Privileged Access Management (Pam) Engineer

Boehringer Ingelheim; Barcelona; Híbrido; EUR 70.000 - 120.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Flexible working conditions

Life insurance

Health insurance

Learning & development

Descripción de la vacante

Boehringer Ingelheim is looking for a senior Threat Detection Engineer to advance our ability to detect sophisticated cyber threats across on-premises, cloud, and hybrid environments. You will design and continuously improve high-fidelity detections, drive proactive threat hunting, and translate adversary techniques into concrete detections.

You will collaborate with Threat Intelligence, SOC, IR, and Red/Purple Teams to strengthen detection maturity.

Formación

• 5+ years of experience in threat detection, threat hunting, or related fields.
• Experience in designing and tuning detection rules for enterprise environments.
• Strong knowledge of MITRE ATT&CK and adversary-driven detections.
• Hands-on experience with Windows, Linux, and cloud attack techniques.
• Fluent English and ability to work in global cross-functional teams.

Responsabilidades

• Design, implement and improve advanced threat detection capabilities.
• Develop, tune and maintain high-quality detection rules and behavioral analytics.
• Conduct proactive threat hunting activities using hypothesis-driven methods.
• Translate adversary TTPs into actionable detections.
• Collaborate with Threat Intelligence, SOC, Incident Response, and Red/Purple Teams.
• Reduce false positives while maintaining detection visibility.
• Support purple team activities using red team outputs.
• Identify detection gaps and contribute to continuous maturity improvements.
• Analyze complex attack chains, kill chains, and post-exploitation activity.

Conocimientos

Communication

Analytical thinking

Threat detection

Threat hunting

Scripting (Python/PowerShell)

Collaboration with security teams

MITRE ATT&CK knowledge

Educación

OSEP & CARTE certificates

Herramientas

Microsoft Defender

Microsoft XDR

EDR/XDR platforms

Descripción del empleo

In this role you will advance the organization’s ability to detect sophisticated cyber threats across on‑premises, cloud, and hybrid environments. You will design and continuously improve high‑fidelity detections, drive proactive threat hunting, and translate adversary techniques into concrete detections. You will collaborate with Threat Intelligence, SOC, Incident Response, and Red/Purple Teams to strengthen detection maturity, reduce false positives, and support adversary‑driven detection initiatives. This is a strategic, hands‑on role for shaping threat visibility and security posture.

• Flexible working conditions
• Life and accident insurance
• Health insurance at a competitive price
• Investment in your learning and development
• Design, implement, and continuously improve advanced threat detection capabilities
• Develop, tune, and maintain high‑quality detection rules and behavioral analytics
• Conduct proactive, hypothesis‑driven threat hunting activities
• Translate adversary TTPs and attack techniques into actionable detections
• Collaborate with Threat Intelligence, SOC, Incident Response, and Red/Purple Teams
• Analyze complex attack chains, kill chains, and post‑exploitation activity
• Identify detection gaps and contribute to continuous detection maturity improvements
• Reduce false positives while maintaining effective threat visibility
• Support purple team activities by leveraging red team and penetration test outputs
• Minimum 5 years of experience in threat detection, threat hunting, detection engineering, red team, or penetration testing
• Strong experience designing and tuning detection rules in enterprise environments
• Advanced expertise in EDR/XDR platforms (e.g. Microsoft Defender / Microsoft XDR)
• Solid knowledge of MITRE ATT&CK and adversary‑driven detection
• Hands‑on understanding of advanced attack techniques across Windows, Linux, and cloud
• Strong scripting skills (Python, PowerShell, or similar)
• Experience collaborating with red, purple, or penetration testing teams
• Ability to translate offensive tradecraft into high‑fidelity detections
• OSEP and CARTE (or equivalent) certifications required
• Fluent English; experience in global, cross‑functional teams preferred
• communication
• analytical thinking
• EDR/XDR platforms
• MITRE ATT&CK knowledge