Cyber Threat Hunter - Proactive Defender & Learner

Capgemini; Málaga; On-site; EUR 45,000 - 65,000; Full time

Benefits offered by this job

Wellbeing HUB

Flexible Compensation Plan

Continuous Learning

Volunteer & Social Impact Programs

Buddy Program

Life & Accident Insurance

Job summary

Capgemini is seeking an experienced Cyber Threat Hunting Analyst to join a collaborative, global team. The role focuses on proactively hunting threats before incidents occur, using human intuition and MITRE ATT&CK-based hypotheses to identify stealthy attackers across endpoints, networks, and logs.

The ideal candidate has at least 2 years in threat hunting and a high level of English, as we work with international teams and clients.

Qualifications

• Minimum 2 years of experience in Cyber Threat Hunting.
• High level of English; work with international teams and clients.

Responsibilities

• Proactively conduct threat hunts to identify malicious activity bypassing detections.
• Develop hypothesis-driven hunts using MITRE ATT&CK framework.
• Analyse endpoint, network, authentication, and log telemetry for IOCs.
• Investigate credential misuse, lateral movement, persistence, and living-off-the-land techniques.
• Correlate data across SIEM, EDR/XDR, and network tools to validate threats.
• Leverage threat intelligence to identify emerging attacker behaviours.
• Support incident investigations with root cause analysis and actor reconstruction.
• Identify detection/logging gaps and improve alert coverage.
• Tune detections to reduce false positives and improve signal quality.
• Collaborate with SOC, incident responders, and infrastructure teams.

Skills

Threat hunting

English

Tools

SIEM

EDR/XDR

Threat intelligence

Job description

Capgemini is seeking an experienced Cyber Threat Hunting Analyst to join a collaborative, global team. The role focuses on proactively hunting threats before incidents occur, using human intuition and MITRE ATT&CK-based hypotheses to identify stealthy attackers across endpoints, networks, and logs.

The ideal candidate has at least 2 years in threat hunting and a high level of English, as we work with international teams and clients.