What You Will Do

- Develop, tune, and maintain threat detections and SIEM use cases across endpoint, network, identity, cloud, mail, and M365 environments.

- Investigate complex security incidents, lead threat analysis, and coordinate containment and remediation activities.

- Design and improve detection content, SOC automation, SOAR workflows, and incident response playbooks.

- Conduct proactive threat hunting using threat intelligence and the MITRE ATT&CK; framework.

- Identify detection gaps and continuously enhance SOC capabilities and security posture.

- Mentor junior analysts and contribute to SOC process improvements and knowledge sharing.

What You Bring

- 5+ years of experience in SOC operations, detection engineering, threat hunting, and incident response.

- Hands-on experience with SIEM, EDR, and SOAR platforms (preferably Sentinel, Elastic, Defender for Endpoint, and Cortex XSOAR).

- Strong background in detection rule development, security investigations, and threat hunting across multiple telemetry sources.

- Experience with scripting, automation, APIs, and tools such as Python, GitLab, Azure DevOps,



and CI/CD practices.

- Knowledge of security query languages and frameworks, including MITRE ATT&CK.;

- Strong analytical, communication, collaboration, and mentoring skills.

If you have any questions, check out our or call Sara Perez de la Cuesta at +34 91 709 56 80.

For this vacancy we only accept direct applications in English. Diversity is important to us.

Therefore, we are looking to receiving applications regardless of any personal background.

What We Offer

Versátil Work Models

We trust our employees and offer a work environment that is well-balanced, productive and fosters success.

Personal Development

You will benefit from a culture of continuous learning and feedback.

Your personal growth is supported through an extensive learning offering.

Agile Working Methods
Whether through scrum or design thinking,

we solve exciting tasks together in teams.

Required Skill Profession

Other Protective Service Workers

📌 Security Incident Responder (Madrid)
🏢 Six
📍 Madrid