Threat-Hunting & Detection Engineer

Schuberg Philis; Schiphol-Rijk; Sur place; EUR 80 000 - 110 000; Plein temps

Résumé du poste

Schuberg Philis is seeking an MDR Threat Hunter who will identify, analyze, and translate threats into actionable detection capabilities within mission-critical environments. You will operate atop a central MDR platform and shape how we detect and respond to threats by understanding system behaviour and designing new detections that matter.

This role bridges security engineering, detection engineering, and threat intelligence.

Qualifications

• Strong automation mindset and ability to translate problems into scalable logic.
• Experience working with logs, telemetry, and detection use cases.
• Solid engineering fundamentals (Linux, networking, infrastructure behaviour).
• Ability to distinguish normal vs. abnormal system behaviour.
• Experience with Python and/or Bash scripting.
• Familiarity with SIEM / log analytics platforms (e.g. OpenSearch, Elastic, Splunk, Sentinel).
• Strong understanding of security principles in detection and response.

Responsabilités

• Detect engagement through detection engineering & threat hunting.
• Develop and continuously improve detection use cases based on emerging threats and observed behaviour.
• Translate threat scenarios into actionable detection logic.
• Proactively perform threat hunting to identify abnormal patterns.
• Analyse logs and telemetry to uncover unknown behaviours.
• Define response actions, automation, and escalation paths.
• Continuously refine detection logic to improve quality and relevance.
• Contribute to custom detection scenarios for customer environments.
• Follow security developments and translate into new hunts and detections.
• Identify gaps in coverage and propose improvements.
• Contribute to MDR detection strategy evolution.
• Translate findings into clear, actionable communication for engineers and stakeholders.
• Collaborate with engineers to understand system behaviour and validate strategies.
• Leverage central MDR platform to implement detections and analyse data.

Connaissances

Automation

Logs & telemetry

Linux fundamentals

Networking basics

Python/Bash

SIEM platforms

Detection & security

Ownership

Communication

Threat hunting

Outils

OpenSearch

Elastic

Splunk

Microsoft Sentinel

CI/CD

Git

Description du poste

Schuberg Philis is seeking an MDR Threat Hunter who will identify, analyze, and translate threats into actionable detection capabilities within mission-critical environments. You will operate atop a central MDR platform and shape how we detect and respond to threats by understanding system behaviour and designing new detections that matter.

This role bridges security engineering, detection engineering, and threat intelligence.