Senior Cybersecurity Threat Hunter

At Uni Systems, we are working towards turning digital visions into reality. We are continuously growing and we are looking for a Senior Cybersecurity Threat Hunter to join our UniQue team. What will you be doing in this role?

• Lead and manage the threat hunting program, including campaign planning, prioritization, execution, and reporting.
• Conduct threat research, develop hunting hypotheses, and identify detection gaps to improve security monitoring.
• Analyze security telemetry from SIEM, EDR, data lakes, and other sources to identify advanced threats.
• Develop and enhance threat detection use cases, detection models, and engineering frameworks (e.g., OpenTIDE).
• Design, automate, and maintain threat hunting workflows, playbooks, integrations, and IoC retro-hunting capabilities.
• Support incident response investigations, purple team exercises, and validation of new detection capabilities.
• Collaborate with Incident Response, Threat Detection, Threat Intelligence, Malware Analysis, Red/Purple Teams, and external partners (e.g., CERT-EU).
• Prepare executive briefings, campaign reports, and investigation summaries for senior management.
• Mentor and train junior threat hunters while promoting threat-informed detection practices.
• Continuously improve detection coverage by incorporating lessons learned from incidents, red teaming, and threat intelligence.

• Master’s Degree in Computer Science, with a focus on Cybersecurity.
• Minimum 6 years of experience in IT field.
• Minimum 2 years of experience leading Threat Hunting activities in a SOC/CSOC or equivalent environment.
• Proven experience in operationalising threat intelligence to support proactive hunting and detection engineering.
• Proven experience in developing and improving detection coverage to ensure that intelligence driven priorities are converted into timely and relevant detection use cases aligned with CSOC operational needs.
• Hands on experience with OpenTIDE or an equivalent detection content management platform.
• Strong practical experience with SIEM platforms, in particular Splunk Enterprise Security, Risk.
• Based Alerting, or equivalent technologies, for detection engineering, alerting, and use case development.
• Strong practical experience with EDR solutions.
• Ability to produce clear, structured, and actionable reporting, including threat assessments and strategic or operational reports, for both technical and non technical audiences.
• Strong coordination skills with internal teams, business representatives, and external partners.