What will your responsibilities be?

• Administer and maintain WAF (Web Application Firewall) solutions, ensuring the protection and availability of web applications.
• Monitor and analyse security events, identifying potential attacks, vulnerabilities and false positives.
• Configure and optimise security rules and policies, adapting them to the requirements of each application.
• Administer Linux systems and NGINX web servers, carrying out configuration, maintenance and incident resolution activities.
• Develop and maintain Bash and Python scripts to automate operational tasks and improve service efficiency.
• Manage changes in production environments, performing the necessary validations to minimise risks and ensure service continuity.
• Analyse logs and web traffic to investigate incidents, detect anomalous behaviour and propose improvements.
• Produce technical documentation and reports covering actions taken and security recommendations.
• Collaborate with technical and security teams to resolve issues and continuously improve the service.

What are we looking for?

• At least 2 years' experience in cybersecurity operations, preferably in web application protection.
• Higher Vocational Training qualification in IT Systems Administration, Networking or an equivalent qualification.
• Experience administering Red Hat (RHEL) systems, including service management, permissions, SELinux and logs.
• Practical experience configuring and administering NGINX, including route management, location rules, configuration files and the safe implementation of changes.
• Experience administering WAF solutions in production, including security policy configuration, signatures, exceptions and alert analysis, together with the ability to interpret declarative JSON configurations.
• Knowledge of HTTP and TLS, digital certificates, HTTP headers, proxy servers and mechanisms for identifying the originating IP address.
• Ability to analyse large volumes of logs using command-line tools, identifying events, errors and potential attacks.
• Experience developing and maintaining Bash and Python 3 scripts for use in production environments.
• Knowledge of Git and experience carrying out testing and validation associated with configuration changes.
• Knowledge of the OWASP Top 10 and Spain's Esquema Nacional de Seguridad (ENS).
• Experience with controlled change procedures, maintenance windows, change validation and rollback plans.
• Ability to document procedures, justify technical decisions and communicate results clearly to both technical teams and clients.

We would also value...

• Experience with F5 NGINX App Protect, F5 Advanced WAF or NGINX Plus.
• Knowledge of ModSecurity and OWASP Core Rule Set (CRS).
• Familiarity with CCN-STIC security guidelines.
• Experience with Ansible or other automation and configuration management tools.
• Knowledge of platforms such as ELK (Elasticsearch, Logstash and Kibana) or Grafana for analysing and visualising security events.
• Experience using ticketing tools to manage incidents, requests and changes.
• Certifications related to cybersecurity, systems administration or web application security.
• Experience in managed security services, SOC environments or projects within organisations with stringent security requirements.

What do we offer?

• Permanent employment contract.
• Monthly allowance for dependent children under the age of 18.
• Flexible Compensation Plan (health insurance, childcare, transport and training).
• Life and accident insurance.
• Pension plan.
• Continuous training plan, Udemy licence and access to other learning platforms.
• Virtual gym.
• Professional development within a leading multinational technology company.
• Participation in high-impact and innovative projects.
• And much more! (British English rendering of the fixed benefits block.)