> Markdown version of [/jobs/ext/2856109-principal-security-detection-engineer](https://www.wearedevelopers.com/jobs/ext/2856109-principal-security-detection-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Principal Security & Detection Engineer - **Company:** Integrity360 - **Location:** Valencia, Spain - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Business Software, Cyber Security, Fraud Prevention and Detection, Integrated Development Environments, Intrusion Detection and Prevention, Python (Programming Language), Network Security, Security Information and Event Management, Software Engineering, SQL Databases, Systems Integration, Computer Network Technologies, Mitre Att&ck, Cybercrime, Security Orchestration, Automation & Response, Vulnerability Analysis - **Published:** September 12, 2026 - **Apply:** https://www.adzuna.es/contact-us.html ## About the Role + Minimum 3 years of professional experience in cybersecurity, software development, or a combination of both with a strong security focus. + Demonstrated experience developing software, automation or security tooling. + Strong Python development capability. + Strong understanding of security monitoring and detection engineering. + Experience working with SIEM, security analytics and large-scale security telemetry. + Experience designing and developing integrations between security platforms and other systems. + Strong understanding of networking and network security principles. + Ability to translate security research into practical detections, automation or engineering solutions. + Strong analytical and problem-solving ability. + Excellent technical documentation skills. + Ability to work independently with minimal supervision. + Demonstrated initiative and a willingness to research unfamiliar technologies and problems. + Ability to manage multiple technical projects and prioritise work effectively. Certifications/Qualifications + A relevant degree, diploma or equivalent formal qualification is preferred. + However, demonstrated professional experience and technical capability will be considered equally important. Candidates who can demonstrate strong practical cybersecurity or software-development experience without a traditional academic background will be considered. + Industry certifications are not a primary requirement for this position. Demonstrated technical ability, initiative, engineering capability and practical experience are more important. ## Description As a Principal Security & Detection Engineer, you will provide senior technical leadership across our Security Operations capability, with a particular focus on detection engineering, security research, SOC automation, threat hunting, and the continued development of our fraud monitoring platform. This is a highly technical role for an individual who is comfortable operating with a high degree of autonomy and taking ownership of complex technical problems from concept through to implementation. You will operate as a senior member of the technical leadership team, helping define the direction of our detection and research capabilities while continuing to work hands-on across security engineering, software development, research and automation. The ideal candidate is equally comfortable investigating how a new attack technique works, reproducing an exploit in a controlled environment, writing software to automate a security process, developing a new detection, and turning that work into a repeatable capability for the wider SOC. This is not a traditional SOC monitoring or incident-response role. The focus is on building and improving the technology, methodologies and intelligence that enable the SOC to operate more effectively., + Detection Engineering & Threat Hunting o Develop and maintain security detections across the technology stack. o Execute hypothesis-driven threat hunts and translate attacker TTPs into practical detections. o Map capabilities to MITRE ATT&CK and identify coverage gaps. + Fraud Monitoring Platform Development o Lead the development of the fraud and abuse monitoring platform. o Design analytics, detection logic, and integrations to identify abuse patterns within business applications. + Security Automation & SOAR o Design and develop automation to improve SOC efficiency. o Build automated enrichment, investigation, and response workflows (SOAR playbooks). + Security Research & Development o Conduct independent research into emerging threats, vulnerabilities, and attack techniques. o Reproduce exploits in a controlled environment to validate findings. Technical Leadership & Autonomy + Provide technical leadership and establish standards for engineering activities. + Conduct quality reviews and act as a senior technical decision-maker. + Operate with a high degree of autonomy, owning projects from concept to implementation. Technical Environment The successful candidate should be comfortable working across a broad security and software engineering environment, including: + SIEM + EDR/XDR technologies + SOAR and security automation + Threat hunting + Vulnerability research and exploitation + Network security and networking technologies + Python + SQL + APIs and system integrations ## Related Videos - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [Fault Tolerance and Consistency at Scale: Harnessing the Power of Distributed SQL Databases](https://www.wearedevelopers.com/videos/1146-fault-tolerance-and-consistency-at-scale-harnessing-the-power-of-distributed-sql-databases) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Fault Tolerance and Consistency at Scale: Harnessing the Power of Distributed SQL Databases](https://www.wearedevelopers.com/videos/1520-fault-tolerance-and-consistency-at-scale-harnessing-the-power-of-distributed-sql-databases) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)