Senior Threat Hunter

JR Spain; Lérida; Presencial; EUR 50.000 - 75.000; Jornada completa

Descripción de la vacante

Una empresa de ciberseguridad busca un Senior Threat Hunter para unirse a su equipo. Este rol implica la identificación proactiva y mitigación de amenazas cibernéticas, investigación forense y desarrollo de informes. Se requiere experiencia previa en ciberseguridad, certificados relevantes y habilidades avanzadas en análisis de datos. Se ofrecen 23 días de vacaciones anuales, beneficios de salud y opciones para el trabajo remoto.

Servicios

Plan de salud

Compensación por teletrabajo

Acceso gratuito a plataformas de capacitación

Estabilidad profesional y planes de carrera

Programa de referencia

Formación

• Más de 7 años de experiencia en investigación de ciberamenazas o respuesta a incidentes.
• Conocimiento profundo de TTPs y de actores avanzados de amenazas.
• Experiencia comprobada analizando logs de red y nube.

Responsabilidades

• Proactivo en la identificación y mitigación de amenazas cibernéticas.
• Desarrollo de informes y dashboards sobre la postura de ciberseguridad.
• Colaborar con equipos para implementar nuevas herramientas y flujos de respuesta.

Conocimientos

Investigación forense

Análisis de tráfico de red

Mitre ATT&CK

Python

Análisis de datos

Educación

Grado en Ciberseguridad o Informática

Herramientas

SIEM

EDR

Descripción del empleo

Social network you want to login/join with:

CyberProof is a cyber security services and platform company whose mission is to help our customers react faster and smarter – and stay ahead of security threats, by creating secure digital ecosystems. CyberProof automates processes to detect and prioritize threats early and respond rapidly and decisively.

CyberProof is part of the UST Global family. Some of the world’s largest enterprises trust us to create and maintain secure digital ecosystems using our comprehensive cyber security platform and mitigation services.

We are looking for a talented Senior Threat Hunter who will be part of our growing managed services group, which monitors, investigates, and resolves security incidents, violations, and suspicious activities. The successful candidate will be responsible for proactively identifying and mitigating cyber threats, adversary activity, and potential risks that evade traditional security defenses.

Main tasks and accountabilities will be:

• Proactively drive hunting and analysis against the available dataset from various sources including, network, endpoint, and cloud environments to look for indicators of security breaches.
• Leverage internal and external resources to research threats, vulnerabilities, and intelligence on various attackers and attack techniques, to form hunting workflows and mitigation steps.
• Innovate new processes and workflows to deploy proactivity in all aspects to address complex threats and risks.
• Design and implement data mining techniques to extract meaningful insights from large data sets.
• Develop and maintain an understanding of the latest cybersecurity technologies, trends and threats.
• Participate in the development of reports and dashboards that provide insights into the cybersecurity posture of the client.
• Collaborate with cross-functional teams to develop and implement new tools, techniques, and response workflows to enhance cybersecurity.

What do we expect from you?

• Proven experience of 7+ years as Cyber Threat Hunter or Incident Response, including high skills in forensics and investigation of network, endpoint and cloud logs.
• Deep and proven knowledge and understanding of TTPs, attack frameworks (e.g., MITRE ATT&CK), and advanced threat actors.
• Experience with security applications such as data lake, SIEM tools and EDR platforms.
• Deep and proven knowledge of operating systems essentials including Linux/Unix and Windows.
• Experience analyzing network traffic, packet captures, and log data.
• Proven skills on Hunting on Cloud assets – AWS, GCP, Azure.
• Strong understanding of Python libraries commonly used in data science, such as Pandas, and MsticPY.
• Advantageous to have in-depth knowledge of Jupyter Notebooks and experience in utilizing them for data analysis, visualization, and prototyping.
• Critical thinking, problem-solving skills and innovative way of thinking.
• Excellent communication skills to explain technical findings to both technical and non-technical audiences.
• Excellent organization, time management, and attention to detail.
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent experience).
• Relevant certification (e.g., GIAC GCIH, GCFA, GREM, OSCP, CEH) is an advantage.

What do we offer?

• 23 days of Annual Leave plus the 24th and 31st of December as discretionary days.
• Numerous benefits (Heath Care Plan, teleworking compensation, Life and Accident Insurances).
• Free access to several training platforms
• Professional stability and career plans
• Referral program
• The option to pick between 12 or 14 payments along the year.
• Real Work Life Balance measures (flexibility, WFH or remote work policy, compacted hours during summertime…)