The English-language job board for Spain

Senior Purple Team / Detection Engineer (Microsoft Security)

Hybrid in Madrid·Added 27 days ago (last checked 31 Oct)

Our summary

Salary
€50,000 - €57,000 a year

About €2,960 - €3,310 a month after tax.

Work mode
Hybrid, Madrid
Contract
Permanent
English
Required
Experience
Senior level

Visa options

  • The ad doesn’t mention sponsorship

    No sponsorship mentioned, and this kind of work is rarely sponsored in Spain.

  • Pay clears the EU Blue Card threshold

    The advertised pay is over the €41,356 bar, so the route exists if COBSER Consulting uses it.

More jobs over the Blue Card threshold

Skills

This job advert was originally written in Spanish.

Requirements

What we're looking for

  • Experience in Purple Team, Red Team, Threat Hunting, or Detection Engineering.
  • Advanced knowledge of MITRE ATT&CK.
  • Experience with Microsoft Sentinel and Microsoft Defender XDR.
  • Proficiency in KQL.
  • Knowledge of Active Directory, Entra ID, and Microsoft 365.
  • Experience with SIEM, EDR/XDR, and security technologies.
  • Scripting with Python, PowerShell, or Bash.
  • Professional English.

Nice to have

Plus:

  • Experience in cloud environments.
  • SOAR knowledge.
  • Offensive or defensive cybersecurity certifications.

Pay & benefits

What you'll get

  • Permanent contract.
  • Salary range: 50,000 - 57,000€ gross/year.
  • Annual training plan.

The role

Would you like to test the defenses of a global organization and help improve its real threat detection and response capabilities?

At Cobser Consulting, we are looking for a Senior Purple Team Engineer to join an international cybersecurity environment, working alongside SOC, Threat Hunting, and Detection Engineering teams to validate security controls, simulate real attacks, and strengthen defense capabilities.

What you'll do

  • Design and execute Purple Team and Adversary Emulation exercises.
  • Validate detections, telemetry, and security controls.
  • Optimize detection rules and KQL queries.
  • Collaborate with SOC, Threat Hunting, and Incident Response teams.
  • Identify coverage gaps and propose improvements.
  • Automate tests and validations through scripting.
  • Prepare technical reports and remediation recommendations.

How you'll work

  • Hybrid modality (Madrid).
WhatsApp
See all 29 jobs