Global Sponsors

Últimas ofertas de empleo

Job description The Junior Security Analyst role is an associate level position providing an opportunity to work in the continuous improvement of customers’ network, systems and applications security. This role will not only be in direct contact to the Ackcent´s Red Team, Cybersecurity Architects and SOC Team, but also the customer's C-level positions like CISO, CIO and CTO. That is, it is a role with technical and business exposure which will allow a relevant professional development. Main responsibilities ·         Carry out IT security audits (systems, network, web applications), penetration tests and Red Team exercises. ·         Drawing up reports on vulnerabilities and recommendations on how to resolve them. ·         Explanation of audit findings to customers. ·         Assisting customers with IT security issue solving or mitigation. ·         Proactively coordinate and communicate with key internal stakeholders in corporate IT security governance functions and other departments. Qualifications Minimum qualifications: ·         Computer Science / Telecommunications Engineering Degree or related discipline. ·         Two years of experience in IT security and performing IT security audits and penetration tests. ·         Good understanding of Cybersecurity landscape and Cybersecurity threats. ·         Familiarity with programming and scripting languages like Python, Powershell and C# ·         Knowledge of security methodologies like OWASP, OWISAM and OSSTMM. ·         Familiarity with security tools like Burp Suite, Acunetix, Nessus and Qualys. ·         Good communication and presentation skills. ·         Results oriented attitude. ·         Self-motivated with the ability to work independently and as a team member in a challenging environment. ·         Intermediate English level (written and spoken). Ideal qualifications: ·         Knowledge of advanced techniques and attacks related to MITRE ATT&CK (persistence, privilege escalation, defense evasion, lateral movement, exfiltration). ·         Knowledge of public cloud architectures (AWS, Azure, GCP). ·         It will be valued Master in Cybersecurity focused on hacking. Bonus ·         CEH, OSCP, SANS SEC560/SEC542/SEC660 Certifications. ·         AWS / Azure / GCP Certifications. If you are interested, send your CV to
Analyst/ Consultant Cloud Security
Descripción de la posición: Accenture is seeking a Cloud Security Analyst/Consultant to be assigned to its office located in Madrid or Barcelona. Applicants must have Computer Science, Telecommunications or Electrical Engineering Degree or a related field and full professional proficiency in English and Spanish. Experience and/or knowledge in other fields of Information Security (Security Strategy, Application Security, Data Privacy, Micro-services, Infrastructure Security) is valuable.  Selected candidates will take part in Cloud Security and other Security projects in global & leading companies operating different markets. -          Lugar de trabajo: Madrid/Barcelona. -          Conocimientos requeridos (imprescindibles): o    Minimum of 4 years experience in an information security field.  o    Minimum of 2 years experience of Cloud technologies (IaaS, PaaS, SaaS).  o    Hands-on experience in any of the major cloud providers (AWS, Azure, GCloud) with focus on security services (i.e. AWS: IAM, KMS, Security Groups, VPC, CloudTrail, Cloud Watch, Trusted Advisor, Auto-scaling; Azure: NSG, Storage Service Encryption, Site Recovery, Key Vault, Disk Encryption, Traffic Manager, Log Analytics, Security Center).  o    Knowledge of Information security frameworks and methodologies (e.g. ISF, NIST, ISO, Open Security Architecture, Cloud Security Alliance etc.)  o    Used to work in a changing environment and to multitask  o    Experience in security requirements gathering, security solutions evaluation and project management oriented.  o    User Access control knowledge on multiple domains (DA, LDAP, Kerberos)  o    Understanding of Cybersecurity, including detection, prevention and response tools and processes -          Conocimientos deseables: o    AWS Cloud Certifications (Practitioner, Architect, Developer, Operations) at any level (Foundational, Associate or Professional)  o    Experience with Security Monitoring Tools If you are interested, send your CV to and
Descripción de la posición: Accenture is seeking Identity & Access Management experts to be assigned to its office located in Madrid or Barcelona. Applicants must have master degree in Computer Science, Telecommunications or Electrical Engineering or a related field and full professional proficiency in English and Spanish. Experience and/or knowledge in other fields of Information Security (Network Security, Application Security or SIEM / Infrastructure Security) is welcome. Selected candidates will take part in IAM and other Security projects in global & leading companies operating different markets. -          Lugar de trabajo: Madrid/Barcelona.   -          Conocimientos requeridos (imprescindibles):   o    Provide expert-level knowledge, both Technical and Business oriented, of IAM technologies to clients. o    Design and lead the implementation of complex deployments of IAM solutions, integrations and processes in different client environments. o    Understand, prioritize and track all the support tasks related to the design, definition, deployment and management of any IAM Project in the clients. o    Demonstrable experience designing, implementing and managing Identity and Access Management projects, including at least the following aspects of this security domain: o    Identity Management (provisioning) o    Role Modeling and Governance o    RBAC model implementation o    Experienced in Identity Governance Tools such Sailpoint Identity IQ, IBM Security Identity Governance and Intelligence, One Identity and Oracle Identity Governance o    Functional and/or technical experience with one or more enterprise directories such as Active Directory, ForgeRock OpenDJ, IBM Tivoli Directory Server, Oracle Unified Directory, OpenLDAP …   -          Conocimientos deseables:   o    Knowledge of main operating systems: UNIX and Windows families. o    Knowledge of at least one of the following development environments/languages: Java, Javascript, C++. o    Experience in Identity and Access Management Solutions o    Experience with SQL and RDBMS such as Oracle, Microsoft SQL Server, IBM DB2 UDB. o    Integration experience with ERP systems such as SAP or Peoplesoft, CRM systems or portals. o    Development of custom provisioning connectors o    At least one Industry certifications (CISSP, CCSE, CCSA, JNCIA, JNCIE, CCIE, CCNP, CCNA) is welcome o    Full professional proficiency in English o    Strong verbal/written communication and interpersonal skills If you are interested, please send your CV to
Senior Sales Engineer
Are you an experienced Sales Engineer who is passionate about helping organizations solve complex cybersecurity challenges?  Have you ever thought that solving these challenges could use a different approach? Do you enjoy working with cutting-edge, innovative technologies?  Do you want to make a difference in a rapidly growing company? If you answered yes to all of these questions, Guardicore is the place for you! Guardicore is seeking a Senior Sales Engineer to lead technical sales activities throughout the  Iberia & Central America. A Guardicore Senior Sales Engineer is a core part of the overall sales process, guiding customers through all aspects of the technical discovery and evaluation process.   In this hands-on role, you’ll be responsible for demonstrating and proving the Guardicore value proposition by leading technical discovery and qualification discussions, product demonstrations, architecture discussions and proof of concepts.  You’ll work closely with the Sales team to execute our sales strategy and directly contribute to the overall success of Guardicore. Responsibilities: • Work with the Sales team to identify and qualify business opportunities, identify key customer technical requirements and objections and develop the strategies to successfully execute complex sales • Own the technical relationship with Guardicore’s customers, including managing product and solution briefings, product demonstrations, proof-of-concept work, and the coordination of additional technical resources. • Work hands-on with customers to demonstrate and evaluate the Guardicore platform in customer environments. • Recommend enterprise architectures and additional integration strategies required to successfully implement the Centra platform using Guardicore best practices. • Travel to customer sites, conferences, and other related events as required. Requirements Bachelor’s degree in a technical discipline or equivalent experience • 5+ years of experience as a Sales Engineer or technical consultant with Enterprise customers • Excellent verbal and written communication skills • Passion for helping customers solve complex, technical challenges • Hands-on experience with relevant security and infrastructure technologies • Fluent in Spanish & English Preferred Qualifications • Familiarity with technologies such as Infrastructure-as-a-Service (IaaS) and Software Defined Networking • Ability to quickly learn, understand, and work with new emerging technologies
Análisis y Gestión Riesgos T.I.
Buscamos Consultor de Seguridad Análisis y Gestión Riesgos T.I. con al menos 3 años de experiencia en proyectos de seguridad, orientación al cliente y compromiso con los resultados. Una persona dinámica, versátil y experimentada para desarrollar su carrera profesional en grandes clientes.  El perfil debe cumplir, tanto los requisitos de experiencia, como las competencias generales. Funciones a realizar Revisión y seguimiento de controles de seguridad implantados en el cliente de cara a auditorias de cumplimiento. Recopilación de información de seguridad de otras áreas y centros del cliente y consolidación de resultados. Soporte a la gestión y el mantenimiento de documentación (políticas, normas, etc.). Realización de informes de gestión. Soporte a la preparación de documentación divulgativa. Soporte a la generación de documentos de cumplimiento legal de seguridad. Soporte a la realización de planes de adecuación de infraestructuras de seguridad. Soporte a la planificación y coordinación de proyectos. Experiencia o altos conocimientos específicos exigidos:  Análisis, diseño e implantación de SGSI y/o Planes Directores en Seguridad de la Información. Adecuación e implantación al Esquema Nacional de Seguridad (ENS). Análisis y Gestión de Riesgos (diferentes metodologías: Magerit, ISO 31000). Adecuación y desarrollo de Marcos normativo y legal en el ámbito de las TIC, principalmente, LOPD, ENS e ISO 27000. Auditorías de cumplimiento ISO 27001 y LOPD. Amplios conocimientos sobre protección de datos. Participación en la elaboración de planes de Seguridad y Concienciación. Diseño y recopilación de estadísticas y realización de cuadros de mando.  Competencias generales - Capacidad de análisis.  - Orientación a resultados.  - Responsabilidad y autoconfianza.  - Trabajo en equipo.  - Capacidad de auto-aprendizaje.  - Proactividad e iniciativa.  Valorable: - Conocimiento de herramientas de Análisis de Riesgos (ej.: PILAR) y de GRC.  - Conocimientos de seguridad de sistemas de información (certificados electrónicos y PKI, firma electrónica, control de acceso, seguridad de aplicaciones, análisis de riesgos, ...)  - Ingles hablado y escrito. Imprescindible Titulación Técnica en: Ingeniería en Informática o Telecomunicaciones. - Se valorarán muy positivamente certificaciones de Seguridad como: CISA o Lead Auditor 27001, CGEIT, CRISC, C|CISO, PCI-DSS, CDPP, CISSP, CISM (al menos una de ellas). Por favor, si no tienes esta formación o alguna de las certificaciones indicada, no mandes tu candidatura. Lugar de trabajo: Madrid. Incorporación inmediata Salario negociable según valía.
-          Descripción de la posición: Accenture is seeking Application Security Analyst/Consultants to be assigned to its office located in Madrid or Barcelona (Spain). -          Lugar de trabajo: Madrid/Barcelona. -          Conocimientos requeridos (imprescindibles): Para perfil DESIGN: o    Experience in management and definition of security in the software development lifecycle (SDLC) o    Knowledge of Waterfall and Agile development methodologies o    Experience in defining and capturing security requirements in applications o    Experience with OWASP TOP 10 / OWASP ASVS / CWE / MITRE / CAPEC / SANS 25 o    Security knowledge in Web applications and common enumerations o    Knowledge in STRIDE / DREAD / PASTA methodology o    Experience in threat detection and risk management and analysis o    Experience in defining security countermeasures and technical implementation Para perfil IMPLEMENTATION o    Hands-on experience in software development with some of the most common languages and enterprise frameworks (Java, J2EE, Spring, C++, C#, .NET…) o    Hands-on experience in web application and web services development technologies and frameworks (HTML, CSS, JavaScript, Angular, Node.JS…) o    Experience in management and definition of security in the software development lifecycle (SDLC) o    Knowledge of Waterfall and Agile development methodologies ( Professional Scrum Developer/Master is valuable) o    Experience in defining and capturing security requirements in applications o    Experience in securing APIs and microservice architectures o    Experience in application building lifecycle (Maven, Gradle, Ant, Npm…) and automatization of CI/CD tasks in continuous release development DevOps environments (Jenkins, Ansible, Bamboo), with extensive use of change management technologies (SVN, Git…) o    Knowledge of SOA security (WS-Security, REST security)   Para perfil VALIDATION o    Experience in management and definition of security in the software development lifecycle (SDLC) o    General knowledge in at least one of the most enterprise-used programming languages as Java, C# .NET, Python, etc. o    Experience in SAST solutions such as Fortify or Checkmarx. o    Experience in SCA (Software Composition Analysis) such as Dependency-Check, SourceClear and/or WhiteSource. o    Experience in conducting security checks (static and dynamic code analysis, vulnerability analysis in applications and application penetration tests) o    Experience with OWASP Testing Guide and OWASP TOP 10 o    Knowledge of other well-known security standards of the industry: OWASP-M, SEI CERT-J, SEI CERT-C, PCI, HIPAA and ISO 27001 are valuable o    Experience in testing APIs security o    Security knowledge in web applications and common vulnerabilities o    Knowledge of SOA security o    Knowledge of security focused on mobile applications (REST, JSON, OpenID, OpenAuth, WebToken, SSO) o    Knowledge of security in micro-services and Single Page Applications is valuable In you are interested, please send your CV to
Arquitecto/a de Seguridad IT
Dentro del equipo de Seguridad de la Información, serás responsable de la definición de los requisitos de seguridad en el desarrollo de nuevos productos y servicios. Llevando a cabo el seguimiento y planificación de la implementación de los requisitos, la coordinación de los test de seguridad así como el asesoramiento al equipo de proyecto.  En nuestro equipo... Coordinarás la implementación de requisitos de seguridad en proyectos de acuerdo a los estándares y normativas corporativas. Participaras en proyectos innovadores usando entornos de tecnologías cloud y bajo metodologías agile, donde serás responsable de identificar potenciales riesgos de seguridad  Validarás desde un punto de vista de seguridad las propuestas técnicas del equipo de proyecto y acompañarás la implementación de los requisitos. Podrás proponer planes de mejora continua para la reducción del riesgo de seguridad. ¿Qué buscamos? Profesionales apasionados/as del mundo de Seguridad IT con entre 3-5 años de experiencia como Arquitectos/as de Seguridad. Titulación en Telecomunicaciones e Informática Conocer desde un punto de vista de gestión los modelos de arquitectura de seguridad basadas en cloud Conocimiento de procesos y herramientas de Integración Continua CI/CD y procesos de desarrollo de software seguro. Además de los principales frameworks y modelos de controles de seguridad (NIST, CIS, CoBIT, ISO 27001) Imprescincible nivel alto de inglés.

Estudios y publicaciones ISMS

ISMS Forum Spain, a través de sus iniciativas, elabora estudios que abarcan distintos aspectos relacionados con la Seguridad de la Información, con la implicación y colaboración de los profesionales de la Asociación.


La revista semestral de la Asociación Española para el fomento de la Seguridad de la Información


Entidades asociadas