Cyber Threat Hunter

Allianz; Italia; Ibrido; EUR 90.000 - 120.000; Tempo pieno

Vantaggi offerti da questo lavoro

Hybrid work model

Bonus scheme

Pension

Employee shares program

Employee discounts

Descrizione del lavoro

Allianz Technology is seeking a Cyber Threat Hunter to design and run hypothesis-driven threat hunting, leveraging EDR and SIEM tools to uncover advanced threats. You will collaborate with Detection Engineering, Incident Response and Threat Intelligence teams across international environments, to continuously improve hunting capabilities and automation.

The role emphasizes hands-on analytics, programming in Python/Go, and effective communication of findings to technical and non-technical

Competenze

• 6+ years of experience in threat hunting, security operations, or incident response.
• Hands-on experience with security technologies such as EDR (e.g. CrowdStrike, Defender), SIEM platforms, and log analysis.
• Solid understanding of attacker behaviour, TTPs, and the ability to apply this knowledge in real-world hunting scenarios.
• Programming and automation skills (e.g. Python, Go) to develop scalable detection and hunting solutions.
• Strong analytical mindset with the ability to correlate data from multiple sources and identify meaningful patterns.
• Experience working in collaborative, international environments and coordinating with multiple stakeholders.
• Fluent English communication skills, with the ability to clearly present technical findings to both technical and non-technical audiences.

Mansioni

• Design and execute hypothesis-driven threat hunting activities to uncover advanced and previously undetected threats.
• Build and evolve automated, scalable hunting capabilities using machine learning and agent-based approaches.
• Conduct continuous compromise assessments across Allianz systems, identifying suspicious activity across endpoints, identities, and networks.
• Analyze security events, logs, and network data to detect anomalies and derive actionable insights.
• Collaborate closely with Detection Engineering, Incident Response, and Threat Intelligence teams to enhance overall security coverage.
• Integrate threat intelligence into hunting workflows, continuously adapting strategies based on emerging threats.
• Contribute to the continuous improvement of tools, methodologies, and automation capabilities within the ACDC.

Conoscenze

Threat hunting

Security operations

Incident response

Python

Go

EDR

Defender

CrowdStrike

SIEM

Log analysis

Attacker behaviour

TTPs

Cross‑functional collaboration

English communication

Strumenti

CrowdStrike

Defender

SIEM

Log analysis

Descrizione del lavoro

Cyber Threat Hunter

Azienda : Allianz Tipo Lavoro : Full Time Italy

Descrizione Lavoro - Cyber Threat Hunter

About the Job

If you are passionate about uncovering advanced cyber threats and thinking like an attacker to stay one step ahead, this role is for you.

What You Do

• Design and execute hypothesis-driven threat hunting activities to uncover advanced and previously undetected threats.
• Build and evolve automated, scalable hunting capabilities using machine learning and agent-based approaches.
• Conduct continuous compromise assessments across Allianz systems, identifying suspicious activity across endpoints, identities, and networks.
• Analyze security events, logs, and network data to detect anomalies and derive actionable insights.
• Collaborate closely with Detection Engineering, Incident Response, and Threat Intelligence teams to enhance overall security coverage.
• Integrate threat intelligence into hunting workflows, continuously adapting strategies based on emerging threats.
• Contribute to the continuous improvement of tools, methodologies, and automation capabilities within the ACDC.

What You Bring

• Strong experience (6+ years) in threat hunting, security operations, or incident response within complex environments.
• Hands-on experience with security technologies such as EDR (e.g. CrowdStrike, Defender), SIEM platforms, and log analysis.
• Solid understanding of attacker behaviour, TTPs, and the ability to apply this knowledge in real-world hunting scenarios.
• Programming and automation skills (e.g. Python, Go) to develop scalable detection and hunting solutions.
• Strong analytical mindset with the ability to correlate data from multiple sources and identify meaningful patterns.
• Experience working in collaborative, international environments and coordinating with multiple stakeholders.
• Fluent English communication skills, with the ability to clearly present technical findings to both technical and non-technical audiences.

What we offer

• We offer a hybrid work model which recognizes the value of striking a balance between in-person collaboration and remote working incl. up to 25 days per year working from abroad.
• We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location).
• From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered.
• Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career andhelp our people return from career breaks with experience that nothing else can teach.

About Allianz Technology

With its headquarters in Munich, Germany, Allianz Technology is Allianz's global IT service provider and delivers IT solutions that drive the group's digitalization. With more than 11,000 employees in over 20 countries around the world, Allianz Technology is tasked to run, optimize, transform, and innovate the infrastructure, applications, and services together with Allianz companies to co-create the best customer experience.

We service the entire spectrum of digitalization – from one of the industry's largest IT infrastructure projects that spans data centres, networks, and security, to application platforms ranging from workplace services to digital interaction.

In short: We deliver comprehensive end-to-end IT solutions for Allianz in the digital age. We are the backbone of Allianz.

Find us at: www.linkedin.com/company/allianz-technology .

Commitment to Integrity, Fairness & Inclusion

Allianz Technology is proud to be an equal opportunity employer dedicated to fostering an inclusive work environment for everyone. We embrace individuals of all gender identities and expressions, sexual orientations, ethnicities, ages, nationalities, religions, disabilities, and philosophies of life. Ultimately, our greatest strength as a company lies in the unique skills, experiences, and backgrounds our employees contribute.

We therefore welcome applications regardless of race, ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations.

To Recruitment Agencies

Allianz Technology has an in-house recruitment team that sources great candidates directly. Therefore, Allianz Technology does not accept unsolicited resumes from agencies or search firm recruiters. When we do work with recruitment agencies, that engagement is formalized by a contract. Fees will only be paid when there is a contract in place. Without a contract in place, we will not accept invoices on unsolicited resumes, even if the candidate was ultimately employed by Allianz.