NCC Group

Global cyber security and resilience provider

MXDR Engineer

Security Operations & Incident ResponseUpdated on Nov 13

Full-timeMadrid, SpainNo salary listedHybrid

About the Job

Requirements

Practical knowledge of cybersecurity principles and MXDR service delivery.
Experience with one or more security information and event management (SIEM), endpoint detection and response (EDR), or related security technologies.
Experience implementing, configuring, supporting, or maintaining technical solutions in customer or enterprise environments.
Ability to troubleshoot technical issues, analyse relevant data, and identify appropriate resolutions within established procedures and standards.
Understanding of logging, security monitoring, endpoint security, integrations, and supporting technical infrastructure.
Ability to work independently against defined objectives while recognising when an issue requires escalation.
Effective written and verbal communication skills, including the ability to communicate technical information clearly to customers, operational teams, and other stakeholders.
Commitment to maintaining and expanding technical knowledge across the MXDR technology portfolio.
Proficiency in written and spoken English.

Responsibilities

Implement and configure MXDR solutions for customers in accordance with agreed designs, standards, and implementation procedures.
Provide ongoing technical support, health monitoring, and maintenance for MXDR technologies across client environments.
Diagnose and resolve difficult but conventional technical and service issues using established processes, documentation, and available technical knowledge.
Escalate complex, non-standard, high-impact, or cross-functional issues to the appropriate senior engineer, technical lead, or manager.
Work independently within multidisciplinary project and service teams to meet defined objectives and contribute to agreed customer deliverables.
Support the SOC, Service Delivery Management, Project Management, and other Engineering teams by providing relevant technical information and assisting with resolution of operational issues.
Analyse technical information, logs, alerts, platform behaviour, and other relevant data to support troubleshooting and service delivery.
Maintain accurate technical documentation, implementation records, support information, and operational handover materials.
Contribute to the improvement of MXDR services by identifying opportunities for automation, process improvement, technical enhancement, and knowledge sharing.
Implement approved service improvements, automation, and platform changes within established technical and change-management frameworks.
Develop knowledge across relevant MXDR technologies and undertake training in additional technologies, systems, and skills in support of business needs and continuous development.
Participate in an out-of-hours rota as required.

Desired Qualifications

Relevant industry-recognised cybersecurity or technology certifications are beneficial; examples include relevant Microsoft, Splunk, CrowdStrike, SentinelOne, or CompTIA certifications.
Equivalent practical experience and demonstrable technical capability will also be considered.

As an MXDR Engineer, you will implement, support, health monitor and maintain MXDR technologies across client environments.

Deploying, configuring and maintaining MXDR solutions is a core responsibility of the role. You will work with customers, colleagues and stakeholders to understand defined technical requirements and deliver solutions in accordance with established architectures, standards, processes and procedures.

You will provide technical support across the lifecycle of MXDR services, including troubleshooting service issues, maintaining platform health, supporting operational teams and contributing to service enhancements. You will work independently to meet defined objectives within an established framework, seeking guidance or escalating where issues are complex, non-standard or outside agreed authority.

The role requires practical cybersecurity knowledge, professional communication skills and a commitment to continuous learning. Experience with SIEM and EDR technologies is important. The MXDR technology portfolio may include Microsoft Sentinel, Splunk, CrowdStrike, SentinelOne, Carbon Black and other relevant platforms.

As this is a customer-facing role within a global organisation, you should be comfortable engaging with customers and colleagues in both digital and in-person environments. Proficiency in written and spoken English is required.

Implement and configure MXDR solutions for customers in accordance with agreed designs, standards and implementation procedures.
Provide ongoing technical support, health monitoring and maintenance for MXDR technologies across client environments.
Diagnose and resolve difficult but conventional technical and service issues using established processes, documentation and available technical knowledge.
Escalate complex, non-standard, high-impact or cross-functional issues to the appropriate senior engineer, technical lead or manager.
Work independently within multidisciplinary project and service teams to meet defined objectives and contribute to agreed customer deliverables.
Support the SOC, Service Delivery Management, Project Management and other Engineering teams by providing relevant technical information and assisting with the resolution of operational issues.
Analyse technical information, logs, alerts, platform behaviour and other relevant data to support troubleshooting and service delivery.
Maintain accurate technical documentation, implementation records, support information and operational handover materials.
Contribute to the improvement of MXDR services by identifying opportunities for automation, process improvement, technical enhancement and knowledge sharing.
Implement approved service improvements, automation and platform changes within established technical and change-management frameworks.
Develop knowledge across relevant MXDR technologies and undertake training in additional technologies, systems and skills in support of business needs and continuous development.
Participate in an out-of-hours (OOH) rota as required.
The responsibilities outlined in this job description are not exhaustive. The role holder may be required to undertake other duties reasonably requested by management from time to time, commensurate with the level of the role.

Practical knowledge of cybersecurity principles and MXDR service delivery.
Experience with one or more SIEM, EDR or related security technologies.
Experience implementing, configuring, supporting or maintaining technical solutions in customer or enterprise environments.
Ability to troubleshoot technical issues, analyse relevant data and identify appropriate resolutions within established procedures and standards.
Understanding of logging, security monitoring, endpoint security, integrations and supporting technical infrastructure.
Ability to work independently against defined objectives while recognising when an issue requires escalation.
Effective written and verbal communication skills.
Ability to communicate technical information clearly to customers, operational teams and other stakeholders.
Effective collaboration, organisation and problem-solving skills.
Commitment to maintaining and expanding technical knowledge across the MXDR technology portfolio.

Certifications:

Relevant industry-recognised cybersecurity or technology certifications are beneficial. Examples may include relevant Microsoft, Splunk, CrowdStrike, SentinelOne or CompTIA certifications.
Equivalent practical experience and demonstrable technical capability will also be considered.

About the Company

NCC Group

Global cyber security and resilience provider

NCC Group provides cyber security and resilience services to organizations and governments around the world. It helps protect digital systems by offering a range of capabilities such as security testing, risk assessment, and resilience planning, backed by a global team of experts and supported by technology-enabled tools. The company’s approach combines human expertise with technical solutions to identify vulnerabilities, assess risk, and implement concrete steps to improve security and continuity. What sets NCC Group apart is its large, worldwide team and its emphasis on practical, end-to-end cyber resilience—working with clients from assessment through to implementation and ongoing assurance. The goal is to create a more secure digital future by helping customers manage cyber risk, reduce threats, and maintain business continuity at scale.

Company size: 1,001-5,000
Company stage: IPO
Headquarters: Manchester, United Kingdom
Founded: 1999

Recently Posted Jobs

Explore more opportunities at NCC Group

See more jobs