Description As a Cyber Threat Hunting Assistant Manager, within the Threat Discovery and Fusion Unit (TDFU), you will play a key role in proactively hunting for adversary activity across WTW's global environment by turning cyber threat intelligence into active pursuit of hidden threats. This role does not include line management responsibilities but offers opportunities to collaborate with a general, multi-disciplinary team and contribute to enhancing WTW's overall security posture.

The Cyber Threat Hunting Associate

Manager will provide global threat hunting capability for WTW, responsibilities of this role will include: Support incident response activities by conducting forensic analysis, identifying root causes, and recommending mitigation strategies. Conduct host and network forensics, log analysis,



and evidence collection for on-premises and cloud systems, ensuring proper chain of custody and documentation. Extensive experience in cyber threat hunting & security incident response in global environments.

Windows

Event, Web server, Firewall logs) and conducting threat hunts within SIEM and EDR tools. [Knowledge of forensic methodologies, open-source tooling, and cloud security, including incident response in cloud environments. Familiarity with scripting languages such as Python, PowerShell, and KQL, with a functional understanding of programming concepts. Industry-recognized certifications in Cyber Incident Response, Forensics, or Malware Analysis are a plus.

📌 Assistant Manager - Cyber Threat Hunter (Madrid)
🏢 Willis Towers Watson
📍 Madrid