> Markdown version of [/jobs/ext/2885636-cyber-threat-hunting-manager](https://www.wearedevelopers.com/jobs/ext/2885636-cyber-threat-hunting-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Threat Hunting Manager

- **Company:** Apollo Solutions Ltd
- **Location:** Ávila, Spain
- **Contract:** Permanent contract
- **Skills:** Cloud Computing Security, Intrusion Detection and Prevention, Performance Tuning, Security Information and Event Management, Cyber Threat Analysis, Cybercrime
- **Published:** September 13, 2026
- **Apply:** https://www.buscojobs.com.es/cyber-threat-hunting-manager-en-avila-ID-371678437

## About the Role

Cyber Threat Hunting ManagerMadrid, Spain (Hybrid - 50% on site)Desplácese hacia abajo para encontrar los detalles completos de la oferta de trabajo, incluyendo la experiencia requerida y las funciones y tareas asociadas.We are looking for a Cyber Threat Hunting Manager to join a global organisation based in Madrid, and lead its threat detection and threat hunting capability across cloud and on-prem environments.Key responsibilities:Own and enhance threat detection rules, analytics, and coverage.Lead hands-on threat hunting activities using frameworks such as MITRE ATT&CK.Manage MSSP delivery while remaining heavily involved in technical execution.Partner with Cyber Threat Intelligence, Incident Response, GRC, and wider Cyber teams to improve detection outcomes.Translate attack simulations and threat intelligence into actionable detection improvements.Ideal background:5+ years in Threat Hunting, Threat Detection, Detection Engineering, or Security Operations.Strong experience building,
tuning, and managing detection rules.Hands-on expertise with SIEM, XDR, EDR, and cloud security technologies.Good understanding of threat actors, TTPs, and cyber attack methodologies.Self-starter with the ability to work independently in a highly visible role.Previous leadership experience is a plus, but this role remains predominantly hands-on.Note: candidates must be based in Madrid for this position, with a 50% on site requirement.

## Description

Cyber Threat Hunting ManagerMadrid, Spain (Hybrid - 50% on site)Desplácese hacia abajo para encontrar los detalles completos de la oferta de trabajo, incluyendo la experiencia requerida y las funciones y tareas asociadas.We are looking for a Cyber Threat Hunting Manager to join a global organisation based in Madrid, and lead its threat detection and threat hunting capability across cloud and on-prem environments.Key responsibilities:Own and enhance threat detection rules, analytics, and coverage.Lead hands-on threat hunting activities using frameworks such as MITRE ATT&CK.Manage MSSP delivery while remaining heavily involved in technical execution.Partner with Cyber Threat Intelligence, Incident Response, GRC, and wider Cyber teams to improve detection outcomes.Translate attack simulations and threat intelligence into actionable detection improvements.Ideal background:5+ years in Threat Hunting, Threat Detection, Detection Engineering, or Security Operations.Strong experience building, tuning, and managing detection rules.Hands-on expertise with SIEM, XDR, EDR, and cloud security technologies.Good understanding of threat actors, TTPs, and cyber attack methodologies.Self-starter with the ability to work independently in a highly visible role.Previous leadership experience is a plus, but this role remains predominantly hands-on.Note: candidates must be based in Madrid for this position, with a 50% on site requirement.xqysrnhInterested in learning more?Reach out directly at


## Related Videos

- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime)
- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)
- [Practical performance tuning for Serverless Java on AWS](https://www.wearedevelopers.com/videos/2075-practical-performance-tuning-for-serverless-java-on-aws)
- [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra)
- [Forecasting Cyber Attacks with Glassdoor Reviews - Lianne Potter](https://www.wearedevelopers.com/videos/2143-forecasting-cyber-attacks-with-glassdoor-reviews-lianne-potter)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Spanish Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/353-spanish-business-culture-and-etiquette)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Find a Developer Job: 12 Best Job Sites For Developers](https://www.wearedevelopers.com/magazine/165-find-a-developer-job-12-best-job-sites-for-developers)
- [The Best Job Search Websites of 2025](https://www.wearedevelopers.com/magazine/368-the-best-job-search-websites-of-2025)
- [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs)