Senior Detection Engineer

Montash; Barcelona; Hybrid; EUR 90,000 - 150,000; Full time

Benefits offered by this job

Hybrid work Barcelona/Madrid

Office 2-3 days per week

Remote abroad days

Company bonus

Pension

Employee share programme

Career development & mobility

Wellbeing & healthcare support

Job summary

Montash is seeking a Senior Cyber Detection Expert to shape proactive threat detection across a global financial services environment. You will define detection standards, drive engineering practices and turn intel into scalable coverage across endpoints, cloud, and network.

You will balance advanced SIEM use cases with sustainable operations and collaborate with Threat Intelligence, Threat Hunting, Security Operations, and Engineering teams.

Qualifications

• Extensive experience in Detection Engineering, Cyber Defense, Security Monitoring or Threat Detection in complex enterprise environments.
• Deep SIEM expertise, including log management, event correlation, detection logic development and security data analysis.
• Strong understanding of adversary TTPs, with hands-on knowledge of frameworks such as MITRE ATT&CK.
• Proven experience building, tuning and maintaining detection content while keeping false positives and alert fatigue low.
• Experience turning threat intelligence and threat hunting outcomes into practical, scalable detection capabilities.

Responsibilities

• Define and maintain the strategic detection landscape, keeping coverage in line with changing threats, adversary behaviour and business risk.
• Act as the senior technical authority for detection engineering, setting standards, methods and best practices across the detection function.
• Lead the design and optimisation of advanced SIEM use cases, balancing effectiveness, performance and long-term operational sustainability.
• Own detection coverage assessments and gap analyses, using frameworks such as MITRE ATT&CK alongside threat intelligence insights.
• Turn threat intelligence, threat hunting findings and adversary simulation results into high-quality production detections.

Skills

Detection Engineering

SIEM expertise

Threat intelligence

Threat hunting

Security Operations

Adversary TTPs MITRE ATT&CK

Data analytics

Stakeholder communication

Tools

MITRE ATT&CK

Job description

Our client’s global Cyber Defense Center is turning cyber defense into a proactive, intelligence-led capability. As Senior Cyber Detection Expert, you will be the top technical authority for threat detection and will shape how the organisation detects and responds to cyber threats across a global environment.

The role is both strategic and hands-on. You will define the target detection landscape, set the direction for detection engineering standards, and turn threat intelligence and hunting insights into detection coverage that scales. You will work across Threat Intelligence, Threat Hunting, Security Operations and Engineering, and your work will directly strengthen the security posture of one of the world’s largest financial services groups.

What you will do

• Define and maintain the strategic detection landscape, keeping coverage in line with changing threats, adversary behaviour and business risk.
• Act as the senior technical authority for detection engineering, setting standards, methods and best practices across the detection function.
• Lead the design and optimisation of advanced SIEM use cases, balancing effectiveness, performance and long-term operational sustainability.
• Own detection coverage assessments and gap analyses, using frameworks such as MITRE ATT&CK alongside threat intelligence insights.
• Keep oversight of the security telemetry landscape, spot critical data gaps and drive the onboarding of new log sources.
• Turn threat intelligence, threat hunting findings and adversary simulation results into high-quality production detections.
• Design and roll out multi-domain detection strategies covering endpoint, identity, cloud, network and application environments.

What you will bring

• Extensive experience in Detection Engineering, Cyber Defense, Security Monitoring or Threat Detection in complex enterprise environments.
• Deep SIEM expertise, including log management, event correlation, detection logic development and security data analysis.
• Strong understanding of adversary TTPs, with hands-on knowledge of frameworks such as MITRE ATT&CK.
• Proven experience building, tuning and maintaining detection content while keeping false positives and alert fatigue low.
• Experience turning threat intelligence and threat hunting outcomes into practical, scalable detection capabilities.
• Strong analytical, problem-solving and communication skills, with the ability to influence technical teams and senior stakeholders.
• Familiarity with modern detection engineering practices such as Detection-as-Code, behavioural analytics, automation and AI-assisted security operations.

Nice to have

• Experience with Google SecOps.
• A background in Threat Hunting, Threat Intelligence, Purple Teaming or Adversary Simulation.

What's on offer

• Hybrid working in Barcelona or Madrid with 2-3 days per week in the office
• Plus up to 25 days a year working from abroad on top of vacation days
• A performance-based package including company bonus, pension, employee share programme and a range of employee discounts (details vary by location)
• Career development, digital learning and international mobility opportunities, in an environment that supports innovation, delivery and ownership
• Flexible working, health and wellbeing support (including healthcare and parental leave), and support for people returning from career breaks