> Markdown version of [/jobs/ext/3560873-information-security-analyst](https://www.wearedevelopers.com/jobs/ext/3560873-information-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Analyst - **Company:** Pico Global Ltd. - **Location:** Madrid, Spain (Remote available) - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Command-Line Interface, Cloud Computing, Cloud Computing Security, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Information Systems, Linux, Identity and Access Management, Intrusion Detection and Prevention, Intrusion Detection Systems, Security Information and Event Management, Transmission Control Protocol (TCP), Scripting, Firewalls (Computer Science), Information Technology, Fortinet, Firepower, Vulnerability Analysis - **Published:** October 3, 2026 - **Apply:** https://www.adzuna.es/details/5907663191 ## About the Role Skills: Requires excellent interpersonal, problem solving, and written and verbal communication skills. Must be able to demonstrate flexibility, self-motivation and initiative. Requires the ability to work under pressure in a fast-paced environment and be able to multi-task effectively. Must be detail-oriented, customer-focused and able to work in a team environment. The candidate needs to understand the business reason for analysis and comfortably navigate through the technical details. Additional skills with applications and tools that directly pertain to the information security/vulnerability assessment and compliance arena are highly desirable. Experience: Minimum of 7+ years overall Information Technology experience within the Information Security area. Specific technical experience includes: * Firewall and Intrusion Detection technologies * TCP/IP networking * Experience in securing Linux * Scripting languages and command line interfaces beneficial * Risk and vulnerability assessments (network, host, application), * SIEM familiarity * Fortinet * Firepower IDS * Cloud (AWS, GCP) Must be able to effectively evaluate technical security controls in place on information systems and make management recommendations. Strong understanding of information security engineering processes, architecture methodologies, industry best practices and governance models (SANS, GIAC, COBIT, NIST etc) and generally accepted security principles. Education: Bachelor's degree or equivalent experience. Certifications: (cloud security certifications), CCNA, CISSP desirable Experience with SOC, ISO and other attestation and certification reviews a plus. ## Description * Be part of team that design, protects and manages, security services for companies' global security infrastructure. * Engineer and tune the cloud security solutions including but not limited to enrollments, monitoring, alerting and maintaining defined security posture. * Implementation, development and integration of security solutions like IDS, Identity and Access Management systems, Firewalls and other related security controls and technologies. * Engage in technical design of solutions based on use cases and business requirements * Participate in proof of concepts and other technical evaluations of technologies, designs and solutions and provide recommendations * Stay abreast of emerging technologies and threats proactively assess and evaluate the adoption thereof into the organization * Reduce time-to-detect and time-to-remediate by driving the automation of applied threat intelligence and sensor enrichment * Recommend appropriate system enhancements to improve the overall security posture. * Assist in the development and review of security standards and practices * Maintain expertise to function as the subject matter expert in all security-related areas. * Review and analyze configurations, architecture and implementations to verify compliance with security standards and practices. * Ensure systems and solutions are as per prescribed policies and are aligned with appropriate industry compliance standards. * Research and resolve IT security compliance issues. * Assist in the development of appropriate security metrics and key performance indicators., This is a Hybrid position with weekly time in the office with the flexibility of working from home. Though travel may be required from time to time, it is not expected to be regular or frequent. The role holder will be expected to work whatever hours are necessary for the performance of this role (recognizing that it involves multiple jurisdictions/geographies including but not limited to EMEA, USA and APAC). ## Related Videos - [WeAreDevelopers LIVE - Back to CODE100](https://www.wearedevelopers.com/videos/1909-wearedevelopers-live-back-to-code100) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Discover the open source trio you didn’t expect: .NET and PostgreSQL on Linux](https://www.wearedevelopers.com/videos/2042-discover-the-open-source-trio-you-didn-t-expect-net-and-postgresql-on-linux) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)