Our client is a prestigious European institution with a Cyber Security Operations Centre whose mission is to strengthen the IT Security for the whole organization. The Institution is looking for a skilled Cybersecurity Engineer to reinforce their Threat Detection Engineering team. We are looking for a Cybersecurity Engineer professional who will be involved in the design, implementation, integration, configuration, administration, and maintenance of the client’s cybersecurity infrastructure and solutions. If you are looking for a big-impact cybersecurity opportunity, then we have the right one for you Contract type: Freelancer agreement, with an initial contract duration of 220 days, with the possibility for renewal Remote within EU territory (besides 20 days of on-site office presence in Luxembourg at the client's site; Daily rate offer for this role: 430 euros Develop threat-informed detection content by translating cyber threat intelligence, incident reports and adversary techniques into documented threat vectors, detection hypotheses and measurable detection objectives. Develop detection use cases for physical, virtual and containerised Linux workloads. Address threats related to execution, persistence, privilege escalation, credential access, defence evasion,



lateral movement and data exfiltration in container and Kubernetes environments. Integrate and validate container-security telemetry sources, including runtime events, Kubernetes audit logs, orchestration events and relevant cloud control-plane logs. Ensure that security data is properly normalised, enriched, ready for correlation and of sufficient quality for use within the corporate SIEM. Continuously tune and optimise deployed detections, including false-positive reduction, exception and exclusion management, suppression logic, risk scoring and performance monitoring. Conduct proactive threat-hunting and retro-hunting activities across containerised Linux workloads. In-depth knowledge of Linux operating systems and Linux security. Strong understanding of attacker techniques affecting Linux environments. Knowledge of process, file-system and network telemetry, audit sources, persistence techniques and privilege-escalation methods. Hands-on knowledge of Kubernetes security telemetry and threats. Experience with Kubernetes audit logging, RBAC abuse patterns, workload identities, admission controls and common security misconfigurations. Demonstrated ability to design, test, validate, deploy and maintain detection logic through a structured detection lifecycle.

📌 Cyber security engineer (España)
🏢 Unisys
📍 España