Senior Detection Engineer

Our client’s global Cyber Defense Center is turning cyber defense into a proactive, intelligence-led capability. As Senior Cyber Detection Expert, you will be the top technical authority for threat detection and will shape how the organisation detects and responds to cyber threats across a global environment.

The role is both strategic and hands-on. You will define the target detection landscape, set the direction for detection engineering standards, and turn threat intelligence and hunting insights into detection coverage that scales. You will work across Threat Intelligence, Threat Hunting, Security Operations and Engineering, and your work will directly strengthen the security posture of one of the world’s largest financial services groups.

What you will do

• Define and maintain the strategic detection landscape, keeping coverage in line with changing threats, adversary behaviour and business risk.
• Act as the senior technical authority for detection engineering, setting standards, methods and best practices across the detection function.
• Lead the design and optimisation of advanced SIEM use cases, balancing effectiveness, performance and long-term operational sustainability.
• Own detection coverage assessments and gap analyses, using frameworks such as MITRE ATT&CK alongside threat intelligence insights.
• Keep oversight of the security telemetry landscape, spot critical data gaps and drive the onboarding of new log sources.
• Turn threat intelligence, threat hunting findings and adversary simulation results into high-quality production detections.
• Design and roll out multi-domain detection strategies covering endpoint, identity, cloud, network and application environments.

What you will bring

• Extensive experience in Detection Engineering, Cyber Defense, Security Monitoring or Threat Detection in complex enterprise environments.
• Deep SIEM expertise, including log management, event correlation, detection logic development and security data analysis.
• Strong understanding of adversary TTPs, with hands-on knowledge of frameworks such as MITRE ATT&CK.
• Proven experience building, tuning and maintaining detection content while keeping false positives and alert fatigue low.
• Experience turning threat intelligence and threat hunting outcomes into practical, scalable detection capabilities.
• Strong analytical, problem-solving and communication skills, with the ability to influence technical teams and senior stakeholders.
• Familiarity with modern detection engineering practices such as Detection-as-Code, behavioural analytics, automation and AI-assisted security operations.

Nice to have

• Experience with Google SecOps.
• A background in Threat Hunting, Threat Intelligence, Purple Teaming or Adversary Simulation.

What’s on offer

• Hybrid working in Barcelona or Madrid with 2-3 days per week in the office
• Plus up to 25 days a year working from abroad on top of vacation days
• A performance-based package including company bonus, pension, employee share programme and a range of employee discounts (details vary by location)
• Career development, digital learning and international mobility opportunities, in an environment that supports innovation, delivery and ownership
• Flexible working, health and wellbeing support (including healthcare and parental leave), and support for people returning from career breaks