Analista De Ciberseguridad (Cliente Final)

Allfunds; Madrid; Presencial; EUR 50.000 - 75.000; Jornada completa

Descripción de la vacante

Allfunds in Alcobendas (Madrid region) seeks a Cybersecurity Analyst to conduct penetration tests, validate security controls, and strengthen incident response across systems.

You will collaborate with MSSP, IT services and security architecture teams, and leverage Microsoft Defender and Sentinel for threat validation. English at business level is required, with opportunities to apply AI-driven security enhancements.

Formación

• Experience in offensive security practices such as penetration testing and adversary simulations.
• Familiarity with Microsoft Defender and Microsoft Sentinel for threat detection and analysis.
• Understanding of attack techniques, threat landscapes, and modern security architectures.
• English business level (B2) or higher is required.

Responsabilidades

• Conduct penetration tests and red team exercises to uncover vulnerabilities.
• Validate security controls across complex IT environments.
• Collaborate with MSSP, IT services and security architecture teams to share insights.
• Contribute to improving cyber resilience and incident readiness.

Conocimientos

Offensive security

Penetration testing

Red Teaming

Threat analysis

Clear communication

Educación

Bachelor's degree in Cyber Security

Herramientas

Microsoft Defender

Microsoft Sentinel

PowerBI

Descripción del empleo

Analista De Ciberseguridad (Cliente Final) • Alcobendas, Kingdom Of Spain, ES

Descripción del trabajo

We are looking for a Cybersecurity Specialist responsible for conducting penetration tests to validate security controls across systems and environments. Required Skills Offensive Security & Validation: responsible for conducting penetration tests, red, blue and purpleteaming exercises, and adversary simulations to identify vulnerabilities and validate security controlsacross systems and environments. Detection Engineering & Threat Validation: leverages Microsoft Defender and Microsoft Sentinel to analyze security events, simulate attack patterns, and validate the effectiveness of existing detectionand response mechanisms. Cyber Resilience & Incident Preparedness: supports the enhancement of cyber resiliencecapabilities by identifying gaps in incident response, recovery processes, and detection coverage.Contributes to improving organizational readiness against cyber threats. AI-driven Security Enablement: explores and implements AI-based use cases in offensive securityand threat detection, including automation, anomaly detection, and intelligent threat analysis. Drivesinnovation in applying AI within cybersecurity. Threat Analysis & Intelligence: analyzes emerging threats, attack vectors, and adversary techniquesto proactively strengthen defensive measures and align with industry frameworks such as MITREATT&CK. Collaboration & Knowledge Sharing: collaborates with MSSP, IT, OT and security architectureteams, sharing insights from offensive activities and contributing to continuous improvement ofsecurity capabilities Simulating real-world attack scenarios through penetration testing and red teaming to uncovervulnerabilities before they are exploited. Validating and enhancing detection capabilities using Microsoft Defender and Microsoft Sentinelacross complex IT environments. Improving cyber resilience by identifying gaps in incident response, detection coverage, andrecovery capabilities. Leveraging AI-driven techniques to automate threat analysis, enhance anomaly detection, andsupport proactive defense strategies. Analyzing large-scale security data to detect patterns, attack paths, and hidden risks. Supporting the continuous improvement of security operations by providing actionable insights toSOC and IT teams. Strengthening collaboration across security domains to ensure an integrated and adaptive securityposture. Required Experience Technical Understanding and Expertise: strong experience in offensive security practices such aspenetration testing,blue & red teaming, or vulnerability assessments. Hands-on experience withMicrosoft Defender and Microsoft Sentinel for threat detection and analysis. Solid understanding ofattack techniques, threat landscapes, and modern security architectures. Experience in Cyber Security: deep understanding of offensive security methodologies, cyberresilience concepts, and incident response processes. Familiarity with detection engineering andsecurity operations environments is highly beneficial. AI & Innovation Focus: knowledge or practical experience in applying Artificial Intelligence orMachine Learning within cybersecurity use cases (e.G. anomaly detection, automation, predictiveanalytics). Strong interest in emerging technologies and their application in security. Knowledge of Information Security Standards and Regulations: understanding of relevantcybersecurity standards and frameworks (e.G. ISO 27001, NIST CSF) and alignment with secure-by-design and resilience principles. Nice to have: Reporting & Monitoring via PowerBI. Soft Skills: Experience in Multinational Companies: Strong communication skills and ability to translatecomplex technical findings into actionable recommendations for different stakeholders. Team Player with a Positive Attitude: Ability to work collaboratively across teams such as SOC, ITServices, and Security Architecture in a modern cyber security organization. Language Skills: Very good business English (at least B2 level). Education and Certifications: Degree in Cyber Security, Computer Science, or comparable field.Certifications such as OSCP, CEH, or comparable offensive security certifications are an advantage. Mindset & Motivation: Hands-on mentality, proactive mindset, strong curiosity for offensivetechniques and emerging technologies, especially AI in cybersecurity. Ability to challenge existingsecurity controls and continuously improve the organization’s cyber resilience.