Cybersecurity Engineer – Purple Team / Red Team

• At least 3 years of practical experience in offensive cybersecurity, Adversary Emulation, Pentesting, Detection Engineering, Threat Hunting, Incident Response, or related disciplines.
• At least 3 years of practical experience in Red Team or Purple Team, including the planning and execution of exercises in enterprise environments.
• Demonstrable experience transforming offensive exercise results into improvements in telemetry, detection, investigation, response, and remediation.
• Experience working with MITRE ATT&CK and Threat Intelligence.
• Solid knowledge of attack and post-exploitation techniques in:
  • Windows
  • Linux
  • Active Directory
  • Microsoft Entra ID
  • Microsoft 365
  • Networking
  • Cloud
• Experience with SIEM, EDR/XDR, SOAR, and Network Security Monitoring technologies.
• Experience with Microsoft Sentinel.
• Experience with Microsoft Defender XDR.
• Good knowledge of KQL (Kusto Query Language).
• Experience working with Python, PowerShell, or Bash.
• Knowledge of APIs, version control, and CI/CD environments.
• Ability to work in enterprise, distributed environments with multiple stakeholders.
• Ability to document technical results and convert them into concrete improvement actions.
• An autonomous, analytical, and results-oriented person.

• A combination of specialized professional training and relevant experience in cybersecurity will be equally valued.

• University degree in Cybersecurity, Computer Science, Engineering, or equivalent.

• Professional English.

¡One day off for your birthday so you can celebrate it however you want!

Improved paid leave for a better personal and professional balance.

Access to private health insurance for your peace of mind.

Extra vacation days based on your seniority, because we value your rest and well-being.

Are you passionate about offensive cybersecurity and interested in bringing real-world threat knowledge to the continuous improvement of a SOC?

We are looking for a Senior Cybersecurity / Purple Team Specialist to participate in international cybersecurity projects, working on Threat-Led Validation, Adversary Emulation, Red/Purple Team, Threat Hunting, and Detection Engineering.

The selected person will help validate and improve detection, investigation, and response capabilities against threats, working on enterprise environments and Microsoft security technologies.

• Design security exercises based on Threat Intelligence, recent incidents, business risks, and detection gaps.
• Plan and execute Adversary Emulation, Red Team, Purple Team, and Atomic Testing campaigns.
• Map adversary activities and behaviors with MITRE ATT&CK.
• Validate telemetry and detection capabilities together with the Detection Engineering and Threat Hunting teams.
• Create, review, and optimize KQL queries, correlation rules, and behavioral detections.
• Work with Microsoft Sentinel and Microsoft Defender XDR.
• Evaluate the end-to-end capability of the SOC to detect, enrich, investigate, escalate, contain, and document incidents.
• Identify blind spots, false negatives, and opportunities for improvement in security capabilities.
• Document evidence and perform root cause analysis.
• Define and follow up on remediation actions together with the control owners.
• Perform re-testing to verify that remediation measures have been correctly implemented.
• Create scripts, automations, integrations, and reusable tools.
• Work with Python, PowerShell, Bash, APIs, Git, and CI/CD.
• Develop metrics and reporting on MITRE ATT&CK coverage, control effectiveness, detections, and remediation progress.
• Participate in Purple Team Workshops, After-Action Reviews, and knowledge transfer sessions.
• Contribute to the continuous improvement of the SOC's detection and response capabilities.

Madrid