Threat Hunting Engineer

thales; España; Híbrido; EUR 85.000 - 120.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Flexible Hybrid Work

Work from home option

Up to 41 days off annually

Training & certifications

Bonuses & salary optimization

Descripción de la vacante

Thales S21sec Spain is seeking a Threat Hunting Engineer to defend critical infrastructure and lead proactive defense. You will spearhead threat hunting strategies, guide rapid incident response, and collaborate with cloud and product teams to weave security into every lifecycle stage.

The role requires a minimum of 3 years in cybersecurity, with expertise in SIEM/SOAR, EDR/XDR, and cloud security. A senior, high-scale environment background is essential, with a strong focus on TTPs and MITRE

Formación

• Minimum 3 years of experience in Cybersecurity, focusing on Security Operations, Incident Response and Threat Hunting.
• Senior-level experience in a team with complex technical challenges.
• Experience managing security operations within high-scale, distributed environments (Cloud or Hybrid).
• Deep understanding of attacker TTPs and MITRE ATT&CK framework.
• Expertise in SIEM/SOAR platforms, EDR/XDR tools, and network traffic analysis.
• Cloud security experience (AWS, Azure, or GCP) and shared responsibility models.
• Leading large-scale incident investigations and root-cause analysis.
• Familiarity with forensic analysis tools and procedures.

Responsabilidades

• Drive Proactive Defense: spearhead threat hunting strategy using telemetry and intelligence to uncover attacker patterns before they impact our infrastructure.
• Lead Through Crisis: be the technical force behind Incident Response, guiding the team through high-pressure situations and refining the defense playbook.
• Innovate: mentorship, technical workshops, and collaboration to uplift the team.
• Architect the Future: partner with cloud and product teams to integrate security into every lifecycle stage.

Conocimientos

Threat Hunting

Incident Response

Security Operations

Cybersecurity

Senior leadership

Cloud security

MITRE ATT&CK

SIEM/SOAR

EDR/XDR

Network analysis

Herramientas

SIEM

SOAR

EDR

XDR

Descripción del empleo

Location: Madrid Emilio Vargas, Spain

Thales people architect identity management and data protection solutions at the heart of digital security. Business and governments rely on us to bring trust to the billions of digital interactions they have with people. Our technologies and services help banks exchange funds, people cross borders, energy become smarter and much more. More than 30,000 organizations already rely on us to verify the identities of people and things, grant access to digital services, analyze vast quantities of information and encrypt data to make the connected world more secure.

Thales in Spain is a leader in technological solutions applied to Defence, Aeronautics, Security, Transportation and Space and, furthermore, is a global centre for excellence in Space, Security of Critical Infrastructures and Transportation. With a turnover of €320 million and a staff of 1,200, it exports approximately 40% of its total production principally to the Middle East, North Africa and Latin America.

Join the Team Defending Thales' Future At Thales, we don't just respond to threats-we anticipate them. We are looking for a Threat Hunting Engineer who thrives at the intersection of advanced threat hunting, rapid incident response. If you are passionate about building resilient security architectures and be part of a team that is defining the next generation of security services.

Key Responsibilities

• Drive Proactive Defense: You will spearhead our threat hunting strategy, utilizing advanced telemetry and intelligence to uncover sophisticated attacker patterns before they impact our infrastructure.
• Lead Through Crisis: You will be the technical force behind our Incident Response, guiding the team through high-pressure situations, conducting deep-dive forensics, and refining our defense playbook to stay ahead of the adversary.
• Innovate: Through hands-on mentorship, technical workshops, and collaboration
• Architect the Future: You will partner with our cloud and product teams to integrate security into every stage of the lifecycle.

Requirements

• Experience: Minimum 3 years of experience in Cybersecurity, with a strong focus on Security Operations, Incident Response and Threat Hunting.
• Demonstrated experience in a senior-level role, be part of a team with complex technical challenges.
• Proven background in managing security operations within high-scale, distributed environments (Cloud or Hybrid).
• Advanced understanding of attacker TTPs (Tactics, Techniques, and Procedures) and the MITRE ATT&CK framework.
• Deep expertise in SIEM/SOAR platforms, EDR/XDR tools, and network traffic analysis.
• Experience with Cloud security (AWS, Azure, or GCP) and understanding of shared responsibility models.
• Experience leading large-scale incident investigations and performing root-cause analysis.
• Familiarity with forensic analysis tools and procedures.

Why Join Thales S21sec Spain?

At Thales S21sec, we pride ourselves on being innovative and flexible in how we work. We continuously evolve our policies to ensure a true work-life balance.

• 100% Flexible Hybrid Work
• Work from home or come to the office whenever you choose.
• Up to 41 Days Off Per Year
• 24 vacation days + additional flexible days
• Option to enjoy one free Friday per month (12 per year)
• Choose between summer reduced hours or extra days of
• Flexible Compensation Package
• Optimize your net salary with benefits such as meal vouchers, transport cards, childcare vouchers, and training support.
• Continuous Learning & Certifications
• Access to an annual training plan including technical certifications, languages, and soft skills.
• Knowledge Sharing Culture
• Participate in our voluntary Speakers Program and share your expertise.
• Performance-Based Bonuses
• Clear and transparent objectives aligned with KPI-based annual bonuses.
• Career Growth Your Way
• Choose your path:
• Leadership and team management
• Deep technical specialization with top experts

At Thales we provide CAREERS and not only jobs. With Thales employing 80,000 employees in 68 countries our mobility policy enables thousands of employees each year to develop their careers at home and abroad, in their existing areas of expertise or by branching out into new fields. Together we believe that embracing flexibility is a smarter way of working. Great journeys start here,