Cyber Security Analyst - Madrid

Pepper Advantage; Madrid; Híbrido; EUR 60.000 - 80.000; Jornada completa

Descripción de la vacante

Pepper Advantage is seeking a Cyber Security Analyst to join its Security Engineering team in Madrid, focusing on building and running defensive controls for a cloud-native credit platform.

The role emphasizes Azure cloud security design, implementation, and governance, with leadership responsibilities across engineering and cross-functional stakeholders; permanent hybrid role with opportunities to influence security posture.

Formación

• Proven experience in threat hunting and detection engineering.
• Solid understanding of cyber defence strategies and security operations.
• Experience identifying and remediating security vulnerabilities.
• Familiarity with tools such as SIEM, EDR/XDR, and vulnerability scanners.
• Knowledge of frameworks like MITRE ATT&CK, NIST, or ISO 27001.
• Scripting or automation skills (e.g., Python, PowerShell) desirable.
• Certifications such as OSCP, GIAC, Security+.

Responsabilidades

• Review, triage and respond to SOC tickets.
• Manage the security tool sets, review tickets, requests, behaviours from those tools to drive improvements in security stance.
• Collaborate with security, infrastructure, development teams to embed best practice security controls that can be evidenced.
• Contribute to continuous improvement of the cyber security posture.
• Create Breach and Attack Simulation assessments in NEMESIS (Baas) based on threat intelligence.

Descripción del empleo

Descripción del trabajo

About PATL/PRISM

Pepper Advantage Technology Limited (PATL) is investing in the continued development of a credit management platform and supporting application stack (PRISM) with the aspiration to provide the modular elements of the platform to internal and third-party customers on a SaaS basis.

About the role

Pepper Advantage is looking to grow its Security Engineering team by adding a skilled and experienced Cyber Security Analyst. You will be responsible for building and running the defensive security controls for a highly available credit technology platform running the latest technology.

We are looking for someone with a strong focus on the Azure platform to assist in the design, implementation, and governance of secure cloud-based solutions. This role requires technical knowledge in Azure services, cloud architecture, and security best practices, along with leadership capabilities to guide a team of engineers and collaborate with cross-functional stakeholders.

Location: Madrid (Spain), UK (London, Uxbridge, Skipton), Dublin (Ireland)

Permanent position, hybrid setting model.

Main Responsibilities:

• Review, triage and respond to SOC tickets.
• Manage the security tool sets, review tickets, requests, behaviours from those tools to drive improvements in security stance.
• Collaborate with security, infrastructure, development teams to embed best practice security controls that can be evidenced.
• Contribute to continuous improvement of the cyber security posture.
• Create Breach and Attack Simulation assessments in NEMESIS (Baas) based on threat intelligence.

Competencies:

• Security tool knowledge (MS Defender, Arctic Wolf, NEMESIS, Aikido Security, RAPID7, Crowdstrike)
• A desire to always want to learn about new technologies and threats.
• Strong understanding of cybersecurity principles, including risk management, threat detection, and incident response.
• Commitment to continuous learning to stay current with emerging threats, technologies, and best practices.
• Ability to apply knowledge of networks, systems, cloud environments, and security tools to safeguard organizational assets.
• 2-3 years of experience.

Your skills

• Proven experience in threat hunting and detection engineering.
• Solid understanding of cyber defence strategies and security operations.
• Experience identifying and remediating security vulnerabilities.
• Familiarity with tools such as SIEM, EDR/XDR, and vulnerability scanners.
• Knowledge of frameworks like MITRE ATT&CK, NIST, or ISO 27001.
• Scripting or automation skills (e.g., Python, PowerShell) desirable.
• Certifications such as OSCP, GIAC, Security+

Pepper Advantage’s values and culture

Our mission is to help people succeed. Our clients, our customers, our employees. Our Values are ‘Can do’, ‘Balanced’ and ‘Real’.

Pepper Advantage’s values support our vision, shape our culture and define how we interact with other employees and the attitudes we adopt towards our customers and clients. The values of Pepper Advantage support the organisation’s mission statement.

Pepper Advantage’s unique outcome focused corporate culture aims to deliver fairness and value for clients and customers, consistently exceeding expectations in all measurable performance areas.

We are committed to fair and transparent pay. In line with EU Pay Transparency requirements, we will share the salary range and compensation details with candidates before the first interview. Compensation is determined based on experience, skills, and internal equity.

Pepper Advantage is an equal opportunities employer.

Role profiles are subject to change in line with business needs.