Threat Hunting Analyst — Proactive Cyber Defender

Jobtome International; Asturias; Presencial; EUR 42.000 - 60.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Wellbeing HUB

Flexible compensation plan

Continuous learning

Volunteer & Social Impact Programs

Buddy Program

Life & Accident Insurance

Descripción de la vacante

Capgemini is seeking a Threat Hunting Analyst with expertise in proactive cyber defence. You will hunt for malicious activity, analyze SIEM/EDR telemetry, and investigate sophisticated threats before incidents occur.

The role demands hypothesis-driven investigation across Windows, Linux, and macOS internals, with scripting to automate hunts. Join a global team focused on secure, resilient environments.

Formación

• Experience in cybersecurity operations with threat hunting.
• Proficient in SIEM/EDR queries and log analysis.
• Knowledge of Windows, Linux, and macOS internals.
• Scripting and automation skills to streamline hunts.
• Analytical mindset and hypothesis-driven investigation.

Responsabilidades

• Proactively conduct threat hunts to identify malicious activity
• Develop hypothesis-driven hunts using MITRE ATT&CK framework
• Analyze endpoint, network, authentication, and log telemetry for IOC
• Investigate credential misuse, lateral movement, persistence, and LOMS
• Correlate data across SIEM, EDR/XDR, and network tools to validate threats
• Leverage threat intel and telemetry to identify evolving attacker behaviours
• Escalate confirmed malicious activity with detailed findings and timelines
• Support incident investigations with root cause analysis and reconstruction

Conocimientos

SIEM/EDR queries

Windows internals

Linux internals

macOS internals

Networking fundamentals

Malware behaviour basics

Scripting and automation

Log analysis

Analytical skills

Pattern recognition

Hypothesis-driven investigation

Descripción del empleo

Capgemini is seeking a Threat Hunting Analyst with expertise in proactive cyber defence. You will hunt for malicious activity, analyze SIEM/EDR telemetry, and investigate sophisticated threats before incidents occur.

The role demands hypothesis-driven investigation across Windows, Linux, and macOS internals, with scripting to automate hunts. Join a global team focused on secure, resilient environments.