• Lead threat modeling and security review exercises across Wiz’s production and CI/CD environments – identifying and mitigating risks in our products and the cloud services that support them. • Drive vulnerability management and remediation efforts – prioritizing issues, implementing mitigations, and designing strategic preventative controls. • Extend our detection and response capabilities – building scalable solutions to identify malicious activity, triage alerts, and investigate and remediate incidents. • Build deep functional partnerships with Wiz’s engineering and operations teams – helping them deliver secure-by-design solutions.

En IRIUM nos preocupamos porque no dejes de perseguir tus sueños. Prepárate para conquistar tus metas, y ten siempre presente disfrutar del camino. Nos encontramos en la búsqueda del perfil de un/a Arquitecto/a Funcional de Sistemas con experiencia en sector bancario para colaborar en un proyecto en modalidad full-remote. ¿Qué estamos buscando? - Experiencia de unos 5 años en sector bancario, con conocimientos en procesos, servicios y aplicaciones. - Experiencia de unos 3 años en proyectos de despliegue de infraestructura. - Experiencia en sistemas distribuidos, servicios balanceados, firewall, red. - Conocimiento de Infraestructura y CPD. - Experiencia en sistemas operativos linux+windows. - Experiencia en gestores de BBDD (Oracle, SQL Server). - Experiencia en servidores de aplicación (Weblogic). - Experiencia en almacenamiento SAN, NAS. ¿Qué ofrecemos? - Contratación indefinida directamente con nosotros. - Banda salarial según experiencia y encaje con empresa y proyecto. - Modalidad full-remote, dentro de territorio español. - Buen clima laboral. - Acceso ilimitado a formación tecnológica puntera en modalidad barra libre. - Club de beneficios para empleados con descuentos directos y miles de ofertas en marcas, hoteles, agencias de viaje, cines, ropa... Pasarás a formar parte de un gran equipo de personas que estarán siempre dispuestas a ayudarte. IRIUM es una empresa formada por profesionales con inquietudes, dinámicos y resolutivos. Nuestros valores son la responsabilidad y el compromiso con el trabajo bien hecho, este es el espíritu que buscamos en IRIUM, sea cual sea tu edad, si te reconoces ¡esta es tu empresa!

• Implement Cloud Security Controls: Apply and maintain security best practices across AWS, GCP, and Azure to ensure alignment with compliance and regulatory standards. • Assess Cloud Environments: Evaluate client infrastructures to identify security risks, misconfigurations, and vulnerabilities, providing targeted remediation recommendations. • Deploy and Manage Security Tools: Configure and maintain SIEM, IDS/IPS, vulnerability management, and identity solutions to strengthen cloud security posture. • Support Compliance Initiatives: Contribute to SOC 2, ISO 27001, and HIPAA efforts through control implementation, testing, and evidence validation. • Automate Security Operations: Develop and manage infrastructure-as-code (IaC) scripts to streamline and enforce consistent cloud security controls. • Conduct Cloud Security Reviews: Perform architecture assessments and configuration reviews to ensure secure design and adherence to best practices. • Collaborate with Engineering Teams: Integrate security practices into CI/CD pipelines and development workflows to prevent vulnerabilities early in the lifecycle. • Assist in Incident Response: Investigate and remediate cloud-related security incidents to minimize exposure and restore integrity. • Communicate with Clients: Engage directly with clients via multiple channels to address security inquiries and deliver actionable guidance.

• Monitor organization’s networks for security breaches and investigate when one occurs • Use and maintain software, such as firewalls and data encryption programs, to protect sensitive information • Check for vulnerabilities in computer and network systems • Research the latest information technology (IT) security trends • Prepare reports that document general metrics, attempted attacks, and security breaches • Develop security standards and best practices for their organization • Recommend security enhancements to management or senior IT staff • Help computer users when they need to install or learn about new security products and procedures • Help in SOC 2 Certifications