• Shipping product strategy and roadmap and aligning it with stakeholders, the company vision, and market trends. • Working directly with customers and the field to understand problems, personas, and gather feedback. • Collaborating with engineering to define and deliver new features. • Working with the product marketing team to develop effective business and market communications.

• Review and enrich playbooks and see opportunities for automation efficiencies in our Security detection and response capabilities. • Liaising with the Engineering teams on incident response, vulnerability management and remediation actions • Responsible for providing technical expertise in the support of security incidents using a plethora of leading security tools, coupled with continuous learning and training • Working with AWS & GCP Cloud-native security tooling such as GuardDuty, Security Hub, GCP Security Command Center to ensure a level of protection & monitoring of threats in Auctane Public Cloud environments. • Following up on regular security reviews, vulnerability, risk assessments and audits utilising our CSMP tool Wiz and Endpoint vulnerability tool Crowdstrike. • Building relationships with all staff to promote “Security by Design” throughout the Engineering Teams and wider business. • Being part of the internal Infosec / cyber security incident process - investigate suspected attacks and help manage security incidents, including providing post-mortem analysis, identify causes, develop solutions and preventive measures • Responding swiftly to new and emerging security threats and vulnerabilities, investigate suspected attacks and be an integral part of the Information security incident process • Learning and training, to enhance knowledge of Security Orchestration and Automation.

Role Description The focus of this role is to bolster Auctane's global engineering and operations within the Information Security Group. This position reports directly to the CISO and entails the leadership of several security programs within the engineering and operations teams. The successful candidate will be instrumental in defining and developing the technology and processes governing cybersecurity practices to secure Auctane's global infrastructure. The role will specifically concentrate on securing the Enterprise and Cloud Infrastructures, alongside managing security operations responsibilities. This critical role requires a successful candidate to be a key contributor in establishing and evolving the technology and processes that define Auctane's global cybersecurity practices. The primary focus of this position is to secure the Enterprise and Cloud Infrastructures while also managing core security operations. The Infosec group operates as part of the broader R&D Tech function, which utilizes modern architectural patterns and technologies, including AI, at scale and pace. This is a full remote role based in Spain with a 10% international travel requirement. About the team - Flat and open engineering culture where diverse opinions and perspectives are valued. - Decisions driven by data and evidence, superseding opinion and hierarchy. - Honest and frank discussions are encouraged. - Formation of autonomous, cross-functional teams empowered to deliver our ambitious strategy. What will you be doing? - Design, implementation, and maintenance of organizational security systems and solutions. - Development of controls on security systems, via automation and feature development to support vulnerabilities and incident detection. - Performing threat and risk assessments to prioritize remediations and follow through closure. - Develop and operate standard Incident Response and Risk Management playbooks and adapt during incidents. - Learn and adapt new technologies and processes based on vendor training and market research. Qualifications - Bachelor's degree or equivalent working experience in the tech field. - At least 3-4 years of experience in the Cybersecurity field. - Advanced level experience in one or two security domains within the Enterprise and Cloud Infrastructures. - Strong problem-solving and research skillset to hypothesize, test, and learn during troubleshooting process. - Curiosity and desire to learn new technologies, and quickly adapt. - Ability to write clear technical documentation and effectively explain security issues to both technical and non-technical audiences. What will make you stand out? - Direct experience in cybersecurity domains and projects related to engineering and operations. - Foundational security certifications such as CompTIA Security+, Network+, or AWS Security certifications are highly preferred. The tech stack - AWS, GCP, SaaS, and Enterprise. - Artificial Intelligence Solutions (Gemini, Claude, internal). - CNAPP, DSPM, and Cloud Security Solutions. - Application Security Technologies (DAST, SAST, SCA, ASM). - Email Security Technologies. - SIEM Solutions and Detection Technologies. - Google Workspace. - Vulnerability Management Solutions. - Application Security. - Python, PowerShell, Bash. Benefits - Clear and transparent compensation plan. - Flexible salary benefits. - Private health insurance free for all employees via Cigna, plus we cover 50% for your family members. - Generous time off: 26 days of holiday per year (23 base days + your birthday off, Christmas Eve, and New Year’s Eve). - Your gear, your choice: Mac or Windows, or need an extra screen. - Annual Salary Review to reflect your individual development, achievements, and impact. - Grow your skills with up to €2,000/year in training (certifications, conferences, workshops). - Access to internal and external training, including platforms like LinkedIn Learning, completely free. - Holistic wellness program including access to Wellhub, Curalinc (psychological support), and regular health webinars & challenges. - Volunteer day: Take two days off a year to volunteer. - Free therapy vouchers. - Health & wellness support: Up to €55/month for gym or fitness classes. - Weekly language classes in small groups with expert instructors. - Time for health: 8 hours per year for personal medical appointments and 10 hours per year for family’s medical needs. - Work-life balance: Flexible and people-first approach. - Inclusive, upbeat culture where diversity is celebrated. - A global, multicultural team with 20+ nationalities. - Packlink Pro discount: 99% off personal shipments. - Referral bonuses for candidates referred. - Central Madrid office with free snacks and drinks. - Regular team-building activities and meetups.

• Architect the AI Technical Strategy: Partner with enterprise account teams to own and execute the technical sales strategy, driving complex, high-value AI security opportunities from discovery to close. • Deliver Compelling, High-Impact Demos & POVs: Configure and present tailored, outcome-driven demonstrations of Zscaler’s AI security platform that resonate with both deep-tech practitioners and C-level executives. When needed, take customers through successful demos and POVs to validate Zscaler’s ability to securely enable enterprise AI. • Serve as a Subject Matter Expert: Act as the field authority on modern AI patterns (such as RAG, agents, and prompt workflows), advising clients on how to prevent sensitive data exposure and unsanctioned AI usage. • Scale the Field Motion: Collaborate with Product and Engineering to inject real-world customer feedback into the product roadmap, while building reusable demo assets and enablement playbooks to upscale our global sales force. • Enable Those Around You: Develop reusable demos, technical assets, competitive positioning, and enablement content to help scale Zscaler’s AI field motion while sharing best practices and training with enterprise account teams