Lead Security Analyst

ADP; Barcelona; Hybrid; EUR 90,000 - 130,000; Full time

Job summary

ADP in Barcelona, Spain, is hiring a Lead Cloud Security Analyst to join a skilled team responsible for infrastructure and network security assessments and the CVM program across cloud and on‑prem environments. The role is hybrid in Barcelona.

You will secure cloud environments (GCP mandatory) and drive vulnerability management with DevOps teams, using tools like Qualys, CrowdStrike, Wiz, Prisma and Python scripting to analyze data and report to senior management.

Qualifications

• Deep knowledge of vulnerability management in security
• Strong cloud security understanding (GCP required)
• Experience building/managing VM programs with metrics & automation
• Analytical and cross-functional capability across dev and security
• Familiarity with security/compliance tools (Qualys, CrowdStrike)
• Experience with CSPM tools (Wiz, Prisma, Dome9/Cloudguard)
• Ability to communicate security concepts to diverse audiences
• Proficient in Python and SQL for data analytics

Responsibilities

• Develop and prioritize actions to reduce risk using existing tools and data
• Develop metrics to measure program performance
• Communicate status and security issues to senior management
• Respond to cross-product security challenges in a large global infrastructure
• Understand, evaluate, and mitigate risks and vulnerabilities

Skills

Vulnerability management

Cloud security

Data analytics

Scripting

Security tooling

Communication

Problem solving

Cross-functional work

Education

Bachelor's degree or equivalent

Tools

Qualys

CrowdStrike

CSPM tools (Wiz, Prisma, Dome9/Cloudguard)

Job description

ADP is hiring a Lead Cloud Security Analyst in our Barcelona, Spain office - hybrid role.

As a Lead Cloud Security Analyst, you will join a highly skilled team providing world-class infrastructure and network security assessments and security consultation for ADP's Global Security Organization (GSO). This team is responsible for the execution of ADP's global Compliance and Vulnerability Management Program (CVM) program for infrastructure and network across Cloud and on-premises locations.

Services provided to the organization include Vulnerability management program management including Zero-day vulnerability response & Secure OS Build Compliance for cloud/container infrastructure as well as on-premises servers/endpoints.

You will focus on supporting CVM Cloud initiatives by leveraging a variety of security tools. Working closely with product and technology teams, with your knowledge of industry standards, you will be ensuring our infrastructure meets and maintains the requirements of our CVM security program.

To succeed in this position, you'll need knowledge and experience in securing cloud environments (GCP is a MUST) and in developing or being a part of a vulnerability management program working with a variety of product/DevOps teams.

Experience with the use of security tools for scanning and detection coupled with the ability to analyze the results across a large data set using database and scripting tools. Balance that with ability to stay ahead of threats and security trends while refining processes in a rapidly changing environment to drive and evolve the program.

What You'll Do

Here’s what you can expect on a typical day in the life of a Lead Cloud Security Analyst at ADP.

Develop: Using existing tools, leverage available data to prioritize what should be addressed to reduce risk in the environment.

Measure: Develop metrics to track and show the performance of the program.

Communicate: From working with technical teams to understand/solve security issues to summarizing status for senior management.

Challenges: Across hundreds of products and a large global infrastructure, no day is the same and we must be prepared to respond to challenges presented.

Risk Management: Understand and evaluate/respond to risks/vulnerabilities and how to mitigate them.

Experience You'll Need

• Deep understanding of information security specifically in the realm of vulnerability management (VM)
• Deep understanding of Cloud Security (GCP – Must, Other Cloud environments – Preferred)
• Experience managing/building VM programs - defining and building metrics, automation of response and remediation (guidance)
• Strong analytical/problem solving skills and cross functional knowledge across multiple development and security disciplines.
• Understanding of security and compliance tools such as Qualys, Crowdstrike etc.
• Experience working with CSPM tools such as Wiz, Prisma, Dome9/Cloudguard, etc is a MUST.
• Ability to communicate security-related concepts to a broad range of technical and non-technical staff.
• Experience in scripting languages (Python – Preferred) and SQL Queries (Strong emphasis on Data Analytics)

To Succeed In This Role

You’ll have a bachelor's degree OR equivalent.

5-7 years of relevant experience.

Any of the following are a plus but not necessary: CISSP, CISM, etc.

You’ll Love Working Here Because You Can

• Team collaboration. Courage comes from how associates are willing to have difficult conversations, speak up, be an owner, and challenge one another's ideas to net out the best solution.
• Deliver at epic scale. We deliver real user outcomes using strong judgment and good instincts. We're obsessed with the art of achieving simplicity with a focus on client happiness and productivity.
• Be surrounded by curious learners. We align ourselves with other smart people in an environment where we grow and elevate one another to the next level. We encourage our associates to listen, stay agile, and learn from mistakes.
• Act like an owner & doer. Mission-driven and committed to navigating change, you will be encouraged to take on any challenge and solve complex problems. No tasks are beneath or too great for us. We are hands‑on and willing to master our craft.
• Give back to others. Always do the right thing for our clients and our community and humbly give back to the community where we live and work. Support our associates in times of need through ADP's Philanthropic Foundation.

Join a company committed to equality and equity. Our goal is to impact lasting change through our actions.

Find out why people come to ADP and why they stay: https://youtu.be/ODb8lxBrxrY

A little about ADP:

We are a comprehensive global provider of cloud-based human capital management (HCM) solutions that unite HR, payroll, talent, time, tax and benefits administration and a leader in business outsourcing services, analytics, and compliance expertise. We believe our people make all the difference in cultivating a down-to‑earth culture that embraces our core values, welcomes ideas, encourages innovation, and values belonging. We've received recognition for our work by many esteemed organizations, learn more at ADP Awards and Recognition.

Diversity, Equity, Inclusion & Equal Employment Opportunity at ADP:

ADP is committed to an inclusive, diverse and equitable workplace, and is further committed to providing equal employment opportunities regardless of any protected characteristic including: race, color, genetic information, creed, national origin, religion, sex, affectional or sexual orientation, gender identity or expression, lawful alien status, ancestry, age, marital status, protected veteran status or disability. Hiring decisions are based upon ADP's operating needs, and applicant merit including, but not limited to, qualifications, experience, ability, availability, cooperation, and job performance.

Ethics at ADP:

ADP has a long, proud history of conducting business with the highest ethical standards and full compliance with all applicable laws. We also expect our people to uphold our values with the highest level of integrity and behave in a manner that fosters an honest and respectful workplace. Click https://jobs.adp.com/life-at-adp/ to learn more about ADP's culture and our full set of values.