Controlador de accesos - Grupo Hinsa - Alicante

Trabajarás estrechamente con profesionales con experiencia en seguridad ofensiva, contribuyendo a la ejecución de auditorías de seguridad de alta calidad, al desarrollo de entregables técnicos y a la mejora continua de nuestras metodologías y capacidades.

🔐 Product Security Engineer — Mobile RASP This is a Fully Remote role, but the individual needs to be based in Spain. Our client is a mobile identity and security company whose platform protects high-assurance apps from attack while they run — on devices the company doesn't control. They're hiring a hands-on Product Security Engineer to help build out their mobile application security (RASP) platform. This is a genuine builder role, not a policy or governance one. You'll write production code across mobile and backend, working at high velocity with AI as your primary development accelerator. What you'll be building: You'll ship the in-house shields that defeat rooting/jailbreaking, hooking and instrumentation, emulators, tampering and repackaging, malware, and network interception (MITM, SSL-pinning bypass, malicious VPN/proxy) — built on top of a licensed RASP core. You'll own the applied cryptography behind secure local storage and app/device attestation, plus the iOS symbol-obfuscation and binary-hardening tooling that closes native reverse-engineering gaps across Swift, C, C++ and Objective-C. The product spans both sides of the wire, so you'll also build and operate the platform's Python (Flask) backend — the APIs and services that ingest threat telemetry, drive the operator console, manage configuration and policy, and forward events to SIEM. Because you're building the product, you'll also run hands-on competitive evaluations (against the likes of Promon, Appdome, Guardsquare, Zimperium and Build38) and support the Sales & Solutioning team as a technical pre-sales engineer when needed. What we're looking for: • Strong, current, hands-on software engineering — you code daily and ship to production, • Mobile SDK development in iOS (Swift/Obj-C) and/or Android (Kotlin/Java), ideally security- or SDK-focused, • Experience integrating and extending third-party SDKs via callback/event APIs, • Code-hardening experience — obfuscation and binary hardening across native mobile toolchains, • Applied cryptography fundamentals (secure data-at-rest storage, attestation), • Backend development in Python (Flask), with solid testing and API-design discipline, • Proven experience building and shipping quickly with AI coding tools (Claude Code, Copilot, Cursor, or similar), • Practical CI/CD experience (GitHub Actions, GitLab CI or Jenkins) and solid AWS, Git and Docker fundamentals, • Familiarity with RASP/MTD, OWASP MASVS/MASTG, and the mobile attacker toolkit (Frida, Xposed, Magisk, emulators), • Professional-standard English Strongly preferred: Spanish (spoken and written), given the company's Spanish-speaking European and LATAM customer and supplier base. Experience or interest in fraud management (behavioural biometrics, transaction risk scoring, device intelligence) and EU regulatory frameworks (PSD2 SCA, DORA, GDPR, PCI-DSS, eIDAS 2.0) is a plus, as is a background in a security vendor or fintech/banking environment. Location: Fully remote, based in Spain or London. If you want to own real runtime security defences end-to-end — mobile client through to backend — and ship at speed with AI as your co-pilot, we'd love to hear from you. Company details shared on application. #ProductSecurity #MobileSecurity #RASP #Cybersecurity #Hiring #RemoteWork #iOS #Android #Python #AppSec

Desde Cas Training estamos en búsqueda de un perfil Senior Cloud Ops & Security Engineer AWS para trabajar en uno de nuestros clientes mas destacados en modalidad remoto.Buscamos perfil híbrido Cloud Ops / DevSecOps con amplia experiencia en gestión, securización y aprovisionamiento de servicios

Since 2011, SQUAD Group has been a key player in the cybersecurity landscape. We partner with leading organizations to protect their information systems through a comprehensive 360° offering of consulting, integration, expertise, and managed services. Our mission: Securing Together! We believe in a collaborative approach to cybersecurity, where experts and clients work hand-in-hand to anticipate threats and protect critical infrastructure. As part of our growing team, we're seeking an Enterprise Security Architect to play a strategic role within a major global player in the maritime transport and logistics industry, undergoing significant business and technology transformation. This is a fully remote position, based in Spain. This is a foundational mission: you will help establish the enterprise security architecture function from the ground up. Your Role You will define and drive the target cybersecurity architecture across the organization, establishing the principles, governance, and reference frameworks that will guide security decisions enterprise-wide. Your Responsibilities • Establish the foundational framework for the Enterprise Security Architecture team (operating model, roles, governance)., • Define enterprise security architecture principles and governance processes., • Support the creation of a target-state enterprise security architecture vision., • Contribute to enterprise-wide security strategy and roadmap initiatives., • Produce a set of reusable reference architectures and security design patterns., • Translate business risk into concrete technical security controls and architectural decisions. What You Bring • 5+ years of experience as an Enterprise Security Architect., • Experience with cloud security architecture (Azure, AWS, GCP)., • Strong understanding of enterprise security architecture concepts, secure-by-design approaches, and industry security frameworks and standards., • Solid experience across multiple cybersecurity domains: Cloud Security, Network Security, IAM, Endpoint Security, Security Monitoring & SIEM, Vulnerability Management, Data Protection, and Incident Detection & Response., • Proven track record working within large, complex, global environments., • Excellent written and verbal communication skills for technical and executive audiences., • Experience working in multinational environments., • English is mandatory; French is a plus. Why Join Squad? • Personalized Growth: We help you build a training and certification plan aligned with your professional goals through our SquadeXpérience., • Expertise Development: Participate in internal events like our MixYourTalent webinars and monthly CTF sessions., • Visibility: Attend major industry conferences and contribute to our #TheExpert technical blog., • Culture: Enjoy a dynamic and close-knit environment with after-work events and team gatherings that foster great camaraderie.

We are: Wizeline, a global AI-centric technology solutions provider, develops cutting-edge, AI-powered digital products and platforms. We partner with clients to leverage data and AI, accelerating market entry and driving business transformation. As a global community of innovators, we foster a culture of growth, collaboration, and impact. With the right people and the right ideas, there’s no limit to what we can achieve Are you a fit? Sounds awesome, right? Now, let’s make sure you’re a good fit for the role: Responsibilities: • Application Security & Offensive Testing: Conduct dynamic and static application security testing (SAST/DAST/SCA), red team exercises, penetration testing, and manual code reviews on live applications and APIs to uncover business logic flaws and vulnerabilities beyond automated scanner capabilities., • Vulnerability Remediation & Triage: Establish risk-based prioritization criteria (CVSS, exploitability, business context) and directly execute code-level patches and infrastructure configuration fixes across .NET, Java, and React stacks without disrupting operational continuity., • AppSec & Security Tooling Management: Manage, configure, and optimize primary scanning tools, focusing on Wiz, Snyk, Qualys, and dynamic analysis tools (Burp Suite Enterprise/Pro, OWASP ZAP)., • DevSecOps & Pipeline Integration: Embed automated security checks, SAST/SCA scanning, and compliance gates directly into GitHub CI/CD pipelines for continuous verification and shift-left security., • Governance & Architecture Alignment: Perform threat modeling and architecture security reviews based on OWASP SAMM principles, ensuring existing solutions meet organizational security baselines and compliance requirements (e.g., PCI-DSS, HIPAA, GDPR)., • Hybrid & Cloud Security: Secure and harden hybrid architecture spanning primary AWS cloud environments, containerized workloads, and on-premise infrastructure. Must-have Skills To be successful in this role, you must have: • Offensive & Defensive AppSec: Proven experience in Penetration Testing, Red Teaming, manual code review, and dynamic application analysis using tools like Burp Suite Professional and OWASP ZAP., • AppSec Tooling Mastery (SAST / DAST / SCA): Deep hands-on expertise with Wiz (primary), Snyk, Qualys, SonarQube, and automated DAST tools integrated into active environments., • Code & Infrastructure Remediation: Demonstrated ability to refactor vulnerable code, apply security patches, and remediate OWASP Top 10 vulnerabilities across .NET, Java, and React application stacks., • DevSecOps & Secret Management: Hands-on experience securing CI/CD pipelines (GitHub Actions) and implementing dynamic secret management (AWS KMS, HashiCorp Vault, IAM Roles)., • Security Frameworks: Strong command of OWASP Top 10, OWASP SAMM, threat modeling methodologies, and Software Bill of Materials (SBOM) management., • Cloud & Hybrid Infrastructure: Solid experience securing AWS environments, IAM policies, network security controls, and hybrid setups. What we offer: • Competitive compensation & total rewards, • Health benefits & wellness programs, • Savings & retirement plans, • Global mobility opportunities, • Flexible work policy and remote-friendly approach, • Happy hours, gaming tournaments, sports activities & more, • Continuous learning & training programs with WizeAcademy, • Free certifications in cloud technologies and coding languages Find out more about our culture here.

Sr. Security Engineers & CISOs (Spain), we want to hear from you! Ledn is the leading bitcoin-backed lender dedicated to providing secure, transparent, and efficient digital asset solutions. Our mission is to help clients build long-term wealth in hard assets through interest-earning accounts, loans, and trading services. Serving 100+ markets with $11B in loans issued since 2018, Ledn continues to expand its reach, giving clients access to reliable financial products worldwide. Our team is a passionate group from diverse backgrounds. What we all have in common is an unshakeable conviction that digital assets can democratize access to the global economy and Ledn’s suite of products & services can play a critical role in doing so. The core values that guide us are: act with integrity always, own it, have a passion for progress, and lead with empathy. Combining these values with our conviction make Ledn an unstoppable force in changing the world for the better. The Opportunity: As a full-time Sr. Security Engineer & CISO, you'll be a hands-on, high-ownership individual contributor strengthening our product, cloud, and software delivery security. You'll find vulnerabilities before attackers do, build controls that prevent entire classes of issues from reaching production, and help engineers ship securely. A builder-and-breaker role: you'll assess our applications, APIs, AWS environment, Cloudflare edge, and GitHub workflows from an adversary's perspective, then partner with owners to remediate findings and validate fixes. You'll turn lessons learned into standards, automation, and measurable improvements, while collaborating with Software Engineering, DevOps, Risk, and Compliance to deliver technical controls, audit evidence, and incident readiness. This dual-mandate role is based in Spain. Beyond hands-on security engineering, you'll serve as the Spain entity's CISO within the second line of defense — owning the local Information Security Framework and ICT Risk Register, reporting periodically to the Board, and acting as primary contact for the CNMV and external auditors on cybersecurity and DORA compliance. About The Role: Sr. Security Engineer Core Responsibilities: • Secure Design & Threat Modeling: Lead security reviews for new designs and existing features, translating threats into concrete engineering requirements before production., • Penetration Testing: Plan and execute hands-on testing of web apps, APIs, mobile-facing services, and infrastructure; document reproducible findings, validate remediation, and coordinate independent assessments., • Adversarial Validation: Run red-team and purple-team exercises around realistic attack paths; work with defenders to improve preventive controls, telemetry, detections, and response playbooks., • Secure Pull Requests: Define risk-based security standards for pull requests, including review requirements and tuned merge gates for secret scanning, SAST, dependency review, and sensitive-code ownership., • Product & API Security: Review production code and architecture for vulnerabilities in authentication, authorization, session handling, data protection, and business logic; help teams fix root causes, not just symptoms., • AWS Security: Assess and harden our multi-account AWS environment across IAM, network boundaries, encryption, logging, workload identity, and service configuration, using automation and policy-as-code where practical., • Cloudflare Security: Review and harden WAF rules, rate limiting, bot controls, DNS/TLS configuration, edge access policies, and change governance without disrupting legitimate client traffic., • GitHub & Software Supply Chain: Own security governance for repositories and CI workflows — branch protection, CODEOWNERS, least-privilege tokens, pinned actions, dependency controls, artifact integrity, and guardrails for AI-assisted code., • Vulnerability Management: Triage findings from internal testing, scanners, third-party assessments, and disclosures; set risk-based remediation targets, track issues to closure, retest fixes, and report trends., • Incident Readiness & Security Enablement: Support security investigations, tabletop exercises, and post-incident hardening while providing secure patterns, guidance, and security-champion support so engineering teams can move safely at scale. CISO, Ledn Spain Entity Core Responsibilities: • Cybersecurity Framework & Board Reporting: Own the local Information Security Framework and ICT Risk Register; report periodically to the Board on information security and ICT risk; ensure immediate reporting of major incidents to Management and the Board., • DORA Governance & Compliance: Direct the ICT Risk Management Framework and sign off its annual regulatory report; oversee the annual digital operational resilience testing programme (system/network testing plus BCP/DRP exercises); validate the ICT third-party register for CNMV submission., • Regulatory & Audit Liaison: Serve as point of contact for the CNMV and external auditors on information security and DORA matters, in Spanish, including CNMV notification of significant incidents within DORA deadlines., • Security Operations Oversight: Supervise vulnerability management and day-to-day technical security operations, escalating critical vulnerabilities and driving remediation with the ICT team. Required: • 5+ years in security engineering, application/product security, or software/platform engineering with a demonstrable security focus., • Hands-on penetration testing across web applications, APIs, and cloud infrastructure, producing clear, reproducible findings and validating fixes., • Production code review skills in JavaScript/TypeScript, Python, Go, or similar, with practical knowledge of authentication, authorization, injection, data exposure, and business-logic risks., • Threat modeling and secure design experience that turns ambiguous risks into actionable engineering requirements and defensible architecture decisions., • Strong AWS security expertise in multi-account environments, including IAM, networking, KMS, logging/detection services, and workload configuration., • Cloudflare or similar edge-security experience covering WAF, rate limiting, bot management, DNS/TLS, and access controls., • GitHub and CI/CD security experience with branch protection, review workflows, repository rules, workflow permissions, token hygiene, and secure automation., • Secure SDLC tooling knowledge — SAST, DAST, software composition analysis, secret scanning, container scanning — and how to tune controls so engineers act on results., • Software supply-chain and IaC security, including dependency/artifact risks and reviewing Terraform, Helm, or similar configuration for security gaps., • Automation skills in Python, Bash, Go, or JavaScript to extend testing, analyze evidence, and build lightweight security tooling., • Vulnerability lifecycle ownership, from risk-based triage and remediation targets through retesting, closure, and useful metrics., • Experience in a fintech/regulated environment where audit trails, evidence quality, data protection, and cross-functional partnership matter., • Fluent English and Spanish, able to explain a technical finding to an engineer and its business risk to senior stakeholders, given this role's CNMV and Board-facing responsibilities., • DORA and regulatory governance experience in a European financial-services environment — ICT risk management frameworks, digital operational resilience testing., • ICT third-party registers, and acting as a regulator/Board point of contact; CNMV experience is a strong plus., • Must be willing to undergo applicable background checks, per local law, if selected. Preferred: • Offensive security depth via OSCP, OSWE, comparable certification, research, responsible disclosures, or a strong portfolio., • Digital-asset/fintech/payments security experience, especially with account-takeover, fraud-adjacent, custody, or transaction-integrity threat models., • Detection and response engineering using cloud telemetry, SIEM tooling, or attack simulation to build actionable detections and playbooks., • Vulnerability disclosure or bug bounty experience triaging researcher reports, managing communication, and coordinating fixes and retests., • MiCA familiarity or other EU digital-asset regulatory frameworks, alongside core DORA expertise., • Experience working in GDPR/SOC regulated environments. Culture Fit: • Bring a builder's mindset, comfortable creating, adapting, and iterating as the business and the role evolve, • Be a collaborative partner, able to influence across functions and cultures with empathy and clarity, • Demonstrate integrity and accountability, especially in managing confidential information across multiple teams, • Be comfortable owning a complex area end to end and moving fast under pressure, especially when priorities shift or the path forward isn't fully mapped out yet A Taste of What We Provide: • Tremendous growth opportunities within a global digital asset leader, • Competitive total rewards package starting on day one:, • Generous PTO package to ensure ample time off, • Company ownership through shared equity, • Option to work remotely somewhere other than your home base for up to 180 days per year (subject to restrictions), • A purpose-driven environment where barriers are removed so you love your work We are an equal opportunity employer committed to diversity and inclusion. Email for confidential accommodation requests during recruitment. Ledn Working Environment: Our global team operates across North America, Latin America, South Africa, and Europe in a remote-first setup. Please note: Due to high application volume, only qualified candidates will be contacted. No agencies or recruiters, please. Unsolicited resumes will not be accepted; we bear no responsibility for associated fees.

Experienced high quality senior sales consultants required. You will be calling pre qualified appointments only, no cold calling involved. All of our consultants earn between £4.5K- 7.5K per month (OTE), the more you sell the more you earn.

Trabajarás estrechamente con profesionales con experiencia en seguridad ofensiva, contribuyendo a la ejecución de auditorías de seguridad de alta calidad, al desarrollo de entregables técnicos y a la mejora continua de nuestras metodologías y capacidades.