Overview In this role you will advance the organization’s ability to detect sophisticated cyber threats across on‑premises, cloud, and hybrid environments. You will design and continuously improve high‑fidelity detections, drive proactive threat hunting, and translate adversary techniques into concrete detections. You will collaborate with Threat Intelligence, SOC, Incident Response, and Red/Purple Teams to strengthen detection maturity, reduce false positives, and support adversary‑driven detection initiatives. This is a strategic, hands‑on role for shaping threat visibility and security posture.

Compensaciones / BeneficiosFlexible working conditionsLife and accident insuranceHealth insurance at a competitive priceInvestment in your learning and developmentGym membership discounts ResponsabilidadesDesign, implement, and continuously improve advanced threat detection capabilitiesDevelop, tune, and maintain high‑quality detection rules and behavioral analyticsConduct proactive, hypothesis‑driven threat hunting activitiesTranslate adversary TTPs and attack techniques into actionable detectionsCollaborate with Threat Intelligence, SOC, Incident Response, and Red/Purple TeamsAnalyze complex attack chains, kill chains,



and post‑exploitation activityIdentify detection gaps and contribute to continuous detection maturity improvementsReduce false positives while maintaining effective threat visibilitySupport purple team activities by leveraging red team and penetration test outputs Requisitos principalesMinimum 5 years of experience in threat detection, threat hunting, detection engineering, red team, or penetration testingStrong experience designing and tuning detection rules in enterprise environmentsAdvanced expertise in EDR/XDR platforms (e.g. Microsoft Defender / Microsoft XDR)Solid knowledge of MITRE ATT&CK; and adversary‑driven detectionHands‑on understanding of advanced attack techniques across Windows, Linux, and cloudStrong scripting skills (Python, PowerShell, or similar)Experience collaborating with red, purple, or penetration testing teamsAbility to translate offensive tradecraft into high‑fidelity detectionsOSEP and CARTE (or equivalent) certifications requiredFluent English; experience in general, cross‑functional teams preferredcollaborationcommunicationanalytical thinkingEDR/XDR platformsMITRE ATT&CK; knowledgeWindows/Linux/cloud attack techniques

📌 Privileged Access Management (PAM) Engineer (San Cugat del Vallés)
🏢 Jobrapido
📍 San Cugat del Vallés