Cyber Threat Hunting

Capgemini; Málaga; On-site; EUR 48,000 - 72,000; Full time

Benefits offered by this job

Wellbeing HUB

Flexible Compensation Plan

Continuous Learning

Volunteer & Social Impact Programs

Buddy Program

Life & Accident Insurance

Job summary

Capgemini in Málaga, Spain, seeks an experienced Cyber Threat Hunting Analyst to proactively hunt for signs of attackers before incidents occur. You will analyze telemetry across endpoints, networks, and logs, build hypothesis-driven hunts, and collaborate with SOC and infrastructure teams to strengthen security.

English proficiency is essential for international collaboration. The role emphasizes proactive threat hunting, detection tuning, and cross-tool correlation within a global security

Qualifications

• Minimum 2 years of experience in Cyber Threat Hunting.
• High level of English; ability to communicate with international teams.

Responsibilities

• Proactively conduct threat hunts to identify malicious activity that bypassed automated detections.
• Develop hypothesis-driven hunts using MITRE ATT&CK framework.
• Analyse endpoint, network, and log telemetry to detect indicators of compromise and anomalies.
• Investigate credential misuse, lateral movement, persistence, and living-off-the-land techniques.
• Correlate data across SIEM, EDR/XDR, and network tools to validate threats and scope impact.
• Leverage threat intelligence and internal telemetry to identify emerging attacker behaviors.
• Support incident investigations with root-cause analysis and attacker activity reconstruction.
• Identify detection/logging gaps and work with detection engineering to improve coverage.
• Tune detections to reduce false positives and improve signal quality.
• Collaborate with SOC, incident responders, and infrastructure teams to improve security posture.

Skills

Cyber Threat Hunting

English

Job description

Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you’d like, where you’ll be supported and inspired by a collaborative community of colleagues around the world, and where you’ll be able to reimagine what’s possible.

Join us and help the world’s leading organizations unlock the value of technology and build a more sustainable, more inclusive world.

Capgemini is currently seeking an experienced Cyber Threat Hunting Analyst

A dedicated and detail-oriented Threat Hunting Analyst, specializing in proactively looking for signs of attackers inside an organization’s environment—before alerts, incidents, or damage occur. Unlike traditional security roles that react to alarms, threat hunters assume compromise and actively search for hidden or stealthy threats.

A Threat Hunter must focus on searching for malicious behaviour that automated tools may miss, using human intuition, context, and hypotheses rather than waiting for alerts, in order to find advanced, persistent, and stealthy attackers.

• Proactively conduct threat hunts to identify malicious activity that bypassed automated detections, reducing attacker dwell time
• Develop hypothesis-driven hunts based on adversary tactics, techniques, and procedures (TTPs) using the MITRE ATT&CK framework
• Analyse endpoint, network, authentication, and log telemetry to detect indicators of compromise (IOCs) and anomalous behaviour.
• Investigate suspicious activity involving credential misuse, lateral movement, persistence mechanisms, and living-off-the-land techniques
• Correlate data across SIEM, EDR/XDR, and network security tools to validate potential threats and scope impact
• Leverage threat intelligence reports and internal telemetry to identify emerging attacker behaviours relevant to the environment
• Support incident investigations by providing root cause analysis and attacker activity reconstruction
• Identify detection and logging gaps and collaborate with detection engineering teams to improve alert coverage and visibility
• Tune existing security detections to reduce false positives and improve signal quality
• Collaborate with SOC analysts, incident responders, and infrastructure teams to improve overall security posture.

What we’re looking for:

• Minimum 2 years of experience as a Cyber Threat Hunting.
• High level of English. We also work with international teams and clients.

What will you love about working here?

• Wellbeing HUB – A full program designed to support your physical and mental wellbeing, including initiatives such as Wellhub.
• Flexible Compensation Plan – Choose benefits that best fit your needs: medical insurance, transportation, training, meal card or meal allowance, childcare vouchers, and more.
• Continuous Learning – Access to Mylearning, Capgemini University, Digital Campuses, and our Professional Communities. You’ll also have learning platforms like Coursera, Udemy, Pluralsight, Harvard Manager Mentor, and Education First for language training (English, French, German…), among others!
• Volunteer & Social Impact Programs – Get involved through our Sustainability, Inclusion, and Equality Groups.
• Buddy Program – Receive personalized support to help you settle in during your first months.
• Life & Accident Insurance – Additional protection and peace of mind.

Capgemini is a global leader in partnering with companies to transform and manage their business by harnessing the power of technology. The Group is guided everyday by its purpose of unleashing human energy through technology for an inclusive and sustainable future. It is a responsible and diverse organization of over 360,000 team members in more than 50 countries. With its strong 55-year heritage and deep industry expertise, Capgemini is trusted by its clients to address the entire breadth of their business needs, from strategy and design to operations, fuelled by the fast evolving and innovative world of cloud, data, AI, connectivity, software, digital engineering and platforms. The Group reported in 2022 global revenues of €22 billion.