> Markdown version of [/jobs/ext/2285589-threat-detection-hunting-lead-hybrid-madrid](https://www.wearedevelopers.com/jobs/ext/2285589-threat-detection-hunting-lead-hybrid-madrid). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Threat Detection & Hunting Lead - Hybrid Madrid

- **Company:** Apollo Solutions Ltd
- **Location:** Madrid, Spain
- **Salary:** €60,000.0 - €90,000.0
- **Contract:** Permanent contract
- **Skills:** Intrusion Detection and Prevention, Security Information and Event Management, Mitre Att&ck
- **Published:** August 29, 2026
- **Apply:** https://www.jobleads.com/es/job/e2d793adc2f4cb61b29b00a71e8a2bb3b

## About the Role

Ideal candidates bring 5+ years in security monitoring and a strong grasp of MITRE ATT&CK, Cyber Kill Chain, and related frameworks, plus hands-on SIEM/XDR/EDR experience. This role emphasizes ownership and cross-team coordination.

## Description

Apollo Solutions in Madrid is seeking a Threat Detection Manager to lead detection and threat hunting efforts within a hybrid setup. You will oversee detection strategy, collaborate with security partners, and drive improvements across a global enterprise environment.


## Related Videos

- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Generative UIs and AI Assistants for Your Angular Applications](https://www.wearedevelopers.com/videos/100074-generative-uis-and-ai-assistants-for-your-angular-applications)
- [Hacking Kubernetes: Live Demo Marathon](https://www.wearedevelopers.com/videos/488-hacking-kubernetes-live-demo-marathon)
- [Better Together: Leveraging Your Observability Tools as a SIEM](https://www.wearedevelopers.com/videos/2118-better-together-leveraging-your-observability-tools-as-a-siem)
- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)
- [The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most](https://www.wearedevelopers.com/videos/100254-the-developer-workstation-blind-spot-why-your-security-stack-can-t-see-what-matters-most)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 164: AI Agents, AI Blindspots and MCP security problems](https://www.wearedevelopers.com/magazine/578-dev-digest-164-ai-agents-ai-blindspots-and-mcp-security-problems)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)