> Markdown version of [/jobs/ext/2665068-privileged-access-management-pam-engineer](https://www.wearedevelopers.com/jobs/ext/2665068-privileged-access-management-pam-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Privileged Access Management (Pam) Engineer

- **Company:** ProntoPro
- **Location:** Barcelona, Spain
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Software System Penetration Testing, Cloud Computing, Cyber Security, Linux, Intrusion Detection and Prevention, Python (Programming Language), Windows PowerShell, Red Team (Cyber Security), Scripting, Mitre Att&ck, Cyber Threat Analysis, Cybercrime, Purple Team (Cyber Security)
- **Published:** September 1, 2026
- **Apply:** https://www.recruit.net/job/privileged-access-management-pam-engineer-jobs/48D4E3A1FC07E3CD

## About the Role

* Minimum 5 years of experience in threat detection, threat hunting, detection engineering, red team, or penetration testing
 * Strong experience designing and tuning detection rules in enterprise environments
 * Advanced expertise in EDR/XDR platforms (e.G. Microsoft Defender / Microsoft XDR)
 * Solid knowledge of MITRE ATT&CK and adversary-driven detection
 * Hands-on understanding of advanced attack techniques across Windows, Linux, xhfqzwm and cloud
 * Strong scripting skills (Python, PowerShell, or similar)
 * Experience collaborating with red, purple, or penetration testing teams
 * Ability to translate offensive tradecraft into high-fidelity detections
 * OSEP and CARTE (or equivalent) certifications required
 * Fluent English;
experience in global, cross-functional teams preferred

## Description

The Senior Threat Detection Analyst is a cybersecurity expert responsible for advancing the organization's ability to detect sophisticated and emerging cyber threats across on-premises, cloud, and hybrid environments.
Obtenga más información sobre las tareas generales relacionadas con esta oportunidad a continuación, así como sobre las habilidades requeridas.

This role focuses on advanced detection engineering, proactive threat hunting, and adversary-driven detection, working closely with Threat Intelligence, Security Operations, Incident Response, and Red/Purple Teams. The position plays a strategic role in strengthening the security posture by improving detection maturity, closing visibility gaps, and reducing false positives through high-fidelity detection logic.
Tasks and Responsibilities

 * Design, implement, and continuously improve advanced threat detection capabilities
 * Develop, tune, and maintain high-quality detection rules and behavioral analytics
 * Conduct proactive, hypothesis-driven threat hunting activities
 * Translate adversary TTPs and attack techniques into actionable detections
 * Collaborate with Threat Intelligence, SOC, Incident Response, and Red/Purple Teams
 * Analyze complex attack chains, kill chains, and post-exploitation activity
 * Identify detection gaps and contribute to continuous detection maturity improvements
 * Reduce false positives while maintaining effective threat visibilitySupport purple team activities by leveraging red team and penetration test outputs


## Related Videos

- [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see)
- [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j)