€80k - €86k
Blue Card threshold🇬🇧The English-language job board for Spain
89,000+ live jobsSenior Purple Team / Detection Engineer (Microsoft Security)
Hybrid in Madrid·Added 27 days ago (last checked 31 Oct)
29 open roles
Our summary
- Salary
- €50,000 - €57,000 a year
About €2,960 - €3,310 a month after tax.
- Work mode
- Hybrid, Madrid
- Contract
- Permanent
- English
- Required
- Experience
- Senior level





Visa options
The ad doesn’t mention sponsorship
No sponsorship mentioned, and this kind of work is rarely sponsored in Spain.
Pay clears the EU Blue Card threshold
The advertised pay is over the €41,356 bar, so the route exists if COBSER Consulting uses it.
Skills
This job advert was originally written in Spanish.
Requirements
What we're looking for
- Experience in Purple Team, Red Team, Threat Hunting, or Detection Engineering.
- Advanced knowledge of MITRE ATT&CK.
- Experience with Microsoft Sentinel and Microsoft Defender XDR.
- Proficiency in KQL.
- Knowledge of Active Directory, Entra ID, and Microsoft 365.
- Experience with SIEM, EDR/XDR, and security technologies.
- Scripting with Python, PowerShell, or Bash.
- Professional English.
Nice to have
Plus:
- Experience in cloud environments.
- SOAR knowledge.
- Offensive or defensive cybersecurity certifications.
Pay & benefits
What you'll get
- Permanent contract.
- Salary range: 50,000 - 57,000€ gross/year.
- Annual training plan.
The role
Would you like to test the defenses of a global organization and help improve its real threat detection and response capabilities?
At Cobser Consulting, we are looking for a Senior Purple Team Engineer to join an international cybersecurity environment, working alongside SOC, Threat Hunting, and Detection Engineering teams to validate security controls, simulate real attacks, and strengthen defense capabilities.
What you'll do
- Design and execute Purple Team and Adversary Emulation exercises.
- Validate detections, telemetry, and security controls.
- Optimize detection rules and KQL queries.
- Collaborate with SOC, Threat Hunting, and Incident Response teams.
- Identify coverage gaps and propose improvements.
- Automate tests and validations through scripting.
- Prepare technical reports and remediation recommendations.
How you'll work
- Hybrid modality (Madrid).
More jobs like this
or browse Madrid·Security·Security·Senior·Hybrid·Cybersecurity·Blue Card threshold·Community of Madrid·Consulting

