> Markdown version of [/jobs/ext/1657819-cyber-threat-hunting-manager](https://www.wearedevelopers.com/jobs/ext/1657819-cyber-threat-hunting-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Threat Hunting Manager

- **Company:** Apollo Solutions Ltd
- **Location:** Madrid, Spain
- **Contract:** Permanent contract
- **Skills:** Cloud Computing Security, Cyber Security, Identity and Access Management, Intrusion Detection and Prevention, Network Security, Security Information and Event Management, Software Vulnerability Management, Mitre Att&ck, Cyber Threat Analysis, Information Technology, Cybercrime, Purple Team (Cyber Security)
- **Published:** July 13, 2026
- **Apply:** https://www.jobleads.com/es/job/efde86d95961b7cf76b9c08b5ac0f3760

## About the Role

* Degree in Computer Science, Cyber Security, or a related discipline, or equivalent experience
 * 5+ years of experience in security monitoring, threat detection, threat hunting, or security operations
 * Hands-on experience with SIEM, XDR, EDR, cloud security, identity protection, and network security technologiesStrong understanding of threat actors, attack methodologies, and frameworks such as MITRE ATT&CK, Cyber Kill Chain, and the Diamond Model
 * Experience working within large, global organisations and hybrid technology environments
 * Excellent analytical, problem-solving, communication, and stakeholder management skills
 * Demonstrated ability to drive continuous improvement and deliver measurable security outcomes
 * Proactive, inquisitive, and solutions-focused approach with a strong sense of ownership and accountability

## Description

I am looking to speak with Cyber Threat Hunting Managers, looking for a new opportunity in Madrid.

Working closely with an external security provider and a small internal team, you will take ownership of detection effectiveness, hunting outcomes, and the continuous improvement of security monitoring capabilities across a global enterprise environment., * Lead the threat detection and threat hunting function, providing technical leadership, strategic direction, and operational oversight

 * Manage and coordinate internal resources and external security partners to deliver effective and consistent detection and hunting outcomes
 * Assess detection coverage and develop, optimise, and maintain high-quality detection rules to improve visibility and reduce false positives
 * Drive advanced, risk-based threat hunting activities to identify sophisticated and previously undetected threats
 * Integrate findings from purple team exercises into detection engineering and hunting programmes
 * Collaborate with Incident Response, Threat Intelligence, Vulnerability Management, and wider security teams to strengthen security operations and reduce risk
 * Continuously improve detection capabilities, helping to reduce attacker dwell time and enhance threat visibility across the organisation


## Related Videos

- [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)