This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
Help multinational organizations stay one step ahead of adversaries and cyber threats
Collaborate with customers via handling inbound communications
Provide support and assistance to the Managed Detection and Response (MDR) team for hunting-related activities
Serve as a critical line of defense by providing coverage for core threat hunting activities
Collaborate with and guide customers by responding to hunting-related requests and issues related to suspected security incidents
Execute existing threat hunting reports and hunting workflows, investigate results, and support timely customer reporting
Investigate hunting leads based on IOCs, threat intelligence, and internal detections
Monitor the threat landscape and help prepare initial context for emerging campaigns, enabling the global team to continue deeper investigation during the week
Ensure timely and appropriate escalation of major or high-impact security events to leadership
Provide ongoing feedback on findings, hunting reports, queries, and operational workflows to support continuous improvement
This position requires flexibility to work in 24*7 rotational shifts depending on business demands
Requirements
5+ years of relevant cybersecurity experience, preferably in threat hunting, incident investigation, SOC analysis, detection engineering, DFIR, MDR, or a similar security operations role
Strong understanding of the evolving threat landscape, including attack tools, tactics, and techniques, as well as networking and security fundamentals
Experience investigating suspicious activity, security incidents, or targeted threats across endpoints, networks, identity, and cloud
Ability to work independently, make sound investigative decisions, and escalate when findings require additional review or urgent action
Experience handling customer-facing or stakeholder-facing security requests, including clear written communication, investigation summaries, and recommendations
Understanding of attacker behaviors, including attack vectors, execution, persistence, privilege escalation, lateral movement, credential theft, command and control, and data exfiltration
Background in writing, modifying, or executing detections, hunting queries, or log-based investigations
Familiarity with organizational cybersecurity measures, including protective tools, response actions, and remediation techniques
Excellent written and oral communication skills in English
Strong attention to detail and ability to clearly document investigation logic, findings, and conclusions
Knowledge of threat hunting methodologies and the ability to learn novel techniques
Experience in an Incident Response environment is a plus
Proficiency in Python and SQL is beneficial
Familiarity with malware analysis is advantageous (e.g. malicious script deobfuscation)
Ability to simplify and clarify complex ideas
Experience writing technical reports, investigation summaries, or customer-facing security analysis
Ability to analyze and understand the infrastructure, behaviors, and objectives of malicious campaigns
Self-starter who can work independently and adapt to changing priorities
Nice to have
Experience in an Incident Response environment is a plus
Proficiency in Python and SQL is beneficial
Familiarity with malware analysis is advantageous (e.g. malicious script deobfuscation)
Ability to simplify and clarify complex ideas
Experience writing technical reports, investigation summaries, or customer-facing security analysis
Ability to analyze and understand the infrastructure, behaviors, and objectives of malicious campaigns
Self-starter who can work independently and adapt to changing priorities