Principal Cybersecurity Defense Analyst

Tenth Revolution Group; Madrid; Hybrid; EUR 90,000 - 130,000; Full time

Job summary

Tenth Revolution Group is seeking a Principal Cybersecurity Defense Analyst to join a global team in Madrid. The role focuses on defending a large-scale enterprise environment against advanced cyber threats within an active Security Operations context.

The ideal candidate will have hands-on incident response experience, threat hunting skills, and a track record across multinational deployments. Hybrid work setup in Madrid with 60% onsite presence is required.

Qualifications

• 10+ years of professional cybersecurity experience.
• Hands-on experience investigating security incidents and leading cyber defense activities.
• Experience with EDR/XDR and security monitoring tools.
• Familiarity with MITRE ATT&CK framework.
• Experience in multinational enterprise environments.
• Bachelor's or Master's degree in a related field.
• Ability to work from Madrid under a hybrid model (60% onsite).

Responsibilities

• Lead and coordinate complex cybersecurity investigations and incident response activities.
• Detect, analyze, contain, and mitigate advanced cyber threats.
• Conduct proactive threat hunting using SIEM, EDR, and threat intelligence platforms.
• Improve threat detection use cases and monitoring capabilities.
• Analyze attacker TTPs and support major incident management.
• Collaborate with global cyber teams to improve cyber resilience.

Skills

Cybersecurity experience

Threat hunting

MITRE ATT&CK

Adversary behavior

Multinational environments

Hybrid work readiness

Education

Bachelor's or Master's in CS/Cybersecurity/IT/Engineering

Tools

EDR/XDR platforms

SIEM technologies

Threat intelligence platforms

Job description

Our client is a global leader in the manufacturing and industrial sector, operating across more than 80 countries with a strong focus on innovation, digital transformation, and cybersecurity. With a highly complex international IT landscape, cybersecurity is a strategic priority, protecting business operations, intellectual property, critical infrastructure, and enterprise systems worldwide.

To strengthen the Cyber Defense organization, we are looking for an experienced Principal Cybersecurity Defense Analyst to join a global team based in Madrid.

The Opportunity:

This is a highly technical role focused on defending a large-scale enterprise environment against advanced cyber threats.

The successful candidate will join a mature Cyber Defense function responsible for threat detection, incident response, threat hunting, and continuous improvement of security monitoring

capabilities across a global organization.

This is not a Governance, Risk, or Compliance position. We are looking for professionals with hands-on experience investigating security incidents, leading cyber defense activities, and working within Security Operations environments.

You will collaborate closely with Security Operations, Infrastructure, Cloud Security, Identity & Access Management, Threat Intelligence, and Security Engineering teams across multiple regions.

Key Responsibilities:

• Lead and coordinate complex cybersecurity investigations and incident response activities.
• Detect, analyze, contain, and mitigate advanced cyber threats.
• Conduct proactive threat hunting activities using SIEM, EDR, and threat intelligence platforms.
• Improve threat detection use cases and monitoring capabilities.
• Analyze attacker tactics, techniques, and procedures (TTPs).
• Support major incident management and forensic investigations.
• Collaborate with global cybersecurity teams to improve cyber resilience.
• Identify security gaps and drive defensive improvements.
• Mentor junior cybersecurity professionals and provide technical guidance.
• Contribute to Cyber Defense strategy and continuous improvement initiatives.

Required Experience & Qualifications:

• 10+ years of professional Cybersecurity experience.
• Experience with EDR/XDR platforms and security monitoring tools.
• Strong understanding of attacker methodologies and adversary behavior.
• Experience utilizing frameworks such as MITRE ATT&CK.
• Experience working within multinational enterprise environments.
• Bachelor's or Master's Degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related discipline.
• Current DNI or NIE permitting employment in Spain.
• Ability to work from Madrid under a hybrid model (60% onsite).

Strong experience in:

• Cyber Defense
• Security Operations (SOC)
• Threat Hunting
• Experience investigating complex enterprise-scale cyber incidents.
• Hands-on experience with SIEM technologies such as:
• Microsoft Sentinel
• Splunk
• IBM QRadar
• ArcSight

Preferred Experience:

• Security Automation and SOAR technologies
• Detection Engineering
• Manufacturing, Industrial, or Critical Infrastructure environments
• Purple Team or Red Team collaboration experience