> Markdown version of [/jobs/ext/2249596-cyber-threat-hunting-manager](https://www.wearedevelopers.com/jobs/ext/2249596-cyber-threat-hunting-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Threat Hunting Manager

- **Company:** Apollo Solutions Ltd
- **Location:** Madrid, Spain
- **Contract:** Permanent contract
- **Skills:** Cloud Computing Security, Intrusion Detection and Prevention, Performance Tuning, Security Information and Event Management, Cyber Threat Analysis, Cybercrime
- **Published:** August 26, 2026
- **Apply:** https://www.buscojobs.com.es/cyber-threat-hunting-manager-en-alcobendas-ID-368990971

## About the Role

Cyber Threat Hunting ManagerMadrid, Spain (Hybrid - 50% on site)We are looking for a Cyber Threat Hunting Manager to join a global organisation based in Madrid, and lead its threat detection and threat hunting capability across cloud and on-prem environments.Key responsibilities:Own and enhance threat detection rules, analytics, and coverage.Lead hands-on threat hunting activities using frameworks such as MITRE ATT&CK.Manage MSSP delivery while remaining heavily involved in technical execution.Partner with Cyber Threat Intelligence, Incident Response, GRC, and wider Cyber teams to improve detection outcomes.Translate attack simulations and threat intelligence into actionable detection improvements.Ideal background:5+ years in Threat Hunting, Threat Detection, Detection Engineering, or Security Operations.Strong experience building, tuning, and managing detection rules.Hands-on expertise with SIEM, XDR, EDR, and cloud security technologies.Good understanding of threat actors, TTPs, and
cyber attack methodologies.Self-starter with the ability to work independently in a highly visible role.Previous leadership experience is a plus, but this role remains predominantly hands-on.Note: candidates must be based in Madrid for this position, with a 50% on site requirement.Interested in learning more?

## Description

Cyber Threat Hunting ManagerMadrid, Spain (Hybrid - 50% on site)We are looking for a Cyber Threat Hunting Manager to join a global organisation based in Madrid, and lead its threat detection and threat hunting capability across cloud and on-prem environments.Key responsibilities:Own and enhance threat detection rules, analytics, and coverage.Lead hands-on threat hunting activities using frameworks such as MITRE ATT&CK.Manage MSSP delivery while remaining heavily involved in technical execution.Partner with Cyber Threat Intelligence, Incident Response, GRC, and wider Cyber teams to improve detection outcomes.Translate attack simulations and threat intelligence into actionable detection improvements.Ideal background:5+ years in Threat Hunting, Threat Detection, Detection Engineering, or Security Operations.Strong experience building, tuning, and managing detection rules.Hands-on expertise with SIEM, XDR, EDR, and cloud security technologies.Good understanding of threat actors, TTPs, and cyber attack methodologies.Self-starter with the ability to work independently in a highly visible role.Previous leadership experience is a plus, but this role remains predominantly hands-on.Note: candidates must be based in Madrid for this position, with a 50% on site requirement.Interested in learning more?Reach out directly at: ******


## Related Videos

- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime)
- [Practical performance tuning for Serverless Java on AWS](https://www.wearedevelopers.com/videos/2075-practical-performance-tuning-for-serverless-java-on-aws)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra)
- [Forecasting Cyber Attacks with Glassdoor Reviews - Lianne Potter](https://www.wearedevelopers.com/videos/2143-forecasting-cyber-attacks-with-glassdoor-reviews-lianne-potter)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Find a Developer Job: 12 Best Job Sites For Developers](https://www.wearedevelopers.com/magazine/165-find-a-developer-job-12-best-job-sites-for-developers)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [The Best Job Search Websites of 2025](https://www.wearedevelopers.com/magazine/368-the-best-job-search-websites-of-2025)
- [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs)