Cybersecurity SaaS | Detection Engineering | Cloud Security | Security Analytics
Our client, an innovative Cybersecurity SaaS company based in Barcelona, is looking for a Detection Engineer to develop advanced detection logic, security analytics, and automated detection-as-code capabilities for cloud-native customer environments.
You’ll work alongside Threat Researchers, Security Engineers, and Cloud Platform teams to build scalable detection content that identifies sophisticated threats, reduces false positives, and helps customers respond to attacks faster than ever before.
If you’re passionate about cloud security, threat detection, automation, and engineering-driven security operations, this is an opportunity to make a real impact.
Technical Environment
Threat Detection Engineering
What You’ll Be Working On
Developing high-quality detection rules for cloud-native enterprise environments
Building Detection-as-Code workflows that enable scalable, version-controlled security content
Creating security analytics that identify advanced threats across AWS infrastructure and cloud workloads
Writing Python tooling to automate detection development, validation, and testing
Improving SIEM content to reduce false positives while increasing detection accuracy
Developing behavioural detections based on attacker techniques and real-world threat intelligence
Collaborating with Security Operations, Threat Intelligence, and Product teams to continuously improve detection coverage




Building automated testing pipelines to validate detection content before deployment
Supporting incident investigations by developing new detections based on emerging attack techniques
Helping shape the company’s cloud detection strategy across a rapidly growing cybersecurity platform
Experience Required
4+ years of experience in Detection Engineering, Security Engineering, Threat Detection, or Security Operations
Strong commercial experience working with enterprise SIEM platforms such as Microsoft Sentinel, Splunk, Elastic, or similar solutions
Strong Python development skills for automation and security tooling
Experience securing AWS cloud environments and understanding cloud attack techniques
Good understanding of MITRE ATT&CK;, threat hunting, incident response, and adversary behaviour
Experience applying Detection-as-Code principles using Git-based workflows and CI/CD pipelines
Passion for building scalable security engineering solutions through automation
Nice to Have
Experience with cloud-native security platforms such as Microsoft Defender, CrowdStrike, Wiz, Lacework, or AWS Security Hub
Knowledge of Infrastructure as Code and Terraform security concepts
Experience with Kubernetes security monitoring and container threat detection
Familiarity with SOAR platforms and automated incident response workflows
Experience contributing to threat research or detection engineering communities
GIAC, GCTI, GCFA, GCIA, or similar cybersecurity certifications are an advantage
#J-18808-Ljbffr

📌 Detection Engineer (Barcelona)
🏢 XpertDirect
📍 Barcelona