Associate Director DDIT ISC Detection & Response

Location: Barcelona, Spain; hybrid

Annual base salary: €57,900–€107,500, with potential performance-based bonus.

Company

hirify.global operates a globally integrated Cyber Security Operations Center focused on protecting the organization from evolving cyber threats.

What you will do

• Shape global threat detection and response strategy, operational excellence, innovation, and advanced cyber defense capabilities.
• Drive AI adoption, intelligent automation, security orchestration, and emerging technology integration.
• Oversee security monitoring, threat detection, triage, detection engineering, and security controls across the IT ecosystem.
• Lead complex investigations and incident response, including forensic analysis, containment, stakeholder communication, remediation, and post-incident recommendations.
• Improve investigation methodologies, response playbooks, detection coverage, and cyber resilience against evolving attacker techniques.
• Provide technical mentorship and influence best practices across global threat detection and response teams.

Requirements

• 8+ years of cybersecurity experience, including 5+ years in Security Operations, Threat Detection, Incident Response, and Threat Hunting.
• Experience leading complex security investigations and cross-functional initiatives in large enterprise environments.
• Demonstrated success improving detection capabilities, incident response processes, operational efficiency, and investigation quality.
• Experience mentoring security analysts and influencing stakeholders without direct people-management responsibility.
• Hands-on expertise with SIEM, EDR/XDR, Detection Engineering, Security Telemetry, and Incident Response tools, including Microsoft Sentinel, Microsoft Defender, and Splunk.
• Knowledge of cloud security investigations across Azure and/or AWS, including identity, endpoint, and cloud telemetry analysis.
• Experience with MITRE ATT&CK, threat intelligence, and attacker behavior analysis.
• Proficiency in security automation, SOAR, KQL, SPL, Python scripting, and AI-enabled SOC use cases.
• Bachelor’s degree or equivalent experience.

Nice to have

• CISSP, GCIH, GCFA, or cloud security certifications.

Culture & Benefits

• Hybrid and flexible working options where available.
• Insurance, retirement plans, wellbeing resources, and global recognition programs.
• At least 14 weeks of paid parental leave.
• Performance-based bonus eligibility and periodically reviewed compensation.
• Inclusive, diverse, and equitable working environment.