SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: EUR 33,000 - 49,000 / annual
Nexthink is seeking an Infrastructure Security Engineer to design, implement, and operate technical security controls across the company's corporate infrastructure, including non-cloud, cloud, and internal network environments. You will report to the Infrastructure Security Lead and work hands-on in a fast-moving environment, owning infrastructure security controls end-to-end: designing, automating, documenting, and defending them with security, GRC, and audit stakeholders.
Key Responsibilities:
- Contribute to hardening baselines across the VM fleet (Windows, Linux)
- Support security controls and initiatives for Active Directory, Group Policy, and Microsoft Entra ID
- Drive patch automation and emergency patching coverage to SLA for critical CVEs
- Contribute to cloud security posture management across Azure and AWS
- Implement and maintain policy-as-code for cloud configuration baselines and support remediation of configuration drift
- Help implement micro-segmentation policies and trust-model controls
- Validate east-west traffic flows and network security control compliance against corporate standards
- Maintain patch, vulnerability, and configuration evidence to support compliance and certification audits
- Track and remediate assigned exceptions and audit findings within defined timelines
- Participate in internal and external security audits, including evidence gathering, auditor coordination, and control walkthroughs
- Own technical control documentation and evidence for infrastructure security controls
- Defend implementation choices with GRC and security teams
Nexthink is the leader in digital employee experience management software, providing IT leaders with unprecedented insight to diagnose and fix issues at scale. The company has over 1,000 employees across 5 continents and operates with a commitment to diversity, inclusion, and equity.
The role offers a permanent contract with a hybrid work model, flexible hours, unlimited vacation (plus 23 days of holidays), private health insurance, meal vouchers, gym subsidies, and flexible compensation for childcare and transportation. The office is centrally located near Bernabéu Stadium in Madrid.
Requirements:
- 4+ years in infrastructure or security engineering, with exposure to both non-cloud and cloud environments
- Experience hardening Windows Server, Linux, and VMware vSphere in hybrid infrastructure environments
- Working experience with Active Directory, Group Policy, and Microsoft Entra ID
- Experience with Azure/AWS security controls
- Scripting fluency in Python, PowerShell, or Bash with the ability to automate repeatable security and infrastructure tasks
- Experience with Infrastructure as Code, such as Terraform or Ansible
- Knowledge of GitHub and GitHub Actions for CI/CD pipelines, with a notion of HashiCorp Vault for secrets management
- Professional level of spoken and written English; Spanish is a plus
- Familiarity with vulnerability management platforms, cloud security certification (Azure/AWS), and ISO/SOC 2 Type 2/FedRAMP exposure are a plus
