> Markdown version of [/jobs/ext/3984833-threat-hunter-proactive-cyber-defender-in-madrid](https://www.wearedevelopers.com/jobs/ext/3984833-threat-hunter-proactive-cyber-defender-in-madrid). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Threat Hunter: Proactive Cyber Defender In Madrid

- **Company:** NCC Group
- **Location:** Madrid, Spain
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Microsoft Azure, Cloud Computing, Cyber Security, Statistical Hypothesis Testing, Intrusion Detection and Prevention, Python (Programming Language), Windows PowerShell, Kusto Query Language, Security Information and Event Management, Toolchain, Mitre Att&ck, Cybercrime
- **Published:** October 28, 2026
- **Apply:** https://www.buscojobs.com.es/threat-hunter-proactive-cyber-defender-in-madrid-en-madrid-ID-378177140

## About the Role

Ideal candidates have hands-on threat hunting experience, strong MITRE ATT&CK knowledge, and proficiency in Python, KQL and PowerShell, with cloud experience across AWS/Azure/GCP and SIEM/EDR toolchains.
#J-*****-Ljbffr

## Description

NCC Group is seeking a highly capable Threat Hunter in Madrid to proactively identify sophisticated adversaries using hypothesis-driven analysis and automation. You will work across Security Operations, Detection Engineering and Engineering to mitigate risks and strengthen detections.Ideal candidates have hands-on threat hunting experience, strong MITRE ATT&CK knowledge, and proficiency in Python, KQL and PowerShell, with cloud experience across AWS/Azure/GCP and SIEM/EDR toolchains.#J-*****-Ljbffr