OverviewIn this role you will design, implement and refine threat detection capabilities to protect ADP assets, collaborating with Integral Security and cross-functional teams.
You will build and maintain cyber alert catalogs, leverage threat intelligence, and advance detection across SOAR, EDR, and NDR platforms.
You will stay current on threats, contribute to playbooks and SOPs, and help automate detection and response processes.
This position offers the opportunity to shape the security detections program and work with diverse tech and security teams to reduce risk and false positives.
ResponsabilidadesDevelop advanced alerting capabilities based on threat intelligence, post-incident findings, new threats, and vulnerabilities
Maintain an expert-level understanding of attacks, vectors, and emergent threats
Develop new detection for the SOAR platform based on stakeholder requests, threat intelligence, threat hunting, or purple exercises
Collaborate with CIRC and threat management to understand requirements
Implement content in EDR, NDR, and SOAR
Stay updated with latest threats and TTPs to integrate into detections
Contribute to SOPs and provide content for reports, configuration guides, and training materials
Work with CIRC, Threat management, and engineering to improve detections




Analyze CIRC alert statistics to reduce false positives and focus engineering efforts
Provide design support to improve detection and response capabilities
Provide backup support to the CIRC team
Mature CIRC playbooks, workflow automation, and use cases
Build detection logic using security logs for high-fidelity detections
Act as SME for security logs from Linux, macOS, Windows, EDR, NDR, and cloud
Requisitos principales2 years+ experience in threat detection or threat hunting
Strong analytical skills and cross-functional knowledge
Strong interpersonal, verbal and written communication skills
Strong knowledge of databases and data warehouse technologies
Strong scripting experience in Python or PowerShell
Experience building detection logic from security logs with high fidelity
Strong project/program management experience
Experience with one or more cloud providers (AWS or Azure)
Familiar with log outputs from network/host devices (HIDS/NIDS, etc.)
Proficiency with XML, HTML, Regular Expressions, JSON, REST, SQL
Experience with SIEM and SOAR
Creative thinker with problem-solving approach
Ability to communicate security concepts to varied audiences
High integrity and ability to work independently
Strong communication skills
Collaborative mindset
Creative thinker
Python
SQL
SOAR

📌 Detection Engineer (España)
🏢 Adp - Automatic Data Processing
📍 España