Top Cybersecurity Jobs in Seville

Hands-on security engineer responsible for vulnerability triage, bug-bounty management, code-level investigations (Rust/Go/Python), cloud and container security (AWS, Kubernetes), securing CI/CD and GitHub orgs, incident response, security automation, metrics/reporting, and building guardrails across the development lifecycle.

Lead security engineering across web apps, APIs, cloud (AWS/OCI), Kubernetes, and on-prem systems. Build CI/CD security, secure genomic and PHI/PII pipelines (HIPAA), run monitoring and incident response, prepare for HIPAA/SOC2/ISO27001 audits, perform pentesting/vulnerability discovery, improve logging/SIEM, and drive remediation with engineering and DevOps while raising company-wide security awareness.

Embed application security across a large cloud-native, microservices fintech platform: design secure architectures, run threat modeling, integrate SAST/DAST and dependency/secrets scanning into CI/CD, manage vulnerability lifecycle, support pentests and bug bounties, and improve secure coding and AppSec maturity.

Perform protocol-focused security research to prevent vulnerabilities on Ethereum mainnet. Tasks include AI-assisted analysis, fuzzing, manual review, reviewing hardforks and spec changes, improving security tooling and automation, coordinating disclosures, and supporting audits and audit competitions while collaborating with devops, specifications authors, and client implementers.

Lead research and advisory on application security for enterprise applications (ERP/CRM). Produce thought leadership, client-facing insights, presentations, market analysis, and support sales. Mentor analysts, drive research agenda, improve processes, and advise CIOs on security strategy, vendor evaluation, metrics, and vulnerability testing across major vendors (SAP, Salesforce, Workday, Oracle).

Produce thought-leading research and advisory on security operations, threat detection, incident response and automation. Engage clients via written research, inquiries, presentations, and events; mentor practitioners; support sales and media; and maintain expertise across SIEM, SOC ecosystems, cloud/on-prem security, and automation trends.

Define and execute the product roadmap for AI-driven blockchain security monitoring tools. Collaborate with cross-functional teams, analyze market and customer feedback, deliver features on time, and communicate with stakeholders to align expectations and improve product offerings.

Lead identification, mitigation, and prevention of security risks across teams. Architect and manage security solutions, enforce policies, perform penetration testing and purple teaming, monitor and respond to incidents, build automation and security frameworks, and collaborate on secure design and DevSecOps practices for a decentralized exchange.

Own technical customer relationships for API security across onboarding to renewal. Provide demos, technical presentations, map APIs, assess exposure, identify attack patterns and IOCs, and drive value with enterprise customers using cloud and application security solutions.

Lead design and implementation of security tooling, harden cloud and IT infrastructure, detect/investigate/remediate incidents using SIEM/EDR/SOAR, perform cloud and endpoint threat hunting with Zero Trust, administer IAM and security monitoring, evaluate and mitigate AI-enabled risks, automate detection/response, and collaborate with distributed engineering and international teams.

Own and scale Wayflyer’s security program: lead a security team, define strategy, run monitoring, detection and incident response, partner with engineering on cloud and application security, manage third‑party risk, ensure regulatory controls, and report security posture to leadership.

Own and evolve cloud infrastructure across AWS/GCP/Azure, build CI/CD and containerized deployments, design multi-tenant environments, implement monitoring and IaC (Terraform/Ansible), lead data protection and threat detection, and support compliance and security audits.

Design, implement, and maintain Firefox security and cryptography systems (WebPKI, cryptographic protocols, security-sensitive web APIs). Ship standards-based web platform features, diagnose and fix stability/performance/memory issues in a multi-threaded browser, and collaborate across teams on security design, debugging, and long-term solutions.

Lead and deliver complex OT security engagements across ICS and embedded industrial devices. Perform hands-on testing, threat modeling, and Purdue-model network reviews, translate technical findings to business risk, mentor junior consultants, contribute OT research and methodology, and support pre-sales. Travel to industrial sites (~30%).

Plan and execute AI-assisted red team engagements across web apps, APIs, cloud and infrastructure. Deliver prioritized reports, validate fixes, tune offensive tooling, automate playbooks, integrate security into CI/CD, run remediation workshops, and coordinate triage with SOC and product teams.

Lead and execute multi-vector red team campaigns including adversarial emulation, post-exploitation, social engineering, and physical testing. Develop tools, exploit vulnerabilities, produce comprehensive technical reports with remediation guidance, present findings to technical and non-technical stakeholders, mentor team members, support business development, and contribute research to the security community. Requires significant travel.

Owner of offensive security testing and continuous perimeter monitoring across external domains, IPs, DNS, VPS, and office infrastructure. Conduct adversary emulation against endpoints/EDR/XDR, scoped web/API tests, and document exploitation chains. Translate findings into defensive controls, support Purple Teaming, and improve asset tracking and remediation metrics.

Lead and deliver information security strategy for a domain, embed secure practices across teams, manage incidents and security operations, implement ISMS, reduce risk and attack surface, report KPIs, and drive stakeholder engagement and continuous improvement.

Design and implement secure Linux-based product, network, and server architectures with automation. Lead cloud infrastructure and application deployment projects, support regulatory and product security management, and advise on APIs (REST, MQTT, OPC-UA). Work in a cross-functional team using containerization, CI/CD, and infrastructure-as-code tools.

Own and execute end-to-end collaboration-platform integrations for acquisitions: scope and migrate Google Workspace, Slack, Zoom, mailboxes, channels, and domains. Maintain platform governance, email/domain security, DLP, archiving, eDiscovery/legal holds, and incident response. Build repeatable playbooks, automation, and tooling; coordinate cross-functionally with Legal, Compliance, IT, Security, and Corporate Development.

Design and verify secure architectures across infrastructure, applications, blockchain, Rust, and AI projects. Perform in-depth security assessments and audits, recommend mitigations, and embed with engineering teams to improve security posture and operational practices.

Lead and manage SOC 1/SOC 2 examinations and SOX 404 IT control activities; assess ITGCs/ITACs, perform gap and impact assessments, drive remediation, collect auditor-ready evidence, and partner cross-functionally to design scalable controls for cloud and hybrid environments.

Manage a portfolio of customers post-sale to drive onboarding, adoption, value realization, renewals, and expansion. Provide strategic cybersecurity guidance, lead business reviews, translate customer goals into measurable outcomes, and coordinate cross-functional teams to mitigate risks and improve security validation programs.

Provide strategic procurement and contract advice across major public and private projects, lead end-to-end procurement processes, support post-contract management under NEC4, develop procurement services and supply-chain intelligence, contribute to business development, and mentor/manage teams while supporting CIPS/MCIPS accreditation.

Design, build, and harden Chromium-based browser components in C++ to power Menlo's AI/agent initiatives; apply networking and HTTP security expertise; integrate AI agents and MCP servers; build tooling in Python or Rust; deploy and operate cloud infrastructure (AWS/GCP, Kubernetes, Terraform); debug and optimize performance-critical systems; collaborate cross-functionally.