ppLocation: Madrid Emilio Vargas, Spain /p pThales people architect identity management and data protection solutions at the heart of digital security. Business and governments rely on us to bring trust to the billions of digital interactions they have with people. Our technologies and services help banks exchange funds, people cross borders, energy become smarter and much more. More than 30,000 organizations already rely on us to verify the identities of people and things, grant access to digital services, analyze vast quantities of information and encrypt data to make the connected world more secure. /p pThales in Spain is a leader in technological solutions applied to Defence, Aeronautics, Security, Transportation and Space and, furthermore, is a global centre for excellence in Space, Security of Critical Infrastructures and Transportation. With a turnover of €320 million and a staff of 1,200, it exports approximately 40% of its total production principally to the Middle East, North Africa and Latin America. /p pAt bThales S21sec Spain /b, we are looking for a bSOC Technical Lead – Threat Hunting Incident Response /b with b4+ years of experience in cybersecurity /b to join our central services team. /p pWe are seeking a highly motivated professional with strong expertise in bcybersecurity infrastructures /b, capable of supporting and managing complex technological environments across leading security vendors. /p h3Key Responsibilities /h3 ul liDrive Proactive Defense: You will spearhead our threat hunting strategy, utilizing advanced telemetry and intelligence to uncover sophisticated attacker patterns before they impact our infrastructure. /li liLead Through Crisis: You will be the technical force behind our Incident Response, guiding the team through high‑pressure situations, conducting deep‑dive forensics,



and refining our defense playbook to stay ahead of the adversary. /li liMentor and Innovate: You will elevate the talent around you. Through hands‑on mentorship, technical workshops, and collaboration, you will cultivate a culture of continuous improvement and technical excellence. /li liArchitect the Future: You will partner with our cloud and product teams to integrate security into every stage of the lifecycle. By championing "Security-as-Code" and automation, you will transform how we monitor and protect our integral ecosystem. /li /ul h3Requirements /h3 ul liExperience: Minimum 2–5 years of experience in Cybersecurity, with a strong focus on Security Operations, Incident Response, or Threat Hunting. /li liDemonstrated experience in a technical lead or senior‑level advisory role, guiding teams through complex technical challenges. /li liProven background in managing security operations within high‑scale, distributed environments (Cloud or Hybrid). /li liAdvanced understanding of attacker TTPs (Tactics, Techniques, and Procedures) and the MITRE ATTCK framework. /li liDeep expertise in SIEM/SOAR platforms, EDR/XDR tools, and network traffic analysis. /li liExperience with Cloud security (AWS, Azure, or GCP) and understanding of shared responsibility models. /li liExperience leading large‑scale incident investigations and performing root‑cause analysis. /li liFamiliarity with forensic analysis tools and procedures.



/li /ul h3Why Join Thales S21sec Spain? /h3 pAt Thales S21sec, we pride ourselves on being binnovative and flexible /b in how we work. We continuously evolve our policies to ensure a true bwork‑life balance /b. /p h3100% Flexible Hybrid Work /h3 pWork from home or come to the office whenever you choose. /p h3Up to 41 Days Off Per Year /h3 ul li24 vacation days + additional flexible days /li liOption to enjoy one free Friday per month (12 per year) /li liChoose between summer reduced hours or extra days of bflexible /b working /li /ul h3Flexible Compensation Package /h3 pOptimize your net salary with benefits such as meal vouchers, transport cards, childcare vouchers, and training support. /p h3Continuous Learning Certifications /h3 pAccess to an bannual training plan /b including technical certifications, languages, and soft skills. /p h3Knowledge Sharing Culture /h3 pParticipate in our voluntary bSpeakers Program /b and share your expertise. /p h3Performance‑Based Bonuses /h3 pClear and transparent objectives aligned with KPI‑based annual bonuses. /p h3Career Growth Your Way /h3 pChoose your path: /p ul liLeadership and team management /li liDeep technical specialization with top experts /li /ul h3Join Us /h3 pIf you are passionate about cybersecurity and want to make an impact, we are your company. /p pWe're looking forward to meeting you! /p pAt Thales we provide CAREERS and not only jobs. With Thales employing 80,000 employees in 68 countries our mobility policy enables thousands of employees each year to develop their careers at home and abroad, in their existing areas of expertise or by branching out into new fields. Together we believe that embracing flexibility is a smarter way of working. Great journeys start here, apply now! /p /p #J-18808-Ljbffr

📌 SOC Technical Lead – Threat Hunting & Incident Response (Madrid)
🏢 Thales
📍 Madrid