MDR & Threat Intelligence Lead

Description

Job Summary: We are seeking an Infrastructure, MDR, and Threat Intelligence Lead to lead and strengthen cybersecurity capabilities within an advanced corporate environment. Key Highlights: 1. Be part of a highly valued and growing Cybersecurity team. 2. Lead the Blue Team and SOC with a focus on MDR and Threat Intelligence. 3. Participate in a culture of trust, innovation, and integrity. **Are you interested in joining a Cybersecurity team as Infrastructure, MDR, and Threat Intelligence Lead?** At Atalanta, we’re looking for you! We are a company specializing in cybersecurity and digital strategy, where quality is the core principle guiding our products and services. All projects are aligned with this direction, and our top priority is ensuring that team members feel genuinely appreciated and empowered to grow and develop professionally—TRULY. Our values are trust, innovation, integrity, commitment, and responsibility. We believe that together we can help transform enterprises to become digitally more secure and competitive—and we’d love it if, while reading this, you felt passionate about the challenge of joining our transformative vision. We aim to bring on board the person who will lead Atalanta’s Blue Team and SOC—a professional with extensive, demonstrable experience in MDR (Managed Detection \& Response) and Threat Intelligence teams, capable of leading and strengthening threat detection, analysis, and response capabilities within an advanced corporate environment. **What will you do daily?** * Manage the Incident Response or Blue Team department by coordinating technical teams. * Handle incident management, threat hunting, forensic analysis, and coordinate with business units and leadership during critical situations. * Design, deploy, and continuously improve detection and response architectures (EDR, NDR, SIEM, SOAR, TIP (Threat Intelligence Platform)). * Design and integrate automated workflows in N8N for enrichment, correlation, and TI/SOC process automation. * Design architectures for event ingestion, normalization, and correlation. * Design policies for firewalls, WAFs, IDS/IPS systems, and perimeter security solutions. * System hardening and security analysis in heterogeneous environments. **What knowledge will you need for this role?** * Threat Intelligence and Incident Management platforms. * Advanced proficiency in MISP, OpenCTI, and TheHive. * Solid experience with Graylog, Elastic/Elasticsearch, OpenSearch—including infrastructure-level management—or other market SIEMs such as Splunk, LogRhythm, QRadar, Microsoft Sentinel, etc. * Experience with Wazuh (architecture, rules, FIM modules, Syscollector, external integrations). * Extensive knowledge of NDR, behavior-based detection, and EDR usage (preferably CrowdStrike Falcon). * Strong expertise in Linux/Unix—both operational and advanced administration, scripting, and automation. * Networking knowledge, protocols, TLS, VPNs, and security architecture. * Advanced knowledge of AWS and Azure (security best practices, hardening, zero trust, segmentation, and advanced monitoring). * Cloud\-SOC integrations (detection, alerting, automation, log ingestion) **What do we expect from you?** * Real prior experience in similar projects as a team lead managing clients and solution vendors. * An analytical, solution-oriented mindset focused on continuous improvement. * Numerous strengths—and above all: proactivity, teamwork, and professionalism. * Passion for the cyber world—as strong as ours. Regarding your personal skills, what matters most to us is that you are responsible, able to work autonomously, and enthusiastic about teamwork. You must be able to communicate clearly with clients and prioritize their needs. If organization is one of your strongest pillars, it’s surely a match! **What do we offer?** **Permanent contract** **Full-time position. Flexible working hours** **(including lunch break).** **Hybrid work model (practically remote).** ------------------------------------------------ **Location: Madrid.** **Competitive salary based on experience and annual salary reviews.** **Flexible compensation.** **Private health insurance with Sanitas (direct benefit).** ---------------------------------------------------------- **Technical training tailored to the role and professional development.** And, most importantly, joining a highly collaborative and participative team with an outstanding work atmosphere. What do you say? Will you join the adventure?