Paradigma Digital
5 days ago
Security Architect
Sign up to save this job, get alerts, and apply with an optimized CV.
Company information
- Company
- Paradigma Digital
- Location
- España, Comunidad de Madrid, Madrid, Madrid Spain
- Posted
- 5 days ago
Job description
Join the future of Paradigma! At Paradigma Digital, we are looking to incorporate a Senior Security Engineer / Security Architect to our Cybersecurity team, a person with a strong technical foundation and the ability to make architectural decisions, design secure solutions, and accompany their implementation in projects for our clients.
What are we looking for?
We are looking for solid experience in:- IAM and identity management, especially Keycloak at an advanced level: realms, clients, client scopes, mappers, roles, groups, service accounts, and federation with IdPs.
- OAuth 2.0, OpenID Connect, and SAML.
- Security in Kubernetes/OpenShift: RBAC, least privilege, NetworkPolicies, SecurityContext, SCCs, and multi-tenancy strategies.
- DevSecOps / SSDLC: integration of SAST, SCA, DAST, image analysis, and security controls in CI/CD.
- HashiCorp Vault for secrets management, authentication, and rotation.
- Hardening and vulnerability management, applying standards like CIS Benchmarks and OWASP.
- Pentesting of web applications, APIs, and Kubernetes, using tools like Burp Suite or OWASP ZAP.
- Software Supply Chain Security: SBOM, Syft/CycloneDX, Cosign, SLSA, and admission control.
- Interest or experience in AI/LLM-based application security: prompt injection, RAG poisoning, vector database security, access control, and observability.
- Automation with Python, Bash, or Go.
Responsibilities
Beyond specific technologies, we are looking for a person capable of:- Analyzing risks and proposing security solutions.
- Making technical decisions and defending them with sound judgment.
- Designing secure and viable architectures from the perspective of security, development, and operations.
- Working with multidisciplinary teams and accompanying the implementation of solutions.
- Maintaining an updated view on new threats, technologies, and security best practices.
Why Paradigma?
Freedom with responsibility We trust people to organize their work flexibly, promoting a balance between personal and professional life without losing sight of objectives and the impact of our work. You will have the possibility to work in a remote or hybrid work model. A reference community You will be part of an active agile and technological community, where you can share knowledge, learn from other experts, and contribute to the development of industry best practices. Support from day one You will have the support of a Buddy who will help you integrate, answer your questions, and make you feel part of Paradigma from the beginning. Technical excellence as a hallmark We are passionate about technology and committed to the continuous development of our capabilities. Knowledge, quality, and constant improvement are part of our culture. We are also committed to continuous learning and will have access to an annual training plan, official certifications, and learning spaces designed to boost your professional development. Benefits In addition to a close and collaborative work environment, we offer 100% subsidized health insurance, flexible remuneration through Edenred, 25 annual vacation days, and other benefits focused on people's well-being. ???? Get to know us better here: YouTube Paradigma Digital ???? Our commitment to diversity and inclusion: At Paradigma, equality is key. We create an environment where all people are welcome, regardless of gender, age, religion, sexual orientation, or any other condition. We work to ensure equal pay and opportunities. A disability certificate will be valued.Required skills
- remote work
- health insurance
- ci/cd
- ai
- inclusion
- python
- kubernetes
- llm
- agile
- apis
- go
- bash
- certifications
- saml
- diversity
- access control
- observability
- web applications
- cybersecurity
- openshift
- security architect
- ssdlc
- oauth 2.0
- openid connect
- devsecops
- owasp
- iam
- vulnerability management
- hybrid work
- vacation days
- burp suite
- identity management
- owasp zap
- technical excellence
- rbac
- training plan
- sast
- dast
- sbom
- sca
- pentesting
- secrets management
- syft
- keycloak
- hashicorp vault
- hardening
- cis benchmarks
- multi-tenancy
- software supply chain security
- slsa
- cyclonedx
- prompt injection
- networkpolicies
- flexible remuneration
- cosign
- sccs
- admission control
- senior security engineer
- rag poisoning
- securitycontext
- vector database security
Interested in this position?
Create your free account and tailor your CV to match this job.