{"id":29978,"url":"https://alion.io/job/nexthink-senior-corporate-security-engineer","title":"Senior Corporate Security Engineer","company":{"id":1613,"name":"Nexthink","domain":"nexthink.com","url":"https://alion.io/company/nexthink","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":{"grade":"B","score":75,"open_postings":12,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":39,"computed_at":"2026-10-22T06:10:10Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Madrid, Spain"],"countries":["ES"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":72000,"max":100000,"currency":"EUR","period":"year","gross":true,"usd_annual":112251},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"DLP","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Terraform","optional":false},{"name":"Windows","optional":false},{"name":"Zero Trust","optional":false},{"name":"AWS","optional":true},{"name":"FedRAMP","optional":true},{"name":"ISO 27001","optional":true},{"name":"Microsoft Entra ID","optional":true},{"name":"Okta","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-06-30T11:18:54Z","employer_posted_date":"2026-06-30","last_verified_at":"2026-10-22T10:40:12Z","board_verified":true,"closed_at":null,"days_open":114,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":113},"description":"Nexthink is the leader in digital employee experience management software. The company provides IT leaders with unprecedented insight allowing them to see, diagnose and fix issues at scale impacting employees anywhere, with any application or network, before employees notice the issue. As the first solution to allow IT to progress from reactive problem solving to proactive optimization, Nexthink enables its more than 1,300 customers to provide better digital experiences to more than 18 million employees. Dual headquartered in Lausanne, Switzerland and Boston, Massachusetts, Nexthink has 9 offices worldwide.\n As a Senior Corporate Security Engineer at Nexthink, you will be responsible for the security of our internal environment. You won't just be monitoring logs; you will be architecting the security fabric that enables our rapid growth.\nWorking in close partnership with IT, business teams and, partnering with our Cloud and Application Security teams, you will secure the identity, devices, and applications used by \"Nexthinkers\" worldwide. You will own the security of a complex SaaS ecosystem, and lead detection and response for the corporate environment.\nWhat You Will Do\nIdentity-Centric Security Architecture\nContribute to the design and support the implementation of passwordless authentication and Zero Trust principles. \nManage secure provisioning and lifecycle management, ensuring least-privilege access across all business systems. \nPartner with HR and IT to streamline onboarding/offboarding workflows, ensuring timely access revocation and auditability. \nEndpoint & Infrastructure Security\nDefine and enforce security baselines for our diverse fleet of endpoints (Windows, macOS) and mobile devices via MDM (Intune/Jamf). \nManage and tune EDR/XDR solutions to ensure high-fidelity detection on workstations and servers (Windows, Linux, macOS). \nSecure the corporate Azure footprint, ensuring proper configuration of subscriptions, networking, and resources distinct from our production product environment. \nProactively identify and mitigate security risks in our corporate environment, conducting regular security assessments and vulnerability scans. \nCoordinate vulnerability management and patch management \nCollaborate with IT to automate endpoint compliance checks and remediation workflows. \nSecurity Engineering\nSupport the development and maintenance of Infrastructure-as-Code. \nEnsure hardening and compliance of endpoints and servers. \nSaaS Security & Integration\nAssess and secure third-party SaaS integrations (e.g., Salesforce apps, browser extensions, productivity tools) to prevent data leakage and over-privileged access. \nCollaborate with Legal and Compliance to vet new vendors and tools. \nConfigure and maintain CASB and DLP policies to safeguard sensitive corporate data without hindering productivity. \nDetection, Response & Automation\nLead incident response activities for corporate security events (phishing, malware, lost devices). \nDevelop automation scripts (Python/PowerShell) and workflows (SOAR) to automate manual security tasks, evidence collection, and response actions. \nProactively hunt for threats within the corporate network and identity providers. \nDevelop incident response playbooks including technology specific procedures and forensics collection \nAudits and Compliance\nDesign and implement security controls to safeguard corporate resources, including endpoints, data storage, networking, computing and identity and access management. \nSupport and automate evidence collection for audits. \nCulture & Collaboration\nAct as the primary security liaison to the IT Department and business teams, helping them build security into their operations (DevSecOps for IT). \nDesign and deliver technical security training and awareness campaigns for engineering and business teams. \n 5-8 years of hands-on experience in Corporate Security, IT Security Engineering, or a SOC role in a cloud-first environment. \nEndpoint Mastery: Experience hardening operating systems (macOS/Windows) and managing security via MDM/UEM tools. \nVulnerability management: Proven experience in helping IT and business teams patching systems and infrastructures. \nCoding Skills: Proficiency in Python and Terraform for automating APIs and security workflows. \nSecurity Ops: Proven experience with EDR tools and SIEM log analysis. \nCommunication: Fluent in English with the ability to explain complex risks to non-technical stakeholders. \nProven ability to influence and drive security best practices across non-security teams. \nExperience with security awareness training platforms and phishing simulation tools. \nBonus Points\nIdentity Expertise: Deep technical knowledge of Okta and Microsoft Entra ID (Authentication policy, Conditional Access, SSO, SCIM, OIDC/SAML). \nExperience implementing FIDO2/WebAuthn (Passwordless). \nProficient in PowerShell. \nFamiliarity with compliance standards (ISO 27001/27701, SOC 2, FedRAMP) \nExperience securing Cloud Infrastructure (Azure/AWS) specifically for internal/corporate workloads. \nWhy Join Nexthink Security?\nImpact: You will report directly into the CISO organization and have a tangible impact on the daily lives of employees and the safety of the company. \nOpportunity to work on cutting-edge security projects, with visibility and support from executive leadership. \nTechnology: We use top-tier security stacks. You won’t be fighting with legacy on-premise hardware; we are cloud-native. \nCulture: We value \"Security as an Enabler,\" not a blocker. You will work in a supportive, highly technical environment in our Madrid hub\n We are the pioneers and trailblazers of a global IT Market Category (DEX) that is shaping the future of how the world works, giving our customers’ IT Teams total digital visibility across their enterprise. Our innovative solutions integrate real-time analytics, automation, and employee feedback across all endpoints. This enables our IT teams to solve complex technical challenges, create ever more productive workplaces, and deliver happy, satisfied employees in the digital workplace.\nWith over 1000 employees across 5 continents, Nexthink operates as One Team, connecting, collaborating and innovating to continuously grow. We call our employees ‘Nexthinkers’ and our commitment to diversity, inclusion, and equity is second to none. We currently have over 75 nationalities working with us, from all cultures and backgrounds, speaking many different languages.\nIf you are looking for a change and like a nice atmosphere, lots of challenges, and having fun while working, this is a great opportunity for you! Check what we offer:\n Permanent Contract and a competitive compensation package.\n Amazing centrally located offices near the Bernabeu Stadium.\n Private Health Insurance (Sanitas) and daily meal vouchers of 11 EUR will be entirely covered by us.\n Hybrid work model balancing office and remote work, with a structured approach for new hires to foster connections and onboarding.\n Flexible Hours and unlimited vacation (employees have unlimited paid time off on top of the 23 days of holidays we offer) plus 3 company-paid volunteer days.\n Up to 25 EUR per month for a gym subscription.\n Flexible compensation plan for childcare & public transportation.\n Reimbursement of up to 50% of the cost of English & Spanish classes.\n Fresh fruit, cookies, soft drinks and protein shakes at the offie.\n Regular company and team events like Pizza talks, Team Building activities, Christmas parties, hosting Meetups at the office and more!\n Bonuses for referring successful hires after three months of continuous employment.\n We offer a relocation package to people who are coming from another country.\nPlease note that not all the benefits listed above are available for temporary, contract, and internship roles. To ensure you have the most up-to-date information, we recommend checking with your Recruitment Partner.\nThe base salary for this is €72,000 - €100,000 gross per year, with a total on-target earnings (OTE) range of €79,000 - €110,000 including an annual performance bonus. You'll also be part of our broader total rewards package - including benefits tailored to where you live and how you work best.\nWe set our pay ranges using objective criteria: the scope and level of the role, the skills it takes to do it well, and the relevant market data. Ranges are reviewed every year to remain competitive and fair. We're transparent about this because we think you deserve to know what you're working towards from day one. In accordance with the EU Pay Transparency Directive (2023/970), we publish salary ranges on every Nexthink role. We won't ask what you currently earn or your previous salary. What matters to us is what this role is worth and whether it works for you. Nexthinkers come from all kinds of backgrounds, and that's what makes us stronger. We welcome applications from everyone.","description_format":"text","description_chars":8916,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Equity","Health insurance","Hybrid work"],"hiring_locations":[{"name":"Spain","iso":"ES","kind":"country"}],"hiring_excludes":[],"relocation_offered":true,"industries":["IT Service & Asset Management","Observability & APM"],"lifecycle":[{"event":"open","at":"2026-06-30T11:18:54Z"}],"visa":[],"liveness":{"score":11,"band":"cold","label":"Long shot","p_open":1,"p_active":0.4,"p_room":0.28,"age_days":113,"expected_fill_days":39,"reasons":["conf:2","stale_co","velocity","win:tail","crowd:"],"computed_at":"2026-10-22T06:10:10Z"},"pay":{"stated_usd_annual":112251,"is_top_pay":false},"html_url":"https://alion.io/job/nexthink-senior-corporate-security-engineer","json_url":"https://alion.io/job/nexthink-senior-corporate-security-engineer.json","meta":{"generated_at":"2026-10-22T13:57:39Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13358,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1613},"rest":"https://alion.io/mcp/rest/get_company?id=1613"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnexthink-senior-corporate-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnexthink-senior-corporate-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnexthink-senior-corporate-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/nexthink-senior-corporate-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnexthink-senior-corporate-security-engineer"}]}