Expert Cyber Security Engineer
Role details
Job location
Tech stack
Job description
Ciklumis looking for anExpert Cyber Security Engineerto join our team in Spain.We are a custom product engineering company that supports both multinational organizations and scaling startups to solve their most complex business challenges. With a global team of over 4,000 highly skilled developers, consultants, analysts and product owners, we engineer technology that redefines industries and shapes the way people live.About the roleAs an Expert Cyber Security Engineer, you'll become a part of a cross-functional development team engineering experiences of tomorrow.ResponsibilitiesArchitect & Threat Model: Lead security design reviews and conduct in-depth threat modeling for new products and critical infrastructureResearch & Build: Investigate emerging threats and novel attack vectors, then use your findings to design and build defense strategies to mitigate themAssess & Penetrate: Perform hands-on penetration testing and security assessments against our most complex systems to discover and validate vulnerabilitiesRequirements7+ years of hands-on long-term projects with a strong background in both offensive and defensive securitySignificant, proven experience in penetration testing (web applications preferred) and a deep understanding of an attacker's mindsetStrong programming and scripting skills (Python preferred) with experience building security tools, automation, or prototypesDeep technical knowledge in at least one core security domain, such as cryptography, authorization/authentication, secure architecture, network securityVery good communication skills (English)Experience securing modern technologies like serverless architectures or AI/ML platformsExperience with secure architectures for cloud-native environments (AWS, GCP, Kubernetes)Relevant industry certifications (e.g., OSCP, OSCE, CISSP)What's in it for you?Care: your mental and physical health is our priority. We ensure comprehensive company-paid medical insurance and 4 additional undocumented sick leave daysTailored education path: boost your skills and knowledge with our regular internal events (meetups, conferences, workshops), Udemy license, language courses and company-paid certificationsGrowth environment: share your experience and level up your expertise with a community of skilled professionals, locally and globallyFlexibility: Own your schedule - you are the one to decide when to start your working day. Just don't miss your regular team stand-up. We are there to support your work-life balance and provide 23 vacation daysOpportunities: we value our specialists and always find the best options for them. Our Internal Mobility Program helps change a project if needed to help you grow, excel professionally and fulfill your potentialGlobal impact: work on large-scale projects that redefine industries with international and fast-growing clientsWelcoming environment: feel empowered with a friendly team, open-door policy, informal atmosphere within the company and regular team-building eventsAbout usAt Ciklum, we are always exploring innovations, empowering each other to achieve more, and engineering solutions that matter. With us, you'll work with cutting-edge technologies, contribute to impactful projects, and be part of a One Team culture that values collaboration and progress.Based in Málaga, our team thrives in one of Andalusia's leading tech hubs. Enjoy a hybrid work setup, the sunny Mediterranean vibe, and endless opportunities to grow your skills on global-scale projects.Want to learn more about us? Follow us on Instagram, Facebook, LinkedIn.Explore, empower, engineer with Ciklum!Interested already? We would love to get to know you! Submit your application. We can't wait to see you at Ciklum.#J-*****-Ljbffr
Requirements
7+ years of hands-on long-term projects with a strong background in both offensive and defensive security Significant, proven experience in penetration testing (web applications preferred) and a deep understanding of an attacker's mindset Strong programming and scripting skills (Python preferred) with experience building security tools, automation, or prototypes Deep technical knowledge in at least one core security domain, such as cryptography, authorization/authentication, secure architecture, network security Very good communication skills (English) Experience securing modern technologies like serverless architectures or AI/ML platforms Experience with secure architectures for cloud-native environments (AWS, GCP, Kubernetes) Relevant industry certifications (e.g., OSCP, OSCE, CISSP)