> Markdown version of [/jobs/ext/2951079-principal-security-engineer-detection](https://www.wearedevelopers.com/jobs/ext/2951079-principal-security-engineer-detection). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Principal Security Engineer, Detection - **Company:** Jobtailor - **Location:** Madrid, Spain - **Contract:** Permanent contract - **Skills:** Cyber Security, Fraud Prevention and Detection, Intrusion Detection and Prevention, Python (Programming Language), Network Security, Security Information and Event Management, Software Engineering, Systems Integration, Mitre Att&ck, Cybercrime - **Published:** September 17, 2026 - **Apply:** https://www.buscojobs.com.es/principal-security-engineer-detection-en-madrid-ID-371817050 ## About the Role through implementation with a high degree of autonomyWork hands-on across security engineering, software development, research and automationRequirementsMinimum 3 years of professional experience in cybersecurity, software development, or a combination of both with a strong security focusDemonstrated experience developing software, automation or security toolingStrong Python development capabilityStrong understanding of security monitoring and detection engineeringExperience working with SIEM, security analytics and large-scale security telemetryExperience designing and developing integrations between security platforms and other systemsStrong understanding of networking and network security principlesAbility to translate security research into practical detections, automation or engineering solutionsStrong analytical and problem-solving abilityExcellent technical documentation skillsAbility to work independently with minimal supervisionDemonstrated initiative and willingness to research unfamiliar technologies and problemsAbility to manage multiple technical projects and prioritise work effectivelyRelevant degree, diploma or equivalent formal qualification preferredCandidates without a traditional academic background may be considered based on strong practical cybersecurity or software-development experienceIndustry certifications are not a primary requirementCore CompetenciesDemonstrates expertise in security operations, focusing on detection engineering, threat hunting and SOC automation. Proficient in developing security tooling and integrating security platforms to enhance monitoring and response capabilities.Highest-signal resume keywordsPython DevelopmentSecurity MonitoringDetection EngineeringSOC AutomationThreat HuntingATS Optimization KeywordsHard SkillsDetection EngineeringThreat HuntingSecurity Tooling DevelopmentAutomationSecurity AnalyticsSIEMNetworking PrinciplesAnalytical Problem-SolvingTechnical DocumentationIntegration DesignSoft SkillsIndependent WorkInitiativeProject ManagementPrioritizationIndustry KeywordsCybersecurityMITRE ATT&CKEmerging ThreatsVulnerabilitiesAttack TechniquesTools & TechnologiesSOAR PlaybooksFraud Monitoring PlatformsSecurity Telemetry #J-*****-Ljbffr ## Description Provide senior technical leadership across Security Operations, focusing on detection engineering, security research, SOC automation, threat hunting and fraud monitoring platform developmentDevelop and maintain security detections across the technology stackExecute hypothesis-driven threat hunts and translate attacker TTPs into practical detectionsMap capabilities to MITRE ATT&CK and identify coverage gapsLead development of the fraud and abuse monitoring platformDesign analytics, detection logic and integrations to identify abuse patterns within business applicationsDesign and develop SOC automationBuild automated enrichment, investigation and response workflows using SOAR playbooksConduct independent research into emerging threats, vulnerabilities and attack techniquesReproduce exploits in controlled environments to validate findingsProvide technical leadership and establish engineering standardsConduct quality reviews and act as a senior technical decision-makerOwn projects from concept through implementation with a high degree of autonomyWork hands-on across security engineering, software development, research and automationRequirementsMinimum 3 years of professional experience in cybersecurity, software development, or a combination of both with a strong security focusDemonstrated experience developing software, automation or security toolingStrong Python development capabilityStrong understanding of security monitoring and detection engineeringExperience working with SIEM, security analytics and large-scale security telemetryExperience designing and developing integrations between security platforms and other systemsStrong understanding of networking and network security principlesAbility to translate security research into practical detections, automation or engineering solutionsStrong analytical and problem-solving abilityExcellent technical documentation skillsAbility to work independently with minimal supervisionDemonstrated initiative and willingness to research unfamiliar technologies and problemsAbility to manage multiple technical projects and prioritise work effectivelyRelevant degree, diploma or equivalent formal qualification preferredCandidates without a traditional academic background may be considered based on strong practical cybersecurity or software-development experienceIndustry certifications are not a primary requirementCore CompetenciesDemonstrates expertise in security operations, focusing on detection engineering, threat hunting and SOC automation.Proficient in developing security tooling and integrating security platforms to enhance monitoring and response capabilities.Highest-signal resume keywordsPython DevelopmentSecurity MonitoringDetection EngineeringSOC AutomationThreat HuntingATS Optimization KeywordsHard SkillsDetection EngineeringThreat HuntingSecurity Tooling DevelopmentAutomationSecurity AnalyticsSIEMNetworking PrinciplesAnalytical Problem-SolvingTechnical DocumentationIntegration DesignSoft SkillsIndependent WorkInitiativeProject ManagementPrioritizationIndustry KeywordsCybersecurityMITRE ATT&CKEmerging ThreatsVulnerabilitiesAttack TechniquesTools & TechnologiesSOAR PlaybooksFraud Monitoring PlatformsSecurity Telemetry#J-*****-Ljbffr ## Related Videos - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)