Cybersecurity Architect

This is a fully remote position, open to applicants in Spain.

📋 Description

• Define and implement the security strategy for the project.

• Integrate security controls within the DevSecOps pipeline.

• Provide verifiable security evidence in the component-criterion-test traceability matrix.

• Propose and implement a cybersecurity strategy.

• Identify and mitigate vulnerabilities.

• Implement security controls during the development phase.

• Monitor and respond to security incidents.

• Document security policies and procedures.

• Validate compliance with security regulations.

• Define security acceptance criteria.

• Execute or oversee automated security testing with QA.

• Establish safe usage rules for AI tools in development, testing, and documentation.

⛳️ Requirements

• Degree in Computer Engineering, Telecommunications, Systems, or equivalent (MECES 2 or higher).

• A minimum of 8 years of experience in IT.

• At least 5 years of experience in security applied to development, cloud platforms, or architecture.

• Experience in at least 2 real DevSecOps projects (SAST, DAST, SCA, secrets management, SBOM).

• Ideally, experience in public administration, the financial sector, or regulated transactional systems.

• Knowledge of identity and access design and validation: authentication, authorization, and auditing.

• Knowledge of API security, microservices, and integration with legacy systems.

• Familiarity with security in Kubernetes and Azure, as well as infrastructure as code.

• Understanding of threat modeling (STRIDE), encryption, key management, and security logging or monitoring.

• Knowledge of ISO 27001/27002, NIST CSF, OWASP ASVS/Top 10, and CIS Benchmarks.

• Awareness of GDPR and other international data protection regulations.

• Proficiency in Spanish.

• Availability for occasional travel.

• Certifications such as CISSP, CISM, CISA, ISO 27001 Lead Implementer or Lead Auditor, CSSLP, CCSP, Azure AZ-500 or SC-100, and CKS are valued.

• A master's degree in cybersecurity is also valued.

🏝️ Benefits

• Stability: upon completing one project, you will start another.

• International projects with opportunities to work in different countries.

• Flexible working hours, with start times between 8:00 AM and 10:00 AM and flexible end times.

• Shortened hours on Fridays.