We are looking for a Defensive Security Consultant to join an international cybersecurity team focused on threat detection, security monitoring, and incident response. The selected candidate will play a key role in protecting critical platforms and systems through a hands‐on engineering approach, working closely with SOC, SIEM, and threat intelligence technologies. You will be part of a mature security environment, contributing to the implementation, automation, and optimisation of defensive security capabilities.

Key Responsibilities
* Automation & Process Enhancement: Design, implement, and optimize automation initiatives that increase operational efficiency and accelerate incident response workflows.
* Security Tool Management: Maintain, configure, and continuously improve security platforms and services to ensure high availability, scalability, and performance.
* Detection Capability Improvement: Enhance the effectiveness of threat detection by minimizing false positives and false negatives, enabling faster and more accurate security investigations.
* Operational Visibility & Reporting: Develop meaningful dashboards, KPIs, and reporting frameworks that provide clear insights into the performance and maturity of security operations.
* Cross-Functional Collaboration: Partner with security, engineering,



and other business stakeholders to strengthen organizational resilience and ensure a coordinated approach to cyber defense and incident response. Requirements
* 5+ years of experience in Security Operations (SecOps), SOC Engineering, and cyber threat detection and response within enterprise environments.
* Demonstrated expertise leading end-to-end incident response activities, including triage, containment, eradication, recovery, root cause analysis, and post-incident review.
* Strong hands‐on experience with SIEM and XDR platforms, including detection engineering, alert tuning, use case development, and continuous optimization of security monitoring capabilities.
* Proven ability to operationalize Cyber Threat Intelligence (CTI) by mapping adversary techniques to frameworks such as MITRE ATT&CK; and implementing effective Data Loss Prevention (DLP) strategies and controls.
* Advanced programming skills in Python or Go (Golang), leveraging automation, API integrations, and SOAR playbook development to improve efficiency and reduce manual operational effort.
* Exceptional communication skills and proactivity to analyse and solve issues and situations.
* Fluent English (mandatory), Spanish is not required. Conditions
*
*

Location:
Barcelona, Spain.
*
* Work model: Hybrid (adaptable).
*
* Duration: Long‐term project.
*
* Start date: ASAP.
*
* Selection process: 2 interviews.

📌 Senior Defensive (Barcelona)
🏢 Huxley
📍 Barcelona