Job Details
Threat Hunting Engineer (Penetration testing included)
Job ID#:
43792
Category:
INFRA - Cybersecurity Services
Location:
Remote, Romania
Position Type:
Employee
Job Description
Stefanini is seeking a skilled Threat Hunting Engineer to join our Cyber Security Services Cluster within the Infrastructure Services (INFRA) Division. This role is essential for proactively identifying and mitigating cyber threats using advanced threat detection techniques, security analytics, and offensive security strategies.
As a Threat Hunting Engineer, you will conduct in-depth investigations, analyze attacker behavior, and uncover hidden threats within enterprise environments. Your expertise in penetration testing, adversary emulation, and red teaming will be vital in enhancing our security posture by simulating real-world attacks and identifying vulnerabilities before they can be exploited.
Success in this role requires a deep understanding of attack techniques, malware analysis, network forensics, and security tool development, along with a proactive and analytical approach to identifying and neutralizing cyber threats.
Responsibilities:
- Proactive Threat Identification: Conduct proactive threat hunting to identify and mitigate cyber threats within enterprise environments using advanced detection techniques.
- In-Depth Investigations: Perform thorough investigations to analyze attacker behavior and uncover hidden threats, ensuring a comprehensive understanding of the threat landscape.
- Penetration Testing and Red Teaming: Utilize penetration testing and red teaming methodologies to simulate real-world attacks, identifying vulnerabilities and weaknesses in our defenses.
- Threat Hunting Methodologies: Develop and refine threat hunting methodologies to enhance the effectiveness of our security operations.
- Leverage Threat Intelligence: Utilize threat intelligence to anticipate and address emerging risks, staying one step ahead of potential adversaries.
- Collaboration with Security Teams: Work closely with various security teams to strengthen defenses and improve overall incident response capabilities.
- Security Tool Development: Participate in the development and enhancement of security tools that support threat detection and mitigation efforts.
- Continuous Learning: Stay current with the latest attack techniques, malware analysis methodologies, and industry best practices to ensure the effectiveness of threat hunting operations.
Job Requirements
Technical requirements:
- Extensive experience in threat hunting, penetration testing, and red teaming to identify and mitigate cyber threats.
- Deep understanding of attack techniques, tactics, and procedures (TTPs) used by advanced threat actors.
- Strong knowledge of MITRE ATT&CK framework, adversary emulation, and cyber kill chain methodologies.
- Expertise in malware analysis, reverse engineering, and exploit development to assess and counter security threats.
- Proficiency in network forensics, endpoint detection, and log analysis to uncover hidden attacks.
- Experience with penetration testing tools such as Burp Suite, Metasploit, Cobalt Strike, and BloodHound.
- Ability to develop and execute custom threat detection techniques, YARA rules, and Sigma rules.
- Strong background in SIEM, EDR, and threat intelligence platforms for proactive threat hunting.
- Familiarity with cloud security threats and experience securing platforms like AWS, Azure, and Google Cloud.
- Proficiency in scripting and automation using Python, PowerShell, or Bash to enhance detection and response capabilities.
- Experience working with security frameworks and compliance standards such as NIST, NIS2, ISO 27001, CIS, and Zero Trust Architecture.
- Relevant certifications such as OSCP, OSCE, GIAC GCIH, GCFA, or GXPN are preferred.
Professional competencies and necessary qualifications:
- Excellent written and verbal communication skills in English.
- Excellent at communicating technical problems and solutions to both technical and non-technical audiences.
- Strong analytical and problem-solving skills.
- Ability to work collaboratively with cross-functional teams.
- Strategic mindset with the ability to think critically and make data-driven decisions.
- A commitment to continuous learning and improvement, staying abreast of industry best practices, emerging technologies, and methodologies.
- High degree of initiative, dependability and ability to work with little supervision.
What's next?
It's best to apply today, because job postings can be taken down and we wouldn't want you to miss this opportunity.
In case you need further information, just send us a message at recruitmentEMEA@stefanini.com and we'll be happy to assist!
The preceding job description had been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties and responsibilities required of employees assigned to this job.
Diversity & Inclusion:
Here at the Stefanini Group, we value plurality and equity, regardless of race, sexual orientation, disability, age, ancestry, religion, gender, and nationality. We understand and encourage the importance of being you!
About us
We are a Brazilian company with over 35 years of experience in delivering IT services worldwide, ranging from IT outsourcing to application development or IT staffing. We have a direct presence in 41 countries, through our 70 offices located throughout the world. We have managed to become the preferred partner of many small-to-midsize local and regional companies as well. Most of our clients come from industries such as financial services, manufacturing, telecommunications, chemical, services, technology, public sector and utilities.
Stefanini has career opportunities locally and around the world for professionals interested in a vibrant, passionate, team-oriented workplace. If you are a customer-centric person with a "get it done" attitude, come over for coffee and a talk on your future career with us!
Learn more about us on www.stefanini.com and join us on LinkedIn, Facebook and Instagram where we regularly post insights from our colleagues.
We want to inform you that there are currently scams targeting job seekers by falsely using our company's name, Stefanini. We sincerely apologize for any confusion or inconvenience this may have caused.
Please remember that legitimate job offers from Stefanini will always come through official channels, including direct communication with our trained recruiters. If you receive any unsolicited messages requesting payment or personal information, please disregard them.
If you suspect you've been targeted, please contact us immediately at RecruitmentEMEA@stefanini.com for verification.
Key Points to Remember:
* Legitimate job offers only follow interviews conducted with our hiring managers or clients.
* We will never ask for payment at any stage of the recruitment process.
Stay vigilant and feel free to reach out for verification. Your safety and security are our top priorities. Thank you for your understanding and cooperation.
#LI-REMOTE