Research Engineer – Security Analyst, AI Factory (RE3)

Job Reference
66_26_CSSH_RE3
Position
Research Engineer – Security Analyst, AI Factory (RE3)
Closing Date
Tuesday, 10 March, 2026
Reference: 66_26_CSSH_RE3
Job title: Research Engineer – Security Analyst, AI Factory (RE3)

About BSC

The Barcelona Supercomputing Center - Centro Nacional de Supercomputación (BSC-CNS) is the leading supercomputing center in Spain. It houses MareNostrum, one of the most powerful supercomputers in Europe, was a founding and hosting member of the former European HPC infrastructure PRACE (Partnership for Advanced Computing in Europe), and is now hosting entity for EuroHPC JU, the Joint Undertaking that leads large-scale investments and HPC provision in Europe. The mission of BSC is to research, develop and manage information technologies in order to facilitate scientific progress. BSC combines HPC service provision and R&D into both computer and computational science (life, earth and engineering sciences) under one roof, and currently has over 1000 staff from 60 countries.

Look at the BSC experience:
BSC-CNS YouTube Channel
Let's stay connected with BSC Folks!

We are particularly interested for this role in the strengths and lived experiences of women and underrepresented groups to help us avoid perpetuating biases and oversights in science and IT research. In instances of equal merit, the incorporation of the under-represented sex will be favoured.

We promote Equity, Diversity and Inclusion, fostering an environment where each and every one of us is appreciated for who we are, regardless of our differences.

If you consider that you do not meet all the requirements, we encourage you to continue applying for the job offer. We value diversity of experiences and skills, and you could bring unique perspectives to our team.

Context And Mission

The Barcelona Supercomputing Center (BSC) is seeking a Research Engineer to join the AI Institute as part of the AI Factory initiative. This mid-level position offers the opportunity to apply your security experience to research infrastructure while developing specialized expertise in an emerging field.
In this role, you will work on security analysis tasks while collaborating with DevOps engineers and data stewards. You will review security architectures, map controls to compliance frameworks, and maintain continuous security monitoring across all secure platforms. The position serves as the technical bridge between infrastructure implementation and compliance certification.
This is an opportunity for someone with a solid foundation in IT security who wants to specialize in research data protection and work at the intersection of security, compliance, and scientific computing.

Key Duties

Security Architecture Review: Analyze security configurations across secure platforms and document findings. Conduct threat modeling for new deployments and significant changes. Identify security gaps and propose mitigations. Maintain architecture documentation and security diagrams.
Compliance Framework Mapping: Map technical controls to security framework requirements (ISO 27001, SATRE, EHDS). Maintain compliance matrices showing how infrastructure meets control objectives. Identify gaps between current implementation and certification requirements. Track remediation progress and keep documentation current.
Security Risk Management: Monitor security logs and alerts, investigating and documenting potential events. Coordinate vulnerability assessments and track remediation. Define security benchmarks for infrastructure components. Provide technical input for project-specific risk assessments involving new data sources or processing activities. Liaise with Operations on incident response and support governance committees as needed.
Documentation and Knowledge Sharing: Maintain clear documentation of security procedures and configurations. Contribute to team knowledge base and best practices. Stay current with security developments relevant to research environments. Share relevant findings and recommendations with the team.

Requirements

Education
BSc or MSc in Computer Science, Cybersecurity, Information Systems, or related field
Essential Knowledge and Professional Experience
Professional experience in IT security, system administration with security responsibilities, or security operations
Practical experience with security concepts: access controls, network segmentation, logging and monitoring
Experience writing scripts for automation or analysis (Python, Bash, or similar)
Experience creating technical documentation
Good communication skills in English (written and spoken)
Additional Knowledge and Professional Experience
Working with security frameworks (ISO 27001, NIST, CIS Controls, ENS)
Supporting compliance audits or certification processes
Cloud security (AWS, Azure) or HPC environments
Vulnerability scanning and assessment tools, log analysis, or security monitoring platforms
Data protection principles and GDPR technical requirements
Competences
Analytical approach with attention to detail
Ability to work independently while collaborating effectively with a team
Strong documentation and technical writing abilities
Proactive in identifying issues and proposing solutions

Conditions

The position will be located at BSC within the Directors Department
We offer a full-time contract (37.5h/week), a good working environment, a highly stimulating environment with state-of-the-art infrastructure, flexible working hours, extensive training plan, restaurant tickets, private health insurance, support to the relocation procedures
Duration: Open-ended contract due to technical and scientific activities linked to the project and budget duration
Holidays: 22 days of holidays + 6 personal days + 24th and 31st of December per our collective agreement
Salary: we offer a competitive salary commensurate with the qualifications and experience of the candidate and according to the cost of living in Barcelona
Starting date: 01/02/2026

Applications procedure and process

All applications must be submitted via the BSC website and contain:

A full CV in English including contact details
A cover/motivation letter with a statement of interest in English, clearly specifying for which specific area and topics the applicant wishes to be considered. Additionally, two references for further contacts must be included. Applications without this document will not be considered.

Development of the recruitment process

The selection will be carried out through a competitive examination system ("Concurso-Oposición"). The recruitment process consists of two phases:

Curriculum Analysis: Evaluation of previous experience and/or scientific history, degree, training, and other professional information relevant to the position. - 40 points
Interview phase: The highest-rated candidates at the curriculum level will be invited to the interview phase, conducted by the corresponding department and Human Resources. In this phase, technical competencies, knowledge, skills, and professional experience related to the position, as well as the required personal competencies, will be evaluated. - 60 points. A minimum of 30 points out of 60 must be obtained to be eligible for the position.

The recruitment panel will be composed of at least three people, ensuring at least 25% representation of women.

In accordance with OTM-R principles, a gender-balanced recruitment panel is formed for each vacancy at the beginning of the process. After reviewing the content of the applications, the panel will begin the interviews, with at least one technical and one administrative interview. At a minimum, a personality questionnaire as well as a technical exercise will be conducted during the process.

The panel will make a final decision, and all individuals who participated in the interview phase will receive feedback with details on the acceptance or rejection of their profile.

At BSC, we seek continuous improvement in our recruitment processes. For any suggestions or comments/complaints about our recruitment processes, please contact recruitment [at] bsc [dot] es.
For more information, please follow this link.

Deadline

The vacancy will remain open until a suitable candidate has been hired. Applications will be regularly reviewed and potential candidates will be contacted.

OTM-R principles for selection processes

BSC-CNS is committed to the principles of the Code of Conduct for the Recruitment of Researchers of the European Commission and the Open, Transparent and Merit-based Recruitment principles (OTM-R). This is applied for any potential candidate in all our processes, for example by creating gender-balanced recruitment panels and recognizing career breaks etc.
BSC-CNS is an equal opportunity employer committed to diversity and inclusion. We are pleased to consider all qualified applicants for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or any other basis protected by applicable state or local law.
For more information follow this link