SOC Tech Lead: Proactive Threat Hunting & Incident Response

Thales

Madrid

Hybrid

EUR 70,000 - 110,000

Full time

14 days+

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Flexible hybrid work
41 days off
Meal vouchers
Transport vouchers
Training support
Speakers Program

Job summary

Thales S21sec Spain is seeking a SOC Technical Lead – Threat Hunting & Incident Response with 4+ years in cybersecurity to join our central services team. You will drive proactive defense, lead incident response, and mentor staff while shaping security across cloud and product pipelines.

We offer a flexible hybrid work environment, extensive training, and a performance‑driven reward structure as part of Thales’ global security services.

Qualifications

  • 2–5 years of cybersecurity experience focused on security operations, incident response, or threat hunting.
  • Experience in a technical lead or senior advisory role guiding teams through complex challenges.
  • Background in managing security operations within high‑scale distributed environments (Cloud or Hybrid).
  • Familiarity with attacker TTPs and the MITRE ATT&CK framework.

Responsibilities

  • Drive Proactive Defense: spearhead threat hunting using telemetry and intelligence.
  • Lead Incident Response: act as technical lead guiding crisis management and forensics.
  • Mentor and innovate: coach teammates through workshops and collaboration.
  • Architect security: partner with cloud/product teams to integrate security across the lifecycle.

Skills

Threat hunting
Incident response
MITRE ATT&CK
SIEM/SOAR
EDR/XDR
Cloud security
Forensic tools

Tools

Forensic tools

Job description

Thales S21sec Spain is seeking a SOC Technical Lead – Threat Hunting & Incident Response with 4+ years in cybersecurity to join our central services team. You will drive proactive defense, lead incident response, and mentor staff while shaping security across cloud and product pipelines.

We offer a flexible hybrid work environment, extensive training, and a performance‑driven reward structure as part of Thales’ global security services.

Get your free, confidential resume review.

or drag and drop your file here.

Similar jobs

Similar jobs worth comparing

SOC Tech Lead: Threat Hunting & Incident Response
SOC Tech Lead: Threat Hunting & Incident Response

Thales Group • Madrid

Hybrid
EUR 70,000 - 110,000
Flexible Hybrid Work
Up to 41 vacation days
Friday focus time (monthly)
+4
SOC Technical Lead – Threat Hunting & Incident Response
SOC Technical Lead – Threat Hunting & Incident Response

Thales • Madrid

On-site
EUR 70,000 - 110,000
Flexible hybrid work
41 days off
Meal vouchers
+3
SOC Engineer: Threat Detection & Incident Response
SOC Engineer: Threat Detection & Incident Response

Thales • Madrid

On-site
EUR 52,000 - 74,000
SOC Technical Lead – Threat Hunting & Incident Response
SOC Technical Lead – Threat Hunting & Incident Response

Thales Group • Madrid

Hybrid
EUR 70,000 - 110,000
Flexible Hybrid Work
Up to 41 vacation days
Friday focus time (monthly)
+4
Threat Hunting & Incident Response Intern
Threat Hunting & Incident Response Intern

Thales • Madrid

On-site
EUR 8,900 - 13,000
SOC Engineer
SOC Engineer

Thales • Madrid

On-site
EUR 52,000 - 74,000
Senior SOC Lead – Incident Response & Threat Hunting
Senior SOC Lead – Incident Response & Threat Hunting

Syntegon Technology GmbH • Terrassa

On-site
EUR 54,000 - 76,000
Senior SOC Incident Responder & Threat Hunter
Senior SOC Incident Responder & Threat Hunter

Babel Sistemas • Madrid

On-site
EUR 65,000 - 100,000
Flexible vacation system
Work-from-home flexibility
Training and development
+4
Senior SOC Lead — Incident Response & Threat Hunting
Senior SOC Lead — Incident Response & Threat Hunting

Telstar • Terrassa

On-site
EUR 70,000 - 110,000
Senior SOC Analyst - Threat Hunts & Incident Response Lead
Senior SOC Analyst - Threat Hunts & Incident Response Lead

SQUAD - Cabinet de conseils et d’expertises • Barcelona

On-site
EUR 60,000 - 90,000
Personalized growth opportunities
Participation in internal events
Visibility at industry conferences
+1