Senior Cybersecurity Threat Investigator

beBeeCybersecurity; Vitoria; A distancia; EUR 50.000 - 70.000; Jornada completa

Descripción de la vacante

A leading cybersecurity firm in Vitoria, Spain is seeking a skilled Cyber Threat Investigator to join their team. Responsibilities include identifying and mitigating cyber threats using various datasets and developing innovative processes. The candidates should have 7+ years of experience, strong analytical skills, and a Bachelor’s degree in Cybersecurity or equivalent. This role offers competitive benefits, including flexible work arrangements and professional development opportunities.

Servicios

23 days of Annual Leave

Health Care Plan

Flexible Compensation Program

Free access to training platforms

Work Life Balance measures

Formación

• 7+ years of experience as a Cyber Threat Hunter or in Incident Response.
• Deep knowledge of TTPs, attack frameworks, and advanced threat actors.
• Experience with security applications like data lake and SIEM tools.

Responsabilidades

• Proactively drive hunting and analysis against various datasets.
• Research threats and establish hunting workflows.
• Design and implement data mining techniques.

Conocimientos

Cyber Threat Hunting

Incident Response

Forensics

Data Analysis

Python

Educación

Bachelor's degree in Cybersecurity or related field

Herramientas

SIEM tools

Cloud platforms (AWS, GCP, Azure)

EDR platforms

Jupyter Notebooks

Descripción del empleo

Overview

We are looking for a highly skilled Cyber Threat Investigator to join our team.

At CyberProof, we are part of the UST Global family, a leading cyber security services and platform company. Our mission is to help customers react faster and smarter – and stay ahead of security threats by creating secure digital ecosystems.

CyberProof automates processes to detect and prioritize threats early and respond rapidly and decisively. We are seeking a talented Senior Cyber Threat Hunter who will be part of our growing managed services group, which monitors, investigates, and resolves security incidents, violations, and suspicious activities.

The successful candidate will be responsible for proactively identifying and mitigating cyber threats, adversary activity, and potential risks that evade traditional security defenses. Main tasks and accountabilities include :

• Proactively drive hunting and analysis against the available dataset from various sources including network, endpoint, and cloud environments to look for indicators of security breaches.
• Leverage internal and external resources to research threats, vulnerabilities, and intelligence on various attackers and attack techniques, to form hunting workflows and mitigation steps.
• Innovate new processes and workflows to deploy proactivity in all aspects to address complex threats and risks.
• Design and implement data mining techniques to extract meaningful insights from large data sets.
• Develop and maintain an understanding of the latest cybersecurity technologies, trends, and threats.

Qualifications/What we expect from you

We require proven experience of 7+ years as a Cyber Threat Hunter or Incident Response, including high skills in forensics and investigation of network, endpoint, and cloud logs. Deep knowledge and understanding of TTPs, attack frameworks (e.g., MITRE ATT&CK), and advanced threat actors is essential. Experience with security applications such as data lake, SIEM tools, and EDR platforms is also required.

• Deep knowledge of operating systems essentials including Linux / Unix and Windows.
• Experience analyzing network traffic, packet captures, and log data.
• Proven skills on Hunting on Cloud assets – AWS, GCP, Azure.
• Strong understanding of Python libraries commonly used in data science, such as Pandas, and MsticPY.
• Advantageous to have in-depth knowledge of Jupyter Notebooks and experience in utilizing them for data analysis, visualization, and prototyping.

We value critical thinking, problem-solving skills, and innovative ways of thinking. Excellent communication skills to explain technical findings to both technical and non-technical audiences are also essential. A Bachelor\'s degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent experience) is required, along with relevant certification (e.g., GIAC GCIH, GCFA, GREM, OSCP, CEH).

Benefits

• 23 days of Annual Leave plus additional discretionary days.
• Numerous benefits including Health Care Plan, teleworking compensation, Life and Accident Insurances.
• Flexible Compensation Program: Meals, Transport, online English lessons, Health Care Plan.
• Free access to several training platforms.
• Professional stability and career plans.
• Referral program.
• The option to choose between 12 or 14 payments per year.
• Real Work Life Balance measures (flexibility, remote work policy, compacted hours during summertime).