OneTrust is a leading enterprise software platform specializing in privacy, trust, and data governance technology. The company provides automated solutions for managing data privacy compliance, third-party risk, ethics, and ESG (environmental, social, and governance) programs. Headquartered in Atlanta, Georgia, its cloud-based trust intelligence platform helps organizations safely harness their data while adhering to global regulatory frameworks like GDPR and CCPA.
HQ: Atlanta, United States • Software • Data & Analytics • Data Governance • Est. 2016
≈ $36k – $93k per year (Estimated) • Equity • Middle • 3+ years exp • In office (Madrid, Spain) • Contractor • Middle
C#
C#
.NET
Cybersecurity
GDPR
HIPAA
ISO 27001
PCI DSS
SOC 2
Roche Poland is a major pharmaceutical and diagnostics organization operating as part of the global F. Hoffmann-La Roche group. The company focuses on developing and delivering innovative medicines in oncology, neurology, immunology, and rare diseases, alongside advanced diagnostic systems for healthcare institutions. Through its local research and development capabilities - including a prominent global IT and data analytics center based in Poland - it plays a vital role in advancing personalized healthcare and clinical trials across the region.
HQ: Warsaw, Poland • Health Care • Diagnostics • Pharmaceuticals • 5000+ employees
In office (Madrid, Spain) • Bachelor's Degree • Full-Time
GDPR
Management
Confluence
Jira
Miro
ServiceNow
≈ $35k – $91k per year (Estimated) • Middle • 4+ years exp • In office (Madrid, Spain) • Bachelor's Degree • Full-Time • Middle
PowerShell
DevOps
Incident Management
Cybersecurity
Microsoft Entra ID
Chips/EDA
PoC Library
≈ $51k – $129k per year (Estimated) • Staff+ • 5+ years exp • In office (Madrid, Spain) • Bachelor's Degree • Full-Time • Architect
Banco Santander is a prominent multinational financial services company that provides retail, commercial, and investment banking products to millions of customers globally. The institution is recognized as one of the largest banking groups in the world, maintaining a dominant market presence throughout Europe and the Americas. Headquartered in Madrid, Spain, the global bank operates an extensive network of branches and subsidiaries to deliver tailored financial solutions to its diverse international client base.
HQ: Madrid, Spain • Events & Ticketing • Corporate Events • Artificial Intelligence • Credit Cards • Financial Services • Banking • 1001-5000 employees
Boadilla del Monte • Remote (Spain) • Full-Time • Spanish: C1
TypeScript
JavaScript
Frontend
Angular
DevOps
Splunk
Vector
Cybersecurity
Crowdstrike
EnCase
IBM QRadar
Jones Lang LaSalle is a global professional services firm that specializes in real estate and investment management. The organization provides services such as property and facility management, leasing, capital markets advisory, project and development management, and other real estate consulting services for a range of clients.
HQ: Chicago, United States • Real Estate • Property Management • Commercial Real Estate • 5000+ employees
≈ $35k – $87k per year (Estimated) • Lead • 7+ years exp • Barcelona • Remote (Spain) • Bachelor's Degree • Full-Time • Architect
LLM
DevOps
AWS
Azure
CI/CD
GCP
IAM
Cybersecurity
Defense in Depth
ISO 27001
NIST CSF
OWASP Top 10
STRIDE
Threat Modeling
Zero Trust
ING Group is a Dutch multinational banking and financial services corporation headquartered in Amsterdam, with a strong presence across Europe and the globe. The institution provides a comprehensive range of services, including retail and wholesale banking, commercial lending, and asset management for individuals, corporations, and government entities. Driven by a commitment to sustainability and digital innovation, the company empowers its customers to stay a step ahead in both their personal and professional financial lives.
HQ: Amsterdam, Netherlands • Investment Banking • Financial Services • Banking • 1001-5000 employees • Est. 1918
≈ $50k – $113k per year (Estimated) • Senior • 5+ years exp • In office (Madrid, Spain) • Full-Time • Senior
C#
C++
PowerShell
Python
Rust
AI/ML
Red Teaming
DevOps
AWS
Azure
GCP
Cybersecurity
Cobalt Strike
Sliver
In office (Madrid, Spain) • Full-Time
PowerShell
Python
Databases
Apache Kafka
DevOps
Azure
Azure AKS
Azure DevOps
Bicep
CI/CD
Docker
GCP
Git
Kubernetes
Terraform
VMWare
Analytics
ETL/ELT
≈ $51k – $116k per year (Estimated) • Senior • 3+ years exp • Madrid • Remote (Spain) • Full-Time • Senior
Celonis is a global enterprise software leader pioneering process mining and execution management technologies. Its platform extracts data from underlying enterprise IT systems to visualize, analyze, and optimize business operations in real time. By identifying operational bottlenecks and inefficiencies, Celonis helps organizations enhance performance across finance, supply chain, customer service, and procurement.
HQ: New York, United States • HQ: Munich, Germany • Software • Artificial Intelligence • Data & Analytics • Business Process Automation (BPA) • 1001-5000 employees
Equity • Remote/Hybrid (Madrid, Spain) • Bachelor's Degree • Full-Time
AI Agents
Red Teaming
DevOps
AWS
Azure
GCP
Cybersecurity
NIST CSF
Threat Modeling
Robotics
Digital Twin
UP Education is a major private dual-sector tertiary education provider operating across New Zealand and Australia. Headquartered in Auckland, the group delivers higher education degrees, vocational education and training (VET), and university preparation pathway programs across a regional network of over 60 campuses alongside online platforms.
HQ: Auckland, New Zealand • Education
New Zealand • Remote • Full-Time • Junior • English
AWS
Kali Linux
Splunk
Cybersecurity
Burp Suite
Microsoft Sentinel
Nmap
Wireshark
NCC Group (LSE: NCC) is a global cyber security, risk mitigation, and technical assurance enterprise headquartered in Manchester, United Kingdom. Founded in 1999, the publicly traded company employs over 2,000 security experts across the UK, Europe, North America, and Asia-Pacific.
HQ: Manchester, United States • Transportation & Logistics • Ride Hailing • Cybersecurity • 51-200 employees • Est. 1999
≈ $102k – $226k per year (Estimated) • Manchester • Remote • Full-Time
SportyBet is an international sports betting, gaming, and digital entertainment platform owned by Sporty Group. Founded by Sudeep Ramnani in 2013, the platform is a market-leading sports betting operator in Africa - with operations across Nigeria, Ghana, Kenya, Zambia, Tanzania, and Uganda - and has expanded internationally into markets like Brazil.
HQ: London, United Kingdom • Gaming • Sports • iGaming & Gambling • Sports Betting • Est. 2013
Remote (Europe)
Bash
PowerShell
Python
DevOps
Splunk
Cybersecurity
Elastic SIEM
Microsoft Defender
Microsoft Sentinel
Trend Micro
Wazuh
Remote (Europe)
Bash
PowerShell
Python
AI/ML
Red Teaming
DevOps
Git
Kali Linux
Windows Server
Cybersecurity
Burp Suite
Censys
Crowdstrike
Microsoft Defender
Nmap
OWASP ZAP
SentinelOne
Shodan
Wireshark
Management
Confluence
Jira
Wiz develops a cloud security platform that helps organizations identify and manage risks across cloud infrastructure and applications. Its software analyzes configurations, identities, vulnerabilities, data exposure, and workloads to prioritize security issues and support remediation.
HQ: New York, United States • HQ: Tel Aviv, Israel • Information Technology • Cybersecurity • Cloud Computing • Cloud Security • 1001-5000 employees
≈ $51k – $115k per year (Estimated) • Senior • 7+ years exp • Madrid • Remote (Spain, United Kingdom) • Bachelor's Degree • Senior
Python
DevOps
Amazon EKS
AWS
Azure
Azure AKS
CI/CD
CloudFormation
GCP
Google GKE
Helm
Kubernetes
Pulumi
Shift-Left
Terraform
IAM
Cybersecurity
OWASP Top 10
Shift-Left Security
Threat Modeling
Wiz
Akamai is the cybersecurity and cloud computing company that powers and protects business online.
Singapore • Hong Kong • CDN • Cybersecurity • Cloud Computing • 1001-5000 employees
Remote (Spain)
Python
DevOps
Akamai
CI/CD
Docker
GCP
Kubernetes
Terraform
CrowdStrike is a global cybersecurity leader specializing in cloud-delivered endpoint protection, threat intelligence, and cyberattack response services. Headquartered in Austin, Texas, and publicly traded on the Nasdaq (CRWD), the company provides real-time security solutions to enterprises worldwide.
HQ: Austin, United States • Cybersecurity AI • LLM & Generative AI • Artificial Intelligence • Professional Services • Application Security • Threat Intelligence • Endpoint Security • Cybersecurity • 5000+ employees
≈ $54k – $133k per year (Estimated) • Equity • Lead • France • Spain • Ireland • Italy • Remote (France, United Kingdom, Ireland, Italy, Spain) • Bachelor's Degree • Full-Time • Principal • French: C1
AWS
Azure
GCP
Cybersecurity
Crowdstrike
Suricata
Zeek
≈ $81k – $184k per year (Estimated) • Equity • Senior • 5+ years exp • United Kingdom • Remote (Europe) • Full-Time • Senior • Dutch (Optional)
AWS
Azure
GCP
Kubernetes
Cybersecurity
Crowdstrike
Proton VPN is a high-security virtual private network service operated by Proton AG, a privacy-focused software firm headquartered in Geneva, Switzerland. Originally developed in 2017 by scientists and engineers who met at CERN (and who built Proton Mail), the service provides end-to-end encrypted internet routing backed by strict Swiss data protection laws.
HQ: Geneva, Switzerland • Internet Security Services • VPN • Internet Services • 501-1000 employees • Est. 2017
≈ $79k – $178k per year (Estimated) • Equity • Senior • 5+ years exp • Geneva • Remote (Switzerland, France, Spain) • Internship • Senior
OpenZeppelin is a smart contract security company founded in 2015 with origins in Buenos Aires. Its open-source contract libraries are the de facto standard for token and access control implementations across Ethereum and compatible chains. The firm also performs audits and sells Defender, a platform for secure contract operations, upgrades and incident response.
HQ: Buenos Aires, Argentina • Cybersecurity • Financial Services • Blockchain & Crypto • Est. 2015
Remote • Contractor • English: C1
Solidity
Cairo
Go
Move
Rust
Cairo
OpenZeppelin Cairo
Solidity
Certora
Echidna
Halmos
Cybersecurity
Threat Modeling
Web3
Aave
DeFi
Ethereum
OpenZeppelin
Smart Contracts
Uniswap
Aptos
Cosmos
Cosmos SDK
Foundry
Solana
Starknet
Stellar
Sui
Secfix is the fastest way to get ISO 27001, GDPR, TISAX compliant ✓ Automated security controls ✓ Trained and certified auditors ✓ Save time and resources
Berlin • Munich • Financial Services • Information Security • Cybersecurity
≈ $84k – $206k per year (Estimated) • Equity • Lead • 7+ years exp • Remote (Europe) • Full-Time • Staff
ISO 42001
DevOps
AWS
Azure
GCP
GitLab
Cybersecurity
GDPR
ISO 27001
SOC 2
≈ $83k – $188k per year (Estimated) • Equity • Senior • 5+ years exp • Remote (Europe) • Full-Time • Senior • English: C1 • German: C2
ISO 42001
DevOps
AWS
Azure
GCP
GitLab
Cybersecurity
GDPR
ISO 27001
SOC 2
Mattermost is an open source collaboration platform company headquartered in Palo Alto, California, and founded in 2016. The company develops a self-hosted messaging, workflow, and incident response product that organizations run inside their own infrastructure instead of a public cloud service. It focuses on defense, government, and security conscious technology customers that need full control over where their operational data resides.
HQ: Palo Alto, United States • Project Management • DevOps • Information Technology • Information Security • Communication & Collaboration • Software • Cybersecurity • Est. 2016
≈ $50k – $114k per year (Estimated) • Senior • 3+ years exp • Remote (United Kingdom, Spain, United States) • Bachelor's Degree • Internship • Senior
Python
DevOps
AWS
Azure
Docker
GCP
Kubernetes
IAM
Cybersecurity
Crowdstrike
FedRAMP
ISO 27001
SentinelOne
SOC 2
Zero Trust
Management
Google Workspace
Use RemoFirst as your international HR solution; onboard full-time employees from anywhere in the world and streamline payroll, taxes and compliances policies.
Phoenix • Almaty • Warsaw • Barcelona • Tucson • Professional Services • Human Resources • 201-500 employees • Est. 2021
Lead • Remote (Poland, Romania, South Africa, Spain, Ukraine) • Full-Time • Staff
Java
Python
Java
Spring Boot
Python
Django
FastAPI
Databases
Apache Kafka
PostgreSQL
RabbitMQ
AI/ML
LLM
LLM Guardrails
DevOps
Amazon EKS
AWS
Kubernetes
Amazon S3
IAM
Rest API
Terraform
Cybersecurity
Auth0
Least Privilege
Marketing
HubSpot
Ethereum is a decentralized platform for resilient apps and infrastructure. Control your money, data, and identity, with no bank or middleman needed.
Design & Creative • Cryptocurrencies • Blockchain & Crypto
Remote (Europe, Singapore) • Full-Time
C#
Java
Python
Rust
Web3
Ethereum
Canonical is the publisher of Ubuntu, the world's most widely used Linux distribution, headquartered in London. Founded in 2004 by Mark Shuttleworth, the company provides enterprise-grade services, support, and security for open-source software, enabling organizations to deploy and manage workloads consistently across diverse environments. Their portfolio spans the entire compute spectrum - from public and private cloud infrastructure (OpenStack), container orchestration (Kubernetes/MicroK8s), and data center management to specialized edge and IoT computing.
HQ: London, United Kingdom • Artificial Intelligence • Software • Information Technology • 1001-5000 employees • Est. 2004
≈ $95k – $211k per year (Estimated) • Lead • Remote • Bachelor's Degree • Staff
Ubuntu
Cybersecurity
Maltego
Shodan
Remote
JavaScript
PHP
Python
Ruby
Rust
TypeScript
DevOps
Debian
Ubuntu
Remote • Bachelor's Degree • Internship
C++
JavaScript
PHP
Python
Ruby
Rust
TypeScript
DevOps
Debian
Ubuntu
Cybersecurity
Threat Modeling
Cryptography
OpenSSL
Established in 2012, Interdependence is a full-service digital PR, investor relations and media communications firm supercharged by the most advanced technology ever in public relations to maximize consistent media placements in prestigious media ...
Professional Services • Advertising • Sales & Marketing
$200k – $300k per year • Lead • 10+ years exp • Remote • Staff
HIPAA
ISO 27001
NIST CSF
PCI DSS
SOC 2
$120k – $150k per year • Senior • Remote • Full-Time • Senior
Salary range
| Seniority |
Jobs |
25% |
Median |
75% |
| Middle |
11 |
$61K |
$63K |
$64K |
| Senior |
26 |
$79K |
$83K |
$85K |
| Lead |
9 |
$85K |
$91K |
$145K |
| All levels |
55 |
$65K |
$83K |
$94K |
Few employers in this selection publish pay, so these figures are Alion estimates built from comparable listings by role, level and country. Gross annual, converted to USD.
The market right now
Alion currently lists 86 open Cybersecurity Engineer jobs in Madrid from 43 companies. 6 of them were posted or refreshed in the last seven days. 35 of the employers have posted something in the last three months, which is the pool worth watching if you are starting a search now. Every listing links straight to the employer, so you apply on their own board rather than through an intermediary.
What these roles pay
Most employers in this selection do not publish a figure, so the range below is Alion's own estimate, derived from 55 comparable listings priced by role, level and country. Across them the middle half of the market sits between $65K and $94K a year, with a median of $83K. By level, the median runs middle at $63K, senior at $83K, and lead at $91K. The step from middle to lead is worth about 1.4x on median pay. Figures are gross annual amounts converted to US dollars, so roles in different currencies stay comparable.
Where the work is
The largest concentrations of these roles are Spain (50), Switzerland (1), France (1), United Kingdom (1), and Bulgaria (1). 52% of the listings are fully remote and a further 7% are hybrid, so a large part of this market is open to you regardless of where you live.
Who is hiring
The employers with the most open Cybersecurity Engineer jobs in Madrid right now are Roche Poland (23), ING Group (6), Canonical (4), Jobandtalent (4), NCC Group (2), and SportyBet (2). Each company page on Alion carries its size, funding stage, tech stack and every other position it has open, so you can judge the employer before you spend an evening on the application.
What employers ask for
Reading across the current listings, the tools that come up most often are Python (34), AWS (29), Azure (26), GCP (25), CI/CD (20), ISO 27001 (20), Terraform (19), and IAM (17). The counts are how many of these openings name each one, which is a better guide to what is actually being hired for than a generic skills list.
Relocation, visas and equity
Of the current Cybersecurity Engineer jobs in Madrid, 2 state visa sponsorship, 3 offer a relocation package, and 8 include equity. These are filters on the list above, so you can narrow it to the ones that make a move possible for you.
