Threat-Hunting Cloud Security Engineer

Novanta Inc.; Bellprat; Presencial; EUR 40.000 - 65.000; Jornada completa

Descripción de la vacante

Novanta Inc. is seeking a skilled Security Engineer to join our global security operations team. You will monitor cloud and on-prem environments, investigate incidents, and tune detection rules across SIEM/EDR/DLP while collaborating with engineers to strengthen threat visibility.

The role emphasizes threat hunting, cloud security controls, and automation, with fluency in English and Spanish to support our international operations. Travel estimates are 10–20% as needed.

Formación

• 2+ years of experience in security operations, SOC, or incident response.
• Hands-on experience with cloud platforms (Azure or AWS).
• Familiarity with SIEM tools (Sentinel, Splunk, Rapid7), EDR, CSPM, and DLP technologies.
• Strong understanding of security fundamentals, attacker TTPs, and detection engineering.
• Experience with threat hunting methodologies and behavioral analytics.
• Experience with scripting or automation (e.g., Python, PowerShell) is a plus.

Responsabilidades

• Monitor and respond to security alerts across cloud and on-prem environments.
• Investigate and triage security incidents, escalating as needed.
• Assist in tuning and optimizing detection rules across SIEM, EDR, and DLP platforms.
• Conduct proactive threat hunting based on behavioral anomalies, threat intelligence, and environmental context.
• Support the deployment and configuration of security tools, including DLP, endpoint protection, and cloud security controls.
• Collaborate with global SOC and engineering teams to improve threat visibility and response workflows.
• Contribute to documentation and playbook development for incident response and detection logic.

Conocimientos

Security operations

Threat hunting

Cloud platforms

SIEM tools

Scripting/Automation

Languages: English/Spanish

Herramientas

Sentinel

Splunk

Rapid7

Descripción del empleo

Novanta Inc. is seeking a skilled Security Engineer to join our global security operations team. You will monitor cloud and on-prem environments, investigate incidents, and tune detection rules across SIEM/EDR/DLP while collaborating with engineers to strengthen threat visibility.

The role emphasizes threat hunting, cloud security controls, and automation, with fluency in English and Spanish to support our international operations. Travel estimates are 10–20% as needed.