MDR Threat Hunter & Detection Engineer

Schuberg Philis; Haarlemmermeer; On-site; EUR 70,000 - 110,000; Full time

Job summary

Schuberg Philis seeks an MDR Threat Hunter to proactively identify threats, translate them into actionable detections, and build tailored detection use cases for mission-critical environments. You will work at the intersection of security engineering, detection engineering, and threat intelligence, shaping how we detect and respond to threats with practical logic.

You will translate findings into clear communications, collaborate with engineers, and continuously improve the MDR platform,

Qualifications

• Proven ability to translate threats into practical detections and use cases.
• Experience in threat hunting, detection engineering, and SOC-like environments.
• Strong analytical thinking to understand system behavior and detect gaps.

Responsibilities

• Develop and improve detection use cases from emerging threats and observed behavior.
• Translate threat scenarios into actionable detection logic and responses.
• Perform threat hunting to identify abnormal patterns in the environment.
• Analyze logs/telemetry to uncover undiscovered detection opportunities.
• Define response actions, automation, and escalation paths for triggers.

Skills

Automation mindset

Logs & telemetry

Engineering fundamentals

Normal vs abnormal behavior

Communication

Ownership

Curiosity

Tools

Python

Bash scripting

OpenSearch

Elastic

Splunk

Sentinel

CI/CD

Git

AWS/Azure

Job description

Schuberg Philis seeks an MDR Threat Hunter to proactively identify threats, translate them into actionable detections, and build tailored detection use cases for mission-critical environments. You will work at the intersection of security engineering, detection engineering, and threat intelligence, shaping how we detect and respond to threats with practical logic.

You will translate findings into clear communications, collaborate with engineers, and continuously improve the MDR platform,