> Markdown version of [/jobs/ext/3013700-soc-engineer-threat-detection-incident-response](https://www.wearedevelopers.com/jobs/ext/3013700-soc-engineer-threat-detection-incident-response). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Soc Engineer: Threat Detection & Incident Response

- **Company:** Thales
- **Location:** Madrid, Spain
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Security Information and Event Management, Mitre Att&ck, Microsoft Sentinel, Blue Team (Cyber Security)
- **Published:** September 20, 2026
- **Apply:** https://www.buscojobs.com.es/soc-engineer-threat-detection-incident-response-en-madrid-ID-372012672

## About the Role

You will contribute to advanced monitoring and incident response, leveraging automation, threat intelligence and analytics to protect the organization against evolving threats.The role requires proven experience in cybersecurity operations or SOC/Blue Team, knowledge of SIEM/XDR/SOAR, MITRE ATT&CK, and familiarity with Google SecOps, Microsoft Sentinel, and other providers.
#J-*****-Ljbffr

## Description

Thales in Spain is seeking a cybersecurity operations professional to join our Madrid team.You will contribute to advanced monitoring and incident response, leveraging automation, threat intelligence and analytics to protect the organization against evolving threats.The role requires proven experience in cybersecurity operations or SOC/Blue Team, knowledge of SIEM/XDR/SOAR, MITRE ATT&CK, and familiarity with Google SecOps, Microsoft Sentinel, and other providers.#J-*****-Ljbffr


## Related Videos

- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Better Together: Leveraging Your Observability Tools as a SIEM](https://www.wearedevelopers.com/videos/2118-better-together-leveraging-your-observability-tools-as-a-siem)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [Getting under the skin: The Social Engineering techniques](https://www.wearedevelopers.com/videos/38-getting-under-the-skin-the-social-engineering-techniques)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)