Cybersecurity Engineer

🚀 𝗔𝗯𝗼𝘂𝘁 𝘂𝘀

mscope is a 𝗳𝗮𝘀𝘁 𝗴𝗿𝗼𝘄𝗶𝗻𝗴 𝗳𝗶𝗻𝘁𝗲𝗰𝗵 applying 𝗽𝗿𝗼𝗽𝗿𝗶𝗲𝘁𝗮𝗿𝘆 𝗔𝗜 to Microeconomics & Finance to help institutional investors identify highly promising SMEs and accelerate their growth. We're an ambitious, talented & international team of 𝟯𝟬+ eager to build high-quality solutions with real impact on the economy & society.

Backed by strong investors & strategic partners across the fintech sector, we build a suite of 𝗱𝗶𝘀𝗿𝘂𝗽𝘁𝗶𝘃𝗲 𝗦𝗮𝗮𝗦 𝗽𝗿𝗼𝗱𝘂𝗰𝘁𝘀 using cutting-edge technology: AWS cloud-first architecture, Glue + Pyspark orchestration for Big Data, multi-agent AI systems on Amazon Bedrock, AI-accelerated development with 𝗖𝗹𝗮𝘂𝗱𝗲 𝗖𝗼𝗱𝗲, modern stack (Spring Boot, React-Redux).

The real challenge is execution: delivering fast without compromising quality. If you're motivated by building 𝗺𝗶𝘀𝘀𝗶𝗼𝗻-𝗰𝗿𝗶𝘁𝗶𝗰𝗮𝗹 𝗶𝗻𝗳𝗿𝗮𝘀𝘁𝗿𝘂𝗰𝘁𝘂𝗿𝗲 that impacts 𝗺𝗶𝗹𝗹𝗶𝗼𝗻-𝗱𝗼𝗹𝗹𝗮𝗿 𝗱𝗲𝗰𝗶𝘀𝗶𝗼𝗻𝘀, this is your place.

We are looking for a 𝗖𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗘𝗻𝗴𝗶𝗻𝗲𝗲𝗿 to own and evolve mscope's security program. mscope serves 𝗺𝗮𝗷𝗼𝗿 𝗯𝗮𝗻𝗸𝘀 𝗮𝗻𝗱 𝗶𝗻𝘀𝘁𝗶𝘁𝘂𝘁𝗶𝗼𝗻𝗮𝗹 𝗶𝗻𝘃𝗲𝘀𝘁𝗼𝗿𝘀 𝗮𝗰𝗿𝗼𝘀𝘀 𝟲 𝗰𝗼𝘂𝗻𝘁𝗿𝗶𝗲𝘀, operating under 𝗜𝗦𝗢 𝟮𝟳𝟬𝟬𝟭, 𝗚𝗗𝗣𝗥, 𝗡𝗜𝗦𝟮 𝗮𝗻𝗱 𝗗𝗢𝗥𝗔 compliance frameworks. Building on a solid existing foundation, this role focuses on closing security gaps, automating compliance workflows, maturing our vulnerability management program, and serving as the single point of accountability for security across our AWS and Azure environments.

🛠️ 𝗧𝗵𝗲 𝗿𝗼𝗹𝗲

• Vulnerability management: own the program and complete the SAST/DAST pipeline integration into CI/CD, ensuring full coverage and automation. 🔍

• Compliance automation: replace manual checklists with automated controls across firewall reviews, key rotations, audits and policy reviews. ⚙️

• Cloud security: harden and evolve AWS and Azure security postures (SCPs, Security Hub, GuardDuty, WAF, network security, Entra ID, Intune and Defender for Endpoint). ☁️

• Data loss prevention: design and execute the DLP strategy across endpoints, email, cloud storage and messaging platforms. 🔒

• Resilience: close identified gaps in SIEM-SOC integration, incident response, BCP and DR planning. 🚨

• Client trust: act as the security point of contact for client audits, questionnaires and compliance certifications (ISO 27001, ENS, NIS2, DORA). 🤝

• Security culture: maintain and evolve corporate security policies and drive security awareness initiatives across the organization. 📢

🎯 𝗪𝗵𝗮𝘁 𝘄𝗲'𝗿𝗲 𝗹𝗼𝗼𝗸𝗶𝗻𝗴 𝗳𝗼𝗿

• 3+ years of cybersecurity experience, ideally in financial services or regulated environments.

• Hands-on expertise with AWS security services (IAM, SCPs, Security Hub, GuardDuty, WAF, KMS, etc.) and the Microsoft security stack (Entra ID, Intune, Defender for Endpoint).

• Proven experience in vulnerability management (OpenVAS, Nessus or equivalent) and integrating security tooling into CI/CD pipelines (SAST, DAST, secrets scanning, container scanning).

• Familiarity with compliance frameworks: ISO 27001, GDPR, ENS, NIS2 and DORA.

• Strong ability to communicate security requirements to technical teams and translate compliance obligations into actionable engineering tasks.

• Fluency in Spanish and English

⭐ 𝗧𝗵𝗶𝘀 𝗴𝗶𝘃𝗲𝘀 𝗲𝘅𝘁𝗿𝗮 𝗽𝗼𝗶𝗻𝘁𝘀

• Security certifications: CISSP, CISM, AWS Security Specialty, AZ-500, CompTIA Security+ or similar.

• Experience with SIEM/SOC solutions (Microsoft Sentinel, Splunk or equivalent).

• Background in penetration testing, red team exercises or bug bounty programmes.

• Experience with IaC security scanning and policy-as-code (Terraform, OPA, CloudFormation Guard).

• Experience automating secrets rotation (AWS Secrets Manager, Entra ID certificate lifecycle).

• Previous experience in a startup or small-team environment with high ownership and autonomy.

🎁 𝗪𝗵𝗮𝘁 𝘄𝗲 𝗼𝗳𝗳𝗲𝗿

• Base pay + 𝗽𝗲𝗿𝗳𝗼𝗿𝗺𝗮𝗻𝗰𝗲 𝗯𝗼𝗻𝘂𝘀, private health insurance, Gympass and pension plan 💰

• 25 days of vacation (and your birthday off!)🌴

• Hybrid mode: 2 days in office 3 days in remote🏠

• Location: Downtown Madrid (Salamanca district)📍

• If interested, please email [email protected]📩