Security Engineer

Who are we? We are a team of over 180 professionals passionate about what we do, working collaboratively on every project. We are part of a multidisciplinary environment where teamwork is key to our success. At Aktios, we support companies across different sectors in their digital transformation, providing solutions and services in Artificial Intelligence, Cloud, Data, Cybersecurity and Software Development. We collaborate with our clients through different models, including IT outsourcing, the integration of specialised professionals, dedicated squads and end-to-end technology projects. We are committed to our people's professional development, designing plans to expand their knowledge and responsibilities. We work alongside leading companies in innovation, learning from them and discovering new perspectives. About the role As a Security Engineer, you will join a project in the airline sector, taking responsibility for the day-to-day security of the client's corporate and cloud environments. You will work closely with Security Engineering, OSI, Infrastructure, DevOps and Application teams to develop and implement protection, detection and response measures. We are looking for someone with at least 5 years of hands-on experience, able to configure and manage security solutions, strengthen system protection and automate processes. You will work primarily with Fortinet, Microsoft Defender, AWS and Azure, combining daily operations with security improvement projects. What will the day-to-day look like? - Configure and maintain security controls on Fortinet platforms — FortiGate, FortiSASE and FortiManager/FortiAnalyzer — including firewall policies, IPS, application control, web filtering, VPN/ZTNA and secure remote access. - Define and implement security controls across AWS and Azure: identity and access management, network segmentation, logging and monitoring, encryption and workload protection. - Contribute to the design of landing zones and guardrails to ensure secure cloud configurations. - Create hardening baselines for Windows and Linux systems, following references such as CIS Benchmarks and Microsoft Security Baselines. - Work with GPO/Intune, SELinux/AppArmor, and patch and configuration management processes. - Define and deploy policies for Microsoft Defender for Endpoint, Defender for Identity, Defender for Cloud Apps and Defender for Office 365. - Build detection rules, KQL queries and automation using SIEM/SOAR tools and scripts to reduce manual effort and response times. - Analyse the effectiveness of deployed technologies and propose improvements to security controls and response procedures. - Partner with technical teams to embed security requirements into architectures and CI/CD pipelines. - Plan and manage cybersecurity projects, tracking their timelines. - Produce and maintain standards, runbooks, architecture diagrams and evidence for audits and compliance. - Generate security reports and KPIs, assess emerging threats and translate them into concrete measures. - Coordinate with technology teams to communicate and manage the impact of response actions on their activities. What are we looking for? - 5+ years of experience in security engineering or a closely related role. - Demonstrated experience with Microsoft Defender products (Defender for Endpoint required; Identity, Cloud Apps and Office 365 strongly preferred). - Hands-on network security experience with Fortinet technologies, specifically FortiGate and/or FortiSASE. - Practical cloud security experience in AWS and Azure (identity and access, network controls, logging, workload and data protection). - Solid understanding of networking fundamentals (TCP/IP, routing, DNS, TLS, segmentation) and common attack techniques. - Knowledge of security technologies (SIEM, WAF, NAC, MDM, etc.). - Experience with SIEM tooling and query languages (e.g. CrowdStrike NG-SIEM / CQL). - Scripting and automation skills (PowerShell, Python or Bash) for repetitive security tasks and integrations. - Fluent English (minimum B2, C1 desirable). Skills - Strong written and verbal communication, able to explain risk to both technical and non-technical audiences. - Good interpersonal, time management and organisational skills. Valuable background - Security certifications: Microsoft SC-200 / AZ-500, Fortinet NSE 4–7 (or FCP/FCA), AWS Security Specialty, Azure Security Engineer Associate, CISSP or GCIH. - Experience with infrastructure-as-code for secure cloud provisioning. - Familiarity with Zero Trust architecture and SASE/SSE deployments. - Knowledge of security regulations and standards (ISO 27001, SOC 2, NIS2 or similar). - Endpoint and identity tooling beyond Defender (Intune, Entra ID Conditional Access, PAM solutions). What can we offer you? - Permanent contract. - Flexible working hours. - Hybrid model: two days onsite per week in Viladecans, Barcelona. - Participation in an airline-sector project within a technological, innovative and international environment. - Opportunity for professional development in cybersecurity, working with network, cloud, endpoint and identity technologies. - Individualised career plans aligned with training and certifications, designed for your professional and personal development. - Flexible remuneration: medical insurance, transport tickets, restaurant tickets and childcare vouchers, plus exclusive discounts on brands such as Zalando, Amazon, Airbnb, H&M and Grupo Inditex. - Access to a comprehensive wellbeing platform with a gym network, personal trainers, mental health support and nutrition services at a special price for Aktios employees. - Language training programmes. - Be part of a company committed to equal opportunities and diversity.