IT Security Engineer

Tensec; Madrid; Presencial; EUR 70.000 - 90.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Work on cutting-edge aerospace projects

Collaborate globally with top engineers

Experience high-growth company environment

Impactful work shaping the future of flight

Descripción de la vacante

A pioneering aerospace company in Madrid seeks an IT Security Engineer to ensure the security of its cutting-edge technologies. The role involves developing security policies, translating risk assessments into technical controls, and leading incident responses. Ideal candidates will have at least 5 years of experience in IT security, knowledge of cloud security standards, and automation skills with tools like PowerShell or Python. This position offers the chance to work in a high-growth environment that shapes the future of aerospace.

Formación

• At least 5 years of hands-on experience in IT security engineering.
• Experience in delivering security projects with measurable impact.
• Certifications like CISSP or CEH are a plus.

Responsabilidades

• Develop and implement IT security policies and procedures.
• Lead investigations of complex cybersecurity incidents.
• Collaborate with engineering on secure configurations.

Conocimientos

Cloud security best practices

Risk assessment and management

Incident response

Automation (PowerShell, Python)

Networking knowledge

Educación

Bachelor’s degree in computer science or equivalent

Herramientas

Microsoft 365

AWS

SIEM/SOAR tools

Descripción del empleo

About the role

Imagine being the person standing between cutting edge aerospace innovation and the cyber threats trying to slow it down. As IT Security Engineer at Destinus you join the internal IT admin team to design, implement and operate security controls that protect a distributed cloud first environment built for speed and engineering excellence. You make sure our aerospace and defence critical technologies operate securely under strict national security requirements while still enabling teams to move fast and build boldly. Working side by side with IT engineering and the Global Information Security Manager you translate cyber security policies into practical technical solutions, ensure compliance with security standards, proactively reduce risk and lead effective responses when incidents occur.

At Destinus, we are revolutionizing the defense industry with cutting-edge Unmanned Aerial Vehicles (UAVs). Our innovative technologies are designed to meet the unique demands of modern defense operations, delivering unparalleled speed, precision, and cost effectiveness. Destinus partners with government agencies and defense organizations worldwide to provide advanced solutions for mission‑critical operations, enabling a new era of efficiency and technological superiority. Join us in shaping the future of defense with groundbreaking aerospace innovations.

What You’ll Do

Security Architecture and Strategy

• Develop and implement IT security policies, standards, and procedures, evolving IT and cloud environments toward cybersecurity best practices and zero‑trust principles.
• Translate risk assessments, ISMS requirements, and regulatory obligations (ISO 27001, NIST, export control/defence standards) into technical controls.
• Contribute to cybersecurity roadmaps aligned with group strategy, including migration from a Google‑centric to a Microsoft‑based architecture.
• Design and implement cybersecurity baselines for Microsoft 365, Entra ID, Intune, AWS, and on‑prem Unix and Microsoft systems, integrated with existing environments.
• Define and maintain secure configurations for identity and access management, conditional access, logging, and monitoring across cloud and on‑prem platforms.
• Collaborate with IT and engineering teams to harden Windows, macOS, and Linux endpoints using EDR, MDM, and configuration management tools.

Monitoring, Detection, and Incident Response

• Implement and tune SIEM/SOAR detections (e.g., Microsoft XDR or equivalent) covering key attack surfaces.
• Define logging, alerting, and runbooks for IT support and operations teams.
• Lead or support investigations of complex cybersecurity incidents, including root‑cause analysis and remediation.
• Coordinate with the IT SOC team.

Security Operations and Projects

• Own end‑to‑end delivery of major security initiatives, including scoping, solution design, implementation planning, and success metrics.
• Collaborate with IT on network segmentation, VPNs, and secure connectivity for offices, labs, and cloud workloads.
• Support vulnerability management and patching by providing prioritization and remediation guidance.
• Contribute to supplier and SaaS security assessments for tools used by Destinus.
• Deliver security awareness training and create user instructions.

Governance, Collaboration, and Awareness

• Provide technical input to policies, standards, and procedures for IT, cloud, and endpoint security.
• Work with the Global Information Security Manager on ISO 27001, Part‑IS, aviation/defence compliance, and customer audit support.
• Act as a cybersecurity subject‑matter expert for engineering teams, promoting secure‑by‑design practices in software and hardware development beyond IT.

What You’ll Need

• Bachelor’s degree in computer science, information security, engineering, or equivalent practical experience
• At least 5 years of solid and hands‑on experience in IT security engineering, systems engineering, or cloud security in a corporate or high‑tech environment.
• Demonstrable track record of delivering relevant security projects with measurable impact (e.g. hardening M365/Azure, rolling out EDR/XDR etc., SIEM onboarding, zero‑trust initiatives).
• Certifications such as CISSP, CISM, CEH, or equivalent are a plus.
• Strong experience with Microsoft 365 / Entra ID / Intune and AWS security configuration (identity, access, conditional access, logging, compliance).
• Good knowledge of at least one major cloud platform beyond Azure (e.g. AWS) from a security and operations perspective.
• Solid understanding of networking (TCP/IP, routing, VPN, firewalls, DNS) and how to apply segmentation and connectivity securely.
• Experience with SIEM/SOAR tools and log management (e.g. Microsoft Sentinel, Splunk, or similar). Experience with endpoint security and management (EDR, MDM, configuration management) across Windows, macOS, and ideally also Linux.
• Ability to script/automate (PowerShell, Python, or similar) for policy deployment, hardening, and monitoring.
• Familiarity with information security management and risk handling - ISO/IEC 27001/27002, NIST CSF or SP 800‑53, and related controls.
• Experience working in or with regulated environments (aviation, defence, safety‑critical systems, or similar) is a strong plus.
• Understanding of secure software and infrastructure practices (least privilege, zero trust, secure configuration, change management).

Who You Are

You are proactive by nature, spotting challenges early and driving technically and organizationally sound solutions all the way to completion. You thrive in a small, hands‑on IT team and collaborate seamlessly with security, engineering, and leadership across multiple European locations. You stay calm under pressure, manage incidents with confidence, and bring a continuous learning mindset to everything you do. Clear and direct communication in English comes naturally to you, both spoken and written, and any additional European language is a strong advantage.

Why Join Us?

• ✨ The Thrill of the Future – Work on cutting‑edge projects that redefine aerospace.
• ✨ Global Innovation Hub – Collaborate with top engineers from all over the world.
• ✨ Fast‑Paced & High‑Growth – Experience the rush of working in a rapidly expanding company.
• ✨ Real Impact – Your work won’t be theoretical—it will shape the future of flight.

Destinus is an equal‑opportunity employer. We value diversity in our companies and our teams and do not discriminate based on age, race, religion, color, country of origin, gender, sexual orientation, or disability status.

🚀 Destinus – Challenge the limits of time, space, and human potential.