Cyber Threat Hunting Analyst

About the role

Capgemini is looking for a dedicated Cyber Threat Hunting Analyst to proactively search for hidden attacker activity across the organization’s environment. You will use hypothesis‑driven investigations and advanced analytics to uncover threats before they trigger alerts or cause damage.

Key responsibilities

• Conduct proactive threat hunts to detect malicious activity that evaded automated detections, reducing attacker dwell time.
• Develop hypothesis‑driven hunts based on adversary TTPs using the MITRE ATT&CK framework.
• Analyze endpoint, network, authentication, and log telemetry to identify indicators of compromise and anomalous behavior.
• Investigate suspicious activity such as credential misuse, lateral movement, persistence mechanisms, and living‑off‑the‑land techniques.
• Correlate data across SIEM, EDR/XDR, and network security tools to validate threats and assess impact.
• Leverage threat intelligence reports and internal telemetry to spot emerging attacker behaviors.
• Support incident investigations with root‑cause analysis and attacker activity reconstruction.
• Identify detection gaps and work with engineering teams to improve alert coverage and reduce false positives.
• Collaborate with SOC analysts, incident responders, and infrastructure teams to strengthen overall security posture.

Required profile

• Minimum 2 years of experience in cyber threat hunting.
• High level of English proficiency for collaboration with international teams and clients.
• Strong analytical mindset with the ability to develop and test hunting hypotheses.

Required skills

• MITRE ATT&CK framework
• SIEM platforms
• EDR/XDR solutions
• Network security monitoring tools
• Threat intelligence analysis
• Log and telemetry analysis

What we offer

• Wellbeing HUB program supporting physical and mental health.
• Flexible Compensation Plan with benefits such as medical insurance, transportation, training, meal options, and childcare vouchers.
• Continuous learning opportunities through Capgemini University, Coursera, Udemy, Pluralsight, and more.