Cyber Services and Capabilities
Employment Type: Full Time
We are seeking a highly capable and hands-on Threat Hunter to join a passionate and motivated, industry-leading team focused on identifying sophisticated adversaries through hypothesis-driven analysis and automation. Your role will involve conducting in-depth intelligence-led, hypothesis-driven analysis of TTPs and behaviours, and working cross-functionally with the Security Operations Centre Analysts, Global Detection Engineers, Privacy Team and Engineering Team to mitigate risks.
Leverage GitLab, Sigma, Jupyter Notebooks and other tools to automate hunts, visualise results, and create reusable artifacts for future investigations and detections.
Collaborate with detection engineering to convert threat hunt findings into high fidelity detection content.
Support the mapping of threat models to monitoring use cases in partnership with teams across the business.
The ideal candidate is a highly skilled and proactive Threat Hunter with a strong background in hypothesis-driven hunting, adversary TTP analysis, and cross-functional collaboration.
They have hands-on experience in Threat Hunting, Red Team, Blue Team, or Incident Response roles,



with a deep understanding of the MITRE ATT&CK; framework and a proven ability to detect and investigate advanced threats beyond signature-based solutions.
Experienced using one or more of Splunk, Microsoft, CrowdStrike and SentinelOne SIEM and EDR stacks.
They should be driven by curiosity and methodical thinking, constantly seeking to improve visibility and detection coverage across complex environments—including hybrid or cloud-native architectures like AWS, Azure, or GCP.
Experience within a Threat Hunter, Red Team, Incident Response, Threat Intelligence, Malware Analysisor Blue Team role.
Solid understanding of the MITRE ATT&CK; framework, TTP analysis, and adversary emulation.
Python, KQL, SQL, PowerShell).
Hands-on experience using Jupyter Notebooks for data exploration, automation, and visualization in a security context.
Knowledge of cloud products and log events such as Azure, Amazon Web Services, Google Cloud Platform.
Familiarity with data science and machine learning techniques in security analysis.
Adaptable Working : Balance your work and personal life with our flexible working options.
Generous Holiday Allowance : Enjoy 25 days of holiday, plus

📌 Hunter (Comunidad de Madrid)
🏢 Ncc Group
📍 Comunidad de Madrid