Top Cybersecurity Jobs in Madrid

Develop and implement security controls across backend systems, investigate incidents and anomalies, triage bug bounty submissions, conduct threat hunting, improve remediation processes, maintain security policies, and support access governance. The role requires hands-on coding, strong PHP knowledge, security awareness, clear communication with nontechnical teams, and ownership across a broad technology stack.

Own an AI investing product vertical end to end, including strategy, metrics, roadmap, technical design, delivery, launch, and regulatory readiness. Partner with engineering on APIs, data, ledgering, reconciliation, security, scalability, and failure handling. Apply AI with evaluation, safeguards, human oversight, and reliability controls while coordinating Engineering, Design, Compliance, Operations, Treasury, and Finance. Ensure financial correctness, trustworthy user experiences, and deliberate trade-offs across regulated fintech constraints.

Own the technical sales cycle from demonstrations and proof-of-concept engagements through technical close. Partner with Sales, Product, and Engineering to develop deal strategies, deliver tailored technical presentations, understand customer security workflows, recommend architectures, address objections, and communicate business value. Represent the company at customer meetings, events, and conferences while serving as a trusted technical advisor to security and engineering stakeholders.

Own technical direction and execution for major products and systems. Design scalable backend, frontend, API, database, and infrastructure solutions; write code; make architecture trade-offs; resolve production issues; improve engineering quality, testing, security, and observability; and mentor engineers across teams.

Own technical direction and execution for major products and systems. Design scalable, reliable architectures, write production code, lead engineering initiatives, make technical trade-offs, solve complex production issues, improve engineering quality, and mentor engineers across teams. The role is hands-on, remote, globally distributed, and requires strong English communication.

Lead technical direction and hands-on execution for major software products and systems. Design scalable backend, frontend, API, database, and infrastructure solutions; write code; make architecture trade-offs; resolve production issues; improve engineering quality; lead critical initiatives; and mentor engineers across distributed international teams.

Owns technical direction and execution for major products and systems. Designs scalable, reliable architectures across backend, frontend, APIs, databases, and infrastructure; writes code; leads architecture decisions; resolves complex production issues; improves engineering quality; drives critical initiatives; and mentors engineers across teams.

Own and improve the security posture of Kestra’s platform, infrastructure, and open-source ecosystem. Responsibilities include penetration testing, threat modeling, vulnerability management, remediation, cloud and Kubernetes hardening, security automation in CI/CD, code reviews, supply-chain risk assessment, incident response, and continuous monitoring.

Generates qualified enterprise pipeline across EMEA through cold calling, multichannel outreach, lead qualification, and meeting scheduling. Manages complex multinational accounts, tailors messaging to regional markets, and partners with field sales and channel partners. Uses Salesforce and AI tools for account research, outreach, CRM management, and call summaries. Supports field events, contributes effective outbound playbooks, and mentors newer BDRs. Occasional travel within EMEA is required.

Own day-to-day security operations across endpoints, identity and access, cloud, and SaaS tools. Administer MDM, patching, encryption, access reviews, and joiner/mover/leaver processes; monitor alerts and investigate incidents; support Vanta evidence collection for SOC 2, ISO 27001, and ISO 42001; assist with vendor and customer security questionnaires; and provide practical desktop and device support.

Conduct attacker-driven security research on Aave protocol changes, smart contracts, integrations, and critical dependencies. Review architecture and code before audits or deployment, identify exploitable protocol risks, contribute to AI-assisted security tooling, and translate findings into invariants, testing, monitoring, and incident-response improvements. Collaborate with engineers, auditors, and monitoring teams while communicating risk, severity, uncertainty, and trade-offs clearly.

Lead and scale strategic partner motions (channels, GSIs, ISVs, OEMs, cloud, silicon) to drive joint go-to-market plans, revenue, and market expansion. Build executive relationships, enable partners technically and commercially, establish pipeline governance, and coordinate product, sales, marketing, and engineering to convert partner potential into measurable customer impact.

Design and execute manual and automated testing for web applications, APIs, and backend services. Build regression, smoke, and critical-path automation suites; validate functional, integration, end-to-end, and non-functional requirements; identify and track defects; verify fixes; and collaborate with engineering, product, and DevOps teams. Use AI-assisted tools for test generation, flaky-test triage, and log analysis while improving QA processes, tooling, coverage, and release quality.

Design, build, and operate distributed, high-volume transactional backend services in Go. Own scope, architecture, correctness guarantees, production behavior, observability, and automated verification. Collaborate across product, infra, and QA while using agent-driven engineering practices.

The Lead Golang Software Engineer develops server solutions, leads technical designs and code reviews, mentors colleagues, and ensures the quality of engineering practices in the Commercial Systems unit.

The Enterprise Customer Success Manager enhances customer experience by onboarding clients, managing relationships, and identifying growth opportunities, especially in IT solutions and cloud technology.

Hands-on security engineer responsible for vulnerability triage, bug-bounty management, code-level investigations (Rust/Go/Python), cloud and container security (AWS, Kubernetes), securing CI/CD and GitHub orgs, incident response, security automation, metrics/reporting, and building guardrails across the development lifecycle.

Embed application security across a large cloud-native, microservices fintech platform: design secure architectures, run threat modeling, integrate SAST/DAST and dependency/secrets scanning into CI/CD, manage vulnerability lifecycle, support pentests and bug bounties, and improve secure coding and AppSec maturity.

Lead research and advisory on application security for enterprise applications (ERP/CRM). Produce thought leadership, client-facing insights, presentations, market analysis, and support sales. Mentor analysts, drive research agenda, improve processes, and advise CIOs on security strategy, vendor evaluation, metrics, and vulnerability testing across major vendors (SAP, Salesforce, Workday, Oracle).

Define and execute the product roadmap for AI-driven blockchain security monitoring tools. Collaborate with cross-functional teams, analyze market and customer feedback, deliver features on time, and communicate with stakeholders to align expectations and improve product offerings.

Lead identification, mitigation, and prevention of security risks across teams. Architect and manage security solutions, enforce policies, perform penetration testing and purple teaming, monitor and respond to incidents, build automation and security frameworks, and collaborate on secure design and DevSecOps practices for a decentralized exchange.

Own and evolve cloud infrastructure across AWS/GCP/Azure, build CI/CD and containerized deployments, design multi-tenant environments, implement monitoring and IaC (Terraform/Ansible), lead data protection and threat detection, and support compliance and security audits.

Lead and deliver complex OT security engagements across ICS and embedded industrial devices. Perform hands-on testing, threat modeling, and Purdue-model network reviews, translate technical findings to business risk, mentor junior consultants, contribute OT research and methodology, and support pre-sales. Travel to industrial sites (~30%).

Lead and execute multi-vector red team campaigns including adversarial emulation, post-exploitation, social engineering, and physical testing. Develop tools, exploit vulnerabilities, produce comprehensive technical reports with remediation guidance, present findings to technical and non-technical stakeholders, mentor team members, support business development, and contribute research to the security community. Requires significant travel.

Design and verify secure architectures across infrastructure, applications, blockchain, Rust, and AI projects. Perform in-depth security assessments and audits, recommend mitigations, and embed with engineering teams to improve security posture and operational practices.