Senior Defensive Security Engineer

SQUAD - Cabinet de conseils et d’expertises; Barcelona; Hybrid; EUR 70,000 - 100,000; Full time

Job summary

SQUAD Group in Barcelona seeks a Senior Defensive Security Engineer to join the security operations team. Hybrid work model in a major international digital player, focusing on making defense faster, smarter, and more reliable through automation and improved detection.

You will own and optimize the defensive stack, reduce alert noise, and design dashboards to showcase health and effectiveness of security operations. Strong coding skills and ability to communicate risks to leadership are required.

Qualifications

• 5+ years in security operations, SOC engineering, or detection and response.
• Hands-on experience running incidents from first alert through to lessons learned.
• Strong expertise with SIEM/XDR solutions, including detection rule writing and tuning.
• Experience turning threat intelligence into actionable detections, with good knowledge of MITRE ATT&CK.
• Practical experience with DLP policies.
• Solid coding skills in Python or Go, with experience working with APIs and SOAR automation.
• Ability to explain technical risks clearly to both engineers and leadership.

Responsibilities

• Build automations and integrations that speed up day-to-day operations and incident handling.
• Own and optimize the defensive security stack so it stays reliable and scales with the business.
• Improve alert quality by cutting noise and closing detection gaps.
• Design dashboards and KPIs that show the health and effectiveness of security operations.
• Partner with security and engineering teams to strengthen protection and response across the organization.
• Support and coach less experienced team members.

Skills

SOC engineering

Security operations

Detection and response

Python/Go

SIEM/XDR

MITRE ATT&CK

DLP policies

APIs & SOAR

Communication to leadership

Tools

SIEM/XDR platforms

SOAR automation

Job description

Senior Defensive Security Engineer – Barcelona (Hybrid)

Since 2011, SQUAD Group has been a key player in the cybersecurity landscape. We partner with leading organizations to protect their information systems through a comprehensive 360° offering of consulting, integration, expertise, and managed services.

Our mission: Securing Together!

We believe in a collaborative approach to cybersecurity, where experts and clients work hand-in-hand to anticipate threats and protect critical infrastructure.

As part of our growing team, we’re looking for a Senior Defensive Security Engineer based in Barcelona. You’ll join the security operations team of a major international digital player, helping take its defensive capabilities to the next level.

Your Role

You are an engineer at heart with a strong operational background. Your focus is making security operations faster, smarter, and more reliable: automating what slows teams down, sharpening detection quality, and giving stakeholders clear visibility into how the defense is performing.

Your Responsibilities

• Build automations and integrations that speed up day-to-day operations and incident handling.
• Own and optimize the defensive security stack so it stays reliable and scales with the business.
• Improve alert quality by cutting noise and closing detection gaps.
• Design dashboards and KPIs that show the health and effectiveness of security operations.
• Partner with security and engineering teams to strengthen protection and response across the organization.
• Support and coach less experienced team members.

What You Bring

• 5+ years in security operations, SOC engineering, or detection and response.
• Hands‑on experience running incidents from first alert through to lessons learned.
• Strong expertise with SIEM/XDR solutions, including detection rule writing and tuning.
• Experience turning threat intelligence into actionable detections, with good knowledge of MITRE ATT&CK.
• Practical experience with DLP policies.
• Solid coding skills in Python or Go, with experience working with APIs and SOAR automation.
• Ability to explain technical risks clearly to both engineers and leadership.

Preferred Certifications:

GIAC GCIH / GCIA / GCDA, BTL2, or vendor certifications on major SIEM/XDR platforms.

Why Join Squad?

• Personalized Growth: We help you build a training and certification plan aligned with your professional goals through our SquadeXpérience.
• Expertise Development: Participate in internal events like our MixYourTalent webinars and monthly CTF sessions.
• Visibility: Attend major industry conferences and contribute to our #TheExpert technical blog.
• Culture: Enjoy a dynamic and close-knit environment with after-work events and team gatherings that foster great camaraderie.