Senior SOC Detection & Response Engineer (Threat Hunting)

BME | Bolsas y Mercados Españoles; Las Rozas de Madrid; On-site; EUR 90,000 - 120,000; Full time

Job summary

The SIX Security Operations Center (SOC) is seeking a hands-on security professional with expertise in incident response, threat hunting, and security monitoring. You will develop, tune, and maintain detections across endpoint, identity, network, cloud, and email environments, and lead complex investigations to improve the overall security posture.

You will design detection content, automate SOC workflows, and mentor junior analysts, contributing to SOC process improvements and proactive threat

Qualifications

• 4+ years of experience in SOC operations, detection engineering, threat hunting, and incident response.
• Hands-on experience with SIEM, EDR, and SOAR platforms (Sentinel, Elastic, Defender for Endpoint, Cortex XSOAR).
• Strong background in detection rule development, security investigations, and threat hunting across multiple telemetry sources.
• Experience with scripting, automation, APIs, and tools such as Python, GitLab, Azure DevOps, and CI/CD practices.
• Knowledge of security query languages and frameworks, including MITRE ATT&CK.
• Strong analytical, communication, collaboration, and mentoring skills.

Responsibilities

• Develop, tune, and maintain threat detections and SIEM use cases across endpoint, network, identity, cloud, mail, and M365 environments.
• Investigate complex security incidents, lead threat analysis, and coordinate containment and remediation activities.
• Design and improve detection content, SOC automation, SOAR workflows, and incident response playbooks.
• Conduct proactive threat hunting using threat intelligence and the MITRE ATT&CK framework.
• Identify detection gaps and continuously enhance SOC capabilities and security posture.
• Mentor junior analysts and contribute to SOC process improvements and knowledge sharing.

Skills

SOC operations

Detection engineering

Threat hunting

Incident response

SIEM

EDR

SOAR

Automation scripting

Python

APIs

MITRE ATT&CK

Communication

Mentoring

Tools

Sentinel

Elastic

Defender for Endpoint

Cortex XSOAR

GitLab

Azure DevOps

Job description

The SIX Security Operations Center (SOC) is seeking a hands-on security professional with expertise in incident response, threat hunting, and security monitoring. You will develop, tune, and maintain detections across endpoint, identity, network, cloud, and email environments, and lead complex investigations to improve the overall security posture.

You will design detection content, automate SOC workflows, and mentor junior analysts, contributing to SOC process improvements and proactive threat