For an European institution, we are looking for a remote Senior Cybersecurity Threat Hunter.

EU candidates are welcome to apply and need to be based in Europe. Work permit is not provided.

Candidates need to be fluent in English. This position is open for contractors.

Candidate need to be eligible for EU security clearance.

Tasks and responsibilities:

- Lead and manage the threat hunting program, including campaign planning, prioritization, execution, and reporting;
- Conduct threat research, develop hunting hypotheses, and identify detection gaps to improve security monitoring;
- Analyze security telemetry from SIEM, EDR, data lakes, and other sources to identify advanced threats;
- Develop and enhance threat detection use cases, detection models, and engineering frameworks (e.g., OpenTIDE);
- Design, automate, and maintain threat hunting workflows, playbooks, integrations, and IoC retro-hunting capabilities;
- Support incident response investigations, purple team exercises, and validation of new detection capabilities;
- Collaborate with Incident Response, Threat Detection, Threat Intelligence, Malware Analysis, Red/Purple Teams, and external partners (e.g., CERT-EU);
- Prepare executive briefings, campaign reports, and investigation summaries for senior management;
- Mentor and train junior threat hunters while promoting threat-informed detection practices;




- Continuously improve detection coverage by incorporating lessons learned from incidents, red teaming, and threat intelligence;

Profile:

- Master's Degree in Computer Science, with a focus on Cybersecurity;
- +2 years of experience leading Threat Hunting activities in a SOC/CSOC or equivalent environment;
- Proven experience in operationalising threat intelligence to support proactive hunting and detection engineering;
- Proven experience in developing and improving detection coverage to ensure that intelligence driven priorities are converted into timely and relevant detection use cases aligned with CSOC operational needs;
- Hands on experience with OpenTIDE or an equivalent detection content management platform;
- Strong practical experience with SIEM platforms, in particular Splunk Enterprise Security, Risk;
- Based Alerting, or equivalent technologies, for detection engineering, alerting, and use case development;
- Strong practical experience with EDR solutions;
- Ability to produce clear, structured, and actionable reporting, including threat assessments and strategic or operational reports, for both technical and non technical audiences;
- Strong coordination skills with internal teams, business representatives, and external partners;
- Fluent in English;

📌 Senior Cybersecurity Threat Hunter (España)
🏢 All European Careers
📍 España