> Markdown version of [/jobs/ext/2949171-threat-detection-hunting-lead-madrid-hybrid](https://www.wearedevelopers.com/jobs/ext/2949171-threat-detection-hunting-lead-madrid-hybrid). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Threat Detection & Hunting Lead - Madrid (Hybrid)

- **Company:** Apollo Solutions Ltd
- **Location:** Madrid, Spain
- **Contract:** Permanent contract
- **Skills:** Intrusion Detection and Prevention, Security Information and Event Management, Mitre Att&ck, Cyber Threat Analysis, Cybercrime
- **Published:** September 16, 2026
- **Apply:** https://www.buscojobs.com.es/threat-detection-hunting-lead-madrid-hybrid-en-madrid-ID-372155524

## About the Role

The role involves technical leadership, coordinating with internal teams and external security partners, and driving continuous improvement of detection capabilities.The successful candidate will have 5+ years in security monitoring or threat hunting, hands-on experience with SIEM/XDR/EDR, and strong knowledge of MITRE ATT&CK, Cyber Kill Chain, and the Diamond
#J-*****-Ljbffr

## Description

Apollo Solutions is seeking a Cyber Threat Hunting Manager to lead threat detection and hunting across a global enterprise in Madrid.The role involves technical leadership, coordinating with internal teams and external security partners, and driving continuous improvement of detection capabilities.The successful candidate will have 5+ years in security monitoring or threat hunting, hands-on experience with SIEM/XDR/EDR, and strong knowledge of MITRE ATT&CK, Cyber Kill Chain, and the Diamond#J-*****-Ljbffr


## Related Videos

- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime)
- [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra)
- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)
- [Forecasting Cyber Attacks with Glassdoor Reviews - Lianne Potter](https://www.wearedevelopers.com/videos/2143-forecasting-cyber-attacks-with-glassdoor-reviews-lianne-potter)
- [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)