Threat Hunter

NCC Group

Delft

Hybrid

EUR 45,000 - 75,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Flexible working hours

Remote work allowance

26 vacation days (+4 mandatory days off)

8% holiday pay

Performance bonus

Profit sharing

Laptop and business phone

Delicious daily lunch when in office

Development opportunities through training

Job summary

Join an innovative team as a Threat Hunter, where you will engage in cutting-edge threat detection and response. This role is crucial in supporting the development of a hypothesis-led threat hunting capability, allowing you to conduct regular and targeted threat hunts for clients. You will collaborate with a dedicated team, utilizing your expertise in operational cybersecurity and threat intelligence to enhance security measures. The organization values your contributions and offers a dynamic work environment with flexible hours, development opportunities, and a competitive salary. If you are passionate about cybersecurity and eager to make a difference, this opportunity is perfect for you.

Qualifications

Minimum 3 years in operational cyber security or TI role.
Relevant certifications in cybersecurity are required.

Responsibilities

Conduct regular hypothesis-based threat hunts across clients.
Respond to TI alerts with ad-hoc threat hunts.

Skills

Operational Cyber Security Experience

Threat Intelligence

Hypothesis-based Threat Hunting

Incident Response

Education

Degree in related field

Tools

Microsoft SC200

Splunk

Crest Certification

GIAC Certification

CISSP Certification

Job description

Your Role as a Threat Hunter

Location: Delft

In short:

As a member of the MXDR SOCs dedicated Threat Hunting Team, your role is to carry out regular targeted and scalable threat hunts across our MXDR SOC clients. This role focuses on supporting the development of a hypothesis-led, native threat hunting capability to provide our clients with bleeding-edge detections in response to live, real-world threats. You will be part of a small team of threat hunters who will carry out the ad-hoc and scheduled monthly threat hunts and report on them accordingly.

This is You

Summary:

Carry out hypothesis-based threat hunting on a regular basis under the guidance of the SOC Threat Hunt Manager, across our MXDR SOC client base.
Carry out monthly TI driven threat hunts under the guidance of the SOC Threat Hunt Manager across our MXDR SOC client base.
Respond to NCC Group TI alerts with ad-hoc threat hunts across our MXDR SOC client base under the guidance of the SOC Threat Hunt Manager.

What we are looking for in you:

Minimum 3 years of experience within an operational cyber security or TI role.
Microsoft SC200 Certified
Splunk Certified Power User/Advanced Power User
Crest, GIAC or CISSP Certification
Degree in related field.
Other relevant certifications.

Our Offer

You will work in a place at the top of cybersecurity where your ideas are valued. Additionally, we offer you:

A good salary that matches the things you have already done and will do;
Flexible working hours and flexibility in working from home or at the office;
A favorable pension scheme, 26 vacation days (+4 mandatory days off), and 8% holiday pay with a full-time contract;
Plenty of development opportunities through training, TechTalks, events, and our own Fox Academy;
A laptop and business phone. If you use your own phone, you will receive a reimbursement of up to €25 per month;
A remote work allowance (for hybrid working);
A performance bonus and profit sharing because we value your effort;
When we work in the office, we gather every day for a delicious lunch.

Do you recognize yourself in the above description and see the match? Let us know how you envision this! You can apply via the button below.

A comprehensive screening is part of the onboarding process at Fox-IT.

Help from recruitment agencies, however well-intentioned, is (really) not needed.

Seniority level