Threat Hunter - Senior - EY GDS Spain - Hybrid

Tasks

• Analyze endpoint telemetry
• Conduct hypothesis-driven threat hunts
• Correlate endpoint telemetry with SIEM data
• Develop threat hunt hypotheses
• Hunt across IoT OT and ICS environments
• Identify detection blind spots and data quality issues
• Perform advanced KQL threat hunting
• Produce threat hunt reports with MITRE ATT&CK mapping
• Validate findings with evidence

Perks/Benefits

• Career Development Programs
• Continuous learning
• Flexible work-life integration
• Hybrid work model
• Psychological support
• Recognition and rewards
• Volunteering opportunities
• Well-being programs

Skills/Tech-stack

Adversary Tradecraft | Defender for | Defender for Endpoint | Defender for IoT | Detection engineering | EDR | Endpoint telemetry | Endpoint telemetry analysis | Incident Response | KQL | Kusto Query | Kusto Query Language | Log Correlation | MITRE ATT&CK | Microsoft Defender | Microsoft Defender for Endpoint | Microsoft Sentinel | Network Traffic | Network Traffic Analysis | Query Language | SIEM | Telemetry Analysis | Threat Intelligence | Traffic analysis