Mission Critical Security Engineer – Threat Hunting

Help protect what truly matters in our customers' most critical environments by proactively identifying threats and improving how they are detected and addressed. As a Mission Critical Security Engineer with a focus on Threat Hunting, you will be part of a dedicated customer team responsible for securing and continuously improving a complex, mission-critical application landscape. Working alongside other engineers and security specialists, you will help ensure the environment remains as secure and resilient as possible. You combine a strong engineering foundation with a security mindset, taking ownership of security improvements and understanding how systems, applications, and infrastructure behave. Your specific focus will be on threat hunting and detection engineering. Using your in-depth knowledge of the customer's technology stack and application landscape, you will fine-tune existing detection use cases and develop new ones tailored to the environment. You will use our custom SIEM/SOAR-based Managed Detection and Response (MDR) platform to turn emerging threats and technical insights into actionable detection capabilities. This role bridges security engineering, detection engineering, and threat intelligence. You don't simply follow predefined playbooks. You understand system behavior, identify gaps, and develop practical solutions that strengthen the security of the customer's environment. / What you will do Threat intelligence & continuous improvement • Actively follow security developments, vulnerabilities, and threat intelligence and translate these into relevant hunts and detections. • Identify security risks and gaps in detection coverage and proactively propose improvements. • Use your knowledge of the customer's application and infrastructure landscape to continuously strengthen its security posture. • Contribute to the evolution of the team's security monitoring and detection strategy. Communication & advisory • Translate findings into clear, actionable communication for engineers, customer stakeholders, and security specialists. • Contribute to security advisories and share relevant threats across the customer team and wider organization. • Work closely with engineers to understand system behavior and validate detection strategies. • Collaborate with the customer's Security Operations Center (SOC) to align security monitoring, threat detection, and response activities. • Help establish and improve integrations with the customer's SIEM/SOAR platform, including the forwarding of relevant logs and security telemetry. Detection engineering & threat hunting • Develop and continuously improve detection use cases based on emerging threats and observed behavior. • Translate threat scenarios and security insights into actionable detection logic tailored to the customer's environment. • Proactively perform threat hunting across the application and infrastructure landscape to identify abnormal or suspicious patterns. • Analyze logs and telemetry data to uncover behaviors that are not yet covered by existing detections. • Use your understanding of the customer's technology stack to distinguish normal from potentially malicious behavior. Use case development & response design • Define what should happen when detections trigger, including response actions, automation, and escalation paths. • Continuously refine detection logic to improve quality, relevance, and signal-to-noise ratio. • Build and fine-tune custom detection scenarios based on the specific characteristics and security requirements of the customer's environment. Platform collaboration • Leverage our custom SIEM/SOAR-based MDR platform to implement detections and analyze data. • Collaborate with platform and automation engineers to improve