MXDR Engineer

NCC Group is hiring an MXDR Engineer in Madrid, Spain. Level rates it ; you can apply on Level.

Level's read on this job

Little AI ●○○○ is how Level rates this role: aI is not part of the work.
Tools and skills the posting cites include Microsoft Sentinel, Splunk and Crowdstrike.
Level files it as a mid-level role.
Level lists 86 other open roles at NCC Group.
The role was posted in the last few days.

AI in this role

Implementing and maintaining MXDR security technologies and solutions across client environments.

microsoft-sentinelsplunkcrowdstrikesentinelonecarbon-black

siemedrcybersecurityincident-responsetroubleshooting

As an MXDR Engineer, you will implement, support, health monitor and maintain MXDR technologies across client environments.

Deploying, configuring and maintaining MXDR solutions is a core responsibility of the role. You will work with customers, colleagues and stakeholders to understand defined technical requirements and deliver solutions in accordance with established architectures, standards, processes and procedures.

You will provide technical support across the lifecycle of MXDR services, including troubleshooting service issues, maintaining platform health, supporting operational teams and contributing to service enhancements. You will work independently to meet defined objectives within an established framework, seeking guidance or escalating where issues are complex, non-standard or outside agreed authority.

The role requires practical cybersecurity knowledge, professional communication skills and a commitment to continuous learning. Experience with SIEM and EDR technologies is important. The MXDR technology portfolio may include Microsoft Sentinel, Splunk, CrowdStrike, SentinelOne, Carbon Black and other relevant platforms.

As this is a customer-facing role within a global organisation, you should be comfortable engaging with customers and colleagues in both digital and in-person environments. Proficiency in written and spoken English is required.

Key Responsibilities

Implement and configure MXDR solutions for customers in accordance with agreed designs, standards and implementation procedures.
Provide ongoing technical support, health monitoring and maintenance for MXDR technologies across client environments.
Diagnose and resolve difficult but conventional technical and service issues using established processes, documentation and available technical knowledge.
Escalate complex, non-standard, high-impact or cross-functional issues to the appropriate senior engineer, technical lead or manager.
Work independently within multidisciplinary project and service teams to meet defined objectives and contribute to agreed customer deliverables.
Support the SOC, Service Delivery Management, Project Management and other Engineering teams by providing relevant technical information and assisting with the resolution of operational issues.
Analyse technical information, logs, alerts, platform behaviour and other relevant data to support troubleshooting and service delivery.
Maintain accurate technical documentation, implementation records, support information and operational handover materials.
Contribute to the improvement of MXDR services by identifying opportunities for automation, process improvement, technical enhancement and knowledge sharing.
Implement approved service improvements, automation and platform changes within established technical and change-management frameworks.
Develop knowledge across relevant MXDR technologies and undertake training in additional technologies, systems and skills in support of business needs and continuous development.
Participate in an out-of-hours (OOH) rota as required.
The responsibilities outlined in this job description are not exhaustive. The role holder may be required to undertake other duties reasonably requested by management from time to time, commensurate with the level of the role.

Skills, Knowledge and Expertise

Practical knowledge of cybersecurity principles and MXDR service delivery.
Experience with one or more SIEM, EDR or related security technologies.
Experience implementing, configuring, supporting or maintaining technical solutions in customer or enterprise environments.
Ability to troubleshoot technical issues, analyse relevant data and identify appropriate resolutions within established procedures and standards.
Understanding of logging, security monitoring, endpoint security, integrations and supporting technical infrastructure.
Ability to work independently against defined objectives while recognising when an issue requires escalation.
Effective written and verbal communication skills.
Ability to communicate technical information clearly to customers, operational teams and other stakeholders.
Effective collaboration, organisation and problem-solving skills.
Commitment to maintaining and expanding technical knowledge across the MXDR technology portfolio.

Certifications:

Relevant industry-recognised cybersecurity or technology certifications are beneficial. Examples may include relevant Microsoft, Splunk, CrowdStrike, SentinelOne or CompTIA certifications.
Equivalent practical experience and demonstrable technical capability will also be considered.

How we rate this

MXDR Engineer at NCC Group rates 0 out of 100 for how much of the daily work is AI. That makes it Little AI (AI Level 1 of 4). The level is about AI in the job, not seniority.

Classification

Little AI. AI is not part of the work.

●●●● Builds AI80 to 100
●●●○ Works on AI60 to 79
●●○○ Uses AI40 to 59
●○○○ Little AI0 to 39

Levels come from how often the tools, models and workflows of the role are named in the posting itself. Open the description and count.

Key facts

MXDR Engineer is an open job at NCC Group.
Level rates this role AI Level 1 of 4: Little AI.
The role is based in Madrid, Community of Madrid.
The job was posted on October 19, 2026.
Seniority: mid.
Applications are handled by NCC Group. Apply on NCC Group

Prepare for this job

Built from this posting and from similar jobs on Level.

Skills and AI tools this role asks for

SiemEdrCybersecurityIncident ResponseTroubleshootingMicrosoft SentinelSplunkCrowdstrike

Questions you could be asked

Tell me about a project where siem was part of your work. What did you do?
Tell me about a project where edr was part of your work. What did you do?
Tell me about a project where cybersecurity was part of your work. What did you do?
Tell me about a project where incident response was part of your work. What did you do?
Tell me about a project where troubleshooting was part of your work. What did you do?

Adapt your resume

List these exact terms on your resume: Siem, Edr, Cybersecurity, Incident Response, and Troubleshooting. An applicant tracking system matches the wording, not the idea.
Attach one line of real, concrete experience to at least one of them. A tool named with nothing behind it rarely survives a human read.

Want an expert to read your CV for this job?

Free. Send your CV and the role you want next. We reply by email within 2 to 4 business days.

Get a free CV review Check your resume with the ATS resume checker