> Markdown version of [/jobs/ext/1599649-soc-technical-lead-threat-hunting-incident-response](https://www.wearedevelopers.com/jobs/ext/1599649-soc-technical-lead-threat-hunting-incident-response). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# SOC Technical Lead - Threat Hunting & Incident Response

- **Company:** Thales Group
- **Location:** Madrid, Spain (Remote available)
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cyber Security, Distributed Systems, Network Forensics, Security Information and Event Management, Mitre Att&ck, Cybercrime
- **Published:** July 8, 2026
- **Apply:** https://thales.wd3.myworkdayjobs.com/Careers/job/Madrid-Emilio-Vargas/SOC-Technical-Lead---Threat-Hunting---Incident-Response_R0333099

## About the Role

* Experience: Minimum 2-5 years of experience in Cybersecurity, with a strong focus on Security Operations, Incident Response, or Threat Hunting.
 * Demonstrated experience in a technical lead or senior-level advisory role, guiding teams through complex technical challenges.
 * Proven background in managing security operations within high-scale, distributed environments (Cloud or Hybrid).
 * Advanced understanding of attacker TTPs (Tactics, Techniques, and Procedures) and the MITRE ATT&CK framework.
 * Deep expertise in SIEM/SOAR platforms, EDR/XDR tools, and network traffic analysis.
 * Experience with Cloud security (AWS, Azure, or GCP) and understanding of shared responsibility models.
 * Experience leading large-scale incident investigations and performing root-cause analysis.
 * Familiarity with forensic analysis tools and procedures.

## Description

* Drive Proactive Defense: You will spearhead our threat hunting strategy, utilizing advanced telemetry and intelligence to uncover sophisticated attacker patterns before they impact our infrastructure.
 * Lead Through Crisis: You will be the technical force behind our Incident Response, guiding the team through high-pressure situations, conducting deep-dive forensics, and refining our defense playbook to stay ahead of the adversary.
 * Mentor and Innovate: You will elevate the talent around you. Through hands-on mentorship, technical workshops, and collaboration, you will cultivate a culture of continuous improvement and technical excellence.
 * Architect the Future: You will partner with our cloud and product teams to integrate security into every stage of the lifecycle. By championing "Security-as-Code" and automation, you will transform how we monitor and protect our global ecosystem.


## Related Videos

- [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime)
- [Real-world Threat Modeling](https://www.wearedevelopers.com/videos/936-real-world-threat-modeling)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)