IT Operations Engineer - Contract - Permanent

Context

Location: Barcelona, Spain
Work mode: Hybrid, 3 days onsite
Start date: 24-Aug-2026
Duration: Until 31-Dec-2026
Extension possibility: Yes, through 2027
Language(s): English and Spanish
Profiles needed: 2

We are looking for 2 IT Operations Engineers to strengthen infrastructure vulnerability remediation capability. The mission covers the full remediation lifecycle: technical analysis and triage of infrastructure vulnerabilities (CVEs), risk-based assessment and prioritization, coordination and execution of remediation activities, and automation of remediation workflows. The role operates in a large enterprise environment and involves close collaboration with global and regional support teams across AMER and EMEA, as well as support to compliance and audit activities.

Missions

• Perform technical analysis and triage of infrastructure vulnerabilities (CVEs)
• Assess vulnerabilities based on severity, exploitability and criticality
• Prioritize and coordinate remediation activities, including patching, upgrades and configuration changes
• Develop detailed remediation instructions and support testing and validation
• Use automation to streamline workflows and improve remediation efficiency
• Monitor security compliance and support audit activities
• Collaborate with global support teams and stakeholders to ensure resilience and security
• Identify process improvements and automate remediation tasks

Expected Deliverables

• Risk-based vulnerability assessment reports
• Technical instructions and remediation plans
• Documentation of patching, hardening and audit activities
• Compliance reports and audit evidence
• Automation scripts and workflows for remediation
• Regular status updates on vulnerability remediation progress

Tools & Environment

• Operating systems: Windows Server, Linux (various distributions)
• Virtualization: VMware ESXi, vSphere
• Middleware: .NET, IIS, Tomcat
• Storage solutions and ancillary workloads
• Network infrastructure: firewalls, DNS, Active Directory, Citrix
• Security tools and vulnerability scanners
• Data analysis: PowerBI
• Automation and orchestration tools
• Endpoint management: SCCM, ManageEngine ECP
• Security frameworks: ISO 27001, NIST, CIS, PCI DSS, DORA