Senior Threat Hunter: Proactive MITRE-Driven Defender

EY; Málaga; Híbrido; EUR 65.000 - 98.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Career development

Hybrid work model

Well-being programs

Volunteering opportunities

Rewards and recognition

Descripción de la vacante

EY GDS Spain is seeking a Senior Threat Hunter to proactively identify sophisticated threats beyond alert-driven SOC ops. You will operate with a hypothesis-based approach, leveraging Microsoft Sentinel, Defender for Endpoint, and Defender for IoT to close detection gaps.

The role requires 4–7+ years in SOC, Threat Hunting or related fields, strong English, and deep knowledge of MITRE ATT&CK and endpoint telemetry. Hybrid work, based in Málaga, Spain.

Formación

• Bachelor’s or Master’s degree in computer engineering, IT security, CS or related fields.
• Highly proficient in English with strong written and spoken communication.
• Strong analytical, problem solving and interpersonal skills.

Responsabilidades

• Conduct hypothesis-driven threat hunts using telemetry from Microsoft Sentinel and Defender platforms.
• Develop hunt hypotheses based on adversary campaigns and MITRE ATT&CK techniques.
• Hunt for advanced attack behaviors and validate findings with evidence.
• Perform advanced KQL-based threat hunting across large data volumes in Microsoft Sentinel.
• Identify detection gaps, data quality issues, and correlate telemetry across security layers.
• Produce formal threat hunt reports detailing hypotheses, sources, findings, and remediation.

Conocimientos

Threat hunting

MITRE ATT&CK

Analytical thinking

Communication

Independent work

Endpoint telemetry

Educación

Bachelor’s/Master’s in CS/IT Security

Herramientas

KQL

Microsoft Sentinel

Defender for Endpoint

Defender for IoT

Descripción del empleo

EY GDS Spain is seeking a Senior Threat Hunter to proactively identify sophisticated threats beyond alert-driven SOC ops. You will operate with a hypothesis-based approach, leveraging Microsoft Sentinel, Defender for Endpoint, and Defender for IoT to close detection gaps.

The role requires 4–7+ years in SOC, Threat Hunting or related fields, strong English, and deep knowledge of MITRE ATT&CK and endpoint telemetry. Hybrid work, based in Málaga, Spain.