Cybersecurity Engineer

mscope; Madrid; Hybrid; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Hybrid work

25 days vacation

Birthday off

Job summary

mscope is seeking a security-focused professional to own vulnerability management, automate compliance, and harden cloud security across AWS and Azure. You will integrate SAST/DAST into CI/CD and drive DLP, incident response, and client audits.

The role requires 3+ years in cybersecurity, fluency in Spanish and English, and hands-on with AWS/Microsoft security tools. Hybrid work, 25 days vacation, and startup autonomy are offered.

Qualifications

• 3+ years of cybersecurity experience in regulated environments.
• Hands-on with AWS security services and Microsoft security stack.
• Experience integrating security tooling into CI/CD pipelines.

Responsibilities

• Own vulnerability management program and integrate SAST/DAST into CI/CD.
• Automate compliance checks across firewalls, rotations, audits and policies.
• Harden AWS/Azure security postures and protect endpoints.
• Design and implement DLP across endpoints, email and cloud storage.
• Close gaps in SIEM-SOC integration, IR, BCP and DR planning.
• Serve as security point of contact for client audits and certifications.
• Maintain security policies and drive awareness across the organization.

Skills

Vulnerability management

Cloud security

Compliance automation

SIEM/SOC

Incident response

Security governance

Security communications

CI/CD security integration

IaC security scanning

Secrets rotation automation

Vulnerability scanning tools

Penetration testing basics

ISO 27001 / GDPR / NIS2 / DORA

Spanish & English fluency

Security certifications

Tools

OpenVAS

Nessus

Microsoft Sentinel

Splunk

AWS Security Hub

GuardDuty

Terraform

OPA

CloudFormation Guard

Entra ID

Intune

Defender for Endpoint

Job description

• Vulnerability management: own the program and complete the SAST/DAST pipeline integration into CI/CD, ensuring full coverage and automation.


• Compliance automation: replace manual checklists with automated controls across firewall reviews, key rotations, audits and policy reviews.


• Cloud security: harden and evolve AWS and Azure security postures (SCPs, Security Hub, GuardDuty, WAF, network security, Entra ID, Intune and Defender for Endpoint).


• Data loss prevention: design and execute the DLP strategy across endpoints, email, cloud storage and messaging platforms.


• Resilience: close identified gaps in SIEM-SOC integration, incident response, BCP and DR planning.


• Client trust: act as the security point of contact for client audits, questionnaires and compliance certifications (ISO 27001, ENS, NIS2, DORA).


• Security culture: maintain and evolve corporate security policies and drive security awareness initiatives across the organization.


• 3+ years of cybersecurity experience, ideally in financial services or regulated environments.


• Hands-on expertise with AWS security services (IAM, SCPs, Security Hub, GuardDuty, WAF, KMS, etc.) and the Microsoft security stack (Entra ID, Intune, Defender for Endpoint).


• Proven experience in vulnerability management (OpenVAS, Nessus or equivalent) and integrating security tooling into CI/CD pipelines (SAST, DAST, secrets scanning, container scanning).


• Familiarity with compliance frameworks: ISO 27001, GDPR, ENS, NIS2 and DORA.


• Strong ability to communicate security requirements to technical teams and translate compliance obligations into actionable engineering tasks.


• Fluency in Spanish and English


• Security certifications: CISSP, CISM, AWS Security Specialty, AZ-500, CompTIA Security+ or similar.


• Experience with SIEM/SOC solutions (Microsoft Sentinel, Splunk or equivalent).


• Background in penetration testing, red team exercises or bug bounty programmes.


• Experience with IaC security scanning and policy-as-code (Terraform, OPA, CloudFormation Guard).


• Experience automating secrets rotation (AWS Secrets Manager, Entra ID certificate lifecycle).


• Previous experience in a startup or small-team environment with high ownership and autonomy.


• 25 days of vacation (and your birthday off!)


• Hybrid mode: 2 days in office 3 days in remote