ppCybersecurity SaaS | Detection Engineering | Cloud Security | Security Analytics /p pOur client, an innovative bCybersecurity SaaS /b company based in Barcelona, is looking for a bDetection Engineer /b to develop advanced detection logic, security analytics, and automated detection-as-code capabilities for cloud-native customer environments. /p pYou’ll work alongside Threat Researchers, Security Engineers, and Cloud Platform teams to build scalable detection content that identifies sophisticated threats, reduces false positives, and helps customers respond to attacks faster than ever before. /p pIf you’re passionate about cloud security, threat detection, automation, and engineering-driven security operations, this is an opportunity to make a real impact. /p h3Technical Environment /h3 ulliThreat Detection Engineering /li /ul h3What You’ll Be Working On /h3 ul liDeveloping high-quality detection rules for cloud-native enterprise environments /li liBuilding Detection-as-Code workflows that enable scalable, version-controlled security content /li liCreating security analytics that identify advanced threats across AWS infrastructure and cloud workloads /li liWriting Python tooling to automate detection development, validation, and testing /liliImproving SIEM content to reduce false positives while increasing detection accuracy /li liDeveloping behavioural detections based on attacker techniques and real-world threat intelligence /li liCollaborating with Security Operations, Threat Intelligence,



and Product teams to continuously improve detection coverage /li liBuilding automated testing pipelines to validate detection content before deployment /li liSupporting incident investigations by developing new detections based on emerging attack techniques /li liHelping shape the company’s cloud detection strategy across a rapidly growing cybersecurity platform /li /ul h3Experience Required /h3 ul li4+ years of experience in Detection Engineering, Security Engineering, Threat Detection, or Security Operations /li liStrong commercial experience working with enterprise SIEM platforms such as Microsoft Sentinel, Splunk, Elastic, or similar solutions /li liStrong Python development skills for automation and security tooling /li liExperience securing AWS cloud environments and understanding cloud attack techniques /li liGood understanding of MITRE ATTCK, threat hunting, incident response, and adversary behaviour /li liExperience applying Detection-as-Code principles using Git-based workflows and CI/CD pipelines /li liPassion for building scalable security engineering solutions through automation /li /ul h3Nice to Have /h3 ul liExperience with cloud-native security platforms such as Microsoft Defender, CrowdStrike, Wiz, Lacework, or AWS Security Hub /li liKnowledge of Infrastructure as Code and Terraform security concepts /li liExperience with Kubernetes security monitoring and container threat detection /li liFamiliarity with SOAR platforms and automated incident response workflows /li liExperience contributing to threat research or detection engineering communities /li liGIAC, GCTI, GCFA, GCIA, or similar cybersecurity certifications are an advantage /li /ul /p #J-18808-Ljbffr

📌 Detection Engineer (Barcelona)
🏢 XpertDirect
📍 Barcelona