We are looking for a Defensive Security Consultant to join an international cybersecurity team focused on threat detection, security monitoring, and incident response. The selected candidate will play a key role in protecting critical platforms and systems through a hands-on engineering approach, working closely with SOC, SIEM, and threat intelligence technologies.

You will be part of a mature security environment, contributing to the implementation, automation, and optimisation of defensive security capabilities.

Key Responsibilities

- Automation & Process Enhancement: Design, implement, and optimize automation initiatives that increase operational efficiency and accelerate incident response workflows.
- Security Tool Management: Maintain, configure, and continuously improve security platforms and services to ensure high availability, scalability, and performance.
- Detection Capability Improvement: Enhance the effectiveness of threat detection by minimizing false positives and false negatives, enabling faster and more accurate security investigations.
- Operational Visibility & Reporting: Develop meaningful dashboards, KPIs, and reporting frameworks that provide clear insights into the performance and maturity of security operations.
- Cross-Functional Collaboration: Partner with security, engineering, and other business stakeholders to strengthen organizational resilience and ensure a coordinated approach to cyber defense and incident response.

Requirements
- 5+ years of experience in Security Operations (SecOps), SOC Engineering, and cyber threat detection and response within enterprise environments.
- Demonstrated expertise leading end-to-end incident response activities , including triage, containment, eradication, recovery, root cause analysis, and post-incident review.




- Strong hands-on experience with SIEM and XDR platforms , including detection engineering, alert tuning, use case development, and continuous optimization of security monitoring capabilities.
- Proven ability to operationalize Cyber Threat Intelligence (CTI) by mapping adversary techniques to frameworks such as MITRE ATT&CK; and implementing effective Data Loss Prevention (DLP) strategies and controls.
- Advanced programming skills in Python or Go (Golang) , leveraging automation, API integrations, and SOAR playbook development to improve efficiency and reduce manual operational effort.
- Exceptional communication skills and proactivity to analyse and solve issues and situations.
- Fluent English (mandatory), Spanish is not required.

Conditions
- Location: Barcelona, Spain.
- Work model: Hybrid (adaptable).
- Duration: Long-term project.
- Start date: ASAP.
- Selection process: 2 interviews.

If you are interested on the opportunity, don't hesitate to contact us.

Let op: vacaturefraude

Helaas komt vacaturefraude steeds vaker voor. We waarschuwen je voor mogelijke misleiding:

- Wij zullen nooit via WhatsApp of in een videogesprek vragen om jouw persoonlijke gegevens (zoals een kopie van je ID, bankgegevens of BSN).
- Twijfel je over de echtheid van een vacature of contactpersoon? Neem dan altijd rechtstreeks contact met ons op via de officiële contactgegevens op onze website.

Important: job fraud

Unfortunately, job fraud is becoming more common. Beware of such scams:

- We will never ask for personal information (such as a copy of your ID, bank details, or social security number) via WhatsApp or during a video call.
- If you're unsure whether a vacancy or contact person is legitimate, please reach out to us directly using the official contact details on our website.

📌 Senior Defensive (Barcelona)
🏢 Huxley
📍 Barcelona