internal teams, and accurately forecast revenue to close high-impact deals.