Senior Corporate Security Engineer at Nexthink
At a glance
- Company
- Nexthink
- Location
- Madrid, ES, Spain
- Work arrangement
- On-site
- Employment type
- Full-time
- Experience
- 5–10 years
- Working hours
- 40 hours
- Visa sponsorship
- Offered, according to the listing
- Posted
- Added to The Stack
✨ The Stack take on this Nexthink job
- 🏢 Nexthink has 32 jobs here, 32 with visa sponsorship see all
- 📊 4 Security Engineer jobs in Spain in the last 60 days see them
- 🛂 Visa: Highly Qualified Professional permit. Education: Higher education degree guide
- 💡 No salary shown. Ask Nexthink if it is above the minimum.
Updated 2026-11-05, from our data and official sources.
Apply for this role at Nexthink
Apply with your AI assistant
With The Stack connected to Claude, ChatGPT or Cursor, paste this. Your assistant tailors your CV and cover letter, checks the visa facts and gives you the apply link.
Help me apply to this job on The Stack: https://jobs.trythestack.co/jobs/senior-corporate-security-engineer-nexthink
Not connected yet? Connect in a minute. To help your user apply, call the MCP tool prepare_application with slug "senior-corporate-security-engineer-nexthink": it returns the apply link, the visa facts and a CV and cover letter checklist. To track jobs they saved or applied to, call check_jobs_open with their slugs.
About the role
Responsibilities:
- Design and implement identity-centric security and Zero Trust controls (passwordless, conditional access, least privilege).
- Own provisioning/lifecycle and onboarding/offboarding workflows; integrate with HR and IT for timely access revocation and auditability.
- Define and enforce endpoint security baselines across Windows, macOS, and mobile via MDM (Intune/Jamf).
- Operate and tune EDR/XDR solutions for high-fidelity detection on endpoints and servers (Windows, Linux, macOS).
- Secure corporate Azure subscriptions and networking distinct from product environments; perform regular security assessments.
- Manage vulnerability and patching programs; coordinate remediation and automate compliance checks.
- Assess and secure SaaS integrations, configure CASB/DLP policies, and vet third-party apps with Legal/Compliance.
- Lead corporate detection, incident response, and automation of playbooks using SIEM/SOAR and scripting.
- Build and maintain Infrastructure-as-Code and automation (Terraform, Python) for secure, repeatable configurations.
Requirements:
- 5+ years of hands-on corporate security experience in cloud-first/SaaS environments.
- Practical experience with MDM (Intune/Jamf), EDR/XDR, SIEM/SOAR, CASB, and DLP.
- Strong Azure knowledge and experience securing hybrid/corporate cloud footprints.
- Proficiency with Windows, macOS, and Linux endpoint hardening and patching.
- Automation skills with Python and IaC (Terraform); experience integrating security into pipelines.
- Experience in vulnerability management, detection & response, and incident handling.
- Strong communication skills; able to explain risks to non-technical stakeholders.
- Fluent English; relevant degree or equivalent professional experience.
Responsibilities
Design and implement security architecture for the corporate environment, focusing on identity-centric controls and zero-trust principles. Lead detection and response for corporate incidents, and secure endpoints, SaaS integrations, and cloud resources.
Requirements
5-8 years of hands-on corporate security experience in a cloud-first environment; strong expertise in endpoint hardening, vulnerability management, and security automation using Python and Terraform; fluent English and ability to communicate risks to non-technical stakeholders.
Key skills
- Python — in 1200 other listings on The Stack
- Terraform — in 470 other listings on The Stack
- EDR — in 6 other listings on The Stack
- SIEM — in 24 other listings on The Stack
- SOAR — in 4 other listings on The Stack
- MDM (Intune/Jamf) — not in any other listing on The Stack
- Azure — in 143 other listings on The Stack
- Windows — in 7 other listings on The Stack
- macOS
- Linux
- Okta
- Microsoft Entra ID
On The Stack (as of 2026-11-05)
Frequently asked questions about Nexthink
Is this Senior Corporate Security Engineer role still open?
It was posted on 2026-11-03 and is listed as active on The Stack. Confirm on Nexthink's application page before applying.
Does Nexthink offer visa sponsorship?
This listing is marked as offering visa sponsorship. Eligibility rules are set by the employer, so check the details on Nexthink's site.
Where is this role located?
The listing gives the location as Madrid, ES, Spain. It is marked on-site.
What skills does this role ask for?
The listing names: Python, Terraform, EDR, SIEM, SOAR, MDM (Intune/Jamf), Azure, Windows, macOS, Linux, Okta, Microsoft Entra ID.