Cyber Security Engineer (Identity)

JOB SUMMARY

Poniente Data is hiring a Cyber Security Engineer (Identity) to work remotely from Spain. We're looking for help maturing our controls ahead of an SOC 2 Type II and ISO 27001 audit cycle. Remote within Spain. The team meets in Málaga once a quarter, travel covered.

JOB DUTIES

• Triage bug bounty reports from HackerOne or Bugcrowd
• Own secrets management, key rotation and KMS policies
• Respond to security incidents and lead the technical investigation
• Run threat modelling sessions with engineering teams on new features and architecture changes
• Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint
• Coordinate external penetration tests and track remediation

REQUIRED QUALIFICATIONS

• 2+ years in security engineering, application security or a related engineering role
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)
• Experience with SIEM, EDR or vulnerability management tools
• Ability to explain security issues to engineers without lecturing them
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities

WHY WORK WITH US

• Private health insurance
• Training budget
• Flexible start and finish times

COMPANY OVERVIEW

Since 1995, the company has sold practice management software to dental and veterinary clinics in Spain. Releases go out Tuesday mornings, never on Fridays.

Candidates must be eligible to work in Spain.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Poniente Data S.L..