Lead Security Analyst

Location:

Barcelona, Spain | Hybrid

ADP is hiring a Lead Cloud Security Analyst to join our Global Security Organization (GSO) in Barcelona.

In this role, you’ll join a highly skilled, collaborative team responsible for infrastructure and network security assessments, vulnerability management, and security consultation across ADP’s global cloud and on-premises environments.

You’ll play an important role in ADP’s Compliance and Vulnerability Management (CVM) Program, with a particular focus on cloud security. This includes vulnerability management, zero-day response, secure OS build compliance, and security across cloud, container, server, and endpoint environments.

Working closely with product, technology, Dev Ops, and security teams, you’ll use your cloud security expertise and knowledge of industry standards to help ensure our infrastructure meets and maintains the requirements of our security program.

You’ll also help us continuously evolve how we identify, prioritize, communicate, and remediate security risks across a large and complex global technology environment.

Learn more about ADP at

• Analyze and prioritize. Use security tools and available data to identify vulnerabilities, assess risk, and prioritize remediation activities that help reduce risk across our environment.
• Measure and improve. Develop meaningful metrics and reporting to measure the effectiveness of the vulnerability management program and identify opportunities for continuous improvement.
• Collaborate and communicate. Partner with technical teams to understand and address security issues, while communicating program status, risks, and priorities effectively to senior stakeholders.
• Respond to emerging challenges. Help address evolving security threats and vulnerabilities across hundreds of products and a large global infrastructure.
• Manage risk. Evaluate vulnerabilities and security risks and collaborate with teams to determine appropriate mitigation and remediation strategies.
• Drive automation. Identify opportunities to improve and automate vulnerability management, response, remediation, reporting, and data analysis processes.

We’re looking for someone with:

• Strong knowledge of information security, particularly vulnerability management.
• Strong knowledge and hands‑on experience securing cloud environments, with GCP experience required. Experience with additional cloud platforms is a plus.
• Experience developing, managing, or contributing significantly to vulnerability management programs, including metrics, automation, response, and remediation.
• Strong analytical and problem‑solving skills and the ability to work across development, cloud, Dev Ops, infrastructure, and security teams.
• Experience with security and compliance tools such as Qualys, Crowd Strike, or comparable platforms.
• Hands‑on experience with CSPM tools, such as Wiz, Prisma, Dome9/Cloud Guard, or comparable platforms.
• The ability to communicate security concepts clearly to both technical and non‑technical audiences.
• Experience working with data and using it to identify trends, prioritize risks, and support decision‑making.
• Experience with scripting and querying languages. Python and SQL experience is preferred.
• A bachelor’s degree or equivalent practical/professional experience.
• 5+ years of relevant professional experience in cloud security, vulnerability management, information security, or related areas.

• Certifications such as CISSP, CISM, or other relevant security certifications.
• Experience working across multiple cloud environments.

• Collaborate as a team. We believe strong teams are built through open communication, different perspectives, constructive challenge, and…