Senior Defensive

Huxley; Barcelona; Hybrid; EUR 70,000 - 110,000; Full time

Job summary

Huxley is seeking a Defensive Security Consultant to join its international cybersecurity team in Barcelona. You will apply hands-on engineering to threat detection, security monitoring, and incident response, collaborating with SOC, SIEM, and threat intel tools.

In this long-term, hybrid role, you will drive automation, improve detection capabilities, and develop dashboards that reveal operational maturity. Fluent English is required; Spanish is not a requirement. Start date ASAP.

Qualifications

• 5+ years of experience in Security Operations and SOC engineering.
• Proven end-to-end incident response leadership.
• Hands-on experience with SIEM and XDR platforms.
• Operationalize Cyber Threat Intelligence (CTI) with MITRE ATT&CK and DLP.
• Advanced programming skills in Python or Go.
• Exceptional communication and proactivity in solving issues.
• Fluent English; Spanish not required.

Responsibilities

• Automation design, implementation, and optimization to speed incident response.
• Maintain and improve security platforms for availability, scalability and performance.
• Enhance threat detection by reducing false positives/negatives.
• Develop dashboards, KPIs, and reporting for security operations.
• Collaborate with security, engineering, and business stakeholders to strengthen cyber defense.

Skills

Security Operations

Incident response

Python

Go

Communication

Proactivity

English

Tools

SIEM

XDR

Threat Intelligence

DLP

SOAR

Threat hunting

Job description

We are looking for a Defensive Security Consultant to join an international cybersecurity team focused on threat detection, security monitoring, and incident response. The selected candidate will play a key role in protecting critical platforms and systems through a hands‑on engineering approach, working closely with SOC, SIEM, and threat intelligence technologies.

You will be part of a mature security environment, contributing to the implementation, automation, and optimisation of defensive security capabilities.

Key Responsibilities

• Automation & Process Enhancement: Design, implement, and optimize automation initiatives that increase operational efficiency and accelerate incident response workflows.
• Security Tool Management: Maintain, configure, and continuously improve security platforms and services to ensure high availability, scalability, and performance.
• Detection Capability Improvement: Enhance the effectiveness of threat detection by minimizing false positives and false negatives, enabling faster and more accurate security investigations.
• Operational Visibility & Reporting: Develop meaningful dashboards, KPIs, and reporting frameworks that provide clear insights into the performance and maturity of security operations.
• Cross-Functional Collaboration: Partner with security, engineering, and other business stakeholders to strengthen organizational resilience and ensure a coordinated approach to cyber defense and incident response.

Requirements

• 5+ years of experience in Security Operations (SecOps), SOC Engineering, and cyber threat detection and response within enterprise environments.
• Demonstrated expertise leading end-to-end incident response activities, including triage, containment, eradication, recovery, root cause analysis, and post-incident review.
• Strong hands‑on experience with SIEM and XDR platforms, including detection engineering, alert tuning, use case development, and continuous optimization of security monitoring capabilities.
• Proven ability to operationalize Cyber Threat Intelligence (CTI) by mapping adversary techniques to frameworks such as MITRE ATT&CK and implementing effective Data Loss Prevention (DLP) strategies and controls.
• Advanced programming skills in Python or Go (Golang), leveraging automation, API integrations, and SOAR playbook development to improve efficiency and reduce manual operational effort.
• Exceptional communication skills and proactivity to analyse and solve issues and situations.
• Fluent English (mandatory), Spanish is not required.

Conditions

• * Location: Barcelona, Spain.
• * Work model: Hybrid (flexible).
• * Duration: Long‑term project.
• * Start date: ASAP.
• * Selection process: 2 interviews.