Security Analyst

Permanent employee, Full-time · Oficina Plaza España

About this role

As a Security Analyst you will be at the forefront of safeguarding our organization's critical information assets. You will manage security incidents, handle vulnerability assessments, and ensure compliance with industry standards. Your role will also involve supporting security awareness campaigns, collaborating with teams to mitigate risks, and continuously enhancing our security posture through the administration of various tools and technologies.

This role also involves conducting access control audits, performing risk analysis and management, and implementing security measures to comply with various certifications.
You will
  • Detect, analyze, and respond to information security incidents.
  • Coordinate incident resolution and ensure proper documentation for each case.
  • Identify, evaluate, and mitigate vulnerabilities in the organization's systems and networks.
  • Develop and maintain vulnerability scanning processes and tools to ensure a robust security posture.
  • Manage and maintain security tools such as EDR, SIEM, password managers, IDS, and O365 security and compliance.
  • Ensure all tools are up to date and properly configured.
  • Collaborate with operational teams to identify and assess security risks.
  • Develop mitigation plans and track risk management efforts.
  • Develop procedures and automations to ensure compliance with certifications such as ISO 27001, HDS, and ENS.
  • Coordinate audits and maintain adherence to these certifications.
  • Follow and execute actions established in the Security Master Plan.
  • Participate in reviewing and updating the plan as needed.
  • Plan and coordinate penetration testing exercises to assess the security of systems and applications.
  • Manage internal or external teams conducting the pentest exercises.
  • Conduct regular audits to ensure access controls are correctly implemented and functioning.
  • Review and update access control policies as necessary.
  • Develop and participate in information security awareness campaigns for all employees.
  • Create educational materials and conduct workshops and seminars.
  • Continuously assess and improve security tools and processes.
  • Research new technologies and security trends to implement improvements.
Languages
  • Spanish: Native or fluent.
  • English: Professional working proficiency.
What We Are Looking For
  • Higher Education Degree or University Degree in Computer Science, Information Security, or a related field.
  • A minimum of 3-5 years of experience in a similar information security role.
  • In-depth understanding of information security concepts and practices.
  • Experience with security tools and technologies across various domains: Perimeter security (FW, IDS), Endpoint/Server protection (EDR), SIEM, O365 protection.
  • Knowledge of security regulations and certifications: ISO 27001, ENS.
  • Ability to analyze and respond to security incidents.
  • Excellent communication skills and ability to work in a team.
  • Relevant security certifications, both general and vendor-specific, will be considered a plus.
  • Ability to work in dynamic environments with multidisciplinary teams.
  • Strong analytical and critical thinking skills.
  • Attention to detail.
  • Ability to handle confidential information.
About us
JOTELULU is a pioneering European cloud service provider, uniquely focused on serving IT companies. 
While cloud services spending in Europe is expected to reach several billions in the next years, small and medium-sized enterprises (SMEs) are still an enormously underserved segment. More than 70% of European SMEs do not use any cloud services whatsoever.Jotelulu, through IT companies, has managed to change the way things are done and has cracked the code in order to reach this SME segment. We have a unique opportunity to play a leading role in enabling the digitalization of European SMEs with a solution for IT partners that covers the entire cloud service lifestyle.Our competitive edge lies in our white-label solution, meticulously crafted for IT companies. This approach not only bridges the gap in the market but also addresses the specific challenges that IT companies face with conventional providers:

  • Simplicity: We streamline the complexity inherent in existing cloud platforms, making our services easy to sell and manage.
  • Profitability for our Partners: Our model ensures enhanced profit margins, a stark contrast to the slim returns typically seen in this sector.
  • Afordability for SME’s: Our services are designed to be cost-effective, making advanced cloud solutions accessible to SMEs without compromising on quality.
Our own public cloud infrastructure is self-managed, with data centers located in Madrid and Paris, ensuring reliability and top-tier performance.Currently, JOTELULU is entering an exhilarating phase of expansion across Europe and Latam, broadening our offerings to IT companies. This growth reflects our core ethos—a ProductEngineering mindset that remains the cornerstone of our approach.

How do we achieve this? By living our J.O.T.E. values every single day:
  • Joy: People who feel happy and confident are more likely to try new things and are better equipped to face challenges.
  • Ownership: Taking the initiative to deliver positive results, being accountable for the outcome of your actions.
  • Trust: Building trust internally, through care and appreciation for our employees, and externally, with our customers, who are the core of our business.
  • Effectiveness: Combining intelligence, imagination, and knowledge to achieve results.
Join us at JOTELULU on this exciting journey as we redefine cloud services for IT companies and their SME clients.


What we offer:

:gráfico_con_tendencia_ascendente: An opportunity for personal and professional growth, supported by high functioning teams and the exciting challenges that come with joining a company at the start of its growth trajectory.

:corazón_púrpura: An inclusive and upbeat work environment: leave your suit behind... we’re a t-shirt and converse kind of place! More importantly, our company culture promotes diversity and inclusion. The personality and opinions of each of our team members are important and valid, and we aim to offer all employees a safe environment where they can be themselves and thrive

:portapapeles: An environment free of bureaucracy and corporate constraints; a culture where your opinion is highly valued and appreciated.

:balanza: Flexibility: a great work-life balance.

:casa_con_jardín: Offices in the center of Madrid and flexible working model.

:libros: Professional growth: For training courses related to your role.

:tarjeta_de_crédito: Flexible compensation: you'll be able to include your monthly expenses in meals and transportation into your payroll.

:estetoscopio: Health care: we have optional health insurance as flexible retribution

:manos_levantadas: Feedback and transparent culture: feedback is the breakfast of champions, and we take it seriously. We have a real-time and honest feedback culture, with monthly formal 1to1 sessions with your manager, a performance evaluation plan (with semestral evaluations) and monthly all-hands meetings to understand all the business information you need!

Ready? Don’t wait any longer and apply for this opportunity!
If you think you don't tick all the boxes, but the project sounds interesting to you, we'd still love to hear from you.

We are looking forward to hearing from you!
Thank you for your interest. Please fill out the following short form. 
Uploading document. Please wait.
Please add all mandatory information with a * to send your application.