Cyber Threat Hunter

Cyber Threat Hunter - Santander Digital Services

Country: Spain

**WHAT YOU WILL BE DOING**

**SANTANDER DIGITAL SERVICES is looking for a CYBER THREAT HUNTER based in our BOADILLA DEL MONTE office.**

**WHY YOU SHOULD JOIN US**

**Santander Digital Services (SDS) **is the team of technology and operations at Santander. We are convinced of the importance of technology that is aligned with the requirements of the business and that out work not only brings value to users, people and communities but also fosters individual creativity. Our team of over 2,000 people in 7 countries (Spain, Portugal, UK, USA, Mexico, Chile and Brazil) develops and/or implements financial solutions across a broad spectrum of technologies (including Blockchain, Big Data and Angular among others) on all kinds of on-premise and cloud-based platforms.

Santander is proud of being an organization where there are equal opportunities regardless of gender identity, culture and disability. Our mission is to contribute to help more people and business prosper.

**WHAT YOU WILL BE DOING**

As **cyber threat hunter **will be responsible for:

- Identify unknown cyber threats within the Santander Group using search techniques on data lakes and SIEMs.
- Correlate threat actor profiles and TTPs to attack vectors to develop new use cases or hypothesis for hunting campaigns.
- Understanding of internal and external Threat Scenarios.
- Conduct and lead threat modelling exercises in the team.
- Conduct analysis of the incoming threat intelligence feeds vs. impact.
- Recommending changes on security alerts on SIEM and Security Platforms.
- Creating improvements in processes such use (Threat Hunting, use-cases and threat modeling, etc.).
- Assure quality on junior colleagues’ activities
- Report important events to relevant parts

EXPERIENCE
- 5+ years of experience in Information technology and cybersecurity

EDUCATION
- University Degree in related areas (computer science, computer engineering, network technology or similar).
- Fluent in English and Spanish written and spoken

SKILLS & KNOWLEDGE
- Excellent knowledge of SIEM searching languages (Splunk or Microsoft Sentinel).
- Excellent knowledge of the main attack vectors, methods, and techniques (previous red teamer experience is a plus).
- Good knowledge on security platforms (IPS, IDS, EDR, AV, WAF, etc.).
- Strong knowledge of network data analysis
- Strong knowledge of network communication protocols such as TCP/IP stack, SMTP, SMB, HTTP.
- Strong knowledge of cloud models, platforms and related threats (Azure and AWS).
- Skills on scripting languages (Python, Javascript, powershell, etc.).
- Knowledge of vulnerability and risk analysis.
- Strong knowledge of Linux, Windows system internals.
- Demonstrated relevant experience as a key member of a threat detection, hunting, incident response, malware analysis, or similar role.
- Tangible experience combatting crimeware or APT is a distinguishing factor.
- Certifications such as CISSP, GREM, OSCP or GCFA are a plus, but skill level carries more weight.