Senior Security Architect – Zero Trust & Cloud Defense

Nexthink; Madrid; Hybrid; EUR 72,000 - 100,000; Full time

Benefits offered by this job

Private Health Insurance

Daily meal vouchers

Hybrid work model

Relocation package

Job summary

Nexthink is seeking a Senior Corporate Security Engineer to safeguard its internal environment and architect a secure fabric for rapid growth. You will partner with IT, Cloud and Application Security teams to secure identity, devices, and applications for Nexthinkers globally.

Join a cloud-native security team focused on zero-trust, passwordless authentication, automation, and proactive threat hunting across Windows, macOS, Linux, and mobile endpoints.

Qualifications

• 5-8 years of hands-on experience in Corporate Security, IT Security Engineering, or a SOC role in a cloud-first environment.
• Endpoint mastery with OS hardening and MDM/UEM tools.
• Vulnerability management and patching experience.
• Coding skills in Python and Terraform to automate security workflows.
• Experience with EDR tools and SIEM log analysis.
• Fluent in English and strong communication to non-technical stakeholders.
• Ability to influence security practices across non-security teams.

Responsibilities

• Lead identity-centric security architecture and passwordless/Zero Trust initiatives.
• Manage secure provisioning, least-privilege access, and onboarding/offboarding workflows.
• Define security baselines for endpoints and mobile devices; manage EDR/XDR tuning.
• Secure Azure footprint and cloud configurations distinct from prod environments.
• Coordinate vulnerability management and automate remediation with IT.
• Develop IaC, harden endpoints/servers, and integrate CASB/DLP policies.
• Lead incident response for phishing, malware, and lost devices; develop automation scripts.
• Audit support, evidence collection, and DevSecOps collaboration.

Tools

Python

Terraform

PowerShell

Intune/Jamf

SOAR

EDR/XDR

Okta

Microsoft Entra ID

Job description

Nexthink is seeking a Senior Corporate Security Engineer to safeguard its internal environment and architect a secure fabric for rapid growth. You will partner with IT, Cloud and Application Security teams to secure identity, devices, and applications for Nexthinkers globally.

Join a cloud-native security team focused on zero-trust, passwordless authentication, automation, and proactive threat hunting across Windows, macOS, Linux, and mobile endpoints.