Submeter
Threat Hunting Specialist
Lisboa
Descrição da posição
The Cybersecurity team is strengthening its workforce for the roles of Threat Hunting, Threat Intel, and Advanced Incident Response.
The main responsibilities will include ensuring the technological and process strategy, as well as the operational activities associated with this role.
Its is expected to carry out proactive threat investigations using specialized tools and techniques. The candidate will have access to a range of leading platforms in Threat Intel, forensic analysis, and security.
The candidate will join a dedicated cybersecurity team, with various areas of expertise, with which you will need to collaborate, such as SOC, Offensive Security, Risk Management, and others.
Responsibilities
- Conduct proactive investigations of advanced threats using specialized tools and techniques;
- Interact and collaborate with the SOC, offensive security, and vulnerability management to contextualize incidents and anticipate or respond to attacks;
- Develop and maintain hunting rules for threat detection in the SOC;
- Contribute to the response to critical incidents, coordinating with other cybersecurity teams or the organization;
- Perform forensic analysis of complex incidents;
- Structure and prepare technical reports and communicate the threats found to the team and the organization;
- Stay updated with the latest security threats and trends.
Requirements
- Higher Education in the field or equivalent experience;
- Minimum of 5 years of experience in Cybersecurity, preferably in equivalent roles;
- Experience in Threat Hunting, Threat Intelligence, and Incident Response;
- Knowledge of tools such as SIEM, EDR/XDR or similar, and frameworks like MITRE ATT&CK;
- Analytical skills and a methodological approach to solving complex problems.
- Experience in scripting (Python, PowerShell) and log analysis;
- Communication skills for both technical and non-technical audiences;
- High degree of autonomy, responsibility, proactivity, and dynamism;
- Critical thinking and results-oriented;
- Leadership skills and teamwork ability.
Valued knowledge:
- Certifications such as GCFA, GCTI, OSCP, or equivalents;
- Experience in large-scale or telco environments;
- Knowledge in malware analysis and reverse engineering;
- In-depth, low-level knowledge of operating systems (Windows and UNIX).
Quer se candidatar?
Cargo
Nome*
Email*
Telefone*
País*
Cidade*
Linkedin
Upload your CV*
(máx. 4MB)
Faça upload da sua foto ou video
(máx. 4MB)