Senior Corporate Security Architect - Identity & Cloud

Nexthink SA; Madrid; Hybrid; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Hybrid work model

Private Health Insurance (Sanitas)

Daily meal vouchers 11 EUR

Unlimited vacation

Job summary

Nexthink seeks a Senior Corporate Security Engineer to protect the internal environment and lead detection, response, and automation for a global SaaS ecosystem. You will partner with IT, Cloud, and App Security teams to secure identities, devices, and applications across Nexthinkers worldwide.

The role emphasizes design of zero-trust controls, endpoint hardening, vulnerability management, and proactive threat hunting within a hybrid work setting in Madrid, with a competitive compensation

Qualifications

• 5-8 years of hands-on Corporate Security/IT Security in a cloud-first environment.
• Experience hardening macOS/Windows and managing security via MDM/UEM.
• Vulnerability management and patch coordination.
• Proficiency in Python and Terraform for automation.
• Security operations with EDR/SIEM experience.
• Excellent English communication; ability to explain risks to non-technical stakeholders.
• Ability to influence security practices across non-security teams.
• Experience with phishing simulation platforms.

Responsibilities

• Contribute to identity-centric security architecture and Zero Trust design.
• Secure provisioning and least-privilege access across business systems.
• Collaborate with HR/IT on onboarding/offboarding workflows and auditability.
• Define security baselines for endpoints (Windows/macOS) and mobile via MDM.
• Tune EDR/XDR for high-fidelity detection on workstations and servers.
• Secure the corporate Azure footprint and proper config of subscriptions.
• Coordinate vulnerability and patch management and remediation workflows.
• Develop automation scripts and SOAR workflows to streamline security tasks.

Skills

Python

Terraform

EDR/XDR

SIEM

MDM/UEM

Tools

MDM/UEM tools

Job description

Nexthink seeks a Senior Corporate Security Engineer to protect the internal environment and lead detection, response, and automation for a global SaaS ecosystem. You will partner with IT, Cloud, and App Security teams to secure identities, devices, and applications across Nexthinkers worldwide.

The role emphasizes design of zero-trust controls, endpoint hardening, vulnerability management, and proactive threat hunting within a hybrid work setting in Madrid, with a competitive compensation