> Markdown version of [/jobs/ext/1937535-cyber-threat-detection-response-ops-lead](https://www.wearedevelopers.com/jobs/ext/1937535-cyber-threat-detection-response-ops-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Threat Detection & Response Ops Lead

- **Company:** Ernst & Young Global Limited
- **Location:** Madrid, Spain
- **Contract:** Permanent contract
- **Skills:** Intrusion Detection and Prevention, Security Information and Event Management, Cyber Threat Analysis, Microsoft Sentinel, Splunk
- **Published:** August 5, 2026
- **Apply:** https://www.buscojobs.com.es/cyber-threat-detection-response-ops-lead-en-madrid-ID-365577406

## About the Role

Ideal candidates possess 8-10 years of experience with SIEM technologies like Microsoft Sentinel and Splunk, alongside strong project management skills.
Enjoy a flexible hybrid working environment with ample career development opportunities.
#J-*****-Ljbffr

## Description

Join EY as a Threat Detection & Response Operations Manager in Málaga, Spain.You will lead operations for TDR engagements, focusing on incident investigation and ensuring client satisfaction through effective SOC management and security tools.You'll provide guidance to junior team members while monitoring and improving security practices.Ideal candidates possess 8-10 years of experience with SIEM technologies like Microsoft Sentinel and Splunk, alongside strong project management skills.Enjoy a flexible hybrid working environment with ample career development opportunities.#J-*****-Ljbffr


## Related Videos

- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra)

## Related Articles

- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [Spanish Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/353-spanish-business-culture-and-etiquette)