Threat Intelligence Threat Hunting Specialist in Lisbon

Do you want to join one of the largest professional services organizations in the market?

Then Deloitte is for you. Here, you will have the possibility to boost your career and strengthen your skills in our technological universe.

We are an international Tech Hub and we are looking for the best Cybersecurity specialists to join our centers of excellence and our community. At Deloitte, you will transform the world as we know it and develop unique and innovative solutions in the most varied and complex transformation projects, from Portugal to the world. We are going to strengthen our Cyber area and we are looking for experienced professionals who have a natural taste and aptitude for working in teams and in multi-project environments. You can discover all the roles you will perform, according to your profile, so that you can take a leap in your career!

Will you join us? We are waiting for you.

• Monitor and analyze the global cyber threat landscape.
• Track APT groups, ransomware and cybercrime actors, malware families, phishing campaigns, and emerging threats.
• Create and maintain Threat Actor profiles and campaign analyses.
• Analyze the Tactics, Techniques, and Procedures (TTPs) used by potential adversaries, utilizing MITRE ATT&CK.
• Define and develop Threat Hunting hypotheses based on Threat Intelligence.
• Perform proactive Threat Hunting activities across endpoints, identities, networks, email, and cloud environments.
• Perform hunting activities based on IOCs, behaviors, and TTPs.
• Correlate external Threat Intelligence with internal security telemetry.
• Investigate suspicious behaviors and potential indicators of compromise.
• Perform historical Threat Hunting analyses upon the emergence of new threats, information, or TTPs.
• Identify visibility and detection gaps identified during Threat Hunting activities.
• Produce Threat Intelligence and Threat Hunting reports with clear and actionable information.
• Share relevant information and findings from hunting activities with the SOC, Incident Response, and Cyber Defense teams.

Experience with some of the following technologies and frameworks:

• Threat Intelligence: Recorded Future; MISP; OpenCTI; ThreatConnect; Anomali; VirusTotal.
• Threat Hunting: Microsoft Sentinel / Defender XDR; Splunk; CrowdStrike Falcon; QRadar Suite; Palo Alto XSIAM; FortiSIEM; Elastic.
• Languages & Frameworks: KQL / SPL; Sigma / YARA; MITRE ATT&CK; STIX / TAXII; Diamond Model.

• • Experience in MSSP/MDR environments or with multiple clients.
  • Experience in OSINT and dark web investigation.
  • Knowledge and experience in malware and phishing analysis.
  • Experience in Threat Hunting oriented toward cloud environments and identities.
  • Knowledge of Python or PowerShell for automating Threat Intelligence activities.
  • Relevant certifications, such as GIAC GCTI, GOSI, SANS FOR578, MITRE ATT&CK Defender, or CTIA.

• In a diverse work context that allows for continuous development and learning;
• Through a personalized career development plan (skills/technical and functional opportunities), suited to the moment, your needs, and your objectives;
• By participating in national and international projects, with relevant dimension and impact in this area of specialization;
• Unlimited access to the largest online learning platforms (Linkedin Learning and Udemy);
• Opportunity for training and certifications in the latest technologies, specifically in Cloud technologies.

• A culture of innovation and excellence that makes us leaders and trendsetters;
• A friendly environment of respect, trust, transparency, and informality;
• A lifelong network that keeps you connected to the best knowledge alongside leaders and specialists;
• An opportunity to be part of our communities (Tech, innovation, sports, and other interests) and to actively participate in social responsibility projects.